Axis Network Camera AXIS 221 User Manual

Also see for Network Camera AXIS 221: Specifications Product guide Installation guide Installation guide Brochure

35AXIS 221 - System OptionsSecurity - 802.1xIEEE 802.1x is an IEEE standard for port-based Network Admission Control. It providesauthentication to devices attached to a network port (wired or wireless), establishing apoint-to-point connection. If authentication fails, access is prevented on the port. 802.1x isbased on EAP (Extensible Authentication Protocol).In a 802.1x enabled network switch, clients equipped with the correct software can beauthenticated and allowed or denied network access at the Ethernet level.Clients and servers in an 802.1x network may need to authenticate each other by somemeans. In the Axis implementation this is done with the help of digital certificatesprovided by a Certification Authority. These are then validated by a third-party entity,such as a RADIUS server, examples of which are Free Radius and Microsoft InternetAuthentication Service.To perform the authentication, the RADIUS server uses various EAP methods/protocols, ofwhich there are many. The one used in the Axis implementation is EAP-TLS(EAP-Transport Layer Security).The AXIS network video device presents its certificate to the network switch, which in turnforwards this to the RADIUS server. The RADIUS server validates or rejects the certificateand responds to the switch, and sends its own certificate to the client for validation. Theswitch then allows or denies network access accordingly, on a pre-configured port.