Axis C3003-E User Manual

AXISC2005NetworkCeilingSpeaker
SystemOptions
ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication
server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.
InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS
(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).
Youneed:
•aCAcerticatetoauthenticatetheauthenticationserver.
•aCA-signedclientcerticatetoauthenticatetheAxisproduct.
Tocreateandinstallcerticates,gotoSystemOptions>Security>Certicates.SeeCerticatesonpage27.ManyCAcerticates
arepreinstalled.
ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:
1.GotoSystemOptions>Security>IEEE802.1X.
2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.
3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.
4.ChecktheboxtoenableIEEE802.1XandclickSave.
Note
Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP
server.SeeDate&Timeonpage28.
Certicates
Note
Installedcerticates,exceptpreinstalledCAcerticates,willbedeletediftheproductisresettofactorydefault.Preinstalled
CAcerticatesthathavebeendeletedwillbereinstalled.
AServer/Clientcerticatecanbeself-signedorissuedbyaCerticateAuthority(CA).Aself-signedcerticateofferslimited
protectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.
Toinstallaself-signedcerticate:
1.GotoSetup>SystemOptions>Security>Certicates.
2.ClickCreateself-signedcerticateandprovidetherequestedinformation.
TocreateandinstallaCA-signedcerticate:
1.Createaself-signedcerticateasdescribedabove.
2.GotoSetup>SystemOptions>Security>Certicates.
3.ClickCreatecerticatesigningrequestandprovidetherequestedinformation.
4.CopythePEM-formattedrequestandsendtotheCAofyourchoice.
5.Whenthesignedcerticateisreturned,clickInstallcerticateanduploadthecerticate.
Server/ClientcerticatescanbeinstalledasCerticatefromsigningrequestorasCerticateandprivatekey.SelectCerticate
andprivatekeyiftheprivatekeyistobeuploadasaseparateleorifthecerticateisinPKCS#12format.
TheAxisproductisshippedwithseveralpreinstalledCAcerticates.Ifrequired,additionalCAcerticatescanbeinstalled:
1.GotoSetup>SystemOptions>Security>Certicates.
2.ClickInstallcerticateanduploadthecerticate.
27

Axis C3003-E Specifications

General

Brand	Axis
Model	C3003-E
Category	Speakers
Language	English