How to force users to cahnge passwords on VPN3005?

[dfariborz]

We are using the internal database of the VPN3005 for authenticating Cisco VPN Clients (v4.8). However, their passwords are set by the administrator of the VPN3005 and from a security point of view they should be forced to change the initial password upon maiden access. Is this possible with VPN3005?

Thank You

[a.kiprawih]

Hi,

VPN 3000 Concentrator does not have option to automatically force internal users to change their passwords. User need to key-in their password manually from the VPN 3000 management GUI.

However, this can be done using Cisco Secure ACS, via User-Changable Password utility.

It will be good if you have ACS. You can download 90-days trial version for evaluation purposes.

http://www.cisco.com/kobayashi/sw-center/ciscosecure/cs-acs.shtml

The User-Changable Password config guide is available at:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a0080094e7b.shtml

Hope this helps.

Rgds,

AK