topic Re: Allowing specific access to different RADIUS users based on User Groups in General Topics

Allowing specific access to different RADIUS users based on User Groups

Juan_Lobera — Fri, 04 May 2018 21:01:26 GMT

Hi Team,

Based on sk24858, im trying to give different kind of permissions based on user groups for remote access clients.

On the SK it talks about an attribute to return to the checkpoint. Can anyone tell me which this attribute is on microsfts NPS?

Groups are called: RAD_attribute

I need the checkpoint to get this attribute.

Thanks

Re: Allowing specific access to different RADIUS users based on User Groups

DeletedUser — Fri, 04 May 2018 22:17:24 GMT

This would be the class attribute. See this ASA configuration guide to see where to configure it in Microsoft NPS (Pass Group-policy Attribute (Attribute 25) from the NPS RADIUS Server). On the Check Point side if you're using R80.10, then navigate to Global Properties -> Advanced -> SecuRemote/SecureClient and enable add_radius_groups. This is probably also available in R77 if you don't want to edit objects.C as it says in sk24858.

Re: Allowing specific access to different RADIUS users based on User Groups

Juan_Lobera — Mon, 07 May 2018 14:24:49 GMT

Worked as a charm. Thank you Bob Bent‌