If you are using Duo Security MFA (highly recommended), you may want high-availability for your Duo Radius servers.  Duo doesn't currently have a "supported" solution for this, but keepalived worked great after a quick call to support.  This is also assuming you have followed Duo's instructions to install their radius