User`s manual

37
AXIS 216FD/FD-V - System Options
The authentication process
RADIUS - RADIUS (Remote Authentication Dial In User Service) is an AAA (Authentication,
Authorization and Accounting) protocol for applications such as network access or IP
mobility. It is intended to work in both local and roaming situations.
CA servers - In cryptography, a Certification Authority (CA) is an entity that provides signed
digital certificates for use by other parties, and thus acts a trusted third party.
There are many commercial CAs that charge for their
services. Institutions and
governments may have their own CA, and there are free CAs available.
Protected network
Axis video device
Q: Certificate OK?
Certificate
Authority (CA)
3
1
2
4
A: OK
RADIUS
server
Network
switch
Q: Certificate OK?
A: OK
Certificate
Certificate
1. A CA server provides the required signed certificates.
2. The Axis video device requests access to the protected network at the network
switch. The switch forwards the video device’s CA certificate to the RADIUS
server, which then replies to the switch.
3. The switch forwards the RADIUS server’s CA certificate to the video device,
which also replies to the switch.
4. The switch keeps track of all responses to the validation requests. If all
certificates are validated, the Axis video device is allowed access to the
protected network via a preconfigured port.