Axis T8504-E - Page 10

AXIST8504–EOutdoorPoESwitch
Webinterface
Networkconguration-GotoNetworkcongurationtoenableordisableDHCP,congureIPv4,IPv6andnetworkhostname.
HostnameisusedbybothIPv4andIPv6toregistertheunitnameinDHCPv4/v6server.NotethatIPv6usestheFQDNterminology
ashostname.
NetworkservicesIPv4/IPv6-GotoNetworkservicesIPv4/IPv6tocongureDNSandSysLogservers.
PoEconguration-GotoPoEcongurationtocongurePoEportpower.FourPoEpowerschemesofferdifferentpower
distributionsbetweenthefourPoEports.Allfouroptionscomplywiththeunitmaximumpowercapacities.
•60W:DeliverpoweroverfourpairsinsidetheEthernetcable.Eachpairdeliversupto30W.
•30W:DeliverpowerovertwooutoffourpairsinsidetheEthernetcable
•15.4W:DeliverpowerovertwooutoffourpairsinsidetheEthernetcable
•––:NoPoEpower.Ethernetportisenabledandfunctional,butPoEisdisabled.
Security
Securityconguration
GotoSecuritycongurationtoconguretheunitusernameandpasswordforremoteweborSSHaccess.
Note
OnlyASCIIcharacters33–90and94–122canbeusedfortheusernameandpasswordelds.
HTTPS
GotoHTTPStocongurewhetherHTTPorHTTPS(securedweb)shouldbeused.WhenHTTPSisenabled,TLSv1.2isusedtoencrypt
webnetworktrafc.
Note
ToeliminatewebbrowserwarningwheneveraccessingtheunitoverHTTPS,addanexceptionruletothewebbrowsertelling
thewebbrowserthatthewebsiteislegitimateoruploadaunitself-signed/CA-signedcerticate.
RADIUS/TACACS+
RADIUS/TACACS+enablesremoteuserauthenticationwhenuseraccessestheunitoverweborSSH.Usernameandpasswordarethen
authenticatedbytheRADIUS/TACACS+server.
TheadvantageswithRADIUS/TACACS+isthatusernameandpasswordareeasytoupdate,especiallyifmanynetworkdevices
aretobemanaged.
ThedisadvantagewithRADIUS/TACACS+isthattheunitisnotaccessibleifbothRADIUS/TACACS+serversaredown.Itispossible
toenableLocalloginfallbackwhichallowstheunittouseitslocalusernameandpasswordwheneverthereisnoreplyfrom
RADIUS/TACACS+servers.
RADIUS/TACACS+commonparameters
ParameterDescription
Enableauthentication
CongureifRADIUS/TACACS+shouldbeenabledordisabled.WhenRADIUS/TACACS+isdisabled,
localusernameandpasswordareused.
EnablelocalloginfallbackWhenlocalloginfallbackisenabled,localusernameandpasswordareusedwheneverthereisno
replyfromRADIUS/TACACS+servers.Thiscanhappenwhentheserversaredownorincaseof
anetworkproblem.
Authenticationprotocol
SelecteitherRADIUSorTACACS+authenticationprotocol.
Sharedsecret
ThesameprivatekeystringmustbeconguredonboththeunitandtheRADIUS/TACACS+server.
10