Axis Communications 211M user manual System Options, Security, IP Address Filtering

AXIS 211M - System Options

System Options

Security

User access control is enabled by default, when the administrator sets the root password on first access. An administrator can set up other users, by giving these user names and passwords. It is also possible to allow anonymous viewer login, which means that anybody may access the Live View page, as described below:

Users - the user list displays the authorized users and user groups (levels):

Viewer	Provides the lowest level of access, which only allows access to the Live View page.
Operator	An operator can view the Live View page, create and modify event types and adjust certain
	other settings. Operators have no access to the System Options.
Administrator	An administrator has unrestricted access to all the setup tools and can determine the
	registration of all other users.

User Settings - check the relevant check boxes to enable:

•Anonymous viewer login - allows any viewer direct access to the Live View page.

•Maximum number of simultaneous viewers - enter a value here to restrict the number of unicast viewers accessing the unit. This is useful if you need to save on bandwidth. (Note that all multicast viewers count as 1 viewer.)

IP Address Filtering

Checking the Enable IP address filtering box enables the IP address filtering function, whereby the IP addresses in the list of filtered addresses will be allowed or denied access to the AXIS 211M.

Up to 256 IP address entries may be specified (a single entry can contain multiple IP addresses). All other IP addresses not in this list will be allowed or denied access accordingly, i.e. if the addresses in the list are allowed, then all others are denied access, and vice versa. Click the Add button to add new filtered addresses. See also the online help for more information.

Referrals - To prevent unauthorized clients from including the video stream from the cameras into external Web pages, check the Referrals checkbox and enter the IP address or Host name of the computer that hosts the Web pages with the included video stream. Several IP addresses/host names can be defined and are separated by semicolons (;). This option is only applicable to Motion JPEG video streams.

Notes: If the referrals feature is enabled and you wish to also allow normal access to the Live View page, the product's own IP address or host name must be added to the list of allowed referrers.

Restricting referrers has no effect on an MPEG-4 video stream. To restrict an MPEG-4 stream, IP address filtering must be enabled.

Restricting referrers is of greatest value when not using IP address filtering. If IP address filtering is used, then the allowed referrers are automatically restricted to those allowed IP addresses.

HTTPS

The AXIS 211M supports encrypted browsing using HTTPS.

A self-signed certificate can be used until a Certificate Authority-issued certificate has been obtained. Click the Create self-signed Certificate button to install a self-signed certificate. Although self-signed certificates are free and offer some protection, true security will only be implemented after the installation of a signed certificate issued by a certificate authority.

A signed certificate can be obtained from an issuing Certificate Authority by clicking the Create Certificate Request button. When the signed certificate is returned, click the Install signed certificate button to import the certificate. The properties of any certificate request currently resident in the camera or installed can also be viewed by clicking the Properties... button. The HTTPS Connection Policy must also be set in the drop-down lists to enable HTTPS in the camera. For more information, please refer to the online help.

26