CP appliances LOM questions

[Tassadar]

Hello,

We are deploying tens of new CP appliances with the LOM and we have following questions:

1. We would like to use RADIUS authentication for access to the LOM. How is this implemented? If the RADIUS server is down, will the user be able to authenticate against LOM local database?

2. Is it possible to define network privilege for RADIUS users locally in the LOM interface?

3. Can somebody explain us the exact purpose of sysadmin user? This is what is in the LOM guide:

The sysadmin account can only log in to the LOM Console port on the appliance. It cannot use the Portal to configure LOM. By default, the LOM Portal is disabled.

We do not understand what LOM Console port means here.

Thank you.

[_Val_]

What specific model are you deploying? Answers will vary. 

[Tassadar]

Hi,

Right now we are deploying 6500 (CPAP-SG6500).

Thank you.

[_Val_]

Please use this document for guidance: http://supportcontent.checkpoint.com/documentation_download?ID=32414

Now, some answers:

1. Use the linked admin guide to configure Radius authentication. Server has to be up for successful authentication of a radius account.
2. Use the admin guide.

3. There is a predefined local user on LOM card called sysadmin. You can reset and change the password for this account. However, this account is not shared with Gaia environment, so it can only log in to LOM environment.