Axis Communications P5512 Manuel d'utilisateur télécharger pdf (Page 37)

AXISP5512-EPTZDomeNetworkCamera

SystemOptions

2.SelectanHTTPScerticatefromthelistofinstalledcerticates.

3.Optionally,clickCiphersandselecttheencryptionalgorithmstouseforSSL.

4.SettheHTTPSConnectionPolicyforthedifferentusergroups.

5.ClickSavetoenablethesettings.

ToaccesstheAxisproductviathedesiredprotocol,enterhttps://orhttp://intheaddresseldinabrowser.

TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.

IEEE802.1X

IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork

devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication

server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.

InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS

(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).

Youneed:

•aCAcerticatetoauthenticatetheauthenticationserver.

•aCA-signedclientcerticatetoauthenticatetheAxisproduct.

Tocreateandinstallcerticates,gotoSystemOptions>Security>Certicates.SeeCerticates,onpage37.ManyCAcerticates

arepreinstalled.

ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:

1.GotoSystemOptions>Security>IEEE802.1X.

2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.

3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.

4.ChecktheboxtoenableIEEE802.1XandclickSave.

Note

Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP

server.SeeDate&Time,onpage38.

Certicates

Certicatesareusedtoauthenticatedevicesonanetwork.Typicalapplicationsincludeencryptedwebbrowsing(HTTPS),network

protectionviaIEEE802.1Xandsecureuploadofimagesandnoticationmessagesforexampleviaemail.Twotypesofcerticates

canbeusedwiththeAxisproduct:

Server/Clientcerticates-ToauthenticatetheAxisproduct.

CAcerticates-Toauthenticatepeercerticates,forexamplethecerticateofanauthenticationserverincasetheAxisproductis

connectedtoanIEEE802.1Xprotectednetwork.

Note

Installedcerticates,exceptpreinstalledCAcerticates,willbedeletediftheproductisresettofactorydefault.Preinstalled

CAcerticatesthathavebeendeletedwillbereinstalled.

AServer/Clientcerticatecanbeself-signedorissuedbyaCerticateAuthority(CA).Aself-signedcerticateofferslimited

protectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.

1 2 ... 32 33 34 35 36 37 38 39 40 41 42 ... 53 54

Pas de commentaire

Axis Communications P5512 Manuel d'utilisateur Page 37