VPN Concentrator 3000 - User passwords query

dan_track · ‎11-03-2009

Hi,

I'd like to configure my vpn concentrator 3000 to allow remote vpn users to change their passwords. My questions are

1) Is that possible?

2) How can I do that?

3) Can I setup a policy to force a change every X number of days?

Thanks

Dan

hdashnau · ‎11-03-2009

You can change the password by using the "Radius-with-expiry" option. For more information see here:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00800c3917.shtml

I know on the ASA with radius password management you can only change the password once its expired, so it would should be the same with the 3000 concentrator. With ldap on the ASA you can change the password prior to it expiring using "password-management expire-in-days" command but I don't think there is an equivalent of this in the 3000.

-heather