Axis Communications AXIS 233D - Manual (Page 41)

41 AXIS 233D - System Options
Clients and servers in an 802.1X network may need to authenticate each other by some
means. In the Axis implementation this is done with the help of digital certificates
provided by a Certification Authority. These are then validated by a third-party entity,
such as a RADIUS server, examples of which are Free Radius and Microsoft Internet
Authentication Service.
To perform the authentication, the RADIUS server uses various EAP methods/protocols, of
which there are many. The one used in the Axis implementation is EAP-TLS
(EAP-Transport Layer Security).
The AXIS network video device presents its certificate to the network switch, which in turn
forwards this to the RADIUS server. The RADIUS server validates or rejects the certificate
and responds to the switch, and sends its own certificate to the client for validation. The
switch then allows or denies network access accordingly, on a pre-configured port.
The authentication process
1. A CA server provides the required signed certificates.
2. The Axis video device requests access to the protected network at the network
switch. The switch forwards the video device’s CA certificate to the RADIUS
server, which then replies to the switch.
3. The switch forwards the RADIUS server’s CA certificate to the video device, which
also replies to the switch.
4. The switch keeps track of all responses to the validation requests. If all certificates
are validated, the Axis video device is allowed access to the protected network via
a pre-configured port.
RADIUS (Remote Authentication Dial In User Service) - AAA (Authentication,
Authorization and Accounting) protocol for applications such as network access or IP
mobility. It is intended to work in both local and roaming situations.
CA servers - In cryptography, a Certification Authority (CA) is an entity that provides
signed digital certificates for use by other parties, thus acting a trusted third party. There
are many commercial CA’s that charge for their services. Institutions and governments
may have their own CA, and there are free CA’s available.
Date & Time
Current Server Time - displays the current date and time (24h clock). The time can be
displayed in 12h clock format in the Overlay Images (see below).
New Server Time - Select your time zone from the drop-down list and check the daylight
saving time changes, if desired.