Check Point L-71, Administration Manual

Page: 102 / 124

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 102
Managing Authentication Servers
In the Users & Objects > Authentication Servers page you can define and view different
authentication servers where users can define both an external user database and the
authentication method for users in that database.
You can define this type of authentication servers:
•
RADIUS server - Define the details of a primary and secondary RADIUS server. The Check
Point Appliance can connect to these servers and recognize users defined in them and
authenticated by them. See the
Users & Objects
>
Administrators
page.
To add a RADIUS server:
1. Click
RADIUS servers
. If none are configured, click
Configure
.
2. In the Primary tab, enter this information:
•
IP address
- Where the RADIUS server is deployed.
•
Port
- The port number through which the RADIUS server communicates with clients. The
default is 1812.
• Shared secret - The secret between the RADIUS server and the Check Point Appliance.

Show
- Displays the shared secret.
• Timeout
(seconds) - A timeout value in seconds for communication with the RADIUS
server. The timeout default is 3 seconds.
3. Repeat step 2 for a Secondary RADIUS server if applicable.
4. Click
Apply
.
The primary and/or secondary servers are added to the RADIUS section on the page.
To edit a RADIUS server:
1. Click the IP address link of the RADIUS server you want to edit.
2. Make the necessary changes.
3. Click Apply .
The changes are updated in the RADIUS server.
To delete a RADIUS server:
Click the
Remove
link next to the RADIUS server you want to delete.
The RADIUS server is deleted.
Managing System Services
The
Users & Objects
>
Services
page lists the system services configured in the system. In this
page you can add new services, edit services, and delete services.
You use service objects to easily define the different network protocols. This is usually with IP
protocol and ports (used by the TCP and UDP IP protocols).
You can use these objects to define policy based routing in the
Device > Routing page.