Quantum SPARK 1500 - Page 151

Configuring Local and Remote System Administrators
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|151
Administrator Role Value
Super Admin
adminRole
Read only
monitorrole
Networking Admin
networkingrole
Mobile Admin
mobilerole
Configuring a FreeRADIUS server for non-local appliance users
1. Create the dictionary file dictionary.checkpoint in the /etc/freeradius/ on
the RADIUS server.
Add these lines in the dictionary.checkpoint file:
# Check Point dictionary file for FreeRADIUS AAA server
VENDOR CheckPoint 2620
ATTRIBUTE CP-Gaia-User-Role 229 string
CheckPoint
ATTRIBUTE CP-Gaia-SuperUser-Access 230 integer
CheckPoint
2. Add this line in the /etc/freeradius/dictionary file
"$INCLUDE dictionary.checkpoint"
3. Add this Check Point Vendor-Specific Attribute to users in your RADIUS server user
configuration file:
CP-Gaia-User-Role = <role>
Where <role> is the name of the administrator role that is defined in the WebUI.
Administrator Role Value
Super Admin
adminRole
Read only
monitorrole
Networking Admin
networkingrole
Mobile Admin
mobilerole