Vivotek VS8801 User Manual page 42

VIVOTEK
3. When all settings are complete, move the video server to the protected LAN by connecting it to an
802.1x enabled switch. The devices will then start the authentication automatically.
NOTE:
► The authentication process for 802.1x:
1. The Certificate Authority (CA) provides the required signed certificates to the video server (the
supplicant) and the RADIUS Server (the authentication server).
2. A video server requests access to the protected LAN using 802.1X via a switch (the authenticator).
The client offers its identity and client certificate, which is then forwarded by the switch to the RADIUS
Server, which uses an algorithm to authenticate the video server and returns an acceptance or
rejection back to the switch.
3. The switch also forwards the RADIUS Server's certificate to the video server.
4. Assuming all certificates are validated, the switch then changes the video server's state to authorized
and is allowed access to the protected network via a pre-configured port.
VIVOTEK
Video Server
42 - User's Manual
Certificate Authority
(CA)
1
Certificate
2
Network Switch
1
Certificate
4
RADIUS Server
3
Protected LAN