Cisco ACS 5.2: How to generate "password will soon expire" at VTY?

[Eric.Wang]

we have a policy on ACS to disable user account (Internal user identify store) after X days if password is not changed. However, a few days before the password expires, there is no notification for users unless he happens to log in IOS router (tacacs) through console. in other words, if he logs into IOS devices through VTY, there is no notification at all.

some users got locked out becuase they were not notified to change password. What setting on ACS 5.2 must be configured to display warning on VTY before password expires?

thanks

Eric

[Dan-Ciprian Cicioiu]

Hi ,

Under : System Administration > Users > Authentication Settings > Advanced ( TAB )

Check "Display reminder after                     "

HTH

Dan

[Eric.Wang]

Dan:

thanks for the help!

we have it configured.

"Display reminder after " and it is properly providing Warning message IF I log in IOS device via Console

the problem is the same warning message is not displayed IF I log in via telnet or SSH.