AXIS M3045-WV Network CameraSystem OptionsAbout EAP-PEAP/MSCHAPv2The authentication protocol EAP-PEAP/MSCHAPv2 (Extensible Authentication Protocol - Protected Extensible AuthenticationProtocol/Microsoft Challenge Handshake Authentication Protocol) allows the client to authenticate the network using a digitalcertificate provided by a Certification Authority. The network authenticates the client using an identity and a password. To gainaccess to the protected network, the Axis product presents its identity and password to the network access point. If these credentialsare approved, the access point allows access on a preconfigured port.ImportantTo ensure successful certificate validation, time synchronization should be performed on all clients and servers prior toconfiguration.How to configure the wireless settings using WPATM-/WPA2-Enterprise and EAP-PEAP/MSCHAPv21. Go to System Options > Security > Wireless2. In the SSID field, type the name of the wireless network.3. Under Security, select WPA-/WPA2–Enterprise.4. Under WPA-Enterprise type, select EAP-PEAP/MSCHAPv2.5. Enter the user Identity associated with your certificate.6. Enter the Password for your user identity.7. Select the PEAP Version (0 or 1) as used in the access point.8. Select the PEAP Label that the access point uses when using PEAP version 1. Select 1 to use client EAP encryption; select2 to use client PEAP encryption.9. Select the EAPOL version (1 or 2) as used in the access point.10. Select the CA certificate with which to validate the network/AP certificate.11. Click Save.No SecurityThe No security option provides no protection against attacks. It is not a recommended method and should only be used duringshort periods and exceptional cases.To configure the wireless settings with no security:1. Select the network type being used by the access point, Master.2. Click Save.About wireless certificatesWireless network certificates are used to authenticate devices on a wireless network. Wireless networks using theWPATM-/WPA2-Enterprise security method are protected by EAPOL (Extensible Authentication Protocol Over Lan), which is part ofthe IEEE 802.1X standard. The client authenticates the server using digital certificates. The server authenticates the client usingdigital certificates or a password depending on the selected WPA-Enterprise type.To install and manage certificates, go to System Options > Security > Certificates. For more information, see About certificates onpage 48 and IEEE 802.1X on page 47.SOCKSSOCKS is a networking proxy protocol. The Axis product can be configured to use a SOCKS server to reach networks on the otherside of a firewall or proxy server. This functionality is useful if the Axis product is located on a local network behind a firewall, andnotifications, uploads, alarms, etc need to be sent to a destination outside the local network (for example the Internet).55