Help Cisco Secure ACS

[mystery1983]

Mình có vấn đề về cisco secure ACS cho vpn.Mình muốn khi user kết nối vpn thì trên client sẽ có thông báo thay đổi password sau thời hạn 30 ngày.Trong Cisco secure ACS có phần mềm Cisco Authentication Agent.Mình đã cài đặt lên client.Nhưng không hiển thị được message.KHông biết bạn nào đã làm được cái này chưa ? Cho mình biết cách làm cái này không ?


Thanks các bạn.

[dangquangminh]

Trong phần Group Setup, bạn chọn Password Aging Rules.

Password Aging Rules

Password aging gets its own Jump To link. To get to this section, choose Password Aging in the Jump To menu. As a security administrator, you understand the importance of changing passwords on a regular basis. This area of configuration allows you to force a user to change passwords accordingly.

According to the Cisco documentation, to use this feature, the AAA client must be running the TACACS+ or RADIUS protocol for password aging over dial-in connections. Only password aging over interactive connection (Telnet) is supported with TACACS+. This means that if you are using Telnet or Secure Shell (SSH), you need to use TACACS+. You can choose to apply age-by-date rules and age-by-uses rules and to apply a password change rule, which forces users to change their passwords after an administrator has changed it.

The age-by-date rule has three option boxes as follows:

Active period The active period is the number of days that you want to allow a user to log in without being prompted to change passwords. The default active period is 20 days. When a user is first prompted to change passwords, the user grace period and warning period begin.

Warning period The warning period is a length of time in which a user is warned that the password is going to expire and is given the number of days left before the password actually expires.

Grace period The grace period is a last chance login timer in which a user can login one last time with the original password. The user is warned that the password expires if not changed. If the password is not changed, no further logins are accepted even if the grace period timer has not expired yet.

[mystery1983]

Cái này em đã set trong group rồi anh.Nhưng trên client cài Cisco authentication agent.Để hiển thị thông báo.Thì mình sẽ set nhu the nào ?
Và tren router em có config gì nữa không ? Hiện em đang dùng con router 7206.

[mystery1983]

Có ai đã config Ciscosecure Authentication Agent.Dùng để hiển thị pop up khi client đã kết nối vpn.Hiển thị thông báo cho user biết thời hạn sử dụng account vpn.

[mystery1983]

Generate greetings for successful logins—Displays Greetings message whenever users log in successfully via the CAA client. The message contains the latest password information specific to this user account.

Các bạn cho mình hỏi cái này, làm sao bên phía client có thể hiện thị cái message mà Cisco nói.

Thanks