Axis A1001 Bedienungsanleitung PDF herunterladen (Seite 33)

AXISA1001NetworkDoorController&AXISEntryManager

SystemOptions

ToaccesstheAxisproductviathedesiredprotocol,enterhttps://orhttp://intheaddresseldinabrowser.

TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.

IEEE802.1X

IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork

devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication

server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.

InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS

(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).

Youneed:

•aCAcerticatetoauthenticatetheauthenticationserver.

•aCA-signedclientcerticatetoauthenticatetheAxisproduct.

Tocreateandinstallcerticates,gotoSetup>AdditionalControllerConguration>SystemOptions>Security>Certicates.

SeeCerticates,onpage33.ManyCAcerticatesarepreinstalled.

ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:

1.GotoSetup>AdditionalControllerConguration>SystemOptions>Security>IEEE802.1X.

2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.

3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.

4.ChecktheboxtoenableIEEE802.1XandclickSave.

Note

Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP

server.SeeDate&Time,onpage34.

Certicates

Certicatesareusedtoauthenticatedevicesonanetwork.Typicalapplicationsincludeencryptedwebbrowsing(HTTPS),network

protectionviaIEEE802.1Xandsecureuploadofimagesandnoticationmessagesforexampleviaemail.Twotypesofcerticates

canbeusedwiththeAxisproduct:

Server/Clientcerticates-ToauthenticatetheAxisproduct.

CAcerticates-Toauthenticatepeercerticates,forexamplethecerticateofanauthenticationserverincasetheAxisproductis

connectedtoanIEEE802.1Xprotectednetwork.

Note

Installedcerticates,exceptpreinstalledCAcerticates,willbedeletediftheproductisresettofactorydefault.Preinstalled

CAcerticatesthathavebeendeletedwillbereinstalled.

AServer/Clientcerticatecanbeself-signedorissuedbyaCerticateAuthority(CA).Aself-signedcerticateofferslimited

protectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.

Toinstallaself-signedcerticate:

1.GotoSetup>AdditionalControllerConguration>SystemOptions>Security>Certicates.

2.ClickCreateself-signedcerticateandprovidetherequestedinformation.

TocreateandinstallaCA-signedcerticate:

1 2 ... 28 29 30 31 32 33 34 35 36 37 38 ... 52 53

Keine Kommentare

Axis A1001 Bedienungsanleitung Seite 33