VPN signon with expired password

[choclateer]

                   Is there a way to handle expired passwords for vpn users on the ASA-5520? We currently use Windows 2008 NPS server as our Radius server, which is on a domain controller. When a VPN user tries to login if their password has expired I would like to somehow put the user on a "quarantine" VLAN and let them choose a new password, right now they just fail authentication. We use AnyConnect and SSL clientless VPN.

[Eduardo Aliaga · Accepted solution]

You can use the "password-management" command. Please see this post https://supportforums.cisco.com/thread/2149986

Please rate if this helps