---
title: Adding a RADIUS rule
description: To configure Checkpoint VPN for PingID multi-factor authentication (MFA), you must add a RADIUS rule.
component: pingid
page_id: pingid:pingid_integrations:pid_adding_radius_rule
canonical_url: http://docs.pingidentity.com/pingid/pingid_integrations/pid_adding_radius_rule.html
revdate: January 30, 2024
section_ids:
  steps: Steps
  result: Result:
  result-2: Result:
---

# Adding a RADIUS rule

To configure Checkpoint VPN for PingID multi-factor authentication (MFA), you must add a RADIUS rule.

## Steps

1. In the **Checkpoint** toolbar, click the **Firewall** tab.

2. In the upper left-hand tree, click **Policy**.

   ### Result:

   The rules of the existing policy are listed.

3. In the row for **Any**, in the **No.** column, right-click and select **Add Rule → Above**.

   ![A screen capture of the Add Rule menu cascade, accessed by right-clicking in the Number column and Any row.](_images/xws1564021011878.jpg)

   ### Result:

   A new row is added to this policy.

4. In the new row, in the **Source** column, right-click **Any**, and then go to **Add Objects → Add Legacy User Access**.

5. In the **Legacy User Access** window, select the RADIUS user configured earlier. Click **OK**.

   For more information, see [Configure a RADIUS user profile](pid_configuring_radius_user_profile.html).

   ![A screen capture of the Legacy User Access window.](_images/xpx1564021012397.jpg)

6. In the **Destination** column, right-click **Any** and select **Network Object**.

7. In the **Add Object** window, select the VPN network configured by your network administrator. Click **OK**.

   ![A screen capture of the Add Object window.](_images/iep1564021012936.jpg)

8. In the **VPN** column, right-click **Any Traffic**, and then click **Edit Cell**.

9. In the **VPN Match Conditions** window, select **Only Connections Encrypted in Specific VPN Communities**.

   ![A screen capture of the VPN Match Conditions window.](_images/kyp1564021013472.jpg)

10. Add the RemoteAccess community to the rule.

    1. In the **VPN Match Conditions** window, click **Add**.

    2. Select **RemoteAccess**. Click **OK**.

    3. To return to the main menu, click **OK**.

11. In the **Action** column of your RADIUS rule, right-click and select **Accept**.

12. In the **Track** column of your RADIUS rule, right-click **None**, and then select **Log**.

    ![A screen capture of the Policy list, showing the new RADIUS rule.](_images/ynd1564021014102.jpg)