Name: Axis A1601
Brand: Axis
Rating: 5 (1 reviews)

To Next Page

To Previous Page

AXISA1601NetworkDoorController

Systemoptions

ToaccesstheAxisproductviathedesiredprotocol,intheaddresseldinabrowser,enterhttps://fortheHTTPSprotocol

andhttp://fortheHTTPprotocol.

TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.

IEEE802.1X

IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork

devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication

server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.

InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS

(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).

Youneed:

•aCAcerticatetoauthenticatetheauthenticationserver.

•aCA-signedclientcerticatetoauthenticatetheAxisproduct.

Tocreateandinstallcerticates,gotoSetup>AdditionalControllerConguration>SystemOptions>Security>Certicates.

SeeCerticatesonpage26.

ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:

1.GotoSetup>AdditionalControllerConguration>SystemOptions>Security>IEEE802.1X.

2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.

3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.

4.ChecktheboxtoenableIEEE802.1XandclickSave.

Note

Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP

server.See.

Certicates

Certicatesareusedtoauthenticatedevicesonanetwork.Typicalapplicationsincludeencryptedwebbrowsing(HTTPS),network

protectionviaIEEE802.1Xandnoticationmessagesforexampleviaemail.TwotypesofcerticatescanbeusedwiththeAxis

product:

Server/Clientcerticates-ToauthenticatetheAxisproduct.AServer/Clientcerticatecanbeself-signedorissuedbyaCerticate

Authority(CA).Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.

CAcerticates-Toauthenticatepeercerticates,forexamplethecerticateofanauthenticationserverincasetheAxisproductis

connectedtoanIEEE802.1Xprotectednetwork.TheAxisproductisshippedwithseveralpreinstalledCAcerticates.

Note

•Iftheproductisresettofactorydefault,allcerticates,exceptpreinstalledCAcerticates,willbedeleted.

•Iftheproductisresettofactorydefault,allpreinstalledCAcerticatesthathavebeendeletedwillbereinstalled.

Howtocreateaself-signedcerticate

1.GotoSetup>AdditionalControllerConguration>SystemOptions>Security>Certicates.

2.ClickCreateself-signedcerticateandprovidetherequestedinformation.

Axis A1601 User Manual

Other manuals for Axis A1601