Check Point QUANTUM SPARK 1570 - Page 237

Configuring Local and Remote System Administrators
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Centrally Managed Administration Guide|237
# Check Point dictionary file for FreeRADIUS AAA server
VENDOR CheckPoint 2620
ATTRIBUTE CP-Gaia-User-Role 229 string
CheckPoint
ATTRIBUTE CP-Gaia-SuperUser-Access 230 integer
CheckPoint
2. Add this line in the /etc/freeradius/dictionary file
"$INCLUDE dictionary.checkpoint"
3. Add this Check Point Vendor-Specific Attribute to users in your RADIUS server user
configuration file:
CP-Gaia-User-Role = <role>
Where <role> is the name of the administrator role that is defined in the WebUI.
Administrator Role Value
Super Admin
adminRole
Read only
monitorrole
Networking Admin
networkingrole
Mobile Admin
mobilerole
Configuring an OpenRADIUS server for non-local appliance users
1. Create the dictionary file dict.checkpoint in the
/etc/openradius/subdicts/ directory on the RADIUS server: