Vivotek FD8167 User Manual page 100

VIVOTEK
Security > IEEE 802.1X
Enable this function if your network environment uses IEEE 8021x, which is a port-based network
access control The network devices, intermediary switch/access point/hub, and RADIUS server
must support and enable 8021x settings
The 8021x standard is designed to enhance the security of local area networks, which provides
authentication to network devices (clients) attached to a network port (wired or wireless) If all
certificates between client and server are verified, a point-to-point connection will be enabled; if
authentication fails, access on that port will be prohibited 8021x utilizes an existing protocol, the
Extensible Authentication Protocol (EAP), to facilitate communication
■
The components of a protected network with 802.1x authentication:
Supplicant
(Network Camera)
1
Supplicant: A client end user (camera), which requests authentication
2
Authenticator (an access point or a switch): A "go between" which restricts unauthorized end
users from communicating with the authentication server
3
Authentication server (usually a RADIUS server): Checks the client certificate and decides
whether to accept the end user's access request
■
VIVOTEK Network Cameras support two types of EAP methods to perform authentication: EAP-
PEAP and EAP-TLS
Please follow the steps below to enable 802.1x settings:
1 Before connecting the Network Camera to the protected network with 8021x, please apply
a digital certificate from a Certificate Authority (ie, your network administrator) which can be
validated by a RADIUS server
2 Connect the Network Camera to a PC or notebook outside of the protected LAN Open the
configuration page of the Network Camera as shown below. Select EAP-PEAP or EAP-TLS as
the EAP method In the following blanks, enter your ID and password issued by the CA, then
upload related certificate(s).
100 - User's Manual
Authenticator
(Network Switch)
IMPORTANT:
The maximum length of password is 200
symbols
Authentication Server
(RADIUS Server)