Table of Contents  MOBOTIX Online Help

The Ethernet Interface

Table of Contents
The Ethernet Interface
Quick Installation
The Ethernet Interface Dialog
General Interface Setup
IPv4 Ethernet Parameters
IPv6 Ethernet Parameters
Ethernet Hardware Options
Routing
Domain Name Service (DNS)
Zeroconf
IEEE 802.1X

Your MOBOTIX camera is equipped with an integrated 10/100 Mbps Ethernet interface to connect the camera to local networks.

From the factory, the camera is pre-configured for a class A subnet:

IP Address:

10.x.x.x

Subnet mask:

255.0.0.0

Quick Installation

The Quick Installation wizard is the easiest and most secure way for initially configuring the camera. It is performed automatically when the Admin Menu is opened for the first time.

Once you have selected the language, this wizard helps to configure the following basic settings:

Note

Depending on the settings you have selected, not all dialogs mentioned above will be displayed.

The Ethernet Interface Dialog

It is recommended that you use the Ethernet Interface dialog only if you feel comfortable with the terms and services involved. Invalid entries may render your camera unreachable!

General Interface Setup

Parameter

Description

Ethernet

Enable/disable the Ethernet interface. The factory default setting is On.

Camera Name

You can assign a host name to the camera that should describe e.g. the camera's location in more detail. Using this name, it is easy to identify a specific camera (e.g. when configuring a MultiView screen).

Note

In order to access the camera on your local network using its host name, a DNS service needs to be available and a DNS server has to be specified.

BOOTP/DHCP

Provided these services are available on your network, the camera can use them to automatically obtain its network configuration. Ask your network administrator whether these services are available. If the configuration using BOOTP/DHCP has been successful, all other settings in the menu are ignored. If the configuration using BOOTP/DHCP fails, your settings or the factory default settings are used.

IPv4 Ethernet Parameters

Parameter

Description

Additional IPv4 Address

The camera can manage two different network configurations. If you configure your camera for your network, select On in order to store the factory default configuration as alias configuration. This will ensure that you can still access the camera using the factory default IP address.

Note

Note that you cannot configure the second IP address; it is always the factory default IP address of the camera.

IP Address

You can access the camera in the network via its IP address. Ask your network administrator for a suitable IP address.

Network Mask

In order for computers to be able to communicate in a network, the IP address needs to be assigned a matching network mask. Again, it is your network administrator who will tell you which network mask to use.

Lower Limit of DHCP Range

If the camera's DHCP server feature has been activated, it automatically assigns up to 150 IP addresses to other devices. Enter the first (lowest) IP address in this field. Make sure that you follow these rules:

  • The lower limit has to be in the same subnet as the camera. The subnet is determined by the IP address and the network mask.

  • The lower limit must not be the lowest address of the subnet (i.e., the address of the network).

  • The lower limit must not be the broadcast (highest) address of the subnet.

  • The lower limit has be lower than the upper limit.

  • The IP address of the camera must not be within the range of leased addresses [lower limit; upper limit].

Upper Limit of DHCP Range

If the camera's DHCP server feature has been activated, it automatically assigns up to 150 IP addresses to other devices. Enter the last (highest) IP address in this field. Make sure that you follow these rules:

  • The upper limit has to be in the same subnet as the camera. The subnet is determined by the IP address and the network mask.

  • The upper limit must not be the lowest address of the subnet (i.e., the address of the network).

  • The upper limit must not be the broadcast (highest) address of the subnet.

  • The upper limit has be higher than the lower limit.

  • The IP address of the camera must not be within the range of leased addresses [lower limit; upper limit].

IPv6 Ethernet Parameters

Parameter

Description

IPv6 Operating Mode

Determines whether or not the camera should use IPv6 connections. In Auto mode, the camera automatically obtains an address from a router in the network. The obtained address is usually created on the base of the camera's MAC address.

IPv6 Address

Manually assigned IPv6 address of the camera. Usually, the IPv6 address of the camera is assigned automatically. Ask your network administrator for an IPv6 address that you can use. If no other address has been assigned, the camera by factory default uses a local IPv6 address in the form of fd00::10.x.y.z.

Prefix-Length

This parameter sets the size of the network of an IPv6 address (similar to the network mask of an IPv4 address). Ask your network administrator for the proper value.

Ethernet Hardware Options

Parameter

Description

Power Supply

Power to the camera is usually supplied via the network cabling (Power-over-Ethernet). The selected PoE class of the camera also controls the power supply of the PoE switch. This setting also controls the power supply of the expansion modules attached to the camera.

When using PoE Class 2, for example, you can connect only one expansion module (MxBus) to the camera. If you would like to connect more than one expansion module, you need to set the camera to PoE Class 3.

Click on Change to start the Power over Ethernet (PoE) wizard. This wizard shows additional information and will guide you through the process step by step.

Caution

If the total power consumption of the camera and attached modules exceeds the power provided by the switch for the selected class, the switch can disconnect the camera from the power supply. In this case, you need to remove all connected modules, reboot the camera and select a higher PoE class before you try to reconnect the MxBus modules!

Link Speed and Duplex

This parameter should be left at its default setting in order to guarantee the best connection quality for this camera and software version. When connection problems with a switch occur, you can try to see if a different setting produces better results.

Routing

Parameter

Description

Default Route and Gateway IP Address

A gateway acts a relay between individual networks and it coordinates the data traffic between these networks. The default route sets the gateway that is to be used if no other gateway has been specified for a special route.

Domain Name Service (DNS)

Parameter

Description

DNS Servers

In some dialogs (e.g. FTP Profiles), you can replace the IP address by a symbolic name (e.g. ftp.mycompany.com). In order for symbolic names to be transformed to IP addresses, at least one DNS server has to be registered. In the Quick Installation wizard, you can select a DNS server or enter a DNS server of your Internet provider.

Domain

If you enter the host name without the domain name, the camera will automatically add the domain name specified here.

Zeroconf

Parameter

Description

Zeroconf

Activates the camera features for automatically finding other network devices using Zeroconf (also called "Bonjour"). This service provides a means for network devices in a local network to communicate with one another without requiring centralized management if IP addresses, names, etc. In addition, these devices announce the services they provide within the network.

This feature also means that the camera activates a Multicast DNS service and publishes a service directory. These functions are independent of specifying a DNS servers in the Domain Name Service (DNS) section further above.

Zeroconf Name

Enter a name in this field if you would like the camera to use a Zeroconf/Bonjour name that is different from the Camera Name defined at the beginning of the dialog.

IEEE 802.1X

This international standard is used for port-based network access control (NAC). This procedure requires that all network devices (i.e., also the MOBOTIX camera) need to authenticate themselves at the switch to obtain a network connection. Network devices without proper authentication will be rejected.

Parameter

Description

IEEE 802.1X

Activates the camera as IEEE 802.1X supplicant with the specified authentication procedure.

Ask your network administrator whether IEEE 802.1X is supported or required. Make sure that the switch to which the camera is connected (authenticator) has been configured accordingly. In general, the switch (authenticator) also needs an authentication server, such as a RADIUS server. The authentication procedure is controlled by the authentication server. Make sure that the camera and the authentication server always use the same procedure.

Identity

The IEEE 802.1X network identifier or the name of the local network, to which the camera is connected.

User Name

The user name of the camera at the authentication server (only required for the EAP-MD5, EAP-PEAP and all variants of EAP-TTLS; EAP-TLS does not need a user name).

Password

The password of the camera at the authentication server (only required for the EAP-MD5, EAP-PEAP and all variants of EAP-TTLS; EAP-TLS does not need a user name).

CA X.509 certificate

This X.509 root certificate is needed to verify the X.509 certificate of the Authentication Server (required by all authentication procedures except EAP-MD5).

If there already is an X.509 root certificate in the camera, the relevant data ("issuer", "subject", validity) are shown in the comment next to the dialog box. This X.509 root certificate, the supplicant X.509 certificate and the corresponding private key will be deleted from the camera if you deactivate IEEE 802.1X.

Supplicant X.509 certificate

This is the X.509 user certificate of the camera (only required for the EAP-TLS authentication procedure).

If there already is a supplicant X.509 certificate in the camera, the relevant data ("issuer", "subject", validity) are shown in the comment box. This X.509 root certificate, the supplicant X.509 certificate and the corresponding private key will be deleted from the camera if you deactivate IEEE 802.1X.

Supplicant X.509 private key

This is the private key of the camera (only required for the EAP-TLS authentication procedure).

This X.509 root certificate, the supplicant X.509 certificate and the corresponding private key will be deleted from the camera if you deactivate IEEE 802.1X.

Supplicant X.509 private key, passphrase

Contains the passphrase of the camera's private key. (Only used by the EAP-TLS authentication procedure.)

Contact your network administrator to obtain the required information regarding IEEE 802.1X. Note, that it is not possible to create the certificates required for all authentication procedures within the camera itself (exception: EAP-MD5).

When using IEEE 802.1X in an installation, it is recommended to assign individual user names and passwords/X.509 user certificates for every network device.

If you are using the same user name and password or X.509 user certificate for every network device, one stolen device will compromise the security of the whole network. In this case, you would have to exchange the authentication information on all remaining network devices. If every network device uses individual authentication information, you can lock the authentication information of the stolen device on the authentication server. Reconfiguring the remaining devices is thus not required.

Note

The EAP-MD5 authentication procedure is considered insecure and should not be used.


Storing the Configuration

Click on the Set button to activate your settings and to save them until the next reboot of the camera.

Click on the Factory button to load the factory defaults for this dialog (this button may not be present in all dialogs).

Click on the Restore button to undo your most recent changes that have not been stored in the camera permanently.

Click on the Close button to close the dialog. While closing the dialog, the system checks the entire configuration for changes. If changes are detected, you will be asked if you would like to store the entire configuration permanently.

 In order to enable these settings, you need to store the configuration and reboot the camera!


© 2001-2024 MOBOTIX · https://www.mobotix.com