Axis P3925-LRE User Manual page 35

Table of Contents

AXIS P3925-LRE Network Camera

The web interface

Client certificate: Select a client certificate to use IEEE 802.1x. The authentication server uses the certificate to validate the

client's identity.

CA certificate: Select CA certificates to validate the authentication server's identity. When no certificate is selected, the device

tries to authenticate itself regardless of what network it is connected to.

EAP identity: Enter the user identity associated with the client certificate.

EAPOL version: Select the EAPOL version that is used in the network switch.

Use IEEE 802.1x: Select to use the IEEE 802.1x protocol.

Prevent brute-force attacks

Blocking: Turn on to block brute-force attacks. A brute-force attack uses trial-and-error to guess login info or encryption keys.

Blocking period: Enter the number of seconds to block a brute-force attack.

Blocking conditions: Enter the number of authentication failures allowed per second before the block starts. You can set the

number of failures allowed both on page level and device level.

IP address filter

Use filter: Select to filter which IP addresses are allowed to access the device.

Policy: Choose whether to Allow or Deny access for certain IP addresses.

Addresses: Enter the IP numbers that are either allowed or denied access to the device. You can also use the CIDR format.

Custom-signed firmware certificate

To install test firmware or other custom firmware from Axis on the device, you need a custom-signed firmware certificate. The

certificate verifies that the firmware is approved by both the device owner and Axis. The firmware can only run on a specific

device which is identified by its unique serial number and chip ID. Only Axis can create custom-signed firmware certificates,

since Axis holds the key to sign them.

Install: Click to install the certificate. You need to install the certificate before you install the firmware.

Accounts

Add account: Click to add a new account. You can add up to 100 accounts.

Account: Enter a unique account name.

New password: Enter a password for the account. Passwords must be 1 to 64 characters long. Only ASCII printable characters

(code 32 to 126) are allowed in the password, for example, letters, numbers, punctuation, and some symbols.

Repeat password: Enter the same password again.

Privileges:

• Administrator: Has full access to all settings. Administrators can also add, update, and remove other accounts.

• Operator: Has access to all settings except:

• Viewer: Has access to:

All System settings.

Adding apps.

Watch and take snapshots of a video stream.

Table of Contents