AXISM3007–PV
SystemOptions
IEEE802.1X
IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork
devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).
ToaccessanetworkprotectedbyIEEE802.1X,devicesmustauthenticatethemselves.Theauthenticationisperformedbya
third-partyentitycalledanauthenticationserver,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoft
InternetAuthenticationService.
InAxis'implementation,thenetworkdeviceandtheauthenticationserverauthenticatethemselveswiththehelpofdigital
certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).Thecerticatesareprovidedbyan
CerticationAuthority(CA).Youneed:
•aCAcerticatetovalidatetheidentityoftheauthenticationserver
•aCA-signedclientcerticateandaprivatekeytoauthenticatethenetworkdevice.
ToallowthenetworkdevicetoaccessanetworkprotectedbyIEEE802.1X:
1.ObtainaCAcerticate,aclientcerticateandaclientprivatekey(contactyournetworkadministrator).
2.GotoSetup>SystemOptions>Security>IEEE802.1XanduploadtheCAcerticate,theclientcerticateandthe
clientprivatekey.
3.UnderSettings,selecttheEAPOLversion,provideyourEAPidentityandprivatekeypassword.
4.ChecktheboxtoenableIEEE802.1XandclickSave.
Certicates
CACerticateTheCAcerticateisusedtovalidatetheidentityoftheauthenticationserver.Enterthepathto
thecerticatedirectly,orlocatetheleusingtheBrowsebutton.ThenclickUpload.Toremove
acerticate,clickRemove.
Clientcerticate
Clientprivatekey
Theclientcerticateandprivatekeyareusedtoauthenticatethenetworkdevice.Theycanbe
uploadedasseparatelesorinonecombinedle(e.g.aPFXleoraPEMle).UsetheClient
privatekeyeldifuploadingonecombinedle.Foreachle,enterthepathtothele,orlocatethe
leusingtheBrowsebutton.ThenclickUpload.Toremoveale,clickRemove.
Settings
EAPOLversion
SelecttheEAPOLversion(1or2)asusedinyournetworkswitch.
EAPidentity
Entertheuseridentity(maximum16characters)associatedwithyourcerticate.
Privatekeypassword
Enterthepassword(maximum16characters)fortheprivatekey.
EnableIEEE802.1X
ChecktheboxtoenabletheIEEE802.1Xprotocol.
Date&Time
TheAxisproduct’sdateandtimesettingsareconguredunderSystemOptions>Date&Time.
CurrentServerTimedisplaysthecurrentdateandtime(24hclock).Thetimecanbedisplayedin12hclockinthetextoverlay(see
below).
Tochangethedateandtimesettings,selectthepreferredTimemodeunderNewServerTime:
•Synchronizewithcomputertime–Setsdateandtimeaccordingtothecomputer’sclock.Withthisoption,dateand
timearesetonceandwillnotbeupdatedautomatically.
•SynchronizewithNTPServer–ObtainsdateandtimefromanNTPserver.Withthisoption,dateandtimesettingsare
updatedcontinuously.ForinformationonNTPsettings,seeNTPConguration,onpage44.
41
(62 pages)
(75 pages)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels