Network Tab
Use the Network tab to change the camera’s general network settings, select the Secure Sockets Layer (SSL) settings, enable Secure Shell (SSH), configure 802.1x port security, and select Simple Network Management Protocol (SNMP) settings.
General Network Settings
The general network settings page includes configurable and read-only fields for IPv4 and IPv6 network communication settings. The port settings determine the ports over which the camera communicates using HTTP, HTTPS, and RTSP protocols. The hardware address is read-only.
The general network settings page includes configurable and read-only fields for IPv4 and IPv6 network communication settings. Available settings include the hardware address, host name, IPv4 settings, and IPv6 settings. The hardware address is read-only.
IPv4 settings must be configured for the device. You can enable or disable the IPv4 DHCP setting from the general network settings page. If DHCP is set to On, the IP address, subnet mask, gateway, and DNS server settings are automatically assigned to the device and are read-only text. If
DHCP is set to Off, these settings must be manually configured. The default camera setting for DHCP is On.
SSL Settings
The SSL settings page includes SSL configuration modes and certificate generation. To ensure security on the Internet, all Web browsers provide several security levels that can be adjusted for sites that use SSL technology to transmit data. SSL encrypts communications, making it difficult for unauthorized users to intercept and view user names and passwords.
SSL requires signed certificates to determine if the Web browser accessing the camera has the required authentication. The camera can generate a certificate signing request (CSR) that can be sent to a certificate authority for a signature (for example, VeriSign ® ), or it can generate a self-signed certificate using the Generate Self-Signed Certificate option.
SSH Settings
The SSH settings page enables or disables SSH access to the camera. SSH is a user-enabled protocol that allows Pelco Product Support to log on to and service the camera for advanced troubleshooting purposes. From the SSH settings page, users with the appropriate permissions can enable or disable SSH access to the camera.
802.1x Settings
The 802.1x settings page enables or disables 802.1x port security, which authenticates devices that want to establish a point-to-point access through a wired or wireless port using Extensible Authentication Protocol (EAP) protocols. This port-based authentication method prevents unauthorized access to a Local Area Network (LAN) through a physical port. For example, when a device is connected to a network port, the network switch asks the device for authentication. The device replies with its credentials. If the credentials are accepted, the network switch opens the port for normal use. If authentication fails, the device is prevented from accessing information on the port.
SNMP Settings
The SNMP setting page includes SNMP configuration settings. SNMP is an application layer protocol used to manage TCP/IP-based networks from a single workstation or several workstations. The camera supports SNMP v2c and v3 and can be configured to send traps.
C1327M-A (5/13) 21
CHANGING THE HOSTNAME
1. Place your mouse pointer over the Network tab.
2. Select General from the drop-down menu.
3. View the read-only hardware address.
4. Click the Hostname box and highlight the text.
5. Type a user-friendly name into the Hostname box (1 to 21 characters) using alphanumeric characters. A user-friendly name makes it easier to recognize the device on the network. Numeric-only names are not allowed.
6. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
CONFIGURING THE HTTP PORT
NOTE: The HTTP port number must remain at the default setting of 80 when connecting to a Pelco video management system (VMS). If you are connecting to a Pelco VMS, do not change the HTTP port setting.
1. Place your mouse pointer over the Network tab.
2. Select General from the drop-down menu.
3. Click the HTTP Port box and highlight the text.
4. Type a new port number for HTTP communications. The default setting is 80.
NOTE: Contact your network administrator before changing port settings to ensure they do not conflict with your network infrastructure.
5. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
CONFIGURING THE HTTPS PORT
NOTE: Before configuring the HTTPS port, set the SSL configuration mode to either Optional or Required and install a security certificate.
1. Place your mouse pointer over the Network tab.
2. Select General from the drop-down menu.
3. Click the HTTPS Port box and highlight the text.
4. Type a new port number for HTTPS communications. The default setting is 443.
NOTE: Contact your network administrator before changing port settings to ensure they do not conflict with your network infrastructure.
5. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
CONFIGURING THE RTSP PORT
NOTE: The camera uses the RTSP protocol to communicate with a video management system (VMS). Do not change the RTSP port unless you are sure your VMS does not use the default RTSP port.
1. Place your mouse pointer over the Network tab.
2. Select General from the drop-down menu.
3. Click the RTSP Port box and highlight the text.
4. Type a new port number for RTSP communications. The default setting is 554.
NOTE: Contact your network administrator before changing port settings to ensure they do not conflict with your network infrastructure.
5. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
22 C1327M-A (5/13)
TURNING ON DHCP
The default Dynamic Host Configuration Protocol (DHCP) setting for the camera is DHCP On. If DHCP is set to Off, complete the following steps to reset it to On.
1. Place your mouse pointer over the Network tab.
2. Select General from the drop-down menu.
3. Select On for DHCP.
4. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
NOTE: If the camera is not connected to a DHCP server but DHCP is set to On, the default IP address 192.168.0.20 on subnet mask 255.255.255.0 is automatically assigned to the camera. After the first camera is connected and assigned the default IP address, the system automatically looks for other cameras on the auto IP address system and assigns IP addresses in sequential order as required. For example, if three cameras are connected to a network without a DHCP server, the first camera is assigned address 192.168.0.20, the second camera is assigned address
192.168.0.21, and the third camera is assigned address 192.168.0.22.
CONFIGURING A STATIC IPV4 ADDRESS
WARNING: Contact your network administrator to avoid any network conflicts before setting or changing the IP address of the device.
1. Place your mouse pointer over the Network tab.
2. Select General from the drop-down menu.
3. Select Off for the Dynamic Host Configuration Protocol (DHCP).
4. Change the following network settings as required:
IP Address: The address of the camera connected to the network.
Subnet Mask: The address that determines the IP network to which the camera is connected (relative to its address).
Gateway: The router that accesses other networks.
DNS Servers: The addresses of the dedicated servers that translate the names for Web sites and host names into numeric IP addresses.
5. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
CONFIGURING IPV6 ADDRESS SETTINGS
Your Sarix device supports IPv6 network configurations in conjunction with IPv4 configurations; the device does not support IPv6-only network applications and will accept up to sixteen IPv6 addresses, three IPv6 DNS servers, and three IPv6 gateways.
There are two configuration modes for IPv6 address assignments:
Auto: Enables automatic configuration using router advertisement. Additional configuration can be provided over DHCPv6 (if available on your network). Selecting Auto mode still allows you to manually configure additional IPv6 addresses, DNS servers, and gateways.
Manual Only: Provides a link-local IPv6 address for the device and allows you to assign up to 16 static IPv6 addresses to the device.
1. Place your mouse pointer over the Network tab.
2. Select General from the drop-down menu.
3. Select On for IPv6.
4. Select a Configuration Mode from the drop-down box. Selecting Auto allows the device to configure the remaining IPv6 settings automatically, rendering the remaining steps optional.
5. (Optional) Provide static, unicast addresses in the Manual IP Addresses box. Each address requires a prefix, and it must be input using the format prefix/IPv6Address. Manual IP addresses without prefix information will be rejected.
6. (Optional) Provide the addresses of DNS servers that are not configured automatically in the Manual DNS Servers box.
C1327M-A (5/13) 23
7. (Optional) Provide the addresses of gateways that are not configured automatically in the Manual Gateways box.
NOTES:
• The device will not accept multicast, localhost, or undefined IPv6 addresses.
• Link-local addresses are not supported for DNS.
• Manually specified DNS servers supersede automatically discovered DNS servers.
• Manually specified DNS servers are not validated by the device; verify any manually specified DNS servers before saving IPv6 settings.
• Manually specified gateways must be on the same network as the devices’s IPv6 addresses. Behavior for a gateway that is not on the same network as the device’s IPv6 addresses is undefined.
• Some video management systems (VMS), including Pelco VMS systems, do not support connections to cameras and encoders over IPv6.
24 C1327M-A (5/13)
SELECTING THE SECURE SOCKETS LAYER MODE
1. Place your mouse pointer over the Network tab.
2. Select SSL from the drop-down menu.
3. Select one of the following modes:
Disabled: Turns off access to the Web client through SSL. Sensitive data is not encrypted during transmission. The default setting is disabled.
NOTE: If the SSL mode is set to disabled, you cannot access the camera using a URL that begins with an “https:” protocol. Your Web browser displays an error message if you do not type the camera URL correctly.
Optional: A signed SSL certificate must be installed, but a secure URL that begins with the protocol name “https:” is optional when accessing the camera. You can also access the camera using a standard URL with the “http:” protocol, but sensitive data is not encrypted during transmission. To ensure that sensitive data is encrypted, you must use a secure URL with the “https:” protocol.
Required: A signed Secure Sockets Layer (SSL) certificate must be installed, and a secure URL that begins with the protocol name “https:” must be used to access the camera. Sensitive data is always encrypted during transmission. A URL that begins with the “http:” protocol rather than the “https:” protocol is redirected to the secure URL automatically.
NOTE: Beginning with firmware version 1.8.2, this mode cannot be modified in the Web browser. To select or clear the Required mode, you must use the ONVIF or Pelco API call. Doing so avoids placing the camera into a mode in which it would no longer work with a connected
VMS system.
GENERATING A CERTIFICATE REQUEST
1. Place your mouse pointer over the Network tab.
2. Select SSL from the drop-down menu.
3. Click the Install New Certificate button located at the bottom of the SSL Configuration page. The Select Certificate Install Method buttons appear on the page.
4. Select Generate Certificate Request, and then click Next. The Generate Certificate Signing Request form opens.
5. Fill in all of the fields, and then click Generate Request. The following progress message appears on the page: “Generating certificate signing request, please wait.”
6. Send the CSR, which looks like an encrypted block of undecipherable text, to a third-party certificate authority of your choice for a signature. You will receive a signed certificate.
7. Click Choose File and browse to locate the certificate on your computer.
8. Click Open once you locate and select the certificate.
9. Click Upload Certificate to upload the signed certificate to the device.
10. After the certificate is uploaded, select the desired mode.
11. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
NOTE: Depending on the third-party certificate authority that signed your certificate, you might need to renew your certificate after a specified amount of time. Consult the certificate authority for more details.
C1327M-A (5/13) 25
GENERATING A SELF-SIGNED CERTIFICATE
1. Place your mouse pointer over the Network tab.
2. Select SSL from the drop-down menu.
3. Click the Install New Certificate button located at the bottom of the SSL Configuration page. The Select Certificate Install Method buttons appear on the page.
4. Select Generate Self-signed Certificate and then click Next. The Generate Self-signed Certificate form opens.
5. Fill in all of the fields, and then click the Generate Certificate button.
6. After the certificate is uploaded to the device, select the desired mode.
7. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
NOTE: Self-signed certificates are valid for one year. The certificate’s expiration date is listed in the “Valid from” and To fields in the Certificate section of the window. If the certificate has expired and you attempt to access the camera using a secure URL, the Web browser displays a message. Repeat this procedure to generate and upload a new certificate.
ENABLING SECURE SHELL
1. Place your mouse pointer over the Network tab.
2. Select SSH from the drop-down menu.
3. Select the Enabled check box.
4. Click the Password box and type a password (4 to 16 alphanumeric characters). Passwords are case-sensitive.
NOTE: The default user name is “root” and cannot be changed. The user name and password are required when accessing the camera through a third-party SSH client.
5. Click the “Re-type Password” box and retype your password.
6. Click the Save button to save the password and enable SSH, or click the Reset button to clear all of the information you entered without saving it.
CONFIGURING THE 802.1X PORT SECURITY SETTING
WARNING: To prevent network conflicts, contact your network administrator before configuring the 802.1x port security settings.
1. Place your mouse pointer over the Network tab.
2. Select 802.1x from the drop-down menu.
3. Select On for the 802.1x port security. The default setting for 802.1x port security is Off.
4. Select the Extensible Authentication Protocol (EAP) method from the Protocol drop-down menu. Supported EAP methods include EAP-MD5,
EAP-TLS, EAP-TTLS, EAP-PEAP, and EAP-FAST.
5. Type the information required for the selected 802.1x EAP method.
6. Connect the PC to a 802.1x secured switch that has the same EAP method.
7. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
26 C1327M-A (5/13)
SELECTING SNMP SETTINGS
WARNING: The Simple Network Management Protocol (SNMP) settings are advanced controls. Contact your network administrator to obtain the required information to configure SNMP settings.
1. Place your mouse pointer over the Network tab.
2. Select SNMP from the drop-down menu.
3. Select the SNMP version to configure: SNMP V2c or SNMP V3. The default setting is No SNMP Server, which disables the SNMP configuration.
NOTE: SNMP V2c and SNMP V3 configuration settings are independent of each other, but only one SNMP version can be active at a time.
CONFIGURING SNMP V2C
1. Place your mouse pointer over the Network tab.
2. Select SNMP from the drop-down menu.
3. Select SNMP V2c for the SNMP version.
4. Type the community name in the Community String box. The default name for the Community String is ”public.”
5. Configure the Trap Configuration settings:
Address: Type the host name or IP address of the trap server.
Community String: Type the community name for the trap server.
6. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
CONFIGURING SNMP V3
1. Place your mouse pointer over the Network tab.
2. Select SNMP from the drop-down menu.
3. Select SNMP V3 for the SNMP version.
4. Type the SNMP user name in the SNMP user box.
5. Select the encryption algorithm for authentication from the Authentication drop-down menu: None, MD5, or SHA. If you use authentication method MD5 or SHA, type a password in the box to the right of the selected Authentication encryption.
6. Select the privacy encryption algorithm setting from the Privacy drop-down menu: None, DES, or AES. If you use privacy method DES or
AES, type a password in the Privacy text box.
7. Type the host name or IP address of the trap server in the Address box under Trap Configuration.
8. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
C1327M-A (5/13) 27
