Auto push to voip phone

[thuxel]

I need to implement a voip phone that has a vpn client built in. Can DUO push to a different device to authenticate the voip phone?

[DuoKristina]

Are you setting up the VPN with a Duo RADIUS automatic push config? RADIUS auto sends an automatic push to the first push-capable device attached to a user, or if the user has no devices activated for Duo push then Duo calls the first phone device.

For the user who is connecting on the VOIP phone’s VPN, just make sure that VOIP phone isn’t the first device in the list.

Learn more about ordering devices here.

[thuxel]

We are using Duo Radius for one anyconnect termination point and ADFS for another.

I have the voip phone second in the list. Should I expect to receive a push notification on my cell for the voip phone?

Tim Huxel

Firewall Engineer

Firewall Operations

Tim.huxel@dignityhealth.org

6024073539

Dignity Health
Phoenix Corporate Office

3033 North 3rd Avenue

Phoenix, AZ 85013

602-407-3539 (O)

602-481-3148 (M)

Tim.huxel@dignityheath.org

[DuoKristina]

Yes. If your cell phone is first in the list of phones for your Duo user, and your cell phone is activated to Duo Push, AnyConnect RADIUS should send that phone a push request automatically and not call the VOIP phone number.

Duo’s AD FS adapter shows the interactive Duo Prompt, so you can choose which factor you want to use to authenticate (and you would likely choose to push to your cell phone).