User manual

AXISM1004–WNetworkCamera
SystemOptions
WPA
TM
-/WPA2
TM
-PSK
ThesecuritymethodWPA-/WPA2–PSKisdesignedforsmallnetworksanddoesnotrequireanauthenticationserver.TheAxis
productusesaPSK(Pre-SharedKey)toauthenticatewiththeaccesspoint.Thekeycanbeenteredeitherasmanualhex—a64
hexdecimalnumber(0–9,A-F)—orapassphraseusing8–63ASCIIcharacters.Thelongerthepassphrase,themoresecureisthekey.
TocongurethewirelesssettingsusingtheWPA-/WPA2–PSKsecuritymethod:
1.EntertherequiredPassphrasefortheaccesspoint.
2.ClickSave.
WPA
TM
-/WPA-Enterprise
ThesecuritymethodWPA-/WPA-Enterpriseisdesignedforlargenetworksandrequiresanauthenticationserver.Thenetworkis
protectedbyEAPOL(ExtensibleAuthenticationProtocolOverLan).
SelecttheWPA-Enterprisetypebeingusedbytheaccesspoint:
•EAP-TLS.Seepage49.
•EAP-PEAP/MSCHAPv2.Seepage49.
EAP-TLS
TheauthenticationprotocolEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity)allowstheclientandserverto
authenticateeachotherusingdigitalcerticatesprovidedbyaCerticationAuthority.Togainaccesstotheprotectednetwork,the
Axisproductpresentsitscerticatetothenetworkaccesspoint.Accessisgrantedifthecerticateisapproved.
Important
Toensuresuccessfulcerticatevalidation,timesynchronizationshouldbeperformedonallclientsandserverspriorto
conguration.
TocongurethewirelesssettingsusingtheWPA
TM
-/WPA-EnterprisesecuritymethodandEAP-TLS:
1.EntertheuserIdentityassociatedwithyourcerticate.
2.EnterthePrivatekeypasswordforyouruseridentity.
3.SelecttheEAPOLversion(1or2)asusedintheaccesspoint.
4.ClickSave.
Formoreinformationoncerticatesforwirelessnetworks,seeCerticatesonpage50.
EAP-PEAP/MSCHAPv2
TheauthenticationprotocolEAP-PEAP/MSCHAPv2(ExtensibleAuthenticationProtocol-ProtectedExtensibleAuthentication
Protocol/MicrosoftChallengeHandshakeAuthenticationProtocol)allowstheclienttoauthenticatethenetworkusingadigital
certicateprovidedbyaCerticationAuthority.Thenetworkauthenticatestheclientusinganidentityandapassword.Togain
accesstotheprotectednetwork,theAxisproductpresentsitsidentityandpasswordtothenetworkaccesspoint.Ifthesecredentials
areapproved,theaccesspointallowsaccessonapreconguredport.
Important
Toensuresuccessfulcerticatevalidation,timesynchronizationshouldbeperformedonallclientsandserverspriorto
conguration.
TocongurethewirelesssettingsusingtheWPA
TM
-/WPA-EnterprisesecuritymethodandEAP-PEAP/MSCHAPv2:
1.EntertheuserIdentityassociatedwithyourcerticate.
2.EnterthePasswordforyouruseridentity.
49