Cisco Secure Local User Passwords

james · ‎04-16-2007

Hi, can anyone tell me whether it is possible to configure Cisco Secure so that the passwords for locally configure User IDs have to be changed after a set period of time, for example 90 days?

Am currently using version 4.0 for Windows.

Thanks James.

Richard Burts · ‎04-17-2007

James

Just to clarify the situation: are you describing a situation where the router or switch is configured to use Cisco Secure (ACS) for authentication and has "local" configured as an alternative/backup method and you want to enforce that the local passwords get changed periodically? Since local is used, by definition, when the router or switch is not communicating with ACS then I do not see how ACS could require that the passwords be changed.

If I have misunderstood something in your request then please clarify.

HTH

Rick

HTH

Rick

Craig Balfour · ‎04-17-2007

When you say "local" do you mean user accounts created:

a) on the switches themselves using the "username XXXXX password YYYYY" command; or

b) in the CiscoSecure database on the Cisco ACS?

If it's the latter, the feature you're looking for is password aging. Take a look at "Enabling Password Aging for the ACS Internal Database" at http://www.cisco.com/en/US/customer/products/sw/secursw/ps2086/products_user_guide_chapter09186a008052e9ad.html#wp525115