ASA and RADIUS with Password expiry

admin_2 · ‎02-25-2008

We currently have a 3015 doing our VPNs. We are looking to move that to our 5520. RADIUS with password epiry is being used for authentication on the 3015 and we would like to continue to use it. Reading the docs for the ASA I have found conflicting answers as to wether or not the ASA supports this.

Please advise with ANY help.

-Doug

pdriscoll · ‎02-25-2008

Doug - after reviewing the Cisco command line help online, I see what you mean about conflicting answers.

We run a 5520 with 7.0, and use radius-with-expiry under the tunnel group ipsec-attributes with no problem. What software version is on your 5520?

HTH, Patrick

acomiskey · ‎02-25-2008

ASA does support this...it is no longer referred to as radius with expiry, it the command is now "password-management".

http://cisco.com/en/US/docs/security/asa/asa72/command/reference/p_72.html#wp1725278