Axis Communications AXIS 233D user manual Date & Time, Authentication process

Page 41

AXIS 233D - System Options 41

Clients and servers in an 802.1X network may need to authenticate each other by some means. In the Axis implementation this is done with the help of digital certificates provided by a Certification Authority. These are then validated by a third-party entity, such as a RADIUS server, examples of which are Free Radius and Microsoft Internet Authentication Service.

To perform the authentication, the RADIUS server uses various EAP methods/protocols, of which there are many. The one used in the Axis implementation is EAP-TLS (EAP-Transport Layer Security).

The AXIS network video device presents its certificate to the network switch, which in turn forwards this to the RADIUS server. The RADIUS server validates or rejects the certificate and responds to the switch, and sends its own certificate to the client for validation. The switch then allows or denies network access accordingly, on a pre-configured port.

The authentication process

1.A CA server provides the required signed certificates.

2.The Axis video device requests access to the protected network at the network switch. The switch forwards the video device’s CA certificate to the RADIUS server, which then replies to the switch.

3.The switch forwards the RADIUS server’s CA certificate to the video device, which also replies to the switch.

4.The switch keeps track of all responses to the validation requests. If all certificates are validated, the Axis video device is allowed access to the protected network via a pre-configured port.

RADIUS (Remote Authentication Dial In User Service) - AAA (Authentication, Authorization and Accounting) protocol for applications such as network access or IP mobility. It is intended to work in both local and roaming situations.

CA servers - In cryptography, a Certification Authority (CA) is an entity that provides signed digital certificates for use by other parties, thus acting a trusted third party. There are many commercial CA’s that charge for their services. Institutions and governments may have their own CA, and there are free CA’s available.

Date & Time

Current Server Time - displays the current date and time (24h clock). The time can be displayed in 12h clock format in the Overlay Images (see below).

New Server Time - Select your time zone from the drop-down list and check the daylight saving time changes, if desired.

Image 41
Contents Axis 233D About This Document Safety Notice Battery Replacement Table of contents Axis 233D Product Overview Key FeaturesOverview Color Description Status LED IndicatorAccessing the Axis 233D Using the Network Dome CameraAxis 233D Using the Network Dome Camera Area Zoom Click-in-image movementPan/Tilt/Zoom Controls Pan/Tilt/Zoom Control QueueAxis 295 Video Surveillance Joystick Motion Jpeg Video StreamsStream Types MPEG-4 protocols and communication methods RTP/RTSP/HTTP or RTP/RTSP/HTTPS How to stream MPEG-4Other MPEG-4 clients Other methods of accessing the video streamAxis Media Control Overview of the Setup Tools Configuring the Network Dome CameraAccessing the Setup Tools Image Settings Video & Image SettingsOverlay Image Settings Overlay SettingsGo to Setup Video & Image Overlay Image Video StreamPrivacy Mask Advanced Camera SettingsLow Light Behavior MPEG-4 Settings Audio mode Audio SettingsAudio Audio ChannelsAudio Output Audio InputAdvanced Audio Layout Live View ConfigCheck Show Custom Link ViewAction Buttons Html Examples Viewer SettingsWorking with External Video Sources Sequence ModeExternal Video Preset Positions Dome ConfigurationGuard Tour Osdi ZonesAdvanced Event Servers Event ConfigurationEvent Types How to set up a triggered eventTriggered Event Click Add triggered on the Event typesPre-trigger and Post-trigger buffers Click Add scheduled on the Event types How to set up a scheduled eventScheduled Event Motion Detection History Sensitivity Port StatusSystem Options User Settings check the corresponding checkboxes to enableSecurity IP Address Filtering802.1X Network Admission Control HttpsDate & Time Authentication processAxis 233D System Options Services Network Basic TCP/IP SettingsIP Address Configuration DNS Configuration Network Advanced TCP/IP SettingsNTP Configuration Host Name ConfigurationNAT traversal port mapping Link-Local IPv4 AddressNetwork Traffic FTPSmtp email QoS Quality of serviceQoS Settings UPnP MaintenanceBonjour Ports & devicesDefault router Subnet mask System time Support ConfigurationAdvanced Logs & ReportsAbout Resetting to Factory Default SettingsResetting to the Factory Default Settings Terminal Connectors Power connections Pin Function Description Power/Audio Terminal connector blocksSchematic Diagram Axis 233D I/O connectors and power Checking the Firmware Updating the Firmware TroubleshootingEmergency Recovery Procedure Sequence LED Indicator flash routineSupport Using ARP Ping Symptoms, Possible Causes and Remedial ActionsSnapshot images Lens Technical SpecificationsShutter time System integration Optimizing your system General performance considerationsBandwidth Frame rates802.1x IndexRadius Axis 233D