Axis A1601 - Network Protocols and Authentication

AXISA1601NetworkDoorController
Systemoptions
ToaccesstheAxisproductviathedesiredprotocol,intheaddresseldinabrowser,enterhttps://fortheHTTPSprotocol
andhttp://fortheHTTPprotocol.
TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.
IEEE802.1X
IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork
devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).
ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication
server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.
InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS
(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).
Youneed:
•aCAcerticatetoauthenticatetheauthenticationserver.
•aCA-signedclientcerticatetoauthenticatetheAxisproduct.
Tocreateandinstallcerticates,gotoSetup>AdditionalControllerConguration>SystemOptions>Security>Certicates.
SeeCerticatesonpage26.
ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:
1.GotoSetup>AdditionalControllerConguration>SystemOptions>Security>IEEE802.1X.
2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.
3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.
4.ChecktheboxtoenableIEEE802.1XandclickSave.
Note
Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP
server.See.
Certicates
Certicatesareusedtoauthenticatedevicesonanetwork.Typicalapplicationsincludeencryptedwebbrowsing(HTTPS),network
protectionviaIEEE802.1Xandnoticationmessagesforexampleviaemail.TwotypesofcerticatescanbeusedwiththeAxis
product:
Server/Clientcerticates-ToauthenticatetheAxisproduct.AServer/Clientcerticatecanbeself-signedorissuedbyaCerticate
Authority(CA).Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.
CAcerticates-Toauthenticatepeercerticates,forexamplethecerticateofanauthenticationserverincasetheAxisproductis
connectedtoanIEEE802.1Xprotectednetwork.TheAxisproductisshippedwithseveralpreinstalledCAcerticates.
Note
•Iftheproductisresettofactorydefault,allcerticates,exceptpreinstalledCAcerticates,willbedeleted.
•Iftheproductisresettofactorydefault,allpreinstalledCAcerticatesthathavebeendeletedwillbereinstalled.
Howtocreateaself-signedcerticate
1.GotoSetup>AdditionalControllerConguration>SystemOptions>Security>Certicates.
2.ClickCreateself-signedcerticateandprovidetherequestedinformation.
26