Axis M32-LVE Series - Page 41

AXISM32-LVENetworkCameraSeries
Thedeviceinterface
Thecontextmenucontains:
•Certicate Certicate
Certicate
information information
information
:Viewaninstalledcerticateʼsproperties.
•Delete Delete
Delete
certicate certicate
certicate
:Deletethecerticate.
•Create Create
Create
certicate certicate
certicate
signing signing
signing
request request
request
:Createacerticatesigningrequesttosendtoaregistrationauthority
toapplyforadigitalidentitycerticate.
IEEE IEEE
IEEE
802.1x 802.1x
802.1x
IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwired
andwirelessnetworkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).
ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationis
performedbyanauthenticationserver,typicallyaRADIUSserver(forexampleFreeRADIUSandMicrosoftInternet
AuthenticationServer).
Certicates Certicates
Certicates
WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriesto
authenticateitselfregardlessofwhatnetworkitisconnectedto.
Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselves
withdigitalcerticatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).
Toallowthedevicetoaccessanetworkprotectedthroughcerticates,asignedclientcerticatemustbeinstalled
onthedevice.
Client Client
Client
certicate certicate
certicate
:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticate
tovalidatetheclientʼsidentity.
CA CA
CA
certicate certicate
certicate
:SelectaCAcerticatetovalidatetheauthenticationserverʼsidentity.Whennocerticateisselected,
thedevicetriestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.
EAP EAP
EAP
identity identity
identity
:Entertheuseridentityassociatedwiththeclientcerticate.
EAPOL EAPOL
EAPOL
version version
version
:SelecttheEAPOLversionthatisusedinthenetworkswitch.
Use Use
Use
IEEE IEEE
IEEE
802.1x 802.1x
802.1x
:SelecttousetheIEEE802.1xprotocol.
Prevent Prevent
Prevent
brute brute
brute
- -
-
force force
force
attacks attacks
attacks
Blocking Blocking
Blocking
:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfo
orencryptionkeys.
Blocking Blocking
Blocking
period period
period
:Enterthenumberofsecondstoblockabrute-forceattack.
Blocking Blocking
Blocking
conditions conditions
conditions
:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.You
cansetthenumberoffailuresallowedbothonpagelevelanddevicelevel.
IP IP
IP
address address
address
lter lter
lter
41