36AXIS 221 - System Options

The authentication process

 

 

Axis video device

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Certificate

3

Q: Certificate OK?

 

 

 

A: OK

Network

Q: Certificate OK?

A: OK

switch

 

4

 

 

1

 

 

 

 

 

 

 

 

Certificate

 

 

 

 

 

 

 

 

 

 

Authority (CA)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

RADIUS

 

 

 

 

 

server

 

 

 

 

Certificate

 

 

 

 

 

 

 

 

 

Protected network

1.A CA server provides the required signed certificates.

2.The Axis video device requests access to the protected network at the network switch. The switch forwards the video device’s CA certificate to the RADIUS server, which then replies to the switch.

3.The switch forwards the RADIUS server’s CA certificate to the video device, which also replies to the switch.

4.The switch keeps track of all responses to the validation requests. If all certificates are validated, the Axis video device is allowed access to the protected network via a pre-configured port.

RADIUS

RADIUS (Remote Authentication Dial In User Service) is an AAA (Authentication, Authorization and Accounting) protocol for applications such as network access or IP mobility. It is intended to work in both local and roaming situations.

CA servers

In cryptography, a Certification Authority (CA) is an entity that provides signed digital certificates for use by other parties, and thus acts a trusted third party.

There are many commercial CA’s that charge for their services. Institutions and governments may have their own CA, and there are free CA’s available.

Page 36
Image 36
Axis Communications AXIS 221 user manual Authentication process, CA servers