Axis Communications 212 PTZ user manual Security, Authentication process

Page 32

AXIS 212 PTZ - System Options

Security - 802.1x

IEEE 802.1x is an IEEE standard for port-based Network Admission Control. It provides authentication to devices attached to a network port (wired or wireless), establishing a point-to-point connection. If authentication fails, access is prevented on the port. 802.1x is based on EAP (Extensible Authentication Protocol).

In a 802.1x enabled network switch, clients equipped with the correct software can be authenticated and allowed or denied network access at the Ethernet level.

Clients and servers in an 802.1x network may need to authenticate each other by some means. In the Axis implementation this is done with the help of digital certificates provided by a Certification Authority. These are then validated by a third-party entity, such as a RADIUS server, examples of which are Free Radius and Microsoft Internet Authentication Service.

To perform the authentication, the RADIUS server uses various EAP methods/protocols, of which there are many. The one used in the Axis implementation is EAP-TLS (EAP-Transport Layer Security).

The AXIS network video device presents its certificate to the network switch, which in turn forwards this to the RADIUS server. The RADIUS server validates or rejects the certificate and responds to the switch, and sends its own certificate to the client for validation. The switch then allows or denies network access accordingly, on a pre-configured port.

The authentication process

 

Axis video device

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Certificate

Q: Certificate OK?

2

 

 

 

 

A: OK

 

 

 

 

 

 

 

 

 

 

 

 

Network

Q: Certificate OK?

A: OK

switch

 

4

 

 

1

 

 

 

 

 

 

 

 

 

 

Certificate

 

 

 

 

 

 

 

 

 

 

Authority (CA)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

RADIUS

 

 

 

 

 

 

 

server

 

 

 

 

Certificate

 

 

 

 

 

 

 

 

 

 

 

Protected network

1.A CA server provides the required signed certificates.

2.The Axis video device requests access to the protected network at the network switch. The switch forwards the video device’s CA certificate to the RADIUS server, which then replies to the switch.

3.The switch forwards the RADIUS server’s CA certificate to the video device, which also replies to the switch.

4.The switch keeps track of all responses to the validation requests. If all certificates are validated, the Axis video device is allowed access to the protected network via a pre-configured port.

RADIUS

RADIUS (Remote Authentication Dial In User Service) is an AAA (Authentication, Authorization and Accounting) protocol for applications such as network access or IP mobility. It is intended to work in both local and roaming situations.

32

Image 32
Contents Axis 212 PTZ About this Document Contents Axis 212 PTZ Table of contents Product Features Key features Overview Dome casingColor Description Terminal connector PinoutLED indicators Setting the Password Accessing the CameraAccess from a browser Accessing the camera from the Internet Axis Media ControlLive View AMC audio controls Pan/Tilt/Zoom controlsControl panel Motion Jpeg Video StreamsStream Types RTP/RTSP/HTTP or RTP/RTSP/HTTPS How to stream MPEG-4MPEG-4 protocols and communication methods Other methods of accessing the video stream MPEG-4 clientsOther MPEG-4 clients Axis Media Control AMCConfiguration Accessing the Setup toolsVideo and Image settings Overlay SettingsAdvanced Camera Settings Overlay ImageAdvanced MPEG-4 Settings GOV SettingsAudio Channels Audio SettingsEnable Audio Audio Input Audio OutputLive View Config LayoutDefault Video Format Own HomeUser-defined Links Check Show custom linkHtml Examples Default ViewerViewer Settings Sequence Mode External VideoPTZ Configuration Preset PositionsEvent Configuration Event ServersServer type Purpose Information required FTP Server Http ServerConfiguring Event Types How to set up a triggered eventTriggered Event Click Add triggered on the Event typesMotion Detection Scheduled EventPort Status Motion Detection ParametersSystem Options Security UsersSecurity IP Address Filtering Security HttpsAxis 212 PTZ System Options Authentication process SecurityNetwork Basic TCP/IP Settings IP Address ConfigurationServices Date & TimeNetwork Advanced TCP/IP Settings DNS ConfigurationNTP Configuration Host Name ConfigurationHttp NAT traversal port mappingNetwork QoS Quality of service QoS SettingsNetwork Socks Network TrafficLED Settings Network Smtp emailNetwork Snmp Network UPnPMaintenance ConfigurationSupport AdvancedResetting to the Factory Default Settings Using the Control ButtonPinout and Interface I/O Terminal ConnectorTerminal connector Upgrading the Firmware TroubleshootingChecking the Firmware Emergency Recovery Procedure Axis SupportSymptoms, Possible Causes and Remedial Actions Problems setting the IP addressProblems with the MPEG-4 format Camera is inaccessibleVideo/Image problems, general Problems uploading filesAudio volume too low/high No images displayed on webTechnical Specifications Tilt rangeWeb browser Video managementGeneral performance considerations Optimizing your systemBandwidth Glossary of Terms Etrax Ethernet Token Ring Axis Axis own microprocessorSee also IP Internet Protocol VOP See VOP URL Uniform Resource Locator An address on the network Axis 212 PTZ Glossary of Terms Index AMCRtsp
Related manuals
Manual 47 pages 57.42 Kb