40AXIS 241Q/241S - System options
The AXIS network video device presents its certificate to the network switch, which in turn forwards this to the RADIUS server. The RADIUS server validates or rejects the certificate and responds to the switch, and sends its own certificate to the client for validation. The switch then allows or denies network access accordingly, on a preconfigured port.
The authentication process
|
| Axis video device |
|
| |||||
|
|
|
|
|
|
|
|
| |
|
|
|
|
|
|
|
|
| |
|
|
|
|
|
|
|
| Certificate | |
3 | Q: Certificate OK? | ||||||||
| |||||||||
| |||||||||
| A: OK | ||||||||
Network | Q: Certificate OK? |
A: OK | |
switch |
|
4 |
|
| 1 | ||||
|
|
| Certificate |
| |||
|
|
|
|
| |||
|
|
|
| Authority (CA) |
| ||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
RADIUS |
|
|
|
|
| ||
server |
|
|
|
| Certificate |
| |
|
|
|
|
|
|
|
|
Protected network
1.A CA server provides the required signed certificates.
2.The Axis video device requests access to the protected network at the network switch. The switch forwards the video device’s CA certificate to the RADIUS server, which then replies to the switch.
3.The switch forwards the RADIUS server’s CA certificate to the video device, which also replies to the switch.
4.The switch keeps track of all responses to the validation requests. If all certificates are validated, the Axis video device is allowed access to the protected network via a preconfigured port.
RADIUS
RADIUS (Remote Authentication Dial In User Service) is an AAA (Authentication, Authorization and Accounting) protocol for applications such as network access or IP mobility. It is intended to work in both local and roaming situations.
CA servers
In cryptography, a Certification Authority (CA) is an entity that provides signed digital certificates for use by other parties, and thus acts a trusted third party.