Axis 02861-001 A9210 Network I/O Relay Module User Manual

AXISA9210NetworkI/ORelayModule

Usermanual

AXISA9210NetworkI/ORelayModule

Getstarted

Findthedeviceonthenetwork

TondAxisdevicesonthenetworkandassignthemIPaddressesinWindows®,useAXISIPUtilityorAXISDeviceManager.Both

applicationsarefreeandcanbedownloadedfromaxis.com/support.

FormoreinformationabouthowtondandassignIPaddresses,gotoHowtoassignanIPaddressandaccessyourdevice.

Browsersupport

Youcanusethedevicewiththefollowingbrowsers:

Chrome

Firefox

Edge

Safari

Windows

recommended

macOS

recommendedrecommended

Linux

recommendedrecommended

Otheroperatingsystems*

*TouseAXISOSwebinterfacewithiOS15oriPadOS15,gotoSettings Settings

Settings

> >

Safari Safari

Safari

> >

Advanced Advanced

Advanced

> >

Experimental Experimental

Experimental

Features Features

Features

anddisable

NSURLSessionWebsocket.

Ifyouneedmoreinformationaboutrecommendedbrowsers,gotoAXISOSPortal.

Openthedevice'swebinterface

1.OpenabrowserandtypetheIPaddressorhostnameoftheAxisdevice.

IfyoudonotknowtheIPaddress,useAXISIPUtilityorAXISDeviceManagertondthedeviceonthenetwork.

2.Typetheusernameandpassword.Ifyouaccessthedeviceforthersttime,youmustcreateanadministratoraccount.See

Createanadministratoraccountonpage2.

Fordescriptionsofallthecontrolsandoptionsyoumightencounterinthedevice’swebinterface,seeThewebinterfaceonpage6.

Createanadministratoraccount

Thersttimeyoulogintoyourdevice,youmustcreateanadministratoraccount.

1.Enterausername.

2.Enterapassword.SeeSecurepasswordsonpage2.

3.Re-enterthepassword.

4.Acceptthelicenseagreement.

5.ClickAddaccount.

Important

Thedevicehasnodefaultaccount.Ifyoulosethepasswordforyouradministratoraccount,youmustresetthedevice.See

Resettofactorydefaultsettingsonpage32.

AXISA9210NetworkI/ORelayModule

Getstarted

Securepasswords

Important

Axisdevicessendtheinitiallysetpasswordincleartextoverthenetwork.Toprotectyourdeviceaftertherstlogin,set

upasecureandencryptedHTTPSconnectionandthenchangethepassword.

Thedevicepasswordistheprimaryprotectionforyourdataandservices.Axisdevicesdonotimposeapasswordpolicyasthey

maybeusedinvarioustypesofinstallations.

Toprotectyourdatawestronglyrecommendthatyou:

•Useapasswordwithatleast8characters,preferablycreatedbyapasswordgenerator.

•Don’texposethepassword.

•Changethepasswordatarecurringinterval,atleastonceayear.

Verifythatnoonehastamperedwiththermware

TomakesurethatthedevicehasitsoriginalAxisrmware,ortotakefullcontrolofthedeviceafterasecurityattack:

1.Resettofactorydefaultsettings.SeeResettofactorydefaultsettingsonpage32.

Afterthereset,securebootguaranteesthestateofthedevice.

2.Congureandinstallthedevice.

Webinterfaceoverview

Thisvideogivesyouanoverviewofthedevice’swebinterface.

Towatchthisvideo,gotothewebversionofthisdocument.

help.axis.com/?&piaId=92430&section=web-interface-overview

Axisdevicewebinterface

AXISA9210NetworkI/ORelayModule

Conﬁgureyourdevice

CongureanI/Oport

1.GotoDevice>I/Osandrelays>AXISA9210>I/Os.

2.Click

toexpandtheI/Oportsettings.

3.Renametheport.

4.Congurethenormalstate.Clickforopencircuit,orforclosedcircuit.

5.ToconguretheI/Oportasinput:

5.1UnderDirection,click.

5.2Tomonitortheinputstate,turnonSupervised.SeeSupervisedinputsonpage30.

Note

InAPIs,thesupervisedI/Oportsworkdifferentlyfromthesupervisedinputports.Formoreinformation,goto

theVAPIX®Library.

6.ToconguretheI/Oportasoutput:

6.1UnderDirection,click

6.2ToviewtheURLstoactivateanddeactivateconnecteddevices,gotoToggleportURL.

Congurearelay

1.GotoDevice>I/Osandrelays>AXISA9210>Relays.

2.Click

toexpandtherelaysettings.

3.TurnonRelay.

4.Renametherelay.

5.ToviewtheURLstoactivateanddeactivatetherelay,gotoToggleportURL.

Setuprulesforevents

Tolearnmore,checkoutourguideGetstartedwithrulesforevents.

Triggeranaction

1.GotoSystem>Eventsandaddarule.Theruledeneswhenthedevicewillperformcertainactions.Youcanset

uprulesasscheduled,recurring,ormanuallytriggered.

2.EnteraName.

3.SelecttheConditionthatmustbemettotriggertheaction.Ifyouspecifymorethanoneconditionfortherule,allofthe

conditionsmustbemettotriggertheaction.

AXISA9210NetworkI/ORelayModule

Conﬁgureyourdevice

4.SelectwhichActionthedeviceshouldperformwhentheconditionsaremet.

Note

Ifyoumakechangestoanactiverule,therulemustbeturnedonagainforthechangestotakeeffect.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Toreachthedevice’swebinterface,typethedevice’sIPaddressinawebbrowser.

Note

Supportforthefeaturesandsettingsdescribedinthissectionvariesbetweendevices.Thisicon

indicatesthat

thefeatureorsettingisonlyavailableinsomedevices.

Showorhidethemainmenu.

Accessthereleasenotes.

Accesstheproducthelp.

Changethelanguage.

Setlightthemeordarktheme.

Theusermenucontains:

•Informationabouttheuserwhoisloggedin.

•

Changeaccount:Logoutfromthecurrentaccountandlogintoanewaccount.

•

Logout:Logoutfromthecurrentaccount.

Thecontextmenucontains:

•Analyticsdata:Accepttosharenon-personalbrowserdata.

•Feedback:Shareanyfeedbacktohelpusimproveyouruserexperience.

•Legal:Viewinformationaboutcookiesandlicenses.

•About:Viewdeviceinformation,includingrmwareversionandserialnumber.

Status

Deviceinfo

Showsthedeviceinformation,includingrmwareversionandserialnumber.

Upgradermware:Upgradethermwareonyourdevice.TakesyoutotheMaintenancepagewhereyoucandoarmware

upgrade.

Timesyncstatus

ShowsNTPsynchronizationinformation,includingifthedeviceisinsyncwithanNTPserverandthetimeremaininguntil

thenextsync.

NTPsettings:ViewandupdatetheNTPsettings.TakesyoutotheDateandtimepagewhereyoucanchangetheNTPsettings.

Security

AXISA9210NetworkI/ORelayModule

Thewebinterface

Showswhatkindofaccesstothedevicethatisactive,andwhatencryptionprotocolsareinuse.Recommendationstothesettings

arebasedontheAXISOSHardeningGuide.

Hardeningguide:LinktoAXISOSHardeningguidewhereyoucanlearnmoreaboutcybersecurityonAxisdevicesandbest

practices.

Connectedclients

Showsthenumberofconnectionsandconnectedclients.

Viewdetails:Viewandupdatethelistofconnectedclients.ThelistshowsIPaddress,protocol,port,state,andPID/process

ofeachconnection.

I/Oportsandrelays

Settings

Input

•Name:Editthetexttorenametheport.

•Direction:Indicatesthatitisaninputport.

•Normalstate:Click

foropencircuit,andforclosedcircuit.

•Supervised:Turnontomakeitpossibletodetectandtriggeractionsifsomeonetamperswiththeconnectionto

digitalI/Odevices.Inadditiontodetectingifaninputisopenorclosed,youcanalsodetectifsomeonehastampered

withit(thatis,cutorshorted).Tosupervisetheconnectionrequiresadditionalhardware(end-of-lineresistors)

intheexternalI/Oloop.

-Touseparallelrstconnection,selectParallelrstconnectionwitha22KΩparallelresistoranda4.7

KΩserialresistor.

-Touseserialrstconnection,selectSerialrstconnectionandselectaresistorvaluefromtheResistor

valuesdrop-downlist.

Output:Turnontoactivateconnecteddevices.

•Name:Editthetexttorenametheport.

•Direction:Indicatesthatitisanoutputport.

•Normalstate:Click

foropencircuit,andforclosedcircuit.

•ToggleportURL:ShowstheURLstoactivateanddeactivateconnecteddevicesthroughtheVAPIX®Application

ProgrammingInterface.

I/O:Turnontoactivateconnecteddeviceswhentheportisconguredasoutput.

•Name:Editthetexttorenametheport.

•Direction:Click

ortocongureitasinputoroutput.

•Normalstate:Click

foropencircuit,andforclosedcircuit.

•Supervised:Turnontomakeitpossibletodetectandtriggeractionsifsomeonetamperswiththeconnectionto

digitalI/Odevices.Inadditiontodetectingifaninputisopenorclosed,youcanalsodetectifsomeonehastampered

withit(thatis,cutorshorted).Tosupervisetheconnectionrequiresadditionalhardware(end-of-lineresistors)in

theexternalI/Oloop.Itappearsonlywhentheportisconguredasinput.

-Touseparallelrstconnection,selectParallelrstconnectionwitha22KΩparallelresistoranda4.7

KΩserialresistor.

-Touseserialrstconnection,selectSerialrstconnectionandselectaresistorvaluefromtheResistor

valuesdrop-downlist.

•ToggleportURL:ShowstheURLstoactivateanddeactivateconnecteddevicesthroughtheVAPIX®Application

ProgrammingInterface.Itappearsonlywhentheportisconguredasoutput.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Relays

•Relay:Turnonorofftherelay.

•Name:Editthetexttorenametherelay.

•Direction:Indicatesthatitisanoutputrelay.

•ToggleportURL:ShowstheURLstoactivateanddeactivatetherelaythroughtheVAPIX®ApplicationProgramming

Interface.

Alarms

Devicemotion:Turnontotriggeranalarminyoursystemwhenitdetectsamovementofthedevice.

Casingopen

:Turnontotriggeranalarminyoursystemwhenitdetectsanopendoorcontrollercase.Turnoffthis

settingforbarebonedoorcontrollers.

Externaltamper

:Turnontotriggeranalarminyoursystemwhenitdetectsanexternaltamper.Forexample,when

someoneopensorclosestheexternalcabinet.

•Supervisedinput

:Turnontomonitortheinputstateandconguretheend-of-lineresistors.

-Touseparallelrstconnection,selectParallelrstconnectionwitha22KΩparallelresistoranda4.7

KΩserialresistor.

-Touseserialrstconnection,selectSerialrstconnectionandselectaresistorvaluefromtheResistor

valuesdrop-downlist.

Apps

Addapp:Installanewapp.

Findmoreapps:Findmoreappstoinstall.YouwillbetakentoanoverviewpageofAxisapps.

Allowunsignedapps:Turnontoallowinstallationofunsignedapps.

Allowroot-privilegedapps

:Turnontoallowappswithrootprivilegesfullaccesstothedevice.

ViewthesecurityupdatesinAXISOSandACAPapps.

Note

Thedevice’sperformancemightbeaffectedifyourunseveralappsatthesametime.

Usetheswitchnexttotheappnametostartorstoptheapp.

Open:Accesstheapp’ssettings.Theavailablesettingsdependontheapplication.Someapplicationsdon’thaveanysettings.

Thecontextmenucancontainoneormoreofthefollowingoptions:

•Open-sourcelicense:Viewinformationaboutopen-sourcelicensesusedintheapp.

•Applog:Viewalogoftheappevents.Thelogishelpfulwhenyoucontactsupport.

•Activatelicensewithakey:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevice

doesn’thaveinternetaccess.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Ifyoudon’thavealicensekey,gotoaxis.com/products/analytics.YouneedalicensecodeandtheAxisproductserial

numbertogeneratealicensekey.

•Activatelicenseautomatically:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevicehas

internetaccess.Youneedalicensecodetoactivatethelicense.

•Deactivatethelicense:Deactivatethelicensetoreplaceitwithanotherlicense,forexample,whenyouchangefroma

triallicensetoafulllicense.Ifyoudeactivatethelicense,youalsoremoveitfromthedevice.

•Settings:Conguretheparameters.

•Delete:Deletetheapppermanentlyfromthedevice.Ifyoudon’tdeactivatethelicenserst,itremainsactive.

System

Timeandlocation

Dateandtime

Thetimeformatdependsonthewebbrowser’slanguagesettings.

Note

Werecommendyousynchronizethedevice’sdateandtimewithanNTPserver.

Synchronization:Selectanoptionforthedevice’sdateandtimesynchronization.

•Automaticdateandtime(manualNTSKEservers):SynchronizewiththesecureNTPkeyestablishmentservers

connectedtotheDHCPserver.

-ManualNTSKEservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,

thedevicesynchronizesandadaptsitstimebasedoninputfromboth.

•Automaticdateandtime(NTPserversusingDHCP):SynchronizewiththeNTPserversconnectedtotheDHCPserver.

-FallbackNTPservers:EntertheIPaddressofoneortwofallbackservers.

•Automaticdateandtime(manualNTPservers):SynchronizewithNTPserversofyourchoice.

-ManualNTPservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,the

devicesynchronizesandadaptsitstimebasedoninputfromboth.

•Customdateandtime:Manuallysetthedateandtime.ClickGetfromsystemtofetchthedateandtimesettings

oncefromyourcomputerormobiledevice.

Timezone:Selectwhichtimezonetouse.Timewillautomaticallyadjusttodaylightsavingtimeandstandardtime.

•DHCP:AdoptsthetimezoneoftheDHCPserver.ThedevicemustconnectedtoaDHCPserverbeforeyoucanselect

thisoption.

•Manual:Selectatimezonefromthedrop-downlist.

Note

Thesystemusesthedateandtimesettingsinallrecordings,logs,andsystemsettings.

Devicelocation

Enterwherethedeviceislocated.Yourvideomanagementsystemcanusethisinformationtoplacethedeviceonamap.

•Latitude:Positivevaluesarenorthoftheequator.

•Longitude:Positivevaluesareeastoftheprimemeridian.

•Heading:Enterthecompassdirectionthatthedeviceisfacing.0isduenorth.

•Label:Enteradescriptivenameforthedevice.

•Save:Clicktosaveyourdevicelocation.

Network

IPv4

AXISA9210NetworkI/ORelayModule

Thewebinterface

AssignIPv4automatically:SelecttoletthenetworkrouterassignanIPaddresstothedeviceautomatically.Werecommend

automaticIP(DHCP)formostnetworks.

IPaddress:EnterauniqueIPaddressforthedevice.StaticIPaddressescanbeassignedatrandomwithinisolatednetworks,

providedthateachaddressisunique.Toavoidconicts,werecommendyoucontactyournetworkadministratorbeforeyou

assignastaticIPaddress.

Subnetmask:Enterthesubnetmasktodenewhataddressesareinsidethelocalareanetwork.Anyaddressoutsidethelocal

areanetworkgoesthroughtherouter.

Router:EntertheIPaddressofthedefaultrouter(gateway)usedtoconnectdevicesthatareattachedtodifferentnetworksand

networksegments.

FallbacktostaticIPaddressifDHCPisn’tavailable:SelectifyouwanttoaddastaticIPaddresstouseasfallbackifDHCP

isunavailableandcan’tassignanIPaddressautomatically.

Note

IfDHCPisn’tavailableandthedeviceusesastaticaddressfallback,thestaticaddressisconguredwithalimitedscope.

IPv6

AssignIPv6automatically:SelecttoturnonIPv6andtoletthenetworkrouterassignanIPaddresstothedeviceautomatically.

Hostname

Assignhostnameautomatically:Selecttoletthenetworkrouterassignahostnametothedeviceautomatically.

Hostname:Enterthehostnamemanuallytouseasanalternativewayofaccessingthedevice.Theserverreportandsystemlog

usethehostname.AllowedcharactersareA–Z,a–z,0–9and-.

DNSservers

AssignDNSautomatically:SelecttolettheDHCPserverassignsearchdomainsandDNSserveraddressestothedevice

automatically.WerecommendautomaticDNS(DHCP)formostnetworks.

Searchdomains:Whenyouuseahostnamethatisnotfullyqualied,clickAddsearchdomainandenteradomaininwhichto

searchforthehostnamethedeviceuses.

DNSservers:ClickAddDNSserverandentertheIPaddressoftheDNSserver.ThisprovidesthetranslationofhostnamestoIP

addressesonyournetwork.

HTTPandHTTPS

HTTPSisaprotocolthatprovidesencryptionforpagerequestsfromusersandforthepagesreturnedbythewebserver.Theencrypted

exchangeofinformationisgovernedbytheuseofanHTTPScerticate,whichguaranteestheauthenticityoftheserver.

TouseHTTPSonthedevice,youmustinstallanHTTPScerticate.GotoSystem>Securitytocreateandinstallcerticates.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Allowaccessthrough:SelectifauserisallowedtoconnecttothedevicethroughtheHTTP,HTTPS,orbothHTTPandHTTPS

protocols.

Note

IfyouviewencryptedwebpagesthroughHTTPS,youmightexperienceadropinperformance,especiallywhenyou

requestapageforthersttime.

HTTPport:EntertheHTTPporttouse.Thedeviceallowsport80oranyportintherange1024-65535.Ifyouareloggedinasan

administrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.

HTTPSport:EntertheHTTPSporttouse.Thedeviceallowsport443oranyportintherange1024-65535.Ifyouareloggedinas

anadministrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.

Certicate:SelectacerticatetoenableHTTPSforthedevice.

Networkdiscoveryprotocols

Bonjour

:Turnontoallowautomaticdiscoveryonthenetwork.

Bonjourname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.

UPnP

:Turnontoallowautomaticdiscoveryonthenetwork.

UPnPname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.

WS-Discovery:Turnontoallowautomaticdiscoveryonthenetwork.

One-clickcloudconnection

One-clickcloudconnection(O3C)togetherwithanO3Cserviceprovideseasyandsecureinternetaccesstoliveandrecordedvideo

fromanylocation.Formoreinformation,seeaxis.com/end-to-end-solutions/hosted-services.

AllowO3C:

•One-click:Thisisthedefaultsetting.PressandholdthecontrolbuttononthedevicetoconnecttoanO3Cservice

overtheinternet.YouneedtoregisterthedevicewiththeO3Cservicewithin24hoursafteryoupressthecontrol

button.Otherwise,thedevicedisconnectsfromtheO3Cservice.Onceyouregisterthedevice,Alwaysisenabledand

thedevicestaysconnectedtotheO3Cservice.

•Always:ThedeviceconstantlyattemptstoconnecttoanO3Cserviceovertheinternet.Onceyouregisterthedevice,

itstaysconnectedtotheO3Cservice.Usethisoptionifthecontrolbuttononthedeviceisoutofreach.

•No:DisablestheO3Cservice.

Proxysettings:Ifneeded,entertheproxysettingstoconnecttotheproxyserver.

Host:Entertheproxyserver’saddress.

Port:Entertheportnumberusedforaccess.

LoginandPassword:Ifneeded,enterusernameandpasswordfortheproxyserver.

Authenticationmethod:

•Basic:ThismethodisthemostcompatibleauthenticationschemeforHTTP.It’slesssecurethantheDigestmethod

becauseitsendstheusernameandpasswordunencryptedtotheserver.

•Digest:Thismethodismoresecurebecauseitalwaystransfersthepasswordencryptedacrossthenetwork.

•Auto:Thisoptionletsthedeviceselecttheauthenticationmethoddependingonthesupportedmethods.Itprioritizes

theDigestmethodovertheBasicmethod.

Ownerauthenticationkey(OAK):ClickGetkeytofetchtheownerauthenticationkey.Thisisonlypossibleifthedeviceis

connectedtotheinternetwithoutarewallorproxy.

SNMP

TheSimpleNetworkManagementProtocol(SNMP)allowsremotemanagementofnetworkdevices.

AXISA9210NetworkI/ORelayModule

Thewebinterface

SNMP:SelecttheversionofSNMPtouse.

•v1andv2c:

-Readcommunity:Enterthecommunitynamethathasread-onlyaccesstoallsupportedSNMPobjects.The

defaultvalueispublic.

-Writecommunity:EnterthecommunitynamethathasreadorwriteaccesstoallsupportedSNMPobjects

(exceptread-onlyobjects).Thedefaultvalueiswrite.

-Activatetraps:Turnontoactivatetrapreporting.Thedeviceusestrapstosendmessagesforimportant

eventsorstatuschangestoamanagementsystem.Inthewebinterface,youcansetuptrapsforSNMPv1

andv2c.TrapsareautomaticallyturnedoffifyouchangetoSNMPv3orturnoffSNMP.IfyouuseSNMPv3,

youcansetuptrapsthroughtheSNMPv3managementapplication.

-Trapaddress:EntertheIPaddressorhostnameofthemanagementserver.

-Trapcommunity:Enterthecommunitytousewhenthedevicesendsatrapmessagetothemanagement

system.

-Traps:

-Coldstart:Sendsatrapmessagewhenthedevicestarts.

-Warmstart:SendsatrapmessagewhenyouchangeanSNMPsetting.

-Linkup:Sendsatrapmessagewhenalinkchangesfromdowntoup.

-Authenticationfailed:Sendsatrapmessagewhenanauthenticationattemptfails.

Note

AllAxisVideoMIBtrapsareenabledwhenyouturnonSNMPv1andv2ctraps.Formoreinformation,see

AXISOSPortal>SNMP.

•v3:SNMPv3isamoresecureversion,whichprovidesencryptionandsecurepasswords.TouseSNMPv3,we

recommendyoutoactivateHTTPS,asthepasswordisthensentthroughHTTPS.Thisalsopreventsunauthorized

parties’accesstounencryptedSNMPv1andv2ctraps.IfyouuseSNMPv3,youcansetuptrapsthroughtheSNMPv3

managementapplication.

-Passwordfortheaccount“initial”:EntertheSNMPpasswordfortheaccountnamed“initial”.Althoughthe

passwordcanbesentwithoutactivatingHTTPS,wedon’trecommendit.TheSNMPv3passwordcanonly

besetonce,andpreferablyonlywhenHTTPSisenabled.Oncethepasswordisset,thepasswordeldisno

longerdisplayed.Tosetthepasswordagain,youmustresetthedevicetofactorydefaultsettings.

Security

Certicates

Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:

•Client/servercerticates

Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority(CA).

Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.

•CAcerticates

YoucanuseaCAcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication

serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedCA

certicates.

Theseformatsaresupported:

•Certicateformats:.PEM,.CER,and.PFX

•Privatekeyformats:PKCS#1andPKCS#12

Important

Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.

Addcerticate:Clicktoaddacerticate.

•More

:Showmoreeldstollinorselect.

•Securekeystore:SelecttouseSecureelementorTrustedPlatformModule2.0tosecurelystoretheprivatekey.For

moreinformationonwhichsecurekeystoretoselect,gotohelp.axis.com/en-us/axis-os#cryptographic-support.

AXISA9210NetworkI/ORelayModule

Thewebinterface

•Keytype:Selectthedefaultoradifferentencryptionalgorithmfromthedrop-downlisttoprotectthecerticate.

Thecontextmenucontains:

•Certicateinformation:Viewaninstalledcerticate’sproperties.

•Deletecerticate:Deletethecerticate.

•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply

foradigitalidentitycerticate.

Securekeystore

•Secureelement(CCEAL6+):Selecttousesecureelementforsecurekeystore.

•TrustedPlatformModule2.0(CCEAL4+,FIPS140-2Level2):SelecttouseTPM2.0forsecurekeystore.

IEEE802.1xandIEEE802.1AEMACsec

IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless

networkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby

anauthenticationserver,typicallyaRADIUSserver(forexample,FreeRADIUSandMicrosoftInternetAuthenticationServer).

Certicates

WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself

regardlessofwhatnetworkitisconnectedto.

Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital

certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).

Toallowthedevicetoaccessanetworkprotectedthroughcerticates,youmustinstallasignedclientcerticateonthedevice.

Authenticationmethod:SelectanEAPtypeusedforauthentication.ThedefaultoptionisEAP-TLS.EAP-PEAP/MSCHAPv2isa

moresecureoption.

Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe

client’sidentity.

CAcerticate:SelectCAcerticatestovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice

triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.

EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.

EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.

UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.

IEEE802.1AEMACsec

IEEE802.1AEMACsecisanIEEEstandardformediaaccesscontrol(MAC)securitythatdenesconnectionlessdatacondentiality

andintegrityformediaaccessindependentprotocols.

ThesettingsareonlyavailableifyouuseEAP-TLSastheauthenticationmethod:

Mode

•DynamicCAK/EAP-TLS:Thedefaultoption.Afterasecuredconnection,thedevicechecksforMACseconthenetwork.

•StaticCAK/pre-sharedkey(PSK):Selecttosetthekeynameandvaluetoconnecttothenetwork.

ThesettingsareonlyavailableifyouuseEAP-PEAP/MSCHAPv2astheauthenticationmethod:

•Password:Enterthepasswordforyouruseridentity.

•Peapversion:SelectthePeapversionthatisusedinthenetworkswitch.

•Label:Select1touseclientEAPencryption;select2touseclientPEAPencryption.SelecttheLabelthatthenetwork

switchuseswhenusingPeapversion1.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Preventbrute-forceattacks

Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.

Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.

Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe

numberoffailuresallowedbothonpagelevelanddevicelevel.

Firewall

Activate:Turnontherewall.

DefaultPolicy:Selectthedefaultstatefortherewall.

•Allow:Allowsallconnectionstothedevice.Thisoptionissetbydefault.

•Deny:Deniesallconnectionstothedevice.

Tomakeexceptionstothedefaultpolicy,youcancreaterulesthatallowsordeniesconnectionstothedevicefromspecic

addresses,protocols,andports.

•Address:EnteranaddressinIPv4/IPv6orCIDRformatthatyouwanttoallowordenyaccessto.

•Protocol:Selectaprotocolthatyouwanttoallowordenyaccessto.

•Port:Enteraportnumberthatyouwanttoallowordenyaccessto.Youcanaddaportnumberbetween1and65535.

•Policy:Selectthepolicyoftherule.

:Clicktocreateanotherrule.

Addrules:Clicktoaddtherulesthatyouhavedened.

•Timeinseconds:Setatimelimitfortestingtherules.Thedefaulttimelimitissetto300seconds.Toactivatethe

rulesstraightaway,setthetimeto0seconds.

•Conrmrules:Conrmtherulesandtheirtimelimit.Ifyouhavesetatimelimitofmorethan1second,theruleswill

beactiveduringthistime.Ifyouhavesetthetimeto0,theruleswillbeactivestraightaway.

Pendingrules:Anoverviewofthelatesttestedrulesthatyouareyettoconrm.

Note

TherulesthathaveatimelimitappearsbothunderPendingrulesandActiverulesuntilthesettimehaspassed,oruntil

youconrmthem.Ifyoudon'tconrmthem,theyappearonlyunderPendingrules,andtherewallfallsbacktothe

previouslydenedsettings.Ifyouconrmthem,theywillreplacethecurrentactiverules.

Conrmrules:Clicktoactivatethependingrules.

Activerules:Anoverviewoftherulesyouarecurrentlyrunningonthedevice.

:Clicktodeleteanactiverule.

:Clicktodeleteallrules,bothpendingandactive.

Customsignedrmwarecerticate

AXISA9210NetworkI/ORelayModule

Thewebinterface

ToinstalltestrmwareorothercustomrmwarefromAxisonthedevice,youneedacustomsignedrmwarecerticate.The

certicateveriesthatthermwareisapprovedbyboththedeviceownerandAxis.Thermwarecanonlyrunonaspecic

devicewhichisidentiedbyitsuniqueserialnumberandchipID.OnlyAxiscancreatecustomsignedrmwarecerticates,

sinceAxisholdsthekeytosignthem.

Install:Clicktoinstallthecerticate.Youneedtoinstallthecerticatebeforeyouinstallthermware.

Thecontextmenucontains:

•Deletecerticate:Deletethecerticate.

Accounts

Addaccount:Clicktoaddanewaccount.Youcanaddupto100accounts.

Account:Enterauniqueaccountname.

Newpassword:Enterapasswordfortheaccount.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters

(code32to126)areallowedinthepassword,forexample,letters,numbers,punctuation,andsomesymbols.

Repeatpassword:Enterthesamepasswordagain.

Privileges:

•Administrator:Hasfullaccesstoallsettings.Administratorscanalsoadd,update,andremoveotheraccounts.

•Operator:Hasaccesstoallsettingsexcept:

-AllSystemsettings.

-Addingapps.

•Viewer:Doesn’thaveaccesstochangeanysettings.

Thecontextmenucontains:

Updateaccount:Edittheaccountproperties.

Deleteaccount:Deletetheaccount.Youcan’tdeletetherootaccount.

Anonymousaccess

Allowanonymousviewing:Turnontoallowanyoneaccessthedeviceasaviewerwithoutlogginginwithanaccount.

AllowanonymousPTZoperating

:Turnontoallowanonymoususerstopan,tilt,andzoomtheimage.

SSHaccounts

AXISA9210NetworkI/ORelayModule

Thewebinterface

AddSSHaccount:ClicktoaddanewSSHaccount.

•Restrictrootaccess:Turnontorestrictfunctionalitythatrequiresrootaccess.

•EnableSSH:TurnontouseSSHservice.

Account:Enterauniqueaccountname.

Newpassword:Enterapasswordfortheaccount.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters

(code32to126)areallowedinthepassword,forexample,letters,numbers,punctuation,andsomesymbols.

Repeatpassword:Enterthesamepasswordagain.

Comment:Enteracomment(optional).

Thecontextmenucontains:

UpdateSSHaccount:Edittheaccountproperties.

DeleteSSHaccount:Deletetheaccount.Youcan’tdeletetherootaccount.

OpenIDConguration

Important

Entertherightvaluestoensureyoucanlogintothedeviceagain.

ClientID:EntertheOpenIDusername.

OutgoingProxy:EntertheproxyaddressfortheOpenIDconnectiontouseaproxyserver.

Adminclaim:Enteravaluefortheadminrole.

ProviderURL:EntertheweblinkfortheAPIendpointauthentication.Formatshouldbehttps://[insert

URL]/.well-known/openid-conguration

Operatorclaim:Enteravaluefortheoperatorrole.

Requireclaim:Enterthedatathatshouldbeinthetoken.

Viewerclaim:Enterthevaluefortheviewerrole.

Remoteuser:Enteravaluetoidentifyremoteusers.Thiswillhelptodisplaythecurrentuserinthedevice’swebinterface.

Scopes:Optionalscopesthatcouldbepartofthetoken.

Clientsecret:EntertheOpenIDpassword

Save:ClicktosavetheOpenIDvalues.

EnableOpenID:TurnontoclosecurrentconnectionandallowdeviceauthenticationfromtheproviderURL.

Events

Rules

Aruledenestheconditionsthattriggerstheproducttoperformanaction.Thelistshowsallthecurrentlyconguredrulesin

theproduct.

Note

Youcancreateupto256actionrules.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Addarule:Createarule.

Name:Enteranamefortherule.

Waitbetweenactions:Entertheminimumtime(hh:mm:ss)thatmustpassbetweenruleactivations.Itisusefuliftheruleis

activatedby,forexample,day-nightmodeconditions,toavoidthatsmalllightchangesduringsunriseandsunsetactivate

therulerepeatedly.

Condition:Selectaconditionfromthelist.Aconditionmustbemetforthedevicetoperformanaction.Ifmultiple

conditionsaredened,allofthemmustbemettotriggertheaction.Forinformationaboutspecicconditions,see

Getstartedwithrulesforevents.

Usethisconditionasatrigger:Selecttomakethisrstconditionfunctiononlyasastartingtrigger.Itmeansthatoncetherule

isactivated,itremainsactiveforaslongasalltheotherconditionsaremet,nomatterthestateoftherstcondition.Ifyoudon’t

selectthisoption,therulewillsimplybeactivewheneveralltheconditionsaremet.

Invertthiscondition:Selectifyouwanttheconditiontobetheoppositeofyourselection.

Addacondition:Clicktoaddanadditionalcondition.

Action:Selectanactionfromthelistandenteritsrequiredinformation.Forinformationaboutspecicactions,see

Getstartedwithrulesforevents.

Recipients

Youcansetupyourdevicetonotifyrecipientsabouteventsorsendles.Thelistshowsalltherecipientscurrentlyconguredinthe

product,alongwithinformationabouttheirconguration.

Note

Youcancreateupto20recipients.

Addarecipient:Clicktoaddarecipient.

Name:Enteranamefortherecipient.

Type:Selectfromthelist:

•FTP

-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris

speciedunderSystem>Network>IPv4andIPv6.

-Port:EntertheportnumberusedbytheFTPserver.Thedefaultis21.

-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.Ifthisdirectorydoesn’talreadyexist

ontheFTPserver,youwillgetanerrormessagewhenuploadingles.

-Username:Entertheusernameforthelogin.

-Password:Enterthepasswordforthelogin.

-Usetemporarylename:Selecttouploadleswithtemporary,automaticallygeneratedlenames.The

lesgetrenamedtothedesirednameswhentheuploadcompletes.Iftheuploadisaborted/interrupted,

youdon’tgetanycorruptles.However,youprobablystillgetthetemporaryles.Thiswayyouknow

thatalllesthathavethedesirednamearecorrect.

-UsepassiveFTP:Undernormalcircumstances,theproductsimplyrequeststhetargetFTPservertoopenthe

dataconnection.ThedeviceactivelyinitiatesboththeFTPcontrolanddataconnectionstothetargetserver.

ThisisnormallyneededifthereisarewallbetweenthedeviceandthetargetFTPserver.

•HTTP

-URL:EnterthenetworkaddresstotheHTTPserverandthescriptthatwillhandletherequest.Forexample,

http://192.168.254.10/cgi-bin/notify.cgi.

-Username:Entertheusernameforthelogin.

AXISA9210NetworkI/ORelayModule

Thewebinterface

-Password:Enterthepasswordforthelogin.

-Proxy:TurnonandentertherequiredinformationifaproxyservermustbepassedtoconnecttotheHTTP

server.

•HTTPS

-URL:EnterthenetworkaddresstotheHTTPSserverandthescriptthatwillhandletherequest.Forexample,

https://192.168.254.10/cgi-bin/notify.cgi.

-Validateservercerticate:SelecttovalidatethecerticatethatwascreatedbyHTTPSserver.

-Username:Entertheusernameforthelogin.

-Password:Enterthepasswordforthelogin.

-Proxy:TurnonandentertherequiredinformationifaproxyservermustbepassedtoconnecttotheHTTPS

server.

•Networkstorage

YoucanaddnetworkstoragesuchasNAS(network-attachedstorage)anduseitasarecipienttostoreles.Theles

arestoredintheMatroska(MKV)leformat.

-Host:EntertheIPaddressorhostnameforthenetworkstorage.

-Share:Enterthenameoftheshareonthehost.

-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.

-Username:Entertheusernameforthelogin.

-Password:Enterthepasswordforthelogin.

•SFTP

-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris

speciedunderSystem>Network>IPv4andIPv6.

-Port:EntertheportnumberusedbytheSFTPserver.Thedefaultis22.

-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.Ifthisdirectorydoesn’talreadyexiston

theSFTPserver,youwillgetanerrormessagewhenuploadingles.

-Username:Entertheusernameforthelogin.

-Password:Enterthepasswordforthelogin.

-SSHhostpublickeytype(MD5):Enterthengerprintoftheremotehost’spublickey(a32-digit

hexadecimalstring).TheSFTPclientsupportsSFTPserversusingSSH-2withRSA,DSA,ECDSA,andED25519

hostkeytypes.RSAisthepreferredmethodduringnegotiation,followedbyECDSA,ED25519,andDSA.Make

suretoentertherightMD5hostkeythatisusedbyyourSFTPserver.WhiletheAxisdevicesupportsboth

MD5andSHA-256hashkeys,werecommendusingSHA-256duetostrongersecurityoverMD5.Formore

informationonhowtocongureanSFTPserverwithanAxisdevice,gototheAXISOSPortal.

-SSHhostpublickeytype(SHA256):Enterthengerprintoftheremotehost’spublickey(a43-digitBase64

encodedstring).TheSFTPclientsupportsSFTPserversusingSSH-2withRSA,DSA,ECDSA,andED25519host

keytypes.RSAisthepreferredmethodduringnegotiation,followedbyECDSA,ED25519,andDSA.Make

suretoentertherightMD5hostkeythatisusedbyyourSFTPserver.WhiletheAxisdevicesupportsboth

MD5andSHA-256hashkeys,werecommendusingSHA-256duetostrongersecurityoverMD5.Formore

informationonhowtocongureanSFTPserverwithanAxisdevice,gototheAXISOSPortal.

-Usetemporarylename:Selecttouploadleswithtemporary,automaticallygeneratedlenames.The

lesgetrenamedtothedesirednameswhentheuploadcompletes.Iftheuploadisabortedorinterrupted,

youdon’tgetanycorruptles.However,youprobablystillgetthetemporaryles.Thisway,youknow

thatalllesthathavethedesirednamearecorrect.

•SIPorVMS

SIP:SelecttomakeaSIPcall.

VMS:SelecttomakeaVMScall.

-FromSIPaccount:Selectfromthelist.

-ToSIPaddress:EntertheSIPaddress.

-Test:Clicktotestthatyourcallsettingsworks.

•Email

-Sendemailto:Entertheemailaddresstosendemailsto.Toentermultipleaddresses,usecommasto

separatethem.

-Sendemailfrom:Entertheemailaddressofthesendingserver.

-Username:Entertheusernameforthemailserver.Leavethiseldemptyifthemailserverdoesnot

requireauthentication.

-Password:Enterthepasswordforthemailserver.Leavethiseldemptyifthemailserverdoesnotrequire

authentication.

-Emailserver(SMTP):EnterthenameoftheSMTPserver,forexample,smtp.gmail.com,smtp.mail.yahoo.com.

-Port:EntertheportnumberfortheSMTPserver,usingvaluesintherange0-65535.Thedefaultvalueis587.

AXISA9210NetworkI/ORelayModule

Thewebinterface

-Encryption:Touseencryption,selecteitherSSLorTLS.

-Validateservercerticate:Ifyouuseencryption,selecttovalidatetheidentityofthedevice.Thecerticate

canbeself-signedorissuedbyaCerticateAuthority(CA).

-POPauthentication:TurnontoenterthenameofthePOPserver,forexample,pop.gmail.com.

Note

Someemailprovidershavesecurityltersthatpreventusersfromreceivingorviewinglargeamountof

attachments,fromreceivingscheduledemailsandsimilar.Checktheemailprovider'ssecuritypolicytoavoid

youremailaccountbeinglockedormissingoutonyourexpectedemails.

•TCP

-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris

speciedunderSystem>Network>IPv4andIPv6.

-Port:Entertheportnumberusedtoaccesstheserver.

Test:Clicktotestthesetup.

Thecontextmenucontains:

Viewrecipient:Clicktoviewalltherecipientdetails.

Copyrecipient:Clicktocopyarecipient.Whenyoucopy,youcanmakechangestothenewrecipient.

Deleterecipient:Clicktodeletetherecipientpermanently.

Schedules

Schedulesandpulsescanbeusedasconditionsinrules.Thelistshowsalltheschedulesandpulsescurrentlyconguredinthe

product,alongwithinformationabouttheirconguration.

Addschedule:Clicktocreateascheduleorpulse.

Manualtriggers

Youcanusethemanualtriggertomanuallytriggerarule.Themanualtriggercan,forexample,beusedtovalidateactions

duringproductinstallationandconguration.

MQTT

MQTT(MessageQueuingTelemetryTransport)isastandardmessagingprotocolfortheInternetofThings(IoT).Itwasdesignedfor

simpliedIoTintegrationandisusedinawidevarietyofindustriestoconnectremotedeviceswithasmallcodefootprintand

minimalnetworkbandwidth.TheMQTTclientinAxisdevicermwarecansimplifyintegrationofdataandeventsproducedinthe

devicetosystemswhicharenotvideomanagementsoftware(VMS).

SetupthedeviceasanMQTTclient.MQTTcommunicationisbasedontwoentities,theclientsandthebroker.Theclientscan

sendandreceivemessages.Thebrokerisresponsibleforroutingmessagesbetweenclients.

YoucanlearnmoreaboutMQTTinAXISOSPortal.

ALPN

ALPNisaTLS/SSLextensionthatallowsfortheselectionofanapplicationprotocolduringthehandshakephaseoftheconnection

betweentheclientandserver.ThisisusedtoenableMQTTtrafcoverthesameportthatisusedforotherprotocols,suchasHTTP.

Insomecases,theremightnotbeadedicatedportopenforMQTTcommunication.AsolutioninsuchcasesistouseALPNto

negotiatetheuseofMQTTastheapplicationprotocolonastandardport,allowedbytherewalls.

MQTTclient

AXISA9210NetworkI/ORelayModule

Thewebinterface

Connect:TurnonorofftheMQTTclient.

Status:ShowsthecurrentstatusoftheMQTTclient.

Broker

Host:EnterthehostnameorIPaddressoftheMQTTserver.

Protocol:Selectwhichprotocoltouse.

Port:Entertheportnumber.

•1883isthedefaultvalueforMQTToverTCP

•8883isthedefaultvalueforMQTToverSSL

•80isthedefaultvalueforMQTToverWebSocket

•443isthedefaultvalueforMQTToverWebSocketSecure

ALPNprotocol:EntertheALPNprotocolnameprovidedbyyourMQTTbrokerprovider.ThisisonlyapplicablewithMQTToverSSL

andMQTToverWebSocketSecure.

Username:Entertheusernamethattheclientwillusetoaccesstheserver.

Password:Enterapasswordfortheusername.

ClientID:EnteraclientID.Theclientidentierissenttotheserverwhentheclientconnectstoit.

Cleansession:Controlsthebehavioratconnectionanddisconnectiontime.Whenselected,thestateinformationisdiscarded

atconnectanddisconnect.

HTTPproxy:AURLwithamaximumlengthof255bytes.Youcanleavetheeldemptyifyoudon'twanttouseanHTTPproxy.

HTTPSproxy:AURLwithamaximumlengthof255bytes.Youcanleavetheeldemptyifyoudon'twanttouseanHTTPSproxy.

Keepaliveinterval:Enablestheclienttodetectwhentheserverisnolongeravailablewithouthavingtowaitforthelong

TCP/IPtimeout.

Timeout:Thetimeintervalinsecondstoallowaconnecttocomplete.Defaultvalue:60

Devicetopicprex:UsedinthedefaultvaluesforthetopicintheconnectmessageandLWTmessageontheMQTTclienttab,

andinthepublicationconditionsontheMQTTpublicationtab.

Reconnectautomatically:Specieswhethertheclientshouldreconnectautomaticallyafteradisconnect.

Connectmessage

Speciesifamessageshouldbesentoutwhenaconnectionisestablished.

Sendmessage:Turnontosendmessages.

Usedefault:Turnofftoenteryourowndefaultmessage.

Topic:Enterthetopicforthedefaultmessage.

Payload:Enterthecontentforthedefaultmessage.

Retain:SelecttokeepthestateofclientonthisTopic

QoS:ChangetheQoSlayerforthepacketow.

LastWillandTestamentmessage

TheLastWillTestament(LWT)letsaclientprovideatestamentalongwithitscredentialswhenconnectingtothebroker.Ifthe

clientdisconnectsungracefullyatsomepointlater(maybebecausehispowersourcedied),itcanletthebrokerdeliveramessage

tootherclients.ThisLWTmessagehasthesameformasanordinarymessageandgetsroutedviathesamemechanics.

Sendmessage:Turnontosendmessages.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Usedefault:Turnofftoenteryourowndefaultmessage.

Topic:Enterthetopicforthedefaultmessage.

Payload:Enterthecontentforthedefaultmessage.

Retain:SelecttokeepthestateofclientonthisTopic

QoS:ChangetheQoSlayerforthepacketow.

MQTTpublication

Usedefaulttopicprex:Selecttousethedefaulttopicprex,thatisdenedinthedevicetopicprexintheMQTTclienttab.

Includetopicname:SelecttoincludethetopicthatdescribestheconditionintheMQTTtopic.

Includetopicnamespaces:SelecttoincludeONVIFtopicnamespacesintheMQTTtopic.

Includeserialnumber:Selecttoincludethedevice’sserialnumberintheMQTTpayload.

Addcondition:Clicktoaddacondition.

Retain:DeneswhichMQTTmessagesaresentasretained.

•None:Sendallmessagesasnon-retained.

•Property:Sendonlystatefulmessagesasretained.

•All:Sendbothstatefulandstatelessmessagesasretained.

QoS:SelectthedesiredlevelfortheMQTTpublication.

MQTTsubscriptions

Addsubscription:ClicktoaddanewMQTTsubscription.

Subscriptionlter:EntertheMQTTtopicthatyouwanttosubscribeto.

Usedevicetopicprex:AddthesubscriptionlterasprextotheMQTTtopic.

Subscriptiontype:

•Stateless:SelecttoconvertMQTTmessagesintoastatelessmessage.

•Stateful:SelecttoconvertMQTTmessagesintoacondition.Thepayloadisusedasthestate.

QoS:SelectthedesiredlevelfortheMQTTsubscription.

Logs

Reportsandlogs

AXISA9210NetworkI/ORelayModule

Thewebinterface

Reports

•Viewthedeviceserverreport:Viewinformationabouttheproductstatusinapop-upwindow.TheAccessLogis

automaticallyincludedintheServerReport.

•Downloadthedeviceserverreport:Itcreatesa.ziplethatcontainsacompleteserverreporttextleinUTF–8

format,aswellasasnapshotofthecurrentliveviewimage.Alwaysincludetheserverreport.ziplewhenyou

contactsupport.

•Downloadthecrashreport:Downloadanarchivewithdetailedinformationabouttheserver'sstatus.Thecrashreport

containsinformationthatisintheserverreportaswellasdetaileddebuginformation.Thisreportmightcontain

sensitiveinformationsuchasnetworktraces.Itcantakeseveralminutestogeneratethereport.

Logs

•Viewthesystemlog:Clicktoshowinformationaboutsystemeventssuchasdevicestartup,warnings,andcritical

messages.

•Viewtheaccesslog:Clicktoshowallfailedattemptstoaccessthedevice,forexample,whenawronglogin

passwordisused.

Networktrace

Important

Anetworktracelemightcontainsensitiveinformation,forexamplecerticatesorpasswords.

Anetworktracelecanhelpyoutroubleshootproblemsbyrecordingactivityonthenetwork.

Tracetime:Selectthedurationofthetraceinsecondsorminutes,andclickDownload.

Remotesystemlog

Syslogisastandardformessagelogging.Itallowsseparationofthesoftwarethatgeneratesmessages,thesystemthatstoresthem,

andthesoftwarethatreportsandanalyzesthem.Eachmessageislabeledwithafacilitycode,whichindicatesthesoftware

typegeneratingthemessage,andassignedaseveritylevel.

Server:Clicktoaddanewserver.

Host:EnterthehostnameorIPaddressoftheserver.

Format:Selectwhichsyslogmessageformattouse.

•Axis

•RFC3164

•RFC5424

Protocol:Selecttheprotocoltouse:

•UDP(Defaultportis514)

•TCP(Defaultportis601)

•TLS(Defaultportis6514)

Port:Edittheportnumbertouseadifferentport.

Severity:Selectwhichmessagestosendwhentriggered.

CAcerticateset:Seethecurrentsettingsoraddacerticate.

Plaincong

PlaincongisforadvanceduserswithexperienceofAxisdeviceconguration.Mostparameterscanbesetandeditedfrom

thispage.

AXISA9210NetworkI/ORelayModule

Thewebinterface

Maintenance

Restart:Restartthedevice.Thisdoesnotaffectanyofthecurrentsettings.Runningapplicationsrestartautomatically.

Restore:Returnmostsettingstothefactorydefaultvalues.Afterwardsyoumustrecongurethedeviceandapps,reinstallany

appsthatdidn’tcomepreinstalled,andrecreateanyeventsandpresets.

Important

Theonlysettingssavedafterrestoreare:

•Bootprotocol(DHCPorstatic)

•StaticIPaddress

•Defaultrouter

•Subnetmask

•802.1Xsettings

•O3Csettings

•DNSserverIPaddress

Factorydefault:Returnallsettingstothefactorydefaultvalues.AfterwardsyoumustresettheIPaddresstomakethedevice

accessible.

Note

AllAxisdevicermwareisdigitallysignedtoensurethatyouonlyinstallveriedrmwareonyourdevice.Thisfurther

increasestheoverallminimumcybersecuritylevelofAxisdevices.Formoreinformation,seethewhitepaper“Signed

rmware,secureboot,andsecurityofprivatekeys”ataxis.com.

Firmwareupgrade:Upgradetoanewrmwareversion.Newrmwarereleasescancontainimprovedfunctionality,bug

xes,andcompletelynewfeatures.Werecommendyoutoalwaysusethelatestrelease.Todownloadthelatestrelease,go

toaxis.com/support.

Whenyouupgrade,youcanchoosebetweenthreeoptions:

•Standardupgrade:Upgradetothenewrmwareversion.

•Factorydefault:Upgradeandreturnallsettingstothefactorydefaultvalues.Whenyouchoosethisoption,youcan’t

reverttothepreviousrmwareversionaftertheupgrade.

•Autorollback:Upgradeandconrmtheupgradewithinthesettime.Ifyoudon’tconrm,thedevicerevertstothe

previousrmwareversion.

Firmwarerollback:Reverttothepreviouslyinstalledrmwareversion.

AXISA9210NetworkI/ORelayModule

Learnmore

Cybersecurity

AxisEdgeVault

AxisEdgeVaultprovidesahardware-basedcybersecurityplatformthatsafeguardstheAxisdevice.Itoffersfeaturestoguaranteethe

device’sidentityandintegrityandtoprotectyoursensitiveinformationfromunauthorizedaccess.Itbuildsonastrongfoundationof

cryptographiccomputingmodules(secureelementandTPM)andSoCsecurity(TEEandsecureboot),combinedwithexpertisein

edgedevicesecurity.

Signedrmware

Signedrmwareisimplementedbythesoftwarevendorsigningthermwareimagewithaprivatekey.Whenarmwarehasthis

signatureattachedtoit,adevicewillvalidatethermwarebeforeacceptingtoinstallit.Ifthedevicedetectsthatthermware

integrityiscompromised,thermwareupgradewillberejected.

Secureboot

Securebootisabootprocessthatconsistsofanunbrokenchainofcryptographicallyvalidatedsoftware,startinginimmutable

memory(bootROM).Beingbasedontheuseofsignedrmware,securebootensuresthatadevicecanbootonlywithauthorized

rmware.

Securekeystore

Atamper-protectedenvironmentfortheprotectionofprivatekeysandsecureexecutionofcryptographicoperations.Itprevents

unauthorizedaccessandmaliciousextractionintheeventofasecuritybreach.Dependingonsecurityrequirements,anAxisdevice

canhaveeitheroneormultiplehardware-basedcryptographiccomputingmodules,whichprovideahardware-protectedsecure

keystore.Dependingonsecurityrequirements,anAxisdevicecanhaveeitheroneormultiplehardware-basedcryptographic

computingmodules,likeaTPM2.0(TrustedPlatformModule)orasecureelement,and/oraTEE(TrustedExecutionEnvironment),

whichprovideahardware-protectedsecurekeystore.Furthermore,selectedAxisproductsfeatureaFIPS140-2Level2-certied

securekeystore.

AxisdeviceID

Beingabletoverifytheoriginofthedeviceiskeytoestablishingtrustinthedeviceidentity.Duringproduction,deviceswith

AxisEdgeVaultareassignedaunique,factory-provisioned,andIEEE802.1AR-compliantAxisdeviceIDcerticate.Thisworks

likeapassporttoprovetheoriginofthedevice.ThedeviceIDissecurelyandpermanentlystoredinthesecurekeystoreasa

certicatesignedbyAxisrootcerticate.ThedeviceIDcanbeleveragedbythecustomer’sITinfrastructureforautomatedsecure

deviceonboardingandsecuredeviceidentication

Encryptedlesystem

Thesecurekeystorepreventsthemaliciousexltrationofinformationandpreventscongurationtamperingbyenforcingstrong

encryptionuponthelesystem.Thisensuresnodatastoredinthelesystemcanbeextractedortamperedwithwhenthedeviceis

notinuse,unauthenticatedaccesstothedeviceisachievedand/ortheAxisdeviceisstolen.Duringthesecurebootprocess,the

read-writelesystemisdecryptedandcanbemountedandusedbytheAxisdevice.

TolearnmoreaboutthecybersecurityfeaturesinAxisdevices,gotoaxis.com/learning/white-papersandsearchforcybersecurity.

AXISA9210NetworkI/ORelayModule

Speciﬁcations

Productoverview

Networkconnector

Groundingposition

Relayjumper

Powerconnector

Relayconnector

Input1connector

RS485andI/Oconnector

I/Oconnector

Input2connector

Controlbutton

LEDindicators

LED

Color

Indication

GreenSteadygreenfornormaloperation.

Amber

Steadyduringstartupandwhenrestoringsettings.

Status

Red

Slowashforfailedupgrade.

AXISA9210NetworkI/ORelayModule

Speciﬁcations

Green

Steadyforconnectiontoa100MBit/snetwork.Flashesfornetworkactivity.

Amber

Steadyforconnectiontoa10MBit/snetwork.Flashesfornetworkactivity.

Network

UnlitNonetworkconnection.

Green

Normaloperation.

Power

Amber

Flashesgreen/amberduringrmwareupgrade.

Green

Relayactive.

Relay

UnlitRelayinactive.

1.RelayisactivewhenCOMisconnectedtoNO.

Buttons

Controlbutton

Thecontrolbuttonisusedfor:

•Resettingtheproducttofactorydefaultsettings.SeeResettofactorydefaultsettingsonpage32.

•Connectingtoaone-clickcloudconnection(O3C)serviceovertheinternet.Toconnect,pressandholdthebutton

forabout3secondsuntilthestatusLEDashesgreen.

Connectors

Networkconnector

RJ45EthernetconnectorwithPoweroverEthernetPlus(PoE+).

UL:PoweroverEthernet(PoE)shallbeoverEthernetIEEE802.3af/802.3atType1Class3orPoweroverEthernetPlus(PoE+)

IEEE802.3atType2Class4powerlimitedinjectorthatprovides44–57VDC,15.4W/30W.PoweroverEthernet(PoE)has

beenevaluatedbyULwithAXIST8133Midspan30W1-port.

Powerpriority

ThisdevicecanbepoweredbyeitherPoEorDCinput.SeeNetworkconnectoronpage26andPowerconnectoronpage26.

•WhenPoEandDCarebothconnectedbeforethedeviceispowered,PoEisusedforpowering.

•PoEandDCarebothconnectedandPoEiscurrentlypowering.WhenPoEislost,thedeviceusesDCforpoweringwithout

restart.

•PoEandDCarebothconnectedandDCiscurrentlypowering.WhenDCislost,thedevicerestartsandusesPoEfor

powering.

•WhenDCisusedduringstartupandPoEisconnectedafterthedevicehasstarted,DCisusedforpowering.

•WhenPoEisusedduringstartupandDCisconnectedafterthedevicehasstarted,PoEisusedforpowering.

Powerconnector

2-pinterminalblockforDCpowerinput.UseaSafetyExtraLowVoltage(SELV)compliantlimitedpowersource(LPS)witheither

aratedoutputpowerlimitedto≤100Woraratedoutputcurrentlimitedto≤5A.

AXISA9210NetworkI/ORelayModule

Speciﬁcations

FunctionPinNotes

Specications

DCground(GND)

0VDC

DCinput

Forpoweringthedevicewhen

notusingPoweroverEthernet.

Note:Thispincanonlybe

usedaspowerin.

12VDC,max36W

UL:DCpowertobesuppliedbyaUL603listedpowersupply,dependingonapplication,withappropriateratings.

Relayconnector

One4-pinterminalblockforformCrelaysthatcanbeused,forexample,tocontrolalockoraninterfacetoagate.Ifusedwithan

inductiveload,forexamplealock,connectadiodeinparallelwiththeloadtoprotectagainstvoltagetransients.

FunctionPinNotes

Specications

DCground(GND)

0VDC

Normallyopen.

Forconnectingrelaydevices.

Connectafail-securelock

betweenNOandDCground.

Thetworelaypinsare

galvanicallyseparatedfrom

therestofthecircuitryifthe

jumpersarenotused.

COM

Common

Normallyclosed.

Forconnectingrelaydevices.

Connectafail-safelock

betweenNCandDCground.

Thetworelaypinsare

galvanicallyseparatedfrom

therestofthecircuitryifthe

jumpersarenotused.

Maxcurrent=2A

Maxvoltage=30VDC

Relaypowerjumper

Whentherelaypowerjumperistted,itconnects12VDCor24VDCtotherelayCOMpin.

ItcanbeusedtoconnectalockbetweentheGNDandNO,orGNDandNCpins.

Powersource

Maxpowerat12VDCMaxpowerat24VDC

DCIN

2000mA1000mA

PoE350mA150mA

PoE+1100mA500mA

Input1connector

One4-pinterminalblockforinput.

AXISA9210NetworkI/ORelayModule

Speciﬁcations

Itsupportssupervisionwithendoflineresistors.Iftheconnectionisinterrupted,analarmistriggered.Tousesupervisedinputs,

installendoflineresistors.Usetheconnectiondiagramforsupervisedinputs.SeeSupervisedinputsonpage30.

FunctionPinNotes

Specications

DCground

1,3

0VDC

Input

2,4

Digitalinputorsupervisedinput—Connectto

pin1or3respectivelytoactivate,orleaveoating

(unconnected)todeactivate.

0tomax30VDC

Important

Thequaliedcablelengthisupto200m(656ft)ifthefollowingcablerequirementismet:AWG24.

RS485andI/Oconnector

One8-pinterminalblockincluding4-pinRS485and4-pinI/O.

RS485

FunctionPinNote

Specications

DCground(GND)

0VDC

DCoutput(+12V)

Suppliespowertoauxiliary

devices,forexample,Modbus

sensors.

12VDC,max200mA

I/O

FunctionPinNote

Specications

Digitaloutput

Ifusedwithaninductiveload,

forexamplearelay,connect

adiodeinparallelwiththe

loadtoprotectagainstvoltage

transients.

0tomax30VDC,opendrain,

100mA

Digitaloutput

Ifusedwithaninductiveload,

forexamplearelay,connect

adiodeinparallelwiththe

loadtoprotectagainstvoltage

transients.

0tomax30VDC,opendrain,

100mA

AXISA9210NetworkI/ORelayModule

Speciﬁcations

Input

Digitalinputorsupervised

input—Connecttopin1to

activate,orleaveoating

(unconnected)todeactivate.

0tomax30VDC

Digitaloutput

Ifusedwithaninductiveload,

forexamplearelay,connect

adiodeinparallelwiththe

loadtoprotectagainstvoltage

transients.

0tomax30VDC,opendrain,

100mA

Important

•ThequaliedcablelengthforRS485isupto1000m(3281ft)ifthefollowingcablerequirementsaremet:1twistedpair

withshield,AWG24,120ohmimpedance.

•ThequaliedcablelengthforI/Oisupto200m(656ft).

I/Oconnector

Usetheauxiliaryconnectorwithexternaldevicesincombinationwith,forexample,motiondetection,eventtriggering,andalarm

notications.Inadditiontothe0VDCreferencepointandpower(DCoutput),theauxiliaryconnectorprovidestheinterfaceto:

Digitalinput-Forconnectingdevicesthatcantogglebetweenanopenandclosedcircuit,forexamplePIRsensors,door/window

contacts,andglassbreakdetectors.

Supervisedinput-Enablespossibilitytodetecttamperingonadigitalinput.

Digitaloutput-ForconnectingexternaldevicessuchasrelaysandLEDs.ConnecteddevicescanbeactivatedbytheVAPIX®

ApplicationProgrammingInterfaceorfromtheproduct’swebpage.

4-pinterminalblock

FunctionPinNotes

Specications

DCground

0VDC

DCoutput

Canbeusedtopowerauxiliaryequipment.

Note:Thispincanonlybeusedaspowerout.

12VDC

Maxload=50mAintotal

Digitalinputorsupervisedinput–Connecttopin1toactivate,or

leaveoating(unconnected)todeactivate.Tousesupervisedinput,

installend-of-lineresistors.Seeconnectiondiagramforinformation

abouthowtoconnecttheresistors.

0tomax30VDC

Congurable

(InputorOutput)

3–4

Digitaloutput–Internallyconnectedtopin1(DCground)when

active,andoating(unconnected)wheninactive.Ifusedwithan

inductiveload,e.g.,arelay,connectadiodeinparallelwiththeload,

toprotectagainstvoltagetransients.I/Osarecapableofdriving

12VDC,50mA(combinedmax)externalload,ifinternal12VDC

output(pin2)isused.Inthecaseofusingopendrainconnections

incombinationwithanexternalpowersupply,thentheI/Oscan

manageDCsupplyof0–30VDC,100mAeach.

0tomax30VDC,opendrain,

100mA

AXISA9210NetworkI/ORelayModule

Speciﬁcations

DCground

DCoutput12V

I/Oconguredasinput

I/Oconguredasoutput

Input2connector

Two2-pinterminalblocksforexternaldevices,forexampleglassbreakorredetectors.

UL:TheconnectorhasnotbeenevaluatedbyULforburglarorrealarmuse.

FunctionPinNotes

Specications

DCground

0VDC

Input

Digitalinputorsupervisedinput–Connecttopin1to

activate,orleaveoating(unconnected)todeactivate.

0tomax30VDC

FunctionPinNotes

Specications

DCground

0VDC

Input

Digitalinputorsupervisedinput–Connecttopin1to

activate,orleaveoating(unconnected)todeactivate.

0tomax30VDC

Supervisedinputs

Tousesupervisedinputs,installendoflineresistorsaccordingtothediagrambelow.

Parallelrstconnection

Theresistorvaluesmustbe4.7kΩand22kΩ.

AXISA9210NetworkI/ORelayModule

Speciﬁcations

Serialrstconnection

Theresistorvaluesmustbethesameandpossiblevaluesare1kΩ,2.2kΩ,4.7kΩand10kΩ.

Note

Itisrecommendedtousetwistedandshieldedcables.Connectshieldingto0VDC.

Status

Description

Open

Thesupervisedswitchisinopenmode.

Closed

Thesupervisedswitchisinclosedmode.

Short

TheI/OorInput1-5cableisshortcircuittoGND.

Cut

TheI/OorInput1-5cableiscutandleftopenwithnocurrent

pathtoGND.

AXISA9210NetworkI/ORelayModule

Troubleshooting

Resettofactorydefaultsettings

Important

Resettofactorydefaultshouldbeusedwithcaution.Aresettofactorydefaultresetsallsettings,includingtheIPaddress,to

thefactorydefaultvalues.

Toresettheproducttothefactorydefaultsettings:

1.Disconnectpowerfromtheproduct.

2.Pressandholdthecontrolbuttonwhilereconnectingpower.SeeProductoverviewonpage25.

3.Keepthecontrolbuttonpressedfor25secondsuntilthestatusLEDindicatorturnsamberforthesecondtime.

4.Releasethecontrolbutton.TheprocessiscompletewhenthestatusLEDindicatorturnsgreen.Theproducthasbeenreset

tothefactorydefaultsettings.IfnoDHCPserverisavailableonthenetwork,thedefaultIPaddressis192.168.0.90.

5.Usetheinstallationandmanagementsoftwaretools,assignanIPaddress,setthepassword,andaccesstheproduct.

Youcanalsoresetparameterstofactorydefaultthroughthedevice’swebinterface.GotoMaintenance>Factorydefaultand

clickDefault.

Firmwareoptions

Axisoffersproductrmwaremanagementaccordingtoeithertheactivetrackorthelong-termsupport(LTS)tracks.Beingonthe

activetrackmeanscontinuouslygettingaccesstoallthelatestproductfeatures,whiletheLTStracksprovideaxedplatformwith

periodicreleasesfocusedmainlyonbugxesandsecurityupdates.

Usingrmwarefromtheactivetrackisrecommendedifyouwanttoaccessthenewestfeatures,orifyouuseAxisend-to-end

systemofferings.TheLTStracksarerecommendedifyouusethird-partyintegrations,whicharenotcontinuouslyvalidated

againstthelatestactivetrack.WithLTS,theproductscanmaintaincybersecuritywithoutintroducinganysignicantfunctional

changesoraffectinganyexistingintegrations.FormoredetailedinformationaboutAxisproductrmwarestrategy,goto

axis.com/support/device-software.

Checkthecurrentrmwareversion

Firmwareisthesoftwarethatdeterminesthefunctionalityofnetworkdevices.Whenyoutroubleshootaproblem,werecommend

youtostartbycheckingthecurrentrmwareversion.Thelatestrmwareversionmightcontainacorrectionthatxesyour

particularproblem.

Tocheckthecurrentrmware:

1.Gotothedevice’swebinterface>Status.

2.SeethermwareversionunderDeviceinfo.

Upgradethermware

Important

•Preconguredandcustomizedsettingsaresavedwhenyouupgradethermware(providedthatthefeaturesareavailablein

thenewrmware)althoughthisisnotguaranteedbyAxisCommunicationsAB.

•Makesurethedeviceremainsconnectedtothepowersourcethroughouttheupgradeprocess.

AXISA9210NetworkI/ORelayModule

Troubleshooting

Note

Whenyouupgradethedevicewiththelatestrmwareintheactivetrack,theproductreceivesthelatestfunctionality

available.Alwaysreadtheupgradeinstructionsandreleasenotesavailablewitheachnewreleasebeforeyouupgradethe

rmware.Tondthelatestrmwareandthereleasenotes,gotoaxis.com/support/device-software.

1.Downloadthermwareletoyourcomputer,availablefreeofchargeataxis.com/support/device-software.

2.Logintothedeviceasanadministrator.

3.GotoMaintenance>FirmwareupgradeandclickUpgrade.

Whentheupgradehasnished,theproductrestartsautomatically.

Technicalissues,clues,andsolutions

Ifyoucan’tndwhatyou’relookingforhere,trythetroubleshootingsectionataxis.com/support.

Problemsupgradingthermware

FirmwareupgradefailureIfthermwareupgradefails,thedevicereloadsthepreviousrmware.Themostcommonreason

isthatthewrongrmwarelehasbeenuploaded.Checkthatthenameofthermwarele

correspondstoyourdeviceandtryagain.

Problemsafterrmware

upgrade

Ifyouexperienceproblemsafterarmwareupgrade,rollbacktothepreviouslyinstalledversion

fromtheMaintenancepage.

ProblemssettingtheIPaddress

Thedeviceislocatedona

differentsubnet

IftheIPaddressintendedforthedeviceandtheIPaddressofthecomputerusedtoaccessthe

devicearelocatedondifferentsubnets,youcannotsettheIPaddress.Contactyournetwork

administratortoobtainanIPaddress.

TheIPaddressisbeingused

byanotherdevice

DisconnecttheAxisdevicefromthenetwork.Runthepingcommand(inaCommand/DOSwindow,

typepingandtheIPaddressofthedevice):

•Ifyoureceive:Replyfrom<IPaddress>:bytes=32;time=10...

thismeansthattheIPaddressmayalreadybeinusebyanotherdeviceonthenetwork.

ObtainanewIPaddressfromthenetworkadministratorandreinstallthedevice.

•Ifyoureceive:Requesttimedout,thismeansthattheIPaddressisavailable

forusewiththeAxisdevice.Checkallcablingandreinstallthedevice.

PossibleIPaddressconict

withanotherdeviceonthe

samesubnet

ThestaticIPaddressintheAxisdeviceisusedbeforetheDHCPserversetsadynamicaddress.

ThismeansthatifthesamedefaultstaticIPaddressisalsousedbyanotherdevice,theremay

beproblemsaccessingthedevice.

Thedevicecan’tbeaccessedfromabrowser

Can’tlogin

WhenHTTPSisenabled,ensurethatthecorrectprotocol(HTTPorHTTPS)isusedwhenattempting

tologin.Youmayneedtomanuallytypehttporhttpsinthebrowser’saddresseld.

Ifthepasswordfortherootaccountislost,thedevicemustberesettothefactorydefaultsettings.

SeeResettofactorydefaultsettingsonpage32.

TheIPaddresshasbeen

changedbyDHCP

IPaddressesobtainedfromaDHCPserveraredynamicandmaychange.IftheIPaddresshasbeen

changed,useAXISIPUtilityorAXISDeviceManagertolocatethedeviceonthenetwork.Identify

thedeviceusingitsmodelorserialnumber,orbytheDNSname(ifthenamehasbeencongured).

Ifrequired,astaticIPaddresscanbeassignedmanually.Forinstructions,gotoaxis.com/support.

Certicateerrorwhenusing

IEEE802.1X

Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisdevicemustbe

synchronizedwithanNTPserver.GotoSystem>Dateandtime.

AXISA9210NetworkI/ORelayModule

Troubleshooting

Thedeviceisaccessiblelocallybutnotexternally

Toaccessthedeviceexternally,werecommendyoutouseoneofthefollowingapplicationsforWindows

•AXISCompanion:freeofcharge,idealforsmallsystemswithbasicsurveillanceneeds.

•AXISCameraStation:30-daytrialversionfreeofcharge,idealforsmalltomid-sizesystems.

Forinstructionsanddownload,gotoaxis.com/vms.

Can’tconnectoverport8883withMQTToverSSL

Therewallblockstrafc

usingport8883asit’s

deemedinsecure.

Insomecasestheserver/brokermightnotprovideaspecicportforMQTTcommunication.Itmay

stillbepossibletouseMQTToveraportnormallyusedforHTTP/HTTPStrafc.

•Iftheserver/brokersupportsWebSocket/WebSocketSecure(WS/WSS),typicallyon

port443,usethisprotocolinstead.Checkwiththeserver/brokerprovidertoseeif

WS/WSSissupportedandwhichportandbasepathtouse.

•Iftheserver/brokersupportsALPN,theuseofMQTTcanbenegotiatedoveranopen

port,suchas443.Checkwithyourserver/brokerprovidertoseeifALPNissupported

andwhichALPNprotocolandporttouse.

Contactsupport

Ifyouneedmorehelp,gotoaxis.com/support.

UsermanualVer.M2.2

AXISA9210NetworkI/ORelayModule

Date:April2024

Partno.T10202445

Axis 02861-001 A9210 Network I/O Relay Module

Product's Documents

Axis A9210 User Manual

Specifications

Axis 02861-001 Questions and Answers