White Paper Abstract:
This document highlights the steps to configure the RADIUS Password Expiry feature on Cisco IOS® Easy VPN Servers. The Cisco® Secure Access Control Server (ACS) configured for Microsoft Challenge Handshake Authentication Protocol 2 (MS-CHAP2) is used as the RADIUS server in this example (Password Authentication Protocol [PAP] is not supported for this feature). With this feature enabled, VPN users are prompted to change an expired Microsoft Windows password when they launch the Cisco VPN Client to connect to the Easy VPN Server.