Locally authenticated VPN users change their own passwords?

Is it possible for a locally authenticated VPN user to change their own password via end user portal or another method? We have some SSL users synced with AD via remote authentication, but some of our users require L2TP VPN which doesn't support remote authentication so they're using local authentication.