Avigilon ACC VMA-RPA-4P2 User manual

User Guide
Avigilon ACC™ ES Analytics Appliance
VMA-RPA-4P2 and VMA-RPA-4P4

©2017 -2021,Avigilon Corporation. All rights reserved. AVIGILON, the AVIGILON logo, AVIGILON
CONTROL CENTER, ACC, and AVIGILON APPEARANCE SEARCH are trademarks of Avigilon Corporation.
MAC, MacOS, FINDER and MACINTOSH are registered trademarks of Apple Inc. FIREFOX is a registered
trademark of Mozilla Foundation. Android is a trademark of Google LLC. Other names or logos mentioned
herein may be the trademarks of their respective owners. The absence of the symbols ™ and ® in proximity
to each trademark in this document or at all is not a disclaimer of ownership of the related trademark.
Avigilon Corporation protects its innovations with patents issued in the United States of America and other
jurisdictions worldwide (see avigilon.com/patents). Unless stated explicitly and in writing, no license is
granted with respect to any copyright, industrial design, trademark, patent or other intellectual property
rights of Avigilon Corporation or its licensors.
This document has been compiled and published using product descriptions and specifications available at
the time of publication. The contents of this document and the specifications of the products discussed
herein are subject to change without notice. Avigilon Corporation reserves the right to make any such
changes without notice. Neither Avigilon Corporation nor any of its affiliated companies: (1) guarantees the
completeness or accuracy of the information contained in this document; or (2) is responsible for your use
of, or reliance on, the information. Avigilon Corporation shall not be responsible for any losses or damages
(including consequential damages) caused by reliance on the information presented herein.
Avigilon Corporation
avigilon.com
20210806
This device is provided with a battery powered real-time clock (RTC) circuit. There is a danger of explosion
if the RTCbattery is incorrectly replaced. Replace only with same or equivalent type recommended by the
manufacturer. Discard used batteries according to the manufacturer's instructions.
This equipment is to be connected only to PoE networks without routing to the outside plant.
ii

Table of Contents
Introduction 1
Before YouStart 1
Package Contents 1
Overview 2
Front View 2
Rear View 2
System Requirements 3
Camera Frame Rate 3
Web Browser 3
Supported Network Configurations 3
Starting the ACC ES Analytics Appliance for the First Time 5
Troubleshooting 6
Accessing the Server Management page from a Web Browser 6
Cannot Discover the Device 6
Network Configuration 7
Monitoring System Health 7
Using Server Management 8
Starting and Stopping Server Management 8
Viewing PoE Port Status 9
Manage ACC Services 10
Enable ACC Client Users to Archive Video 10
Provide Server Logs and System Logs for Support 11
Manage Device Settings 11
Change the ACC ES Analytics Appliance Administrator Password 12
Manage Time Settings 12
Manage Storage 13
Connect the Device to Cameras and ACC Client Users 14
Assigning a PoE Power Budget 14
Providing Device Logs for Support 16
Installing the ACC Client 17
Activate the ACC Software and Connect to Avigilon Cloud Services 17
Activate ACC Software and Feature Licenses 17
Connect to Avigilon Cloud Services 18
Activating a License 18
iii

Online Activation 18
Offline Activation 19
Reactivating aLicense 19
Starting Up and Shutting Down the ACC Client Software 20
Connecting to External Devices 21
Budgeting PoE Power 22
LEDIndicators 23
Front Panel LEDs 23
Back Panel LEDs 24
Manage Certificates 25
Replace the Web Certificate 25
Upload a Trusted CA Certificate 27
Upgrade the Firmware 28
Using the Reset Button 30
Restarting the System 30
Restoring Factory Default Settings 30
For More Information 32
iv

Introduction
The Avigilon ACC ES Analytics Appliance is an all-in-one solution for network video recording plus server
side video analytics. The appliance features:
lA network switch to connect and power IP cameras.
lBuilt-in server to run the Avigilon Control Center Server Software.
lVideo analytics engine to enable connected cameras to detect classified objects.
This guide describes how to configure the system after the appliance has been powered and is connected
the local area network.
Before YouStart
Avigilon recommends:
lThe use of an uninterruptible power supply (UPS) system to protect your video surveillance system
hardware. A UPS system is used to protect critical equipment from mains supply problems, including
spikes, voltage dips, fluctuations and complete power failures using a dedicated battery. It can also
be used to power equipment during the time it takes for a standby generator to be started and
synchronized.
If possible, the UPS connection should include configuration to shut down the operating system on
the appliance when battery power is low or there is 15 minutes of power remaining.
lCameras not be connected to the appliance until after the appropriate network configuration has
been set up.
Package Contents
Ensure the package contains the following:
lAvigilon Video Appliance
lPower cord
lPower supply and screwdriver to secure it
lWall installation hardware
lDigital input/output terminal block connector
Introduction 1

Overview
Front View
1. Reset button
Use this button to physically restart the appliance or perform a factory reset.
2. Status LED
Provides information about daily operations. For more information, see LEDIndicators on page23.
Rear View
1. Corporate network uplink port
Accepts a 1GbE Ethernet connection to the general network to allow users access to the web
interface and connected camera video.
2. Camera network uplink port
Accepts a 1GbE Ethernet connection to the cameras that are connected to the PoE switch
component. Can be used to link to other PoE switches and cameras.
Overview 2

3. PoE switch component
Connect cameras to the 10/100 speed PoE switch component to power the cameras and record
video.
4. Power connector
Accepts power to the appliance.
5. I/O connector
Provides connections to external input/output devices. For more information, see Connecting to
External Devices on page21.
System Requirements
Camera Frame Rate
The ACC ES Analytics Appliance can provide analytics for non-analytics cameras. For optimal analytics
performance, the source camera should stream a minimum of 10 images per second (ips).
Web Browser
Administrative settings for the appliance are managed through a web interface, accessed from any
Windows, Mac or mobile device using any of the following web browsers:
lMozilla Firefox browser version 3.6 or later
lGoogle Chrome browser 8.0 or later
lMicrosoft Edge browser 25 or later
lSafari 5.0 or later
lChrome on Android 2.2 or later
lSafari on Apple iOS 5 or later.
lWindows Internet Explorer browser version 7.0 or later
Note: Your web browser must be configured to accept cookies or the web interface will not
function correctly.
Supported Network Configurations
Note: The Camera Uplink Port does not support dynamically switching DHCP servers.
System Requirements 3

Network
Connections Camera Web
Interface
Access
Supported IP Configurations
Corporate LAN
Uplink
Camera LAN
Uplink
Notes
Corporate
LAN Uplink
only
No Static or DHCP
assigned
Unconnected
(leave as DHCP)
Camera LAN Uplink and
connected cameras will use
Zeroconf IP addresses.
Camera LAN
Uplink only
Yes Unconnected
(leave as DHCP)
Static, DHCP-
assigned, DHCP-
Zeroconf
Corporate
and Camera
LAN Uplink
via Camera
LAN Uplink
only
Static, DHCP-
assigned, DHCP-
Zeroconf
Static, DHCP-
assigned, DHCP-
Zeroconf
Corporate and Camera LAN
Uplinks must be on different
subnets.
Supported Network Configurations 4

Starting the ACC ES Analytics Appliance for the
First Time
After powering on the ACC ES Analytics Appliance, complete the following procedure:
1. Connect a port on the appliance to the local network with an Ethernet cable.
2. Press the power button on the front of the appliance and wait for the appliance to start up.
3. On a network workstation, discover the appliance. Use File Explorer on a Windows computer or
Finder® on a Macintosh computer.
4. Click past any connection messages displayed by the browser. You will see two warning messages
that differ slightly depending on the browser. For example, if the browser is:
lChrome—Click Advanced on the first screen and Proceed to <IPaddress>(unsafe) on the
second screen.
lFirefox—Click Advanced on the first screen and Add Exception on the second screen, check
Permanently store this exception, and click Confirm Security Exception.
5. When you are prompted by the Server Management page, enter a new password for the
administrator username.
The Strength meter measures the complexity of your password: Red is too simple, yellow is
reasonably complex, and green is complex. Complexity measures the difficulty to discover your
password, not how secure your password is. A complex password is recommended.
The page refreshes and you are prompted to log in.
6. Enter administrator as the username and your new password.
The Dashboard panel of the Server Management page is displayed.
7. Set the language for the Server Management page, a user-friendly hostname, and the time zone. In
the navigation sidebar, click Device to open the Device page. In the:
a. General pane, select the Language from the drop-down.
b. Hostname pane, optionally replace the serial number of the appliance with a descriptive
hostname for the appliance.
c. Time pane, specify the Time Zone and identify the time source in the NTP drop-down and
Servers list.
For more information, see Manage Device Settings on page11.
8. Select how the appliance obtains IPaddresses from the network. On the navigation sidebar, click
Network to open the Network page. For each network port used, select Automatic or manually enter
the settings.
For more information, see Connect the Device to Cameras and ACC Client Users on page14.
For more information about the Server Management page, see Using Server Management on page8
You are now ready to install the ACC Client software and connect the ACC ES Analytics Appliance to an
ACC site.
Starting the ACC ES Analytics Appliance for the First Time 5

Troubleshooting
Accessing the Server Management page from a Web Browser
There may be cases where you want to access the Server Management page without using the ACC Client.
You can access the Server Management page from any Windows®, Apple, or mobile device using most
popular web browsers.
Note: Your web browser must be configured to accept cookies or the Web Interface will not
function correctly.
1. On a network workstation, discover the appliance. Use File Explorer (Windows) or Finder® (Apple).
You are looking for a device labeled “VMA-RPA-4Px-<serial number>” or the hostname you
configured in the Server Management page for this device.
2. Click past any connection messages displayed by the browser. You will see two warning messages
that differ slightly depending on the browser. If the browser is:
lChrome—Click Advanced on the first screen and Proceed to <IPaddress>(unsafe) on the
second screen.
lFirefox—Click Advanced on the first screen and Add Exception on the second screen, check
Permanently store this exception, and click Confirm Security Exception.
3. Log in as administrator.
The Dashboard panel of the Server Management page is displayed.
Cannot Discover the Device
There are several ways you can discover a device that is supposed to connected to your network from a
network workstation. The recommended order to discover a device is:
lCheck that the appliance is connected to the local network with an Ethernet cable.
lCheck that the device is powered up. If not, press the power button on the front of the appliance and
wait for the appliance to start up.
lUsing File Explorer (Windows) or Finder (Apple)
You are looking for a device labeled “VMA-RPA-4Px-<serial number>” or the hostname you
configured in the Server Management page for this device.
lDiscover the DHCP-assigned IPaddress from the ACC Client software:
lLog into the site that uses this naming convention: VMA-RPA-4Px-<serial number>.
Note: The username and password for the Web Interface application is separate from
the administrator username and password for the ACC Server.
Troubleshooting 6

lAccess the appliance from your web browser using the URLhttps://VMA-RPA-4Px-<serial number>
lUse the Address Resolution Protocol (ARP) to determine the IP address for the device:
1. Locate and copy down the MAC Address (MAC) listed on the Serial Number Tag for reference.
2. Open a Command Prompt window and enter the following command:
arp -a
3. Scroll through the response and look for the IP address corresponding to the MAC address.
If none of the above suggestions resolve the problem, contact Avigilon Technical Support.
Network Configuration
By default, the ACC ES Analytics Appliance acquires an IP address on the network through DHCP. If you
need to set up the ACC ES Analytics Appliance to use a static IP address or any specific network
configuration, seeConnect the Device to Cameras and ACC Client Users on page14 files for more
information.
Monitoring System Health
You can monitor the health of the system components in the Site Health in the ACC Client software. See the
Help files provided with the ACC Client software, or the Avigilon ACC Client User Guide available from the
Avigilon website for more information.
Network Configuration 7

Using Server Management
The ACC ES Analytics Appliance is configured through Server Management, which you can access from the
ACC Client application (if you are adding the appliance to an existing multi-server site), or any compatible
browser on a workstation on the same network as the appliance. With Server Management you can
configure the appliance server settings, set how the server keeps time, and remotely restart or upgrade the
server. When the appliance is the first (or only) ACCserver deployed at a site, you must access Server
Management with a browser, and after you configure the appliance you can download the ACC Client
software to the workstation and activate the ACCserver software on the appliance. Throughout this section,
the term device is used to identify the appliance.
Start backing up the system settings for the appliance after you configure it. These settings include the ACC
password, and the settings for the camera connections. For more information on backing up the site and
server configurations, see the Help files provided with the ACC Client software, or the Avigilon ACC Client
User Guide available from the Avigilon website.
Throughout this section, the term device is used to identify the recorder.
Starting and Stopping Server Management
Start and log in to Server Management from any network workstation with network access to the device,
using any of the following methods:
lDirectly from the ACC Client software:
a. Start the ACC Client software.
b. Log in to the site from the System Explorer.
c. In the New Task menu , click Site Setup.
d. Select the device in the System Explorer and click Server Management to open the
device sign-in page.
lWith a bookmark from a web browser:
Use one of these methods to create a bookmark:
nDiscover the device
a. Open the Network tab in File Explorer (Windows) or Finder (Macintosh) to locate the
device.
b. You are looking for a device labeled “VMA-RPA-4Px-<serial number>” or the hostname
you configured in the Server Management page for this device.
If you cannot locate the device, see Troubleshooting on page6.
c. Right click and select View Device Webpage to open the device sign in page in your
default web browser.
d. Bookmark the device sign in page
nUse the IP address or hostname
Using Server Management 8

a. Open a web browser from a network workstation with network access to the device.
b. Enter its IP address or hostname into the web browser to open the device sign-in page:
https://<Device IP address >|<Device hostname>/
For example:
lhttps://169.254.100.100/ where 169.254.100.100 is the IP
address configured in the Device panel.
lhttps://my_AvigilonDevice/ , where my_AvigilonDevice/ is the
hostname configured in the Device panel.
Note: If you forgot the IPaddress or hostname that was configured during the
installation process, the information is listed in the ACC Client software, in the
server Setup tab.
c. Bookmark the device sign-in page.
Log out and stop Server Management by clicking the log out icon on the right of the Server Management
title bar.
Viewing PoE Port Status
The PoE panel displays a status for each port in the Status column. Statuses include the following:
Green Powered A PoE device is connected to the port and is operating normally.
High
powered
PoE+ is turned on.
Gray Disconnected There is no device connected to the port.
Unpowered The PoE port power is switched off from the PoE page in Server Management
Yellow Overloaded A PoE device is connected to the port but is not receiving power. This status
typically occurs when one port is over current, or the device is requesting more
power than budgeted, etc.
Low current The device is getting low current from the port.
Red Error The device is in an error state.
Tip: If a camera is disconnected then reconnected to the device, you may need to refresh this page
to view the latest status and budget values.
Viewing PoE Port Status 9

Manage ACC Services
On the Server panel use the:
lGeneral pane:
To... Do this...
Shut down all the services before you shut
down the device.
Click Stop.
Start up all the services after they have been
shut down.
Click Start.
Reset the ACC ES Analytics Appliance Click Reset
Format the storage drive. Click Reinitialize to delete all configuration and
recorded video data.
lNetwork Storage Management pane to enable ACC Client application users to archive video from
the ACC ES Analytics Appliance. See Enable ACC Client Users to Archive Video below
lService and RTP Ports panes to change the UDPand TCP ports used to communicate with the ACC
ES Analytics Appliance:
lIn the Service Ports pane, enter the Base value to use for the HTTP, HTTPS, and UDPports and
click Apply. The list of ports is updated.
lIn the RTP Ports pane, enter the Base value to use for the UDPports and click Apply. The
range of ports available for RTP is updated.
Important: These changes can only take effect after the system restarts. When you are
prompted, allow the system to restart.
Enable ACC Client Users to Archive Video
To allow users of the ACC Client application to archive video from the ACC ES Analytics Appliance:
1. From the navigation bar, open the Server panel.
2. In the Network Storage Management pane, click Enabled
3. From the Protocol drop down list, select one of the following:
lCIFS — Common Internet file system. The network path is typically in this format: //<hostname
or IP> /<path>
lNFS — Network file system. The network path is typically in this format: <hostname or IP> :
<path>
4. In the Network Path field, enter the path to the preferred video archiving location.
5. If the network location requires authentication, enter the credentials in the Username and Password
Manage ACC Services 10

fields.
6. Click Apply.
Provide Server Logs and System Logs for Support
Use the Logs panel to view the Server Logs and System Logs panes and prepare log files requested by
Avigilon Technical Support to help resolve an issue.
Typically, Avigilon Technical Support assists you to access and filter the logs on this panel to isolate the logs
that they require. You then copy and paste the logs into a text file, save it and send it to Avigilon Technical
Support.
By default, a log pane displays 100 warning messages from the logs.
You can filter the logs to display the information that you need:
1. In the drop down list, select the type of logs that you need.
lFor the Server Logs:
oException Logs
oFCP Logs
oServer Logs
oWebEndpoint Logs
lFor the System Logs:
oSystem Logs
oBoot Logs
oWeb Server Logs
2. In the Maximum Logs drop down list, select the number of log messages you want to display each
time.
3. Enter text in the Filter field to apply a filter to the log listings.
4. Click the Sync button to display the updated logs.
Manage Device Settings
On the navigation bar, click Device.
To... On the
Device
panel
card...
Setting
Change the language for Server
Management
General Choose your language from the drop down
Language list
Provide Server Logs and System Logs for Support 11

To... On the
Device
panel
card...
Setting
Replace the default server name with
a user-friendly hostname
Hostname Change the Hostname.
The default hostname is the same as the server
name. The server name is in the form <Model>-
<Serial Number>.
Set the time zone Time Specify the Time Zone and identify the time source
in the NTP drop-down and Servers list. See Manage
Time Settings below
Change the password for the ACC ES
Analytics Appliance administrator.
Password See Change the ACC ES Analytics Appliance
Administrator Password below.
Install the latest version of the
firmware on your device.
Upgrade
Firmware
See Upgrade the Firmware on page28.
Manage the certificates used by
Server Management and the ACC ES
Analytics Appliance.
Certificates See Manage Certificates on page25.
Change the ACC ES Analytics Appliance Administrator Password
You can only change the password, not the default administrator username for Server Management.
1. On the navigation bar, click Device.
2. On the General panel locate the Password pane.
3. Enter your current password in the Old Password field.
4. Enter your new password in the New Password and Confirm Password fields.
A complex password is recommended.
Remember to save the password in a secure format and location either physically or digitally so that it can
be retrieved if the password is forgotten, and discard the record of the previous password.
CAUTION — You will lose recorded video and configuration data if you forget your
password. To reset the administrator password, you must reset the device to the factory
default settings. This will also format the hard drives and delete the configuration data and
recorded video. For more information on performing a factory restore, see Restoring
Factory Default Settings on page30.
Manage Time Settings
Customize how the ACC ES Analytics Appliance keeps time:
Change the ACC ES Analytics Appliance Administrator Password 12

1. Select your Time Zone from the drop-down list. The time zone that you set here is used by the
recording schedules defined in the ACC Client software.
2. Select whether you want to keep synchronized time through a Network Time Protocol (NTP) server
(recommended) in the NTP field.
Tip: To synchronize time with ONVIF devices (that is, non-Avigilon cameras), you can connect
to port 123 on the ACC ES Analytics Appliance to use it as an NTP server.
Select:
lDHCP to automatically use the existing NTP servers in the network.
lManual to enter the address of NTP servers in the Servers list. Controls to add and delete
addresses in the list, and reorder them are activated.
lOff if you do not use an NTP server.
Note: The default set of NTP servers is always present in the Servers list. However, this list is
only used if NTP is enabled and not provided by your DHCP server. The default list cannot
be rearranged or deleted.
l0.pool.ntp.org
l1.pool.ntp.org
l2.pool.ntp.org
l3.pool.ntp.org
3. Click Apply to save the time settings.
Manage Storage
On the Storage panel you can view the storage capacity of the device and the status of the storage drive on
ACCES4- and 8-port appliances (or drives on older 4-port ACCESappliances).
Click Storage on the navigation bar to open the Storage panel. You can perform any of the following actions
in the pane in the Storage panel:
To... Do this...
View the capacity and status of
the storage drive.
On the Physical Disks panel, information about each physical disk,
including its model and serial number is listed.
When the storage drive is:
lCorrectly working, Ready is displayed.
lNot correctly working, one of several error states is displayed.
Manage Storage 13

Connect the Device to Cameras and ACC Client Users
On the Network panel, you can change network connections of the device. Two network connections are
supported: one for a corporate network and one for a camera network.
Note: The corporate network and the camera network must be on different IPsubnets.
The corporate network is the network that typically provides users with access to the device. Users who
monitor video through the ACC Client software connect to the device through this network.
The camera network is a closed network that typically only contains cameras. This reduces the amount of
interference with video recording.
When connecting an ONVIF device to the camera network, configure it to use the appliance as its time/NTP
server.
For more information about the network connections, see Supported Network Configurations on page3.
You can perform any of the following actions in each of the panes in the Network panel:
To... Do this...
Set how the
device obtains an
IP address for
each network.
Toggle Automatic IP on to discover connected networks automatically (the default
setting), or off to manually specify the connections. Enter the appropriate values in
the following fields if you are manually entering the connection settings:
In each of the panes in the Network panel, toggle Automatic IP on to discover
connected networks automatically (the default setting), or off to manually specify the
connections. Enter the appropriate values in the following fields if you are manually
entering the connection settings:
lIP Address
lSubnet Mask
lDefault Gateway
Click Apply to save your changes.
Set how the
device obtains a
named address
from a DNS
server.
Toggle Automatic DNS on to discover connected DNSservers automatically (the
default setting), or off to manually specify the DNSservers. Controls to add and
delete addresses in the list, and reorder them are activated when Automatic DNSis
toggled off.
Assigning a PoE Power Budget
Use the PoE panel to see how much power is available to, and being used by, connected devices. The
default setting for all ports is Auto. This setting automatically detects and budgets the amount of power
required by the device connected to the port. For each port you can adjust this setting manually, or turn off
Connect the Device to Cameras and ACC Client Users 14

power output completely. If you want to manually adjust the power output of the ports you must calculate a
PoE power budget, see Budgeting PoE Power on page22.
Tip: If you are using a midspan PoE power injector for cameras that require high power PoE, you
should set that PoE port to Off.
To open the PoE panel, either:
lClick on the PoE status panel on Server Management launch page.
lClick PoE from the Dashboard navigation bar.
To... Do this...
See how much power is available to, and being used
by, connected devices.
Look at the two bars at the top of the panel:
lThe Budget bar indicates the total amount of
power budgeted for all devices connected to
the PoE ports.
lThe Consumption bar indicates the actual
amount of power currently used by all the
connected devices.
Adjust the power used by each PoE port.
Tip: You can also use the Power bar to
remotely power cycle the camera. After you
set the Power setting to Off, wait for the
camera to power off then change the Power
setting to Auto or Manual.
Tip: Devices that support both PoE and PoE+
(802.3at) modes of operation can be forced
into non-PoE+ mode (802.3af) by using a
manual 15W budget.
Use the Power bar for each port to configure a
PoE power budget:
lClick Off to disable power output to the port.
When power to a port is disabled, the port no
longer outputs power but can act as a standard
network connection for any device.
lClick Auto to automatically output power to the
connected device depending on its mode of
operation.
lClick Manual to enter a power budget value in
watts. Make sure the budget includes potential
power loss at the cable.
Settings are not implemented until you click Apply.
After you click Apply, allow the system to reboot when the following message is displayed:
Applying changes may power-cycle PoE-powered devices.
Server Management automatically refreshes the screen and displays the updated settings after the new
power settings are applied.
Assigning a PoE Power Budget 15

Providing Device Logs for Support
Use the System Logs panel to view the device logs. The logs are typically requested by Avigilon Technical
Support to help resolve an issue.
By default, the page displays 100 warning messages from the Logs.
Typically, Avigilon Technical Support assists you to access and filter the logs on this panel to isolate the logs
that they require. You then copy and paste the logs into a text file, save it and send it to Avigilon Technical
Support.
You can filter the logs to display the information that you need:
1. In the drop down list, select the type of application log that you need. The options are:
oSystem Logs
oBoot Logs
oWeb Server Logs
2. In the Maximum Logs drop down list, select the number of log messages you want to display each
time.
3. Enter text in the Filter field to apply a filter to the log listings.
4. Click the Sync button to display the updated logs.
Providing Device Logs for Support 16