Duo has a very thorough step-by-step guide here:
https://duo.com/docs/radius
Basically the Duo Authentication proxy is used as the AAA RADIUS server configured on your switch. The proxy in turn references both your current RADIUS server as well as the Duo cloud for primary and secondary authentication.