Check Point QUANTUM SPARK 1570 - Page 236

Configuring Local and Remote System Administrators
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Centrally Managed Administration Guide|236
@radius.dct
MACRO CheckPoint-VSA(t,s) 26 [vid=2620 type1=%t% len1=+2
data=%s%]
ATTRIBUTE CP-Gaia-User-Role CheckPoint-VSA(229, string) r
ATTRIBUTE CP-Gaia-SuperUser-Access CheckPoint-VSA(230,
integer) r
2. Add these lines in the vendor.ini file on the RADIUS server (keep in alphabetical
order with the other vendor products in this file):
vendor-product = Quantum Spark Appliance
dictionary = nokiaipso
ignore-ports = no
port-number-usage = per-port-type
help-id = 2000
3. Add this line in the dictiona.dcm file:
"@checkpoint.dct"
4. Add this Check Point Vendor-Specific Attribute to users in your RADIUS server user
configuration file:
CP-Gaia-User-Role = <role>
Where <role> allowed values are:
Administrator Role Value
Super Admin
adminRole
Read only
monitorrole
Networking Admin
networkingrole
Mobile Admin
mobilerole
Configuring a FreeRADIUS server for non-local appliance users
1. Create the dictionary file dictionary.checkpoint in the /etc/freeradius/ on
the RADIUS server.
Add these lines in the dictionary.checkpoint file: