Create a Radius Logon Procedure

  1. Login to the DualShield management console
  2. In the main menu, select “Authentication | Logon Procedure”
  3. Click the “Create” button on the toolbar
  4. Enter “Name” and select “RADIUS” as the Type



  5. Click “Save”
  6. Click the Context Menu icon of the newly create logon procedure, select “Logon Steps”
  7. In the popup windows, click the “Create” button on the toolbar
  8. Select the “Static Password” as the first step, and add your preferable authenticator as your second step. I chose One-Time Password as example.



  9. Click “Save”

Create a RADIUS application

  1. In the main menu, select “Authentication | Applications”
  2. Click the “Create” button on the toolbar
  3. Enter “Name”
  4. Select “Realm”
  5. Select the logon procedure that was just created

     

  6. Click “Save”
  7. Click the context menu of the newly created application, select “Agent”
  8. Select the DualShield Radius server, e.g. "Agent-Radius"

     

  9. Click “Save”
  10. Click the context menu of the newly created application, select “Self Test”

Register the Check Point as a Radius Client

Select “RADIUS | Clients” in DualShield management console. Click the “Register” button on the toolbar and provide the following value:                              

Name                                         Unique name for Radius Client

Radius Server                            Select DualShield Radius Server

Application                                 Select CheckPoint Applicaion

IP Address                                 IP address of your Check Point Security Gateway

Shared Secret                           Provide secret phase used to communicate between Radius server and Radius client

Authentication Protocols            Select communication protocols for Radius server and Radius client

         

Check Point only recognises RADIUS attributes from 1 to 63 defined within RFC 2138. Tick "Do not reply with Message Authenticator (Attribute 80)" so that DualShield Radius server will not return attribute 80.