Axis A1214 Network Door Controller Kit User Manual

AXISA1214NetworkDoorControllerKit

Usermanual

AXISA1214NetworkDoorControllerKit

TableofContents

Solutionoverview...........................................3

Productoverview...........................................4

Productcomponents.........................................5

Installation................................................6

AXISA1210-Busermanual...................................7

Getstarted................................................8

Findthedeviceonthenetwork....................................8

Openthedevice'swebinterface....................................8

Createanadministratoraccount...................................8

Securepasswords...............................................8

Verifythatnoonehastamperedwiththermware....................9

Webinterfaceoverview..........................................9

Installation................................................10

Congureyourdevice........................................11

Thewebinterface...........................................12

Status........................................................12

Accesscontrol..................................................13

System........................................................13

Maintenance...................................................22

Learnmore................................................23

Cybersecurity...................................................

Specications..............................................24

Productoverview................................................

LEDindicators..................................................

Buttons.......................................................

Connectors....................................................

Troubleshooting............................................31

Resettofactorydefaultsettings...................................31

Firmwareoptions...............................................31

Checkthecurrentrmwareversion.................................

Upgradethermware............................................31

Technicalissues,clues,andsolutions................................

Contactsupport.................................................33

AXISA1214NetworkDoorControllerKit

Solutionoverview

ThenetworkdoorcontrollerkitcaneasilybeconnectedtoandpoweredbyyourexistingIPnetworkwithnoneedforspecialcabling.

Eachnetworkdoorcontrollerkitcanpowerandcontroluptoeightreaders.

AXISA1214NetworkDoorControllerKit

Productoverview

Hingepin(2x)

Hinge:left(2x),right(2x)

Cabinetbase

Cableholeandgasket:¾

�

(2x),½

�

(3x)

Drill-out(5x)

Cabinetmountingplate

Screwholeforwallmount(6x)

Hook(4x)

Screwholeforbracketmount(4x)

Knock-out:¾

�

(5x)

Knock-out:¾

�

(8x)

Knock-out:11/2

�

,¾

�

Controllerkitmountingplategroundingpoint

Controllermountingplate(4x)

Doorcontroller(4x)

Controllerkitmountingplate

Cabinetdoor

AXISA1214NetworkDoorControllerKit

Productcomponents

Thedoorcontrollerkitconsistsofthefollowingcomponents:

•4xAXISA1210-BNetworkDoorController

•1xAXISTQ1808-VESurveillanceCabinet

•1xAXISTA1601MountingPlate

AXISA1214NetworkDoorControllerKit

Installation

Towatchthisvideo,gotothewebversionofthisdocument.

help.axis.com/?&piaId=81064&section=solution-overview

AXISA1214NetworkDoorControllerKit

AXISA1210-Busermanual

Note

ThefollowingisabouthowtocongureanduseAXISA1210-BNetworkDoorController.

AXISA1214NetworkDoorControllerKit

Getstarted

Findthedeviceonthenetwork

TondAxisdevicesonthenetworkandassignthemIPaddressesinWindows®,useAXISIPUtilityorAXISDeviceManager.Both

applicationsarefreeandcanbedownloadedfromaxis.com/support.

FormoreinformationabouthowtondandassignIPaddresses,gotoHowtoassignanIPaddressandaccessyourdevice.

Browsersupport

Youcanusethedevicewiththefollowingbrowsers:

Chrome

Firefox

Edge

Safari

Windows

recommended

macOS

recommendedrecommended

Linux

recommendedrecommended

Otheroperatingsystems*

*TouseAXISOSwebinterfacewithiOS15oriPadOS15,gotoSettings Settings

Settings

> >

Safari Safari

Safari

> >

Advanced Advanced

Advanced

> >

Experimental Experimental

Experimental

Features Features

Features

anddisable

NSURLSessionWebsocket.

Ifyouneedmoreinformationaboutrecommendedbrowsers,gotoAXISOSPortal.

Openthedevice'swebinterface

1.OpenabrowserandtypetheIPaddressorhostnameoftheAxisdevice.

IfyoudonotknowtheIPaddress,useAXISIPUtilityorAXISDeviceManagertondthedeviceonthenetwork.

2.Typetheusernameandpassword.Ifyouaccessthedeviceforthersttime,youmustcreateanadministratoraccount.See

Createanadministratoraccountonpage8.

Createanadministratoraccount

Thersttimeyoulogintoyourdevice,youmustcreateanadministratoraccount.

1.Enterausername.

2.Enterapassword.SeeSecurepasswordsonpage8.

3.Re-enterthepassword.

4.ClickAdduser.

Important

Thedevicehasnodefaultaccount.Ifyoulosethepasswordforyouradministratoraccount,youmustresetthedevice.See

Resettofactorydefaultsettingsonpage31.

Securepasswords

Important

Axisdevicessendtheinitiallysetpasswordincleartextoverthenetwork.Toprotectyourdeviceaftertherstlogin,set

upasecureandencryptedHTTPSconnectionandthenchangethepassword.

AXISA1214NetworkDoorControllerKit

Getstarted

Thedevicepasswordistheprimaryprotectionforyourdataandservices.Axisdevicesdonotimposeapasswordpolicyasthey

maybeusedinvarioustypesofinstallations.

Toprotectyourdatawestronglyrecommendthatyou:

•Useapasswordwithatleast8characters,preferablycreatedbyapasswordgenerator.

•Don’texposethepassword.

•Changethepasswordatarecurringinterval,atleastonceayear.

Verifythatnoonehastamperedwiththermware

TomakesurethatthedevicehasitsoriginalAxisrmware,ortotakefullcontrolofthedeviceafterasecurityattack:

1.Resettofactorydefaultsettings.SeeResettofactorydefaultsettingsonpage31.

Afterthereset,securebootguaranteesthestateofthedevice.

2.Congureandinstallthedevice.

Webinterfaceoverview

Thisvideogivesyouanoverviewofthedevice’swebinterface.

Towatchthisvideo,gotothewebversionofthisdocument.

help.axis.com/?&piaId=81064&section=web-interface-overview

Axisdevicewebinterface

AXISA1214NetworkDoorControllerKit

Installation

Towatchthisvideo,gotothewebversionofthisdocument.

help.axis.com/?&piaId=81064&section=solution-overview

AXISA1214NetworkDoorControllerKit

Conﬁgureyourdevice

Forhowtocongureyourdevice,seeAXISCameraStationusermanualorthird-partysolutions.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Toreachthedevice’swebinterface,typethedevice’sIPaddressinawebbrowser.

Note

Supportforthefeaturesandsettingsdescribedinthissectionvariesbetweendevices.Thisicon

indicatesthat

thefeatureorsettingisonlyavailableinsomedevices.

Showorhidethemainmenu.

Accessthereleasenotes.

Accesstheproducthelp.

Changethelanguage.

Setlightthemeordarktheme.

Theusermenucontains:

•Informationabouttheuserwhoisloggedin.

•

Changeaccount:Logoutfromthecurrentaccountandlogintoanewaccount.

•

Logout:Logoutfromthecurrentaccount.

Thecontextmenucontains:

•Analyticsdata:Accepttosharenon-personalbrowserdata.

•Feedback:Shareanyfeedbacktohelpusimproveyouruserexperience.

•Legal:Viewinformationaboutcookiesandlicenses.

•About:Viewdeviceinformation,includingrmwareversionandserialnumber.

•Legacydeviceinterface:Changethedevice’swebinterfacetothelegacyversion.

Status

Timesyncstatus

ShowsNTPsynchronizationinformation,includingifthedeviceisinsyncwithanNTPserverandthetimeremaininguntil

thenextsync.

NTPsettings:ViewandupdatetheNTPsettings.TakesyoutotheDateandtimepagewhereyoucanchangetheNTPsettings.

Deviceinfo

Showsthedeviceinformation,includingrmwareversionandserialnumber.

Upgradermware:Upgradethermwareonyourdevice.TakesyoutotheMaintenancepagewhereyoucandoarmware

upgrade.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Accesscontrol

Alarms

Devicemotion:Turnontotriggeranalarminyoursystemwhenitdetectsamovementofthedoorcontroller.

Casingopen:Turnontotriggeranalarminyoursystemwhenitdetectsanopendoorcontrollercase.Turnoffthissettingfor

barebonedoorcontrollers..

Externaltamper:Turnontotriggeranalarminyoursystemwhenitdetectsanexternaltamper.Forexample,whensomeone

opensorclosestheexternalcabinet.

•Supervisedinput:Turnontomonitortheinputstateandconguretheend-of-lineresistors.

-Touseparallelrstconnection,selectParallelrstconnectionwitha22KΩparallelresistoranda4.7

KΩserialresistor.

-Touseserialrstconnection,selectSerialrstconnectionandselectaresistorvaluefromtheResistor

valuesdrop-downlist.

Peripherals

Upgradereaders:Clicktoupgradereaderstoanewrmwareversion.Thefeaturecanonlyupgradesupportedreaderswhen

theyareonline.

System

Timeandlocation

Dateandtime

Thetimeformatdependsonthewebbrowser’slanguagesettings.

Note

Werecommendyousynchronizethedevice’sdateandtimewithanNTPserver.

Synchronization:Selectanoptionforthedevice’sdateandtimesynchronization.

•Automaticdateandtime(manualNTSKEservers):SynchronizewiththesecureNTPkeyestablishmentservers

connectedtotheDHCPserver.

-ManualNTSKEservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,

thedevicesynchronizesandadaptsitstimebasedoninputfromboth.

•Automaticdateandtime(NTPserversusingDHCP):SynchronizewiththeNTPserversconnectedtotheDHCPserver.

-FallbackNTPservers:EntertheIPaddressofoneortwofallbackservers.

•Automaticdateandtime(manualNTPservers):SynchronizewithNTPserversofyourchoice.

-ManualNTPservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,the

devicesynchronizesandadaptsitstimebasedoninputfromboth.

•Customdateandtime:Manuallysetthedateandtime.ClickGetfromsystemtofetchthedateandtimesettings

oncefromyourcomputerormobiledevice.

Timezone:Selectwhichtimezonetouse.Timewillautomaticallyadjusttodaylightsavingtimeandstandardtime.

Note

Thesystemusesthedateandtimesettingsinallrecordings,logs,andsystemsettings.

Network

IPv4

AXISA1214NetworkDoorControllerKit

Thewebinterface

AssignIPv4automatically:SelecttoletthenetworkrouterassignanIPaddresstothedeviceautomatically.Werecommend

automaticIP(DHCP)formostnetworks.

IPaddress:EnterauniqueIPaddressforthedevice.StaticIPaddressescanbeassignedatrandomwithinisolatednetworks,

providedthateachaddressisunique.Toavoidconicts,werecommendyoucontactyournetworkadministratorbeforeyou

assignastaticIPaddress.

Subnetmask:Enterthesubnetmasktodenewhataddressesareinsidethelocalareanetwork.Anyaddressoutsidethelocal

areanetworkgoesthroughtherouter.

Router:EntertheIPaddressofthedefaultrouter(gateway)usedtoconnectdevicesthatareattachedtodifferentnetworksand

networksegments.

FallbacktostaticIPaddressifDHCPisn’tavailable:SelectifyouwanttoaddastaticIPaddresstouseasfallbackifDHCP

isunavailableandcan’tassignanIPaddressautomatically.

IPv6

AssignIPv6automatically:SelecttoturnonIPv6andtoletthenetworkrouterassignanIPaddresstothedeviceautomatically.

Hostname

Assignhostnameautomatically:Selecttoletthenetworkrouterassignahostnametothedeviceautomatically.

Hostname:Enterthehostnamemanuallytouseasanalternativewayofaccessingthedevice.Theserverreportandsystemlog

usethehostname.AllowedcharactersareA–Z,a–z,0–9and-.

DNSservers

AssignDNSautomatically:SelecttolettheDHCPserverassignsearchdomainsandDNSserveraddressestothedevice

automatically.WerecommendautomaticDNS(DHCP)formostnetworks.

Searchdomains:Whenyouuseahostnamethatisnotfullyqualied,clickAddsearchdomainandenteradomaininwhichto

searchforthehostnamethedeviceuses.

DNSservers:ClickAddDNSserverandentertheIPaddressoftheDNSserver.ThisprovidesthetranslationofhostnamestoIP

addressesonyournetwork.

HTTPandHTTPS

HTTPSisaprotocolthatprovidesencryptionforpagerequestsfromusersandforthepagesreturnedbythewebserver.Theencrypted

exchangeofinformationisgovernedbytheuseofanHTTPScerticate,whichguaranteestheauthenticityoftheserver.

TouseHTTPSonthedevice,youmustinstallanHTTPScerticate.GotoSystem>Securitytocreateandinstallcerticates.

Allowaccessthrough:SelectifauserisallowedtoconnecttothedevicethroughtheHTTP,HTTPS,orbothHTTPandHTTPS

protocols.

Note

IfyouviewencryptedwebpagesthroughHTTPS,youmightexperienceadropinperformance,especiallywhenyou

requestapageforthersttime.

HTTPport:EntertheHTTPporttouse.Thedeviceallowsport80oranyportintherange1024-65535.Ifyouareloggedinasan

administrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.

HTTPSport:EntertheHTTPSporttouse.Thedeviceallowsport443oranyportintherange1024-65535.Ifyouareloggedinas

anadministrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.

Certicate:SelectacerticatetoenableHTTPSforthedevice.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Networkdiscoveryprotocols

Bonjour

:Turnontoallowautomaticdiscoveryonthenetwork.

Bonjourname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.

UPnP

:Turnontoallowautomaticdiscoveryonthenetwork.

UPnPname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.

WS-Discovery:Turnontoallowautomaticdiscoveryonthenetwork.

One-clickcloudconnection

One-clickcloudconnection(O3C)togetherwithanO3Cserviceprovideseasyandsecureinternetaccesstoliveandrecordedvideo

fromanylocation.Formoreinformation,seeaxis.com/end-to-end-solutions/hosted-services.

AllowO3C:

•One-click:Thisisthedefaultsetting.PressandholdthecontrolbuttononthedevicetoconnecttoanO3Cservice

overtheinternet.YouneedtoregisterthedevicewiththeO3Cservicewithin24hoursafteryoupressthecontrol

button.Otherwise,thedevicedisconnectsfromtheO3Cservice.Onceyouregisterthedevice,Alwaysisenabledand

thedevicestaysconnectedtotheO3Cservice.

•Always:ThedeviceconstantlyattemptstoconnecttoanO3Cserviceovertheinternet.Onceyouregisterthedevice,

itstaysconnectedtotheO3Cservice.Usethisoptionifthecontrolbuttononthedeviceisoutofreach.

•No:DisablestheO3Cservice.

Proxysettings:Ifneeded,entertheproxysettingstoconnecttotheproxyserver.

Host:Entertheproxyserver’saddress.

Port:Entertheportnumberusedforaccess.

LoginandPassword:Ifneeded,enterusernameandpasswordfortheproxyserver.

Authenticationmethod:

•Basic:ThismethodisthemostcompatibleauthenticationschemeforHTTP.It’slesssecurethantheDigestmethod

becauseitsendstheusernameandpasswordunencryptedtotheserver.

•Digest:Thismethodismoresecurebecauseitalwaystransfersthepasswordencryptedacrossthenetwork.

•Auto:Thisoptionletsthedeviceselecttheauthenticationmethoddependingonthesupportedmethods.Itprioritizes

theDigestmethodovertheBasicmethod.

Ownerauthenticationkey(OAK):ClickGetkeytofetchtheownerauthenticationkey.Thisisonlypossibleifthedeviceis

connectedtotheinternetwithoutarewallorproxy.

SNMP

TheSimpleNetworkManagementProtocol(SNMP)allowsremotemanagementofnetworkdevices.

SNMP:SelecttheversionofSNMPtouse.

•v1andv2c:

-Readcommunity:Enterthecommunitynamethathasread-onlyaccesstoallsupportedSNMPobjects.The

defaultvalueispublic.

-Writecommunity:EnterthecommunitynamethathasreadorwriteaccesstoallsupportedSNMPobjects

(exceptread-onlyobjects).Thedefaultvalueiswrite.

-Activatetraps:Turnontoactivatetrapreporting.Thedeviceusestrapstosendmessagesforimportant

eventsorstatuschangestoamanagementsystem.Inthewebinterface,youcansetuptrapsforSNMPv1

andv2c.TrapsareautomaticallyturnedoffifyouchangetoSNMPv3orturnoffSNMP.IfyouuseSNMPv3,

youcansetuptrapsthroughtheSNMPv3managementapplication.

-Trapaddress:EntertheIPaddressorhostnameofthemanagementserver.

-Trapcommunity:Enterthecommunitytousewhenthedevicesendsatrapmessagetothemanagement

system.

AXISA1214NetworkDoorControllerKit

Thewebinterface

-Traps:

-Coldstart:Sendsatrapmessagewhenthedevicestarts.

-Warmstart:SendsatrapmessagewhenyouchangeanSNMPsetting.

-Linkup:Sendsatrapmessagewhenalinkchangesfromdowntoup.

-Authenticationfailed:Sendsatrapmessagewhenanauthenticationattemptfails.

Note

AllAxisVideoMIBtrapsareenabledwhenyouturnonSNMPv1andv2ctraps.Formoreinformation,see

AXISOSPortal>SNMP.

•v3:SNMPv3isamoresecureversion,whichprovidesencryptionandsecurepasswords.TouseSNMPv3,we

recommendyoutoactivateHTTPS,asthepasswordisthensentthroughHTTPS.Thisalsopreventsunauthorized

parties’accesstounencryptedSNMPv1andv2ctraps.IfyouuseSNMPv3,youcansetuptrapsthroughtheSNMPv3

managementapplication.

-Passwordfortheaccount“initial”:EntertheSNMPpasswordfortheaccountnamed“initial”.Althoughthe

passwordcanbesentwithoutactivatingHTTPS,wedon’trecommendit.TheSNMPv3passwordcanonly

besetonce,andpreferablyonlywhenHTTPSisenabled.Oncethepasswordisset,thepasswordeldisno

longerdisplayed.Tosetthepasswordagain,youmustresetthedevicetofactorydefaultsettings.

Connectedclients

Showsthenumberofconnectionsandconnectedclients.

Viewdetails:Viewandupdatethelistoftheconnectedclients.ThelistshowsIPaddress,protocol,port,andPID/Process

ofeachclient.

Security

Certicates

Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:

•Client/servercerticates

Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority(CA).

Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.

•CAcerticates

YoucanuseaCAcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication

serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedCA

certicates.

Theseformatsaresupported:

•Certicateformats:.PEM,.CER,and.PFX

•Privatekeyformats:PKCS#1andPKCS#12

Important

Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.

Filterthecerticatesinthelist.

Addcerticate:Clicktoaddacerticate.

Thecontextmenucontains:

•Certicateinformation:Viewaninstalledcerticate’sproperties.

•Deletecerticate:Deletethecerticate.

•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply

foradigitalidentitycerticate.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Securekeystore:

•Secureelement(CCEAL6+):Selecttousesecureelementforsecurekeystore.

•TrustedPlatformModule2.0(CCEAL4+,FIPS140-2Level2):SelecttouseTPM2.0forsecurekeystore.

IEEE802.1x

IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless

networkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby

anauthenticationserver,typicallyaRADIUSserver(forexample,FreeRADIUSandMicrosoftInternetAuthenticationServer).

Certicates

WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself

regardlessofwhatnetworkitisconnectedto.

Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital

certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).

Toallowthedevicetoaccessanetworkprotectedthroughcerticates,youmustinstallasignedclientcerticateonthedevice.

Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe

client’sidentity.

CAcerticate:SelectCAcerticatestovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice

triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.

EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.

EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.

UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.

Preventbrute-forceattacks

Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.

Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.

Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe

numberoffailuresallowedbothonpagelevelanddevicelevel.

IPaddresslter

Uselter:SelecttolterwhichIPaddressesareallowedtoaccessthedevice.

Policy:ChoosewhethertoAlloworDenyaccessforcertainIPaddresses.

Addresses:EntertheIPnumbersthatareeitherallowedordeniedaccesstothedevice.YoucanalsousetheCIDRformat.

Custom-signedrmwarecerticate

ToinstalltestrmwareorothercustomrmwarefromAxisonthedevice,youneedacustom-signedrmwarecerticate.The

certicateveriesthatthermwareisapprovedbyboththedeviceownerandAxis.Thermwarecanonlyrunonaspecic

devicewhichisidentiedbyitsuniqueserialnumberandchipID.OnlyAxiscancreatecustom-signedrmwarecerticates,

sinceAxisholdsthekeytosignthem.

Install:Clicktoinstallthecerticate.Youneedtoinstallthecerticatebeforeyouinstallthermware.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Accounts

Addaccount:Clicktoaddanewaccount.Youcanaddupto100accounts.

Account:Enterauniqueaccountname.

Newpassword:Enterapasswordfortheaccount.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters

(code32to126)areallowedinthepassword,forexample,letters,numbers,punctuation,andsomesymbols.

Repeatpassword:Enterthesamepasswordagain.

Privileges:

•Administrator:Hasfullaccesstoallsettings.Administratorscanalsoadd,update,andremoveotheraccounts.

•Operator:Hasaccesstoallsettingsexcept:

-AllSystemsettings.

-Addingapps.

•Viewer:Doesn’thaveaccesstochangeanysettings.

Thecontextmenucontains:

Updateaccount:Edittheaccountproperties.

Deleteaccount:Deletetheaccount.Youcan’tdeletetherootaccount.

MQTT

MQTT(MessageQueuingTelemetryTransport)isastandardmessagingprotocolfortheInternetofThings(IoT).Itwasdesignedfor

simpliedIoTintegrationandisusedinawidevarietyofindustriestoconnectremotedeviceswithasmallcodefootprintand

minimalnetworkbandwidth.TheMQTTclientinAxisdevicermwarecansimplifyintegrationofdataandeventsproducedinthe

devicetosystemswhicharenotvideomanagementsoftware(VMS).

SetupthedeviceasanMQTTclient.MQTTcommunicationisbasedontwoentities,theclientsandthebroker.Theclientscan

sendandreceivemessages.Thebrokerisresponsibleforroutingmessagesbetweenclients.

YoucanlearnmoreaboutMQTTinAXISOSPortal.

ALPN

ALPNisaTLS/SSLextensionthatallowsfortheselectionofanapplicationprotocolduringthehandshakephaseoftheconnection

betweentheclientandserver.ThisisusedtoenableMQTTtrafcoverthesameportthatisusedforotherprotocols,suchasHTTP.

Insomecases,theremightnotbeadedicatedportopenforMQTTcommunication.AsolutioninsuchcasesistouseALPNto

negotiatetheuseofMQTTastheapplicationprotocolonastandardport,allowedbytherewalls.

MQTTclient

AXISA1214NetworkDoorControllerKit

Thewebinterface

Connect:TurnonorofftheMQTTclient.

Status:ShowsthecurrentstatusoftheMQTTclient.

Broker

Host:EnterthehostnameorIPaddressoftheMQTTserver.

Protocol:Selectwhichprotocoltouse.

Port:Entertheportnumber.

•1883isthedefaultvalueforMQTToverTCP

•8883isthedefaultvalueforMQTToverSSL

•80isthedefaultvalueforMQTToverWebSocket

•443isthedefaultvalueforMQTToverWebSocketSecure

ALPNprotocol:EntertheALPNprotocolnameprovidedbyyourMQTTbrokerprovider.ThisisonlyapplicablewithMQTToverSSL

andMQTToverWebSocketSecure.

Username:Entertheusernamethattheclientwillusetoaccesstheserver.

Password:Enterapasswordfortheusername.

ClientID:EnteraclientID.Theclientidentierissenttotheserverwhentheclientconnectstoit.

Cleansession:Controlsthebehavioratconnectionanddisconnectiontime.Whenselected,thestateinformationisdiscarded

atconnectanddisconnect.

Keepaliveinterval:Enablestheclienttodetectwhentheserverisnolongeravailablewithouthavingtowaitforthelong

TCP/IPtimeout.

Timeout:Thetimeintervalinsecondstoallowaconnecttocomplete.Defaultvalue:60

Devicetopicprex:UsedinthedefaultvaluesforthetopicintheconnectmessageandLWTmessageontheMQTTclienttab,

andinthepublicationconditionsontheMQTTpublicationtab.

Reconnectautomatically:Specieswhethertheclientshouldreconnectautomaticallyafteradisconnect.

Connectmessage

Speciesifamessageshouldbesentoutwhenaconnectionisestablished.

Sendmessage:Turnontosendmessages.

Usedefault:Turnofftoenteryourowndefaultmessage.

Topic:Enterthetopicforthedefaultmessage.

Payload:Enterthecontentforthedefaultmessage.

Retain:SelecttokeepthestateofclientonthisTopic

QoS:ChangetheQoSlayerforthepacketow.

LastWillandTestamentmessage

TheLastWillTestament(LWT)letsaclientprovideatestamentalongwithitscredentialswhenconnectingtothebroker.Ifthe

clientdisconnectsungracefullyatsomepointlater(maybebecausehispowersourcedied),itcanletthebrokerdeliveramessage

tootherclients.ThisLWTmessagehasthesameformasanordinarymessageandgetsroutedviathesamemechanics.

Sendmessage:Turnontosendmessages.

Usedefault:Turnofftoenteryourowndefaultmessage.

Topic:Enterthetopicforthedefaultmessage.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Payload:Enterthecontentforthedefaultmessage.

Retain:SelecttokeepthestateofclientonthisTopic

QoS:ChangetheQoSlayerforthepacketow.

MQTTpublication

Usedefaulttopicprex:Selecttousethedefaulttopicprex,thatisdenedinthedevicetopicprexintheMQTTclienttab.

Includetopicname:SelecttoincludethetopicthatdescribestheconditionintheMQTTtopic.

Includetopicnamespaces:SelecttoincludeONVIFtopicnamespacesintheMQTTtopic.

Includeserialnumber:Selecttoincludethedevice’sserialnumberintheMQTTpayload.

Addcondition:Clicktoaddacondition.

Retain:DeneswhichMQTTmessagesaresentasretained.

•None:Sendallmessagesasnon-retained.

•Property:Sendonlystatefulmessagesasretained.

•All:Sendbothstatefulandstatelessmessagesasretained.

QoS:SelectthedesiredlevelfortheMQTTpublication.

MQTTsubscriptions

Addsubscription:ClicktoaddanewMQTTsubscription.

Subscriptionlter:EntertheMQTTtopicthatyouwanttosubscribeto.

Usedevicetopicprex:AddthesubscriptionlterasprextotheMQTTtopic.

Subscriptiontype:

•Stateless:SelecttoconvertMQTTmessagesintoastatelessmessage.

•Stateful:SelecttoconvertMQTTmessagesintoacondition.Thepayloadisusedasthestate.

QoS:SelectthedesiredlevelfortheMQTTsubscription.

Accessories

I/Oports

Usedigitalinputtoconnectexternaldevicesthatcantogglebetweenanopenandclosedcircuit,forexample,PIRsensors,door

orwindowcontacts,andglassbreakdetectors.

UsedigitaloutputtoconnectexternaldevicessuchasrelaysandLEDs.YoucanactivateconnecteddevicesthroughtheVAPIX®

ApplicationProgrammingInterfaceorthewebinterface.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Port

Name:Editthetexttorenametheport.

Direction:

indicatesthattheportisaninputport.indicatesthatit’sanoutputport.Iftheportiscongurable,

youcanclicktheiconstochangebetweeninputandoutput.

Normalstate:Click

foropencircuit,andforclosedcircuit.

Currentstate:Showsthecurrentstateoftheport.Theinputoroutputisactivatedwhenthecurrentstateisdifferentfromthe

normalstate.Aninputonthedevicehasanopencircuitwhenit’sdisconnectedorwhenthereisavoltageabove1VDC.

Note

Duringrestart,theoutputcircuitisopen.Whentherestartiscomplete,thecircuitgoesbacktothenormalposition.Ifyou

changeanysettingsonthispage,theoutputcircuitsgobacktotheirnormalpositionsregardlessofanyactivetriggers.

Supervised

:Turnontomakeitpossibletodetectandtriggeractionsifsomeonetamperswiththeconnectiontodigital

I/Odevices.Inadditiontodetectingifaninputisopenorclosed,youcanalsodetectifsomeonehastamperedwithit(thatis,cut

orshorted).Tosupervisetheconnectionrequiresadditionalhardware(end-of-lineresistors)intheexternalI/Oloop.

Logs

Reportsandlogs

Reports

•Viewthedeviceserverreport:Viewinformationabouttheproductstatusinapop-upwindow.TheAccessLogis

automaticallyincludedintheServerReport.

•Downloadthedeviceserverreport:Itcreatesa.ziplethatcontainsacompleteserverreporttextleinUTF–8

format,aswellasasnapshotofthecurrentliveviewimage.Alwaysincludetheserverreport.ziplewhenyou

contactsupport.

•Downloadthecrashreport:Downloadanarchivewithdetailedinformationabouttheserver'sstatus.Thecrashreport

containsinformationthatisintheserverreportaswellasdetaileddebuginformation.Thisreportmightcontain

sensitiveinformationsuchasnetworktraces.Itcantakeseveralminutestogeneratethereport.

Logs

•Viewthesystemlog:Clicktoshowinformationaboutsystemeventssuchasdevicestartup,warnings,andcritical

messages.

•Viewtheaccesslog:Clicktoshowallfailedattemptstoaccessthedevice,forexample,whenawronglogin

passwordisused.

Networktrace

Important

Anetworktracelemightcontainsensitiveinformation,forexamplecerticatesorpasswords.

Anetworktracelecanhelpyoutroubleshootproblemsbyrecordingactivityonthenetwork.

Tracetime:Selectthedurationofthetraceinsecondsorminutes,andclickDownload.

Remotesystemlog

Syslogisastandardformessagelogging.Itallowsseparationofthesoftwarethatgeneratesmessages,thesystemthatstoresthem,

andthesoftwarethatreportsandanalyzesthem.Eachmessageislabeledwithafacilitycode,whichindicatesthesoftware

typegeneratingthemessage,andassignedaseveritylevel.

AXISA1214NetworkDoorControllerKit

Thewebinterface

Server:Clicktoaddanewserver.

Host:EnterthehostnameorIPaddressoftheserver.

Format:Selectwhichsyslogmessageformattouse.

•Axis

•RFC3164

•RFC5424

Protocol:Selecttheprotocolandporttouse:

•UDP(Defaultportis514)

•TCP(Defaultportis601)

•TLS(Defaultportis6514)

Severity:Selectwhichmessagestosendwhentriggered.

CAcerticateset:Seethecurrentsettingsoraddacerticate.

Maintenance

Restart:Restartthedevice.Thisdoesnotaffectanyofthecurrentsettings.Runningapplicationsrestartautomatically.

Restore:Returnmostsettingstothefactorydefaultvalues.Afterwardsyoumustrecongurethedeviceandapps,reinstallany

appsthatdidn’tcomepreinstalled,andrecreateanyeventsandPTZpresets.

Important

Theonlysettingssavedafterrestoreare:

•Bootprotocol(DHCPorstatic)

•StaticIPaddress

•Defaultrouter

•Subnetmask

•802.1Xsettings

•O3Csettings

Factorydefault:Returnallsettingstothefactorydefaultvalues.AfterwardsyoumustresettheIPaddresstomakethedevice

accessible.

Note

AllAxisdevicermwareisdigitallysignedtoensurethatyouonlyinstallveriedrmwareonyourdevice.Thisfurther

increasestheoverallminimumcybersecuritylevelofAxisdevices.Formoreinformation,seethewhitepaper“Signed

rmware,secureboot,andsecurityofprivatekeys”ataxis.com.

Firmwareupgrade:Upgradetoanewrmwareversion.Newrmwarereleasescancontainimprovedfunctionality,bug

xes,andcompletelynewfeatures.Werecommendyoutoalwaysusethelatestrelease.Todownloadthelatestrelease,go

toaxis.com/support.

Whenyouupgrade,youcanchoosebetweenthreeoptions:

•Standardupgrade:Upgradetothenewrmwareversion.

•Factorydefault:Upgradeandreturnallsettingstothefactorydefaultvalues.Whenyouchoosethisoption,youcan’t

reverttothepreviousrmwareversionaftertheupgrade.

•Autorollback:Upgradeandconrmtheupgradewithinthesettime.Ifyoudon’tconrm,thedevicerevertstothe

previousrmwareversion.

Firmwarerollback:Reverttothepreviouslyinstalledrmwareversion.

AXISA1214NetworkDoorControllerKit

Learnmore

Cybersecurity

Signedrmware

Signedrmwareisimplementedbythesoftwarevendorsigningthermwareimagewithaprivatekey.Whenarmwarehasthis

signatureattachedtoit,adevicewillvalidatethermwarebeforeacceptingtoinstallit.Ifthedevicedetectsthatthermware

integrityiscompromised,thermwareupgradewillberejected.

Secureboot

Securebootisabootprocessthatconsistsofanunbrokenchainofcryptographicallyvalidatedsoftware,startinginimmutable

memory(bootROM).Beingbasedontheuseofsignedrmware,securebootensuresthatadevicecanbootonlywithauthorized

rmware.

AxisEdgeVault

AxisEdgeVaultprovidesahardware-basedcybersecurityplatformthatsafeguardstheAxisdevice.Itoffersfeaturestoguaranteethe

device’sidentityandintegrityandtoprotectyoursensitiveinformationfromunauthorizedaccess.Itbuildsonastrongfoundationof

cryptographiccomputingmodules(secureelementandTPM)andSoCsecurity(TEEandsecureboot),combinedwithexpertisein

edgedevicesecurity.

AxisdeviceID

Beingabletoverifytheoriginofthedeviceiskeytoestablishingtrustinthedeviceidentity.Duringproduction,deviceswith

AxisEdgeVaultareassignedaunique,factory-provisioned,andIEEE802.1AR-compliantAxisdeviceIDcerticate.Thisworks

likeapassporttoprovetheoriginofthedevice.ThedeviceIDissecurelyandpermanentlystoredinthesecurekeystoreasa

certicatesignedbyAxisrootcerticate.ThedeviceIDcanbeleveragedbythecustomer’sITinfrastructureforautomatedsecure

deviceonboardingandsecuredeviceidentication

TolearnmoreaboutAxisEdgeVaultandcybersecurityfeaturesinAxisdevices,gotoaxis.com/learning/white-papersandsearchfor

cybersecurity.

AXISA1214NetworkDoorControllerKit

Speciﬁcations

Productoverview

Networkconnector

Groundingposition

Relayjumper

Powerconnector

Relayconnector

Doorconnector

Readerconnector

Auxiliaryconnector

Externalconnectors

Controlbutton

LEDindicators

LED

Color

Indication

Green

Steadyforconnectiontoa100MBit/snetwork.Flashesfornetworkactivity.

Amber

Steadyforconnectiontoa10MBit/snetwork.Flashesfornetworkactivity.

Network

UnlitNonetworkconnection.

AXISA1214NetworkDoorControllerKit

Speciﬁcations

GreenSteadygreenfornormaloperation.

Amber

Steadyduringstartupandwhenrestoringsettings.

Status

Red

Slowashforfailedupgrade.

Green

Normaloperation.

Power

Amber

Flashesgreen/amberduringrmwareupgrade.

Green

Relayactive.

Relay

UnlitRelayinactive.

1.RelayisactivewhenCOMisconnectedtoNO.

Buttons

Controlbutton

Thecontrolbuttonisusedfor:

•Resettingtheproducttofactorydefaultsettings.SeeResettofactorydefaultsettingsonpage31.

Connectors

Networkconnector

RJ45EthernetconnectorwithPoweroverEthernetPlus(PoE+).

UL:PoweroverEthernet(PoE)shallbeoverEthernetIEEE802.3af/802.3atType1Class3orPoweroverEthernetPlus(PoE+)

IEEE802.3atType2Class4powerlimitedinjectorthatprovides44–57VDC,15.4W/30W.PoweroverEthernet(PoE)has

beenevaluatedbyULwithAXIST8133Midspan30W1-port.

Readerconnector

One8-pinterminalblocksupportingbothOSDPandWiegandprotocolsforcommunicationwiththereader.

ItcanconnectuptotwoOSDPreaders(multi-drop)oroneWiegandreader.500mAat12VDCisreservedforallreadersconnected

tothedoorcontroller.

ConguredforoneOSDPreader

FunctionPinNote

Specications

DCground(GND)

0VDC

DCoutput(+12V)

Suppliespowertoreader.12VDC,max500mA

Halfduplex

ConguredfortwoOSDPreaders(multi-drop)

AXISA1214NetworkDoorControllerKit

Speciﬁcations

FunctionPinNote

Specications

DCground(GND)

0VDC

DCoutput(+12V)

Suppliespowertoboth

readers.

12VDC,max

500mAcombinedforboth

readers

Halfduplex

Important

•Whenthereaderispoweredbythecontroller,thequaliedcablelengthisupto200m(656ft).VeriedonlyforAxisreaders.

•Whenthereaderisnotpoweredbythecontroller,thequaliedcablelengthforreaderdataisupto1000m(3280,8ft)ifthe

followingcablerequirementsaremet:1twistedpairwithshield,AWG24,120ohmimpedance.VeriedonlyforAxisreaders.

ConguredforoneWiegandreader

FunctionPinNote

Specications

DCground(GND)

0VDC

DCoutput(+12V)

Suppliespowertoreader.12VDC,max500mA

LED1

RedLED

LED2

GreenLED

TAMPER

Digitalinput—Connecttopin

1toactivate,orleaveoating

(unconnected)todeactivate.

0tomax30VDC

BUZZER

Digitaloutput—Ifusedwith

aninductiveload,e.g.,arelay,

connectadiodeinparallel

withtheload,toprotect

againstvoltagetransients.

0tomax30VDC,opendrain,

100mA

Important

•Whenthereaderispoweredbythecontroller,thequaliedcablelengthisupto150m(500ft).

•Whenthereaderisnotpoweredbythecontroller,thequaliedcablelengthforreaderdataisupto150m(500ft)ifthe

followingcablerequirementismet:AWG22.

Doorconnector

One4-pinterminalblockfordoormonitoringdevices(digitalinput).

Doormonitorsupportssupervisionwithendoflineresistors.Iftheconnectionisinterrupted,analarmistriggered.Tousesupervised

inputs,installendoflineresistors.Usetheconnectiondiagramforsupervisedinputs.Seepage29.

AXISA1214NetworkDoorControllerKit

Speciﬁcations

FunctionPinNotes

Specications

DCground

1,3

0VDC

Input

2,4

Forcommunicatingwithdoormonitor.

DigitalinputorSupervisedinput—Connectto

pin1or3respectivelytoactivate,orleaveoating

(unconnected)todeactivate.

0tomax30VDC

Important

Thequaliedcablelengthisupto200m(656ft)ifthefollowingcablerequirementismet:AWG24.

Relayconnector

One4-pinterminalblockforformCrelaysthatcanbeused,forexample,tocontrolalockoraninterfacetoagate.

FunctionPinNotes

Specications

DCground(GND)

0VDC

Normallyopen.

Forconnectingrelaydevices.

Connectafail-securelock

betweenNOandDCground.

Thetworelaypinsare

galvanicallyseparatedfrom

therestofthecircuitryifthe

jumpersarenotused.

COM

Common

Normallyclosed.

Forconnectingrelaydevices.

Connectafail-safelock

betweenNCandDCground.

Thetworelaypinsare

galvanicallyseparatedfrom

therestofthecircuitryifthe

jumpersarenotused.

Maxcurrent=2A

Maxvoltage=30VDC

Relaypowerjumper

Whentherelaypowerjumperistted,itconnects12VDCor24VDCtotherelayCOMpin.

ItcanbeusedtoconnectalockbetweentheGNDandNO,orGNDandNCpins.

Powersource

Maxpowerat12VDCMaxpowerat24VDC

DCIN

1600mA800mA

PoE900mA450mA

NO NO

TICE TICE

TICE

Ifthelockisnon-polarized,werecommendyoutoaddanexternalybackdiode.

AXISA1214NetworkDoorControllerKit

Speciﬁcations

Auxiliaryconnector

Usetheauxiliaryconnectorwithexternaldevicesincombinationwith,forexample,motiondetection,eventtriggering,andalarm

notications.Inadditiontothe0VDCreferencepointandpower(DCoutput),theauxiliaryconnectorprovidestheinterfaceto:

Digitalinput-Forconnectingdevicesthatcantogglebetweenanopenandclosedcircuit,forexamplePIRsensors,door/window

contacts,andglassbreakdetectors.

Supervisedinput-Enablespossibilitytodetecttamperingonadigitalinput.

Digitaloutput-ForconnectingexternaldevicessuchasrelaysandLEDs.ConnecteddevicescanbeactivatedbytheVAPIX®

ApplicationProgrammingInterfaceorfromtheproduct’swebpage.

4-pinterminalblock

FunctionPinNotes

Specications

DCground

0VDC

DCoutput

Canbeusedtopowerauxiliaryequipment.

Note:Thispincanonlybeusedaspowerout.

12VDC

Maxload=50mAintotal

Digitalinputorsupervisedinput–Connecttopin1toactivate,or

leaveoating(unconnected)todeactivate.Tousesupervisedinput,

installend-of-lineresistors.Seeconnectiondiagramforinformation

abouthowtoconnecttheresistors.

0tomax30VDC Congurable

(InputorOutput)

3–4

Digitaloutput–Internallyconnectedtopin1(DCground)when

active,andoating(unconnected)wheninactive.Ifusedwithan

inductiveload,e.g.,arelay,connectadiodeinparallelwiththe

load,toprotectagainstvoltagetransients.EachI/Oiscapableof

driving12VDC,50mA(max)externalload,ifinternal12VDC

output(pin2)isused.Inthecaseofusingopendrainconnections

incombinationwithanexternalpowersupply,thentheI/Oscan

manageDCsupplyof0–30VDC,100mA.

0tomax30VDC,opendrain,

100mA

DCground

DCoutput12V

I/Oconguredasinput

I/Oconguredasoutput

Externalconnector

Two2-pinterminalblocksforexternaldevices,forexampleglassbreakorredetectors.

AXISA1214NetworkDoorControllerKit

Speciﬁcations

UL:TheconnectorhasnotbeenevaluatedbyULforburglarorrealarmuse.

FunctionPinNotes

Specications

DCground

0VDC

TAMPER

Digitalinput–Connecttopin1toactivate,orleave

oating(unconnected)todeactivate.

0tomax30VDC

FunctionPinNotes

Specications

DCground

0VDC

ALARM

Digitalinput–Connecttopin1toactivate,orleave

oating(unconnected)todeactivate.

0tomax30VDC

Powerconnector

2-pinterminalblockforDCpowerinput.UseaSafetyExtraLowVoltage(SELV)compliantlimitedpowersource(LPS)witheither

aratedoutputpowerlimitedto≤100Woraratedoutputcurrentlimitedto≤5A.

FunctionPinNotes

Specications

DCground(GND)

0VDC

DCinput

Forpoweringcontrollerwhen

notusingPoweroverEthernet.

Note:Thispincanonlybe

usedaspowerin.

12VDC,max36W

UL:DCpowertobesuppliedbyaUL603listedpowersupply,dependingonapplication,withappropriateratings.

Supervisedinputs

Tousesupervisedinputs,installendoflineresistorsaccordingtothediagrambelow.

Parallelrstconnection

Theresistorvaluesmustbe4.7kΩand22kΩ.

AXISA1214NetworkDoorControllerKit

Speciﬁcations

Serialrstconnection

Theresistorvaluesmustbethesameandpossiblevaluesare1kΩ,2.2kΩ,4.7kΩand10kΩ.

Note

Itisrecommendedtousetwistedandshieldedcables.Connectshieldingto0VDC.

AXISA1214NetworkDoorControllerKit

Troubleshooting

Resettofactorydefaultsettings

Important

Resettofactorydefaultshouldbeusedwithcaution.Aresettofactorydefaultresetsallsettings,includingtheIPaddress,to

thefactorydefaultvalues.

Toresettheproducttothefactorydefaultsettings:

1.Disconnectpowerfromtheproduct.

2.Pressandholdthecontrolbuttonwhilereconnectingpower.SeeProductoverviewonpage24.

3.Keepthecontrolbuttonpressedfor25secondsuntilthestatusLEDindicatorturnsamberforthesecondtime.

4.Releasethecontrolbutton.TheprocessiscompletewhenthestatusLEDindicatorturnsgreen.Theproducthasbeenreset

tothefactorydefaultsettings.IfnoDHCPserverisavailableonthenetwork,thedefaultIPaddressis192.168.0.90.

5.Usetheinstallationandmanagementsoftwaretools,assignanIPaddress,setthepassword,andaccesstheproduct.

Youcanalsoresetparameterstofactorydefaultthroughthedevice’swebinterface.GotoMaintenance>Factorydefaultand

clickDefault.

Firmwareoptions

Axisoffersproductrmwaremanagementaccordingtoeithertheactivetrackorthelong-termsupport(LTS)tracks.Beingonthe

activetrackmeanscontinuouslygettingaccesstoallthelatestproductfeatures,whiletheLTStracksprovideaxedplatformwith

periodicreleasesfocusedmainlyonbugxesandsecurityupdates.

Usingrmwarefromtheactivetrackisrecommendedifyouwanttoaccessthenewestfeatures,orifyouuseAxisend-to-endsystem

offerings.TheLTStracksarerecommendedifyouusethird-partyintegrations,whicharenotcontinuouslyvalidatedagainstthelatest

activetrack.WithLTS,theproductscanmaintaincybersecuritywithoutintroducinganysignicantfunctionalchangesoraffecting

anyexistingintegrations.FormoredetailedinformationaboutAxisproductrmwarestrategy,gotoaxis.com/support/rmware.

Checkthecurrentrmwareversion

Firmwareisthesoftwarethatdeterminesthefunctionalityofnetworkdevices.Whenyoutroubleshootaproblem,werecommend

youtostartbycheckingthecurrentrmwareversion.Thelatestrmwareversionmightcontainacorrectionthatxesyour

particularproblem.

Tocheckthecurrentrmware:

1.Gotothedevice’swebinterface>Status.

2.SeethermwareversionunderDeviceinfo.

Upgradethermware

Important

•Preconguredandcustomizedsettingsaresavedwhenyouupgradethermware(providedthatthefeaturesareavailablein

thenewrmware)althoughthisisnotguaranteedbyAxisCommunicationsAB.

•Makesurethedeviceremainsconnectedtothepowersourcethroughouttheupgradeprocess.

AXISA1214NetworkDoorControllerKit

Troubleshooting

Note

Whenyouupgradethedevicewiththelatestrmwareintheactivetrack,theproductreceivesthelatestfunctionality

available.Alwaysreadtheupgradeinstructionsandreleasenotesavailablewitheachnewreleasebeforeyouupgradethe

rmware.Tondthelatestrmwareandthereleasenotes,gotoaxis.com/support/rmware.

Note

Becausethedatabaseofusers,groups,credentials,andotherdataareupdatedafterarmwareupgrade,therststart-up

couldtakeafewminutestocomplete.Thetimerequiredisdependentontheamountofdata.

1.Downloadthermwareletoyourcomputer,availablefreeofchargeataxis.com/support/rmware.

2.Logintothedeviceasanadministrator.

3.GotoMaintenance>FirmwareupgradeandclickUpgrade.

Whentheupgradehasnished,theproductrestartsautomatically.

4.Whentheproducthasbeenrestarted,clearthewebbrowser'scache.

Technicalissues,clues,andsolutions

Ifyoucan’tndwhatyou’relookingforhere,trythetroubleshootingsectionataxis.com/support.

Problemsupgradingthermware

FirmwareupgradefailureIfthermwareupgradefails,thedevicereloadsthepreviousrmware.Themostcommonreason

isthatthewrongrmwarelehasbeenuploaded.Checkthatthenameofthermwarele

correspondstoyourdeviceandtryagain.

Problemsafterrmware

upgrade

Ifyouexperienceproblemsafterarmwareupgrade,rollbacktothepreviouslyinstalledversion

fromtheMaintenancepage.

ProblemssettingtheIPaddress

Thedeviceislocatedona

differentsubnet

IftheIPaddressintendedforthedeviceandtheIPaddressofthecomputerusedtoaccessthe

devicearelocatedondifferentsubnets,youcannotsettheIPaddress.Contactyournetwork

administratortoobtainanIPaddress.

TheIPaddressisbeingused

byanotherdevice

DisconnecttheAxisdevicefromthenetwork.Runthepingcommand(inaCommand/DOSwindow,

typepingandtheIPaddressofthedevice):

•Ifyoureceive:Replyfrom<IPaddress>:bytes=32;time=10...

thismeansthattheIPaddressmayalreadybeinusebyanotherdeviceonthenetwork.

ObtainanewIPaddressfromthenetworkadministratorandreinstallthedevice.

•Ifyoureceive:Requesttimedout,thismeansthattheIPaddressisavailable

forusewiththeAxisdevice.Checkallcablingandreinstallthedevice.

PossibleIPaddressconict

withanotherdeviceonthe

samesubnet

ThestaticIPaddressintheAxisdeviceisusedbeforetheDHCPserversetsadynamicaddress.

ThismeansthatifthesamedefaultstaticIPaddressisalsousedbyanotherdevice,theremay

beproblemsaccessingthedevice.

Thedevicecan’tbeaccessedfromabrowser

Can’tlogin

WhenHTTPSisenabled,ensurethatthecorrectprotocol(HTTPorHTTPS)isusedwhenattempting

tologin.Youmayneedtomanuallytypehttporhttpsinthebrowser’saddresseld.

Ifthepasswordfortherootaccountislost,thedevicemustberesettothefactorydefaultsettings.

SeeResettofactorydefaultsettingsonpage31.

AXISA1214NetworkDoorControllerKit

Troubleshooting

TheIPaddresshasbeen

changedbyDHCP

IPaddressesobtainedfromaDHCPserveraredynamicandmaychange.IftheIPaddresshasbeen

changed,useAXISIPUtilityorAXISDeviceManagertolocatethedeviceonthenetwork.Identify

thedeviceusingitsmodelorserialnumber,orbytheDNSname(ifthenamehasbeencongured).

Ifrequired,astaticIPaddresscanbeassignedmanually.Forinstructions,gotoaxis.com/support.

Certicateerrorwhenusing

IEEE802.1X

Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisdevicemustbe

synchronizedwithanNTPserver.GotoSystem>Dateandtime.

Thedeviceisaccessiblelocallybutnotexternally

Toaccessthedeviceexternally,werecommendyoutouseoneofthefollowingapplicationsforWindows

•AXISCompanion:freeofcharge,idealforsmallsystemswithbasicsurveillanceneeds.

•AXISCameraStation:30-daytrialversionfreeofcharge,idealforsmalltomid-sizesystems.

Forinstructionsanddownload,gotoaxis.com/vms.

Can’tconnectoverport8883withMQTToverSSL

Therewallblockstrafc

usingport8883asit’s

deemedinsecure.

Insomecasestheserver/brokermightnotprovideaspecicportforMQTTcommunication.Itmay

stillbepossibletouseMQTToveraportnormallyusedforHTTP/HTTPStrafc.

•Iftheserver/brokersupportsWebSocket/WebSocketSecure(WS/WSS),typicallyon

port443,usethisprotocolinstead.Checkwiththeserver/brokerprovidertoseeif

WS/WSSissupportedandwhichportandbasepathtouse.

•Iftheserver/brokersupportsALPN,theuseofMQTTcanbenegotiatedoveranopen

port,suchas443.Checkwithyourserver/brokerprovidertoseeifALPNissupported

andwhichALPNprotocolandporttouse.

Contactsupport

Contactsupportataxis.com/support.

UsermanualVer.M2.7

AXISA1214NetworkDoorControllerKit

Date:April2023

Partno.T10191506

Axis A1214 Network Door Controller Kit

Product's Documents

User Manual

Specifications

Axis A1214 Questions and Answers