Axis 0543-001 ~ EOL Axis M3007-P User Manual

Loading ...

AXISM3007–P

SystemOptions

HTTPS

HTTPS(HyperTextTransferProtocoloverSecureSocketLayer,orHTTPoverSSL)isawebprotocolprovidingencryptedbrowsing.

HTTPScanalsobeusedbyusersandclientstoverifythatthecorrectdeviceisbeingaccessed.Thesecuritylevelprovidedby

HTTPSisconsideredadequateformostcommercialexchanges.

TheAxisproductcanbeconguredtorequireHTTPSwhenusersfromdifferentusergroups(administrator,operator,viewer)connect.

TouseHTTPS,anHTTPScerticatemustrstbeinstalled.GotoSystemOptions>Security>Certicatestoinstallandmanage

certicates.SeeCerticates,onpage41.

ToenableHTTPSontheAxisproduct:

1.GotoSystemOptions>Security>HTTPS

2.SelectanHTTPScerticatefromthelistofinstalledcerticates.

3.Optionally,clickCiphersandselecttheencryptionalgorithmstouseforSSL.

4.SettheHTTPSConnectionPolicyforthedifferentusergroups.

5.ClickSavetoenablethesettings.

ToaccesstheAxisproductviathedesiredprotocol,enterhttps://orhttp://intheaddresseldinabrowser.

TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.

IEEE802.1X

IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork

devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1X,devicesmustauthenticatethemselves.Theauthenticationisperformedbya

third-partyentitycalledanauthenticationserver,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoft

InternetAuthenticationService.

InAxis'implementation,thenetworkdeviceandtheauthenticationserverauthenticatethemselveswiththehelpofdigital

certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).Thecerticatesareprovidedbyan

CerticationAuthority(CA).Youneed:

•aCAcerticatetovalidatetheidentityoftheauthenticationserver

•aCA-signedclientcerticateandaprivatekeytoauthenticatethenetworkdevice.

ToallowthenetworkdevicetoaccessanetworkprotectedbyIEEE802.1X:

1.ObtainaCAcerticate,aclientcerticateandaclientprivatekey(contactyournetworkadministrator).

2.GotoSetup>SystemOptions>Security>IEEE802.1XanduploadtheCAcerticate,theclientcerticateandthe

clientprivatekey.

3.UnderSettings,selecttheEAPOLversion,provideyourEAPidentityandprivatekeypassword.

4.ChecktheboxtoenableIEEE802.1XandclickSave.

Loading ...

Axis 0543-001 ~ EOL M3007-P Network Camera 0543-001