Name: Axis P5654-E Mk II
Brand: Axis
Rating: 4 (1 reviews)

To Next Page

To Previous Page

AXISP5654-EMkIIPTZCamera

Thewebinterface

Thecontextmenucontains:

•Certicateinformation:Viewaninstalledcerticate’sproperties.

•Deletecerticate:Deletethecerticate.

•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply

foradigitalidentitycerticate.

Securekeystore:

•Secureelement(CCEAL6+):Selecttousesecureelementforsecurekeystore.

•TrustedPlatformModule2.0(CCEAL4+,FIPS140-2Level2):SelecttouseTPM2.0forsecurekeystore.

IEEE802.1x

IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless

networkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby

anauthenticationserver,typicallyaRADIUSserver(forexample,FreeRADIUSandMicrosoftInternetAuthenticationServer).

Certicates

WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself

regardlessofwhatnetworkitisconnectedto.

Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital

certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).

Toallowthedevicetoaccessanetworkprotectedthroughcerticates,youmustinstallasignedclientcerticateonthedevice.

Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe

client’sidentity.

CAcerticate:SelectCAcerticatestovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice

triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.

EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.

EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.

UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.

Preventbrute-forceattacks

Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.

Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.

Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe

numberoffailuresallowedbothonpagelevelanddevicelevel.

IPaddresslter

Uselter:SelecttolterwhichIPaddressesareallowedtoaccessthedevice.

Policy:ChoosewhethertoAlloworDenyaccessforcertainIPaddresses.

Addresses:EntertheIPnumbersthatareeitherallowedordeniedaccesstothedevice.YoucanalsousetheCIDRformat.

Custom-signedrmwarecerticate

Other manuals for Axis P5654-E Mk II

Questions and Answers:

Need help?

Do you have a question about the Axis P5654-E Mk II and is the answer not in the manual?

General