I would like to inform you that RADIUS Password Expiry is supported with External
windows database using MS-CHAPv2. We cannot use RADIUS Password Expiry with local ACS
database. I've attached a link for your reference.
Link for Configuring the Cisco VPN 3000 Series Concentrators to Support the NT Password
Expiration Feature Using the RADIUS Server:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a
00800946b9.shtml
Please provide more information about your network, like which db, NAS, authentication you are using,
Regards,
~JG
Do rate helpful posts