Axis T8504-E User Manual page 10

AXIS T8504–E Outdoor PoE Switch
Web interface
Network configuration - Go to Network configuration to enable or disable DHCP, configure IPv4, IPv6 and network hostname.
Hostname is used by both IPv4 and IPv6 to register the unit name in DHCPv4/v6 server. Note that IPv6 uses the FQDN terminology
as hostname.
Network services IPv4/IPv6 - Go to Network services IPv4/IPv6 to configure DNS and SysLog servers.
PoE configuration - Go to PoE configuration to configure PoE port power. Four PoE power schemes offer different power
distributions between the four PoE ports. All four options comply with the unit maximum power capacities.
• 60 W: Deliver power over four pairs inside the Ethernet cable. Each pair delivers up to 30 W.
• 30 W: Deliver power over two out of four pairs inside the Ethernet cable
• 15.4 W: Deliver power over two out of four pairs inside the Ethernet cable
• – –: No PoE power. Ethernet port is enabled and functional, but PoE is disabled.
Security
Security configuration
Go to Security configuration to configure the unit username and password for remote web or SSH access.
Note
Only ASCII characters 33–90 and 94–122 can be used for the username and password fields.
HTTPS
Go to HTTPS to configure whether HTTP or HTTPS (secured web) should be used. When HTTPS is enabled, TLSv1.2 is used to encrypt
web network traffic.
Note
To eliminate web browser warning whenever accessing the unit over HTTPS, add an exception rule to the web browser telling
the web browser that the website is legitimate or upload a unit self-signed/CA-signed certificate.
RADIUS/TACACS+
RADIUS/TACACS+ enables remote user authentication when user accesses the unit over web or SSH. Username and password are then
authenticated by the RADIUS/TACACS+ server.
The advantages with RADIUS/TACACS+ is that username and password are easy to update, especially if many network devices
are to be managed.
The disadvantage with RADIUS/TACACS+ is that the unit is not accessible if both RADIUS/TACACS+ servers are down. It is possible
to enable Local login fallback which allows the unit to use its local username and password whenever there is no reply from
RADIUS/TACACS+ servers.
RADIUS/TACACS+ common parameters
Parameter
Enable authentication
Enable local login fallback
Authentication protocol
Shared secret
Description
Configure if RADIUS/TACACS+ should be enabled or disabled. When RADIUS/TACACS+ is disabled,
local username and password are used.
When local login fallback is enabled, local username and password are used whenever there is no
reply from RADIUS/TACACS+ servers. This can happen when the servers are down or in case of
a network problem.
Select either RADIUS or TACACS+ authentication protocol.
The same private key string must be configured on both the unit and the RADIUS/TACACS+ server.
10