Checkpoint RADIUS Accounting Setting for Identity Awareness with Windows NPS and Unifi APs

0 0 Edit this post

This is my configuration on Checkpoint 5000 Appliance.

For your reference my current environment is,

Checkpoing OS: Gaia
Version: R80.30
Windows Server: 2016

From SmartConsole, open up General Properties by double clicking Checkpoint Gateway.
Go to RADIUS Accounting-Settings...

Checkpoint Identity Awareness RADIUS

Add all Unifi APs to Authorized RADIUS Clients. Then set Message Attribute Indices as follows,

Device Name: Calling-Station-Id (31)
User Name: User-Name (1)
IP Address: Framed-IP-Address (8)

Checkpoint RADIUS setting

Precondition on Checkpoint is

LDAP connection with your domain

I used to get parse errors before configuring message attributes as above.

COMMENTS