DUO for Clien VPN MFA

[tantony]

I'm trying the DUO MFA, but after I enter my username and password, I'm not getting any notifications / push on my iPhone, and eventually I got a time out error on the VPN client.  Is this because I did not call Meraki to adjust the time out?

https://community.meraki.com/t5/Security-SD-WAN/Using-DUO-for-2FA-how-to/m-p/38442 

[KarstenI]

That can be a reason. Did you follow the guide on the Duo website? What is in the Duo-Log?

[tantony]

It turned out the reason I couldn't login, and I wasn't getting anything on Duo mobile app was because the AD user account I created didn't have the necessary permissions.  I have the Duo MFA working now.  But I'm kind of confused.

Because, I didn't ask Meraki to adjust the time out, but I was still able to get the Duo push notification and login.  So may be the timeout adjustment is not necessary?

[bluecat]

@tantony I'm having the same timeout issue. What permissions did you need to add to your AD user? I was thinking a plain domain user would be enough