AXIS M3045-WV Network Camera
System Options
About EAP-PEAP/MSCHAPv2
The authentication protocol
EAP-PEAP/MSCHAPv2
(Extensible Authentication Protocol - Protected Extensible Authentication
Protocol/Microsoft Challenge Handshake Authentication Protocol) allows the client to authenticate the network using a digital
certificate provided by a Certification Authority. The network authenticates the client using an identity and a password. To gain
access to the protected network, the Axis product presents its identity and password to the network access point. If these credentials
are approved, the access point allows access on a preconfigured port.
Important
To ensure successful certificate validation, time synchronization should be performed on all clients and servers prior to
configuration.
How to configure the wireless settings using WPA
TM
-/WPA2-Enterprise and EAP-PEAP/MSCHAPv2
1. Go to
System Options > Security > Wireless
2. In the
SSID
field, type the name of the wireless network.
3. Under
Security
, select
WPA-/WPA2–Enterprise
.
4. Under
WPA-Enterprise type
, select
EAP-PEAP/MSCHAPv2
.
5. Enter the user
Identity
associated with your certificate.
6. Enter the
Password
for your user identity.
7. Select the PEAP
Version
(0 or 1) as used in the access point.
8. Select the PEAP
Label
that the access point uses when using PEAP version 1. Select 1 to use client EAP encryption; select
2 to use client PEAP encryption.
9. Select the
EAPOL version
(1 or 2) as used in the access point.
10. Select the CA certificate with which to validate the network/AP certificate.
11. Click
Save
.
No Security
The
No security
option provides no protection against attacks. It is not a recommended method and should only be used during
short periods and exceptional cases.
To configure the wireless settings with no security:
1. Select the network type being used by the access point,
Master
.
2. Click
Save
.
About wireless certificates
Wireless network certificates are used to authenticate devices on a wireless network. Wireless networks using the
WPA
TM
-/WPA2-Enterprise security method are protected by EAPOL (Extensible Authentication Protocol Over Lan), which is part of
the IEEE 802.1X standard. The client authenticates the server using digital certificates. The server authenticates the client using
digital certificates or a password depending on the selected WPA-Enterprise type.
To install and manage certificates, go to
System Options > Security > Certificates
. For more information, see
and
SOCKS
SOCKS is a networking proxy protocol. The Axis product can be configured to use a SOCKS server to reach networks on the other
side of a firewall or proxy server. This functionality is useful if the Axis product is located on a local network behind a firewall, and
notifications, uploads, alarms, etc need to be sent to a destination outside the local network (for example the Internet).
55
