Axis Communications M3027PVE user manual Certificates, Go to System Options Security Ieee

Page 47

AXIS M3027–PVE Fixed Dome Network Camera

System Options

3.Optionally, click Ciphers and select the encryption algorithms to use for SSL.

4.Set the HTTPS Connection Policy for the different user groups.

5.Click Save to enable the settings.

To access the Axis product via the desired protocol, in the address field in a browser, enter https:// for the HTTPS protocol and http:// for the HTTP protocol.

The HTTPS port can be changed on the System Options > Network > TCP/IP > Advanced page.

IEEE 802.1X

IEEE 802.1X is a standard for port-based Network Admission Control providing secure authentication of wired and wireless network devices. IEEE 802.1X is based on EAP (Extensible Authentication Protocol).

To access a network protected by IEEE 802.1X, devices must be authenticated. The authentication is performed by an authentication server, typically a RADIUS server, examples of which are FreeRADIUS and Microsoft Internet Authentication Service.

In Axis implementation, the Axis product and the authentication server identify themselves with digital certificates using EAP-TLS (Extensible Authentication Protocol - Transport Layer Security). The certificates are provided by a Certification Authority (CA). You need:

•a CA certificate to authenticate the authentication server.

•a CA-signed client certificate to authenticate the Axis product.

To create and install certificates, go to System Options > Security > Certificates . See Certificates on page 47. Many CA certificates are preinstalled.

To allow the product to access a network protected by IEEE 802.1X:

1.Go to System Options > Security > IEEE 802.1X.

2.Select a CA Certificate and a Client Certificate from the lists of installed certificates.

3.Under Settings, select the EAPOL version and provide the EAP identity associated with the client certificate.

4.Check the box to enable IEEE 802.1X and click Save.

Note

For authentication to work properly, the date and time settings in the Axis product should be synchronized with an NTP server. See Date & Time on page 48.

Certificates

Certificates are used to authenticate devices on a network. Typical applications include encrypted web browsing (HTTPS), network protection via IEEE 802.1X and secure upload of images and notification messages for example via email. Two types of certificates can be used with the Axis product:

Server/Client certificates - To authenticate the Axis product.

CA certificates - To authenticate peer certificates, for example the certificate of an authentication server in case the Axis product is connected to an IEEE 802.1X protected network.

Note

Installed certificates, except preinstalled CA certificates, will be deleted if the product is reset to factory default. Preinstalled CA certificates that have been deleted will be reinstalled.

A Server/Client certificate can be self-signed or issued by a Certificate Authority (CA). A self-signed certificate offers limited protection and can be used before a CA-issued certificate has been obtained.

47

Page 46 Page 48
Image 47
Page 46 Page 48
Contents Axis M3027-PVE Fixed Dome Network Camera Intellectual Property Rights About this DocumentLegal Considerations LiabilityLearn More SupportAxis M3027-PVE Fixed Dome Network Camera Table of ContentsPerformance Considerations Hardware Overview Connectors and ButtonsNetwork Connector Control Button LED IndicatorsConnector SD Card SlotAxis M3027-PVE Fixed Dome Network Camera Access from the Internet Access the ProductAccess from a Browser Click Use Https Set the Root PasswordSet Power Line Frequency Camera OrientationManual Trigger Go to Setup EventsLive View Controls on the Live ViewPTZ Controls Axis Media Control viewer toolbarAxis M3027-PVE Fixed Dome Network Camera Axis Media Control AMC How to Stream H.264Media Streams Alternative Methods of Accessing the Video Stream Axis M3027-PVE Fixed Dome Network Camera Basic Setup Set Up the ProductView modes VideoVideo Stream Pixel CounterDouble Panorama OverviewPanorama Quad View View areas ImageDirection 264 Stream ProfilesWhite Balance Camera SettingsExposure Settings Image AppearanceDay/Night View areasShutter & Gain Set Shutter toGo to Video Overlay Image OverlayOverlay Image Go to Video Video Stream and select the Image tabGo to Events Action Rules Use Overlay Text in an Action RulePrivacy Mask Browser Viewer Description Configure the Live ViewDefault Viewer for Browsers Viewer SettingsOutput Buttons Go to Setup Live View ConfigUser Defined Links Guard Tour Preset PositionsPTZ Pan Tilt Zoom Go to PTZ Guard Tour and click Add AdvancedControl Queue ControlsOperator Same as administrator but with lower priority Go to Detectors Camera Tampering DetectorsCamera Tampering Motion DetectionMotion Detection Parameters Set Up Motion Detection WindowsAxis M3027-PVE Fixed Dome Network Camera Application Licenses Install ApplicationGo to Setup Applications ApplicationsAxis M3027-PVE Fixed Dome Network Camera Go to Events Action Rules and click Add Set Up Action RulesEvents Convert Event Types to Action RulesTriggers Recipient Types Add RecipientsActions Go to Events Schedules and click Add Set Up Email RecipientsCreate Schedules Go to Events Recurrences and click Add Set Up RecurrencesGo to Recordings List RecordingsRecording List Continuous RecordingClick Save to save and start the recording Languages IP Address Filter System OptionsSecurity UsersGo to System Options Security Ieee IeeeCertificates Network Basic TCP/IP SettingsGo to Setup System Options Security Certificates Date & TimeARP/Ping IPv4 Address ConfigurationIPv6 Address Configuration Assign IP Address Using ARP/PingAxis Video Hosting System Avhs Advanced TCP/IP SettingsAxis Internet Dynamic DNS Service DNS ConfigurationNAT traversal port mapping for IPv4 NTP ConfigurationHost Name Configuration Link-Local IPv4 AddressFTP QoS Quality of ServiceBonjour StorageUPnPTM RTP/H.264Format SD Card Mount and Unmount SD CardPorts MaintenancePorts & Devices Network ShareLogs & Reports SupportSupport Overview System OverviewFile Upload Reset to Factory Default SettingsPlain Config ScriptingCheck the Firmware TroubleshootingUpgrade the Firmware Emergency Recovery ProcedureProduct is accessible locally but not externally Symptoms, Possible Causes and Remedial ActionsProblems setting the IP address Product cannot be accessed from a browserKey frames Problems with streaming H.264Video and image problems, general Video Camera SettingsStorage disruption Storage and disk management problemsTechnical Specifications Connectors Function/group Specifications System ApplicationInstallation aids Data Streaming PowerConnectors Performance Considerations M3.2
Top Page Image Contents