Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

MSchap change password

Hi

We have a vpn3015 concentrator which our users use to access intranet resources remotely. The bulk of these customers use pptp clients. The problem I have come up against is that when their passwords start to expire they get no warning. When their passwords eventually expire they cant get logged in and they get a username/password error. At our end we get a password expired or a user must change password message on the concentrator

We are using a win2k IAS as the radius server.

Is it possible to pass thru the password expiry message to the users?

Thanks

Norman

3 REPLIES
Community Member

Re: MSchap change password

You can do it with cisco VPN client 3.x not PPTP client.

And also you can not use Microsoft IAS Radius server. Need Cisco ACS 3.0 above version to support password expiry feature.

Here is the sample config for that:

http://www.cisco.com/warp/customer/471/vpn3k-ntpwexp.html

Best Regards,

Community Member

Re: MSchap change password

Hi

Thanks for that. According to the advertising for the vpn3000 series (http://www-europe.cisco.com/warp/public/cc/pd/hb/vp3000/prodlit/vpn3k_ds.htm), mschap password expiry is supported. Can you explain??

Thanks

Norman

Cisco Employee

Re: MSchap change password

That feature is referring to the use of the Cisco ipsec client version 3.X

Just like when it is talking about the use of x509 certificates.

Regards,

166
Views
0
Helpful
3
Replies
CreatePlease to create content