topic enabling password aging for Device-hosted Sessions in Network Access Control

enabling password aging for Device-hosted Sessions

mathieu.ploton — Sun, 10 Mar 2019 23:42:57 GMT

Hello,

I would like to setup password aging for tacacs authentication to cisco devices.

The problem is that in the group setup in the ACS, I don't have the section password aging (as described in the help topic).

I'm using ACS v3.3

Thank you for your help !

Jatin Katyal — Fri, 02 Oct 2009 10:55:46 GMT

Hi,

In order to use password aging feature on ACS 3.3, you first need to enable it.

Here are the steps:

On ACS > Go to interface configuration > Advanced Options > look for "Group-Level Password Aging" > check this option > hit submit.

Noe go back to your group > Look for "Jump to" option on the top > click on drop down menu > select password changing.

You may refer this link while configuring password aging.

HTH

mathieu.ploton — Fri, 02 Oct 2009 12:28:01 GMT

Great thank you !

Password aging feature works on SSH ?

Jatin Katyal — Fri, 02 Oct 2009 12:48:52 GMT

Hi,

Thats gr8.

password change is supported by SSHv2. SSHv1 doesn't support the necessary

message types to initiate a password change sequence.

There is also a defect related to this. However, this will work with recent IOS versions.

CSCin91851: Support keyboard-interactive authentication method

1st Found-In: 12.4T

Fixed-In:

12.4(10.1)T

12.2(33)SXI

12.4(17.9)M

12.2(32.8.11)SX142

12.2(33.1.10)SXH

12.4(13f)M

12.2(33)SXH2

12.2(32.8.11)XJC153.1

12.2(32.8.1)YCA172.24

12.4(22.3.4)PIC1

HTH