Axis 02408-001 Axis I8116-E User Manual

Loading ...

AXISI8116-ENetworkVideoIntercom

Thewebinterface

besetonce,andpreferablyonlywhenHTTPSisenabled.Oncethepasswordisset,thepasswordeldisno

longerdisplayed.Tosetthepasswordagain,youmustresetthedevicetofactorydefaultsettings.

Security

Certicates

Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:

•Client/servercerticates

Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority

(CA).Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeyouobtainaCA-issuedcerticate.

•CAcerticates

YoucanuseaCAcerticatetoauthenticateapeercerticate,forexample,tovalidatetheidentityofan

authenticationserverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveral

pre-installedCAcerticates.

Theseformatsaresupported:

•Certicateformats:.PEM,.CER,and.PFX

•Privatekeyformats:PKCS#1andPKCS#12

Important

Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.

Filterthecerticatesinthelist.

Addcerticate:Clicktoaddacerticate.

Thecontextmenucontains:

•Certicateinformation:Viewaninstalledcerticate’sproperties.

•Deletecerticate:Deletethecerticate.

•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply

foradigitalidentitycerticate.

IEEE802.1x

IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless

networkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby

anauthenticationserver,typicallyaRADIUSserver(forexample,FreeRADIUSandMicrosoftInternetAuthenticationServer).

Certicates

WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself

regardlessofwhatnetworkitisconnectedto.

Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital

certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).

Toallowthedevicetoaccessanetworkprotectedthroughcerticates,youmustinstallasignedclientcerticateonthedevice.

Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe

client’sidentity.

CAcerticate:SelectaCAcerticatetovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice

triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.

Loading ...

Axis 02408-001 I8116-E Network Video Intercom