MSchap change password

[n.phipps]

Hi

We have a vpn3015 concentrator which our users use to access intranet resources remotely. The bulk of these customers use pptp clients. The problem I have come up against is that when their passwords start to expire they get no warning. When their passwords eventually expire they cant get logged in and they get a username/password error. At our end we get a password expired or a user must change password message on the concentrator

We are using a win2k IAS as the radius server.

Is it possible to pass thru the password expiry message to the users?

Thanks

Norman

[paqiu]

You can do it with cisco VPN client 3.x not PPTP client.

And also you can not use Microsoft IAS Radius server. Need Cisco ACS 3.0 above version to support password expiry feature.

Here is the sample config for that:

http://www.cisco.com/warp/customer/471/vpn3k-ntpwexp.html

Best Regards,

[n.phipps]

Hi

Thanks for that. According to the advertising for the vpn3000 series (http://www-europe.cisco.com/warp/public/cc/pd/hb/vp3000/prodlit/vpn3k_ds.htm), mschap password expiry is supported. Can you explain??

Thanks

Norman

[edadios]

That feature is referring to the use of the Cisco ipsec client version 3.X

Just like when it is talking about the use of x509 certificates.

Regards,