Axis 02370-001 Axis C8110 User Manual

Loading ...

AXISC8110NetworkAudioBridge

Thedeviceinterface

Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:

•Client/servercerticates

Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority(CA).

Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.

•CAcerticates

YoucanuseaCAcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication

serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedCA

certicates.

Theseformatsaresupported:

•Certicateformats:.PEM,.CER,and.PFX

•Privatekeyformats:PKCS#1andPKCS#12

Important

Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.

Filterthecerticatesinthelist.

Addcerticate:Clicktoaddacerticate.

Thecontextmenucontains:

•Certicateinformation:Viewaninstalledcerticate’sproperties.

•Deletecerticate:Deletethecerticate.

•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply

foradigitalidentitycerticate.

IEEE802.1x

IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless

networkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby

anauthenticationserver,typicallyaRADIUSserver(forexampleFreeRADIUSandMicrosoftInternetAuthenticationServer).

Certicates

WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself

regardlessofwhatnetworkitisconnectedto.

Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital

certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).

Toallowthedevicetoaccessanetworkprotectedthroughcerticates,asignedclientcerticatemustbeinstalledonthedevice.

Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe

client’sidentity.

CAcerticate:SelectaCAcerticatetovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice

triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.

EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.

EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.

UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.

Preventbrute-forceattacks

Loading ...

Axis 02370-001 C8110 Network Audio Bridge