Users not prompted to chng. password when using client (VPN3000 + ACS 3.0)

[zabbas]

If I setup a new user on the acs to log into the VPN 3K, they are able to log in to the concentrator via the client, but they are not asked to change their password. I have it set up on the acs to change the password first time the user logs in.

Any suggestions ?

[edadios]

I am not familiar with the option to change password on Radius itself. I thought it was in conjuntion with a NT Domain server. In any case, there are two type of radius setting on the concentrator, one is plain radius, the other is radius with expiry, make sure you select radius with expiry.

Otherwise, here is a link for the config guide on NT Domain password expiry :

http://www.cisco.com/warp/customer/471/vpn3k-ntpwexp.html .

Regards,