Axis 0990-001-EOL Axis P3224-LV Mk II User Manual

Loading ...

AXISP3224-LVMkIINetworkCamera

SystemOptions

HTTPS

HTTPS(HyperTextTransferProtocoloverSecureSocketLayer,orHTTPoverSSL)isawebprotocolprovidingencryptedbrowsing.

HTTPScanalsobeusedbyusersandclientstoverifythatthecorrectdeviceisbeingaccessed.Thesecuritylevelprovidedby

HTTPSisconsideredadequateformostcommercialexchanges.

TheAxisproductcanbeconguredtorequireHTTPSwhenusersfromdifferentusergroups(administrator,operator,viewer)login.

TouseHTTPS,anHTTPScerticatemustrstbeinstalled.GotoSystemOptions>Security>Certicatestoinstallandmanage

certicates.SeeAboutcerticatesonpage49.

ToenableHTTPSontheAxisproduct:

1.GotoSystemOptions>Security>HTTPS

2.SelectanHTTPScerticatefromthelistofinstalledcerticates.

3.Optionally,clickCiphersandselecttheencryptionalgorithmstouseforSSL.

4.SettheHTTPSConnectionPolicyforthedifferentusergroups.

5.ClickSavetoenablethesettings.

ToaccesstheAxisproductviathedesiredprotocol,intheaddresseldinabrowser,enterhttps://fortheHTTPSprotocol

andhttp://fortheHTTPprotocol.

TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.

IEEE802.1X

IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork

devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication

server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.

InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS

(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).

Youneed:

•aCAcerticatetoauthenticatetheauthenticationserver.

•aCA-signedclientcerticatetoauthenticatetheAxisproduct.

Tocreateandinstallcerticates,gotoSystemOptions>Security>Certicates.SeeAboutcerticatesonpage49.ManyCA

certicatesarepreinstalled.

ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:

1.GotoSystemOptions>Security>IEEE802.1X.

2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.

3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.

4.ChecktheboxtoenableIEEE802.1XandclickSave.

Note

Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP

server.SeeDate&Timeonpage49.

Loading ...

Axis 0990-001-EOL P3224-LV Mk II Indoor 1MP Fixed Dome Camera with Built-in IR 0990-001