Axis C6110 - Page 31

AXISC6110NetworkPagingConsole
Thewebinterface
•Peapversion:SelectthePeapversionthatisusedinthenetworkswitch.
•Label:Select1touseclientEAPencryption;select2touseclientPEAPencryption.SelecttheLabelthatthenetwork
switchuseswhenusingPeapversion1.
ThesesettingsareonlyavailableifyouuseIEEE802.1aeMACsec(StaticCAK/Pre-SharedKey)astheauthenticationmethod:
•Keyagreementconnectivityassociationkeyname:Entertheconnectivityassociationname(CKN).Itmustbe2to64
(divisibleby2)hexadecimalcharacters.TheCKNmustbemanuallyconguredintheconnectivityassociationand
mustmatchonbothendsofthelinktoinitiallyenableMACsec.
•Keyagreementconnectivityassociationkey:Entertheconnectivityassociationkey(CAK).Itshouldbeeither32
or64hexadecimalcharacterslong.TheCAKmustbemanuallyconguredintheconnectivityassociationandmust
matchonbothendsofthelinktoinitiallyenableMACsec.
Preventbrute-forceattacks
Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.
Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.
Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe
numberoffailuresallowedbothonpagelevelanddevicelevel.
Firewall
Activate:Turnontherewall.
DefaultPolicy:Selectthedefaultstatefortherewall.
•Allow:Allowsallconnectionstothedevice.Thisoptionissetbydefault.
•Deny:Deniesallconnectionstothedevice.
Tomakeexceptionstothedefaultpolicy,youcancreaterulesthatallowsordeniesconnectionstothedevicefromspecic
addresses,protocols,andports.
•Address:EnteranaddressinIPv4/IPv6orCIDRformatthatyouwanttoallowordenyaccessto.
•Protocol:Selectaprotocolthatyouwanttoallowordenyaccessto.
•Port:Enteraportnumberthatyouwanttoallowordenyaccessto.Youcanaddaportnumberbetween1and65535.
•Policy:Selectthepolicyoftherule.
:Clicktocreateanotherrule.
Addrules:Clicktoaddtherulesthatyouhavedened.
•Timeinseconds:Setatimelimitfortestingtherules.Thedefaulttimelimitissetto300seconds.Toactivatethe
rulesstraightaway,setthetimeto0seconds.
•Conrmrules:Conrmtherulesandtheirtimelimit.Ifyouhavesetatimelimitofmorethan1second,theruleswill
beactiveduringthistime.Ifyouhavesetthetimeto0,theruleswillbeactivestraightaway.
Pendingrules:Anoverviewofthelatesttestedrulesthatyouareyettoconrm.
Note
TherulesthathaveatimelimitappearunderActiverulesuntilthedisplayedtimerrunsout,oruntilyouconrmthem.If
youdon'tconrmthem,theywillappearunderPendingrulesoncethetimerrunsout,andtherewallwillreverttothe
previouslydenedsettings.Ifyouconrmthem,theywillreplacethecurrentactiverules.
Conrmrules:Clicktoactivatethependingrules.
Activerules:Anoverviewoftherulesyouarecurrentlyrunningonthedevice.
:Clicktodeleteanactiverule.
:Clicktodeleteallrules,bothpendingandactive.
31