Radius configuration help

[ehilden]

I know it sounds simple, but does anyone have a configuration guide for Radius configuration on a R62 box. I guess any configuration will do for any release, just need some general notes as I think I missed something simple.


Thanks in advance.

[david]

the "Checkpoint_NGX_Firewall_SmartDefense_User_Guide.p df" has a good section about configuring Radius.

[ehilden]

thanks, so many pdfs out there takes a while loading and searching them all.

[munrog]

1) Create a new Host Node Object for the Radius server
Manage > Network objects > New > Node > Host.
Fill out the relevant information for this object.

2) Create a new Radius Server Object
Manage > Server and OPSEC Applications > New > Radius server
Fill out the relevant information parameters for this object.

3) If you have multiple radius server follow steps 1 and 2 for each server and then create a radius server group
Manage > Server and OPSEC Applications > New > Radius Group.
Add the Radius servers.

4) Create rules for the communication. The firewall needs to be able to communicate with the radius server and vice versa.

5) Create an external user profile known as generic* for the users. Assign this user profile with the authentication method of Radius.
Manage > Users and Administrators > New > External User Profile > Match all Users

6) Edit the firewall properties for your gateway and ensure that Radius authentication is selected as a supported method for authentication.

7) Create the user authentication rules