07-16-2002 06:46 AM - edited 03-08-2019 11:34 PM
Hi
We have a vpn3015 concentrator which our users use to access intranet resources remotely. The bulk of these customers use pptp clients. The problem I have come up against is that when their passwords start to expire they get no warning. When their passwords eventually expire they cant get logged in and they get a username/password error. At our end we get a password expired or a user must change password message on the concentrator
We are using a win2k IAS as the radius server.
Is it possible to pass thru the password expiry message to the users?
Thanks
Norman
07-16-2002 03:22 PM
You can do it with cisco VPN client 3.x not PPTP client.
And also you can not use Microsoft IAS Radius server. Need Cisco ACS 3.0 above version to support password expiry feature.
Here is the sample config for that:
http://www.cisco.com/warp/customer/471/vpn3k-ntpwexp.html
Best Regards,
07-19-2002 05:31 AM
Hi
Thanks for that. According to the advertising for the vpn3000 series (http://www-europe.cisco.com/warp/public/cc/pd/hb/vp3000/prodlit/vpn3k_ds.htm), mschap password expiry is supported. Can you explain??
Thanks
Norman
07-19-2002 08:34 PM
That feature is referring to the use of the Cisco ipsec client version 3.X
Just like when it is talking about the use of x509 certificates.
Regards,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide