Axio C8110 User manual

AXISC8110NetworkAudioBridge
UserManual

AXISC8110NetworkAudioBridge
Solutionoverview
Solutionoverview
Thismanualdescribeshowyoumakethedeviceaccessibletoyouraudiosystem,andhowtocongurethedevicedirectlyfromits
interface(forinstancewhenyouusethedevicewithoutanaudioorvideomanagementsoftware).
Ifyouareusinganaudioorvideomanagementsoftware,youcanusethatsoftwareforconguringthedevice.Thefollowing
managementsoftwareareavailableforcontrollingyouraudiosystem:
•AXISAudioManagerEdge—udiomanagementsoftwareforsmallsystems.Comespre-installedonallaudiodevices
witharmwareequaltoorhigherthan10.0.
-AXISAudioManagerEdgeusermanual
•AXISAudioManagerPro—dvancedaudiomanagementsoftwareforlargesystems.
-AXISAudioManagerProusermanual
•AXISCameraStation—dvancedvideomanagementsoftwareforlargesystems.
-AXISCameraStationusermanual
•AXISCompanion—Videomanagementsoftwareforsmallsystems.
-AXISCompanionusermanual
Formoreinformation,seeAudiomanagementsoftware.
2

AXISC8110NetworkAudioBridge
Installation
Installation
Towatchthisvideo,gotothewebversionofthisdocument.
www.axis.com/products/online-manual/7278#t10181691
Downloadtheinstallationguide(pdf):
•axis.com/products/axis-c8110/support#support-resources
3

AXISC8110NetworkAudioBridge
Getstarted
Getstarted
Findthedeviceonthenetwork
TondxisdevicesonthenetworkandassignthemIPaddressesinWindows®,useXISIPUtilityorXISDeviceManager.Both
applicationsarefreeandcanbedownloadedfromaxis.com/support.
FormoreinformationabouthowtondandassignIPaddresses,gotoHowtoassignanIPaddressandaccessyourdevice.
Browsersupport
Youcanusethedevicewiththefollowingbrowsers:
ChromeTMFirefox®EdgeTMSafari®
Windows®recommendedrecommended
macOS®recommendedrecommended
Linux®recommendedrecommended
Otheroperatingsystems*
*TouseAXISOSwebinterfacewithiOS15oriPadOS15,gotoSettings Settings
Settings> > >Safari Safari Safari> > >Advanced Advanced Advanced> > >Experimental Experimental ExperimentalFeatures Features Featuresanddisable
NSURLSessionWebsocket.
Ifyouneedmoreinformationaboutrecommendedbrowsers,gotoAXISOSPortal.
Accessthedevice
1.OpenabrowserandentertheIPaddressorhostnameofthexisdevice.
2.Entertheusernameandpassword.Ifyouaccessthedeviceforthersttime,youmustsettherootpassword.SeeSeta
newpasswordfortherootaccountonpage.
Setanewpasswordfortherootaccount
Important
Thedefaultadministratorusernameisroot.Ifthepasswordforrootislost,resetthedevicetofactorydefaultsettings.See
Resettofactorydefaultsettingsonpage30
Towatchthisvideo,gotothewebversionofthisdocument.
www.axis.com/products/online-manual/7278#t10098905
Supporttip:Passwordsecurityconrmationcheck
1.Typeapassword.Followtheinstructionsaboutsecurepasswords.SeeSecurepasswordsonpage5.
2.Retypethepasswordtoconrmthespelling.

AXISC8110NetworkAudioBridge
Getstarted
3.ClickSave.Thepasswordhasnowbeencongured.
Securepasswords
Important
xisdevicessendtheinitiallysetpasswordincleartextoverthenetwork.Toprotectyourdeviceaftertherstlogin,set
upasecureandencryptedHTTPSconnectionandthenchangethepassword.
Thedevicepasswordistheprimaryprotectionforyourdataandservices.xisdevicesdonotimposeapasswordpolicyasthey
maybeusedinvarioustypesofinstallations.
Toprotectyourdatawestronglyrecommendthatyou:
•Useapasswordwithatleast8characters,preferablycreatedbyapasswordgenerator.
•Don’texposethepassword.
•Changethepasswordatarecurringinterval,atleastonceayear.
5

AXISC8110NetworkAudioBridge
Additionalsettings
Additionalsettings
Detectandrecordsound
Onewaytodetectandrecordsoundistoconnectamicrophonetotheline-inconnectionontheaudiobridge.Foroutdoor
environments,youcanusetheXISTU1002-VEMicrophoneKit.
Towatchthisvideo,gotothewebversionofthisdocument.
www.axis.com/products/online-manual/7278#t1017236
InstallingthebridgewithAXISTU1002-VE
Setuprulesforevents
Youcancreaterulestomakeyourdeviceperformactionswhencertaineventsoccur.ruleconsistsofconditionsandactions.The
conditionscanbeusedtotriggertheactions.Forexample,thedevicecanplayanaudioclipaccordingtoascheduleorwhenit
receivesacall,orsendanemailifthedevicechangesIPaddress.
Tolearnmore,checkoutourguideGetstartedwithrulesforevents.
Playaudiowhenacameradetectsmotion
Thisexampleexplainshowtosetuptheaudiodevicetoplayanaudioclipwhenanxisnetworkcameradetectsmotion.
Prerequisites
•Thexisaudiodeviceandxisnetworkcameraarelocatedonthesamenetwork.
•Themotiondetectionapplicationisconguredandrunninginthecamera.
1.Prepareanaudiocliplink:
1.1GotoAudio>Audioclips.
1.2Click>Createlinkforanaudioclip.
1.3Setthevolumeandnumberoftimestorepeattheclip.
1.4Clickthecopyicontocopythelink.
2.Createanactionrule:
2.1GotoSystem>Events>Recipients.
2.2Click+Addrecipient.
2.3Typeanamefortherecipient,forexample“Speaker”.
2.4SelectHTTPfromtheTypedrop-downlist.
6

AXISC8110NetworkAudioBridge
Additionalsettings
2.5PastetheconguredlinkfromtheaudiodeviceintheRLeld.
2.6Entertheusernameandpasswordoftheaudiodevice.
2.7ClickSave.
2.8GotoRulesandclick+Addarule.
2.9Typeanamefortheactionrule,forexample"Playclip".
2.10FromtheConditionlist,selectavideomotiondetectionalternativeunderApplications.
Note
Iftherearenooptionsforvideomotiondetection,thengotoApps,clickAXISVideoMotionDetectionand
turnonmotiondetection.
2.11FromtheActionlist,selectSendnoticationthroughHTTP.
2.12UnderRecipient,selectyourrecipient.
2.13ClickSave.
7

AXISC8110NetworkAudioBridge
Learnmore
Learnmore
SessionInitiationProtocol(SIP)
TheSessionInitiationProtocol(SIP)isusedtosetup,maintainandterminateVoIPcalls.Youcanmakecallsbetweentwoormore
parties,calledSIPuseragents.TomakeaSIPcallyoucanuse,forexample,SIPphones,softphonesorSIP-enabledxisdevices.
TheactualaudioorvideoisexchangedbetweentheSIPuseragentswithatransportprotocol,forexampleRTP(Real-Time
TransportProtocol).
Youcanmakecallsonlocalnetworksusingapeer-to-peersetup,oracrossnetworksusingaPBX.
Peer-to-peerSIP(P2PSIP)
ThemostbasictypeofSIPcommunicationtakesplacedirectlybetweentwoormoreSIPuseragents.Thisiscalledpeer-to-peerSIP
(P2PSIP).Ifittakesplaceonalocalnetwork,allthat’sneededaretheSIPaddressesoftheuseragents.typicalSIPaddressinthis
casewouldbesip:<local-ip>
Example
SIP
sip:192.168.1.101 sip:192.168.1.100
YoucansetupaSIP-enabledphonetocallanaudiodeviceonthesamenetworkusingapeer-to-peerSIPsetup.
PrivateBranchExchange(PBX)
WhenyoumakeSIPcallsoutsideyourlocalIPnetwork,aPrivateBranchExchange(PBX)canactasacentralhub.Themain
componentofaPBXisaSIPserver,whichisalsoreferredtoasaSIPproxyoraregistrar.PBXworkslikeatraditionalswitchboard,
showingtheclient'scurrentstatusandallowingforexamplecalltransfers,voicemail,andredirections.
ThePBXSIPservercanbesetupasalocalentityoroffsite.Itcanbehostedonanintranetorbyathirdpartyprovider.Whenyou
makeSIPcallsbetweennetworks,callsareroutedthroughasetofPBXs,thatquerythelocationoftheSIPaddresstobereached.
EachSIPuseragentregisterswiththePBX,andcanthenreachtheothersbydialingthecorrectextension.typicalSIPaddressin
thiscasewouldbesip:<user>@<domain>orsip:<user>@<registrar-ip>.TheSIPaddressisindependentofitsIP
addressandthePBXmakesthedeviceaccessibleaslongasitisregisteredtothePBX.
Example
8

AXISC8110NetworkAudioBridge
Learnmore
SIP
SIP
SIP
sip:[e-mail]
PBX
sip.company.com
sip:[e-mail]
sip:[e-mail]
NATtraversal
UseNT(NetworkddressTranslation)traversalwhenthexisdeviceislocatedonanprivatenetwork(LN)andyouwantto
accessitfromoutsideofthatnetwork.
Note
TheroutermustsupportNTtraversalandUPnP®.
EachNTtraversalprotocolcanbeusedseparatelyorindifferentcombinationsdependingonthenetworkenvironment.
•ICETheICEInteractiveConnectivityEstablishment)protocolincreasesthechancesofndingthemostefcientpathto
successfulcommunicationbetweenpeerdevices.IfyoualsoenableSTUNandTURN,youimprovetheICEprotocol’s
chances.
•STN-STUN(SessionTraversalUtilitiesforNT)isaclient-servernetworkprotocolthatletsthexisdevicedetermineif
itislocatedbehindaNTorrewall,andifsoobtainthemappedpublicIPaddressandportnumberallocatedfor
connectionstoremotehosts.EntertheSTUNserveraddress,forexample,anIPaddress.
•TRN-TURN(TraversalUsingRelaysaroundNT)isaprotocolthatletsadevicebehindaNTrouterorrewallreceive
incomingdatafromotherhostsoverTCPorUDP.EnterTURNserveraddressandthelogininformation.
Applications
XISCamerapplicationPlatform(CP)isanopenplatformthatenablesthirdpartiestodevelopanalyticsandotherapplications
forxisproducts.Tondoutmoreaboutavailableapplications,downloads,trialsandlicenses,gotoaxis.com/applications.
Tondtheusermanualsforxisapplications,gotohelp.axis.com.
9

AXISC8110NetworkAudioBridge
Tedeviceinterface
Tedeviceinterface
Showorhidethemainmenu.
ccesstheproducthelp.
Changethelanguage.
Setlightthemeordarktheme.
Theusermenucontains:
•Informationabouttheuserwhoisloggedin.
•Changeuser:Logoutthecurrentuserandloginanewuser.
•Logout:Logoutthecurrentuser.
Thecontextmenucontains:
•Analyticsdata:ccepttosharenon-personalbrowserdata.
•Feedback:Shareanyfeedbacktohelpusimproveyouruserexperience.
•Legal:Viewinformationaboutcookiesandlicenses.
•About:Viewdeviceinformation,includingrmwareversionandserialnumber.
•Legacydeviceinterface:Changethedeviceinterfacetothelegacydeviceinterface.
Status
NTPsync
ShowsNTPsynchronizationinformation,includingifthedeviceisinsyncwithanNTPserverandthetimeremaininguntil
thenextsync.
NTPsettings:ClicktogototheDateandtimepagewhereyoucanchangetheNTPsettings.
Deviceinfo
Showsdeviceinformation,includingrmwareversionandserialnumber.
pgradermware:ClicktogototheMaintenancepagewhereyoucandoarmwareupgrade.
Audio
Overview
Locatedevice:Clicktoplayasoundthathelpsyouidentifythespeaker.Forsomeproducts,aLEDwillashonthedevice.
Calibrate:Clicktocalibratethespeaker.
LaunchAXISAudioManagerEdge:Clicktolaunchtheapplication.
10

AXISC8110NetworkAudioBridge
Tedeviceinterface
Devicesettings
Input:Turnonoroffaudioinput.Showsthetypeofinput.
Gain:Usetheslidertochangethegain.Clickthemicrophoneicontomuteorunmute.
Output:Showsthetypeofoutput.
Gain:Usetheslidertochangethegain.Clickthespeakericontomuteorunmute.
Stream
Encoding:Selecttheencodingtousefortheinputsourcestreaming.Youcanonlychooseencodingifaudioinputisturnedon.If
audioinputistunedoff,clickEnableaudioinputtoturniton.
Echocancellation:Turnontoremoveechoesduringtwo-waycommunication.
Audioclips
Addclip:Clicktoaddanewaudioclip.
Clicktoplaytheaudioclip.
Clicktostopplayingtheaudioclip.
Thecontextmenucontains:
•Rename:Changethenameoftheaudioclip.
•Createlink:CreateaURLwhich,whenused,playstheaudiocliponthedevice.Specifythevolumeandnumber
oftimestoplaytheclip.
•Download:Downloadtheaudiocliptoyourcomputer.
•Delete:Deletetheaudioclipfromthedevice.
Listenandrecord
Clicktolisten.
Clicktostartacontinuousrecordingoftheliveaudiostream.Clickagaintostoptherecording.Ifarecordingisongoing,it
willresumeautomaticallyafterareboot.
Note
Youcanonlylistenandrecordifinputisturnedonforthedevice.GotoAudio>Devicesettingstomakesurethat
inputisturnedon.
Clicktoshowthestoragethatisconguredforthedevice.Tocongurethestorageyouneedtobeloggedinasan
administrator.
11

AXISC8110NetworkAudioBridge
Tedeviceinterface
Audiositesecurity
CAcerticate:SelectthecerticatetousewhenyouadddevicestotheaudiositewhenTLSauthenticationisenabledin
XISudioManagerEdge.
Save:Clicktoactivateandsaveyourselection.
Recordings
Clicktoltertherecordings.
From:Showrecordingsdoneafteracertainpointintime.
To:Showrecordingsupuntilacertainpointintime.
Source:Showrecordingsbasedonsource.
Event:Showrecordingsbasedonevents.
Storage:Showrecordingsbasedonstoragetype.
Clicktoplaytherecording.
Clicktostoptherecording.
Clicktoshowmoreinformationandoptionsabouttherecording.
Setexportrange:Ifyouonlywanttoexportpartoftherecording,enterfromwhentowhen.
Clicktodeletetherecording.
Export:Clicktoexport(partof)therecording.
Apps
Addapp:Clicktoinstallanewapp.
Findmoreapps:Clicktogotoanoverviewpageofxisapps.
Thecontextmenucontains:
•Applog:Clicktoviewalogoftheappevents.Thelogishelpfulwhenyoucontactsupport.
•Activatelicensewithakey:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevice
doesn’thaveinternetaccess.
Ifyoudon’thavealicensekey,gotoaxis.com/applications.Youneedalicensecodeandthexisproductserial
numbertogeneratealicensekey.
•Activatelicenseautomatically:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevicehas
internetaccess.Youneedalicensecodetoactivatethelicense.
•Deactivatethelicense:Deactivatethelicensetouseitinanotherdevice.Ifyoudeactivatethelicense,youalso
removeitfromthedevice.Todeactivatethelicenserequiresinternetaccess.
•Settings:Conguretheparameters.
12

AXISC8110NetworkAudioBridge
Tedeviceinterface
•Delete:Deletetheapppermanentlyfromthedevice.Ifyoudon’tdeactivatethelicenserst,itremainsactive.
Note
Thedevice’sperformancemightbeaffectedifyourunseveralappsatthesametime.
Start:Startorstoptheapp.
Open:Clicktoaccesstheapp’ssettings.Theavailablesettingsdependontheapplication.Someapplicationsdon’thaveany
settings.
System
Dateandtime
Thetimeformatdependsonthewebbrowser’slanguagesettings.
Note
Werecommendyoutosynchronizethedevice’sdateandtimewithanNTPserver.
Synchronization:Selectanoptionforsynchronizingthedevice’sdateandtime.
•Automaticdateandtime(NTPserverusingDHCP):SynchronizewiththeNTPserverconnectedtotheDHCPserver.
•Automaticdateandtime(manualNTPserver):SynchronizewithNTPserversofyourchoice.
-PrimaryNTPserverandSecondaryNTPserver:EntertheIPaddressofoneortwoNTPservers.Whenyouuse
twoNTPservers,thedevicesynchronizesandadaptsitstimebasedoninputfromboth.
•Customdateandtime:Manuallysetthedateandtime.ClickGetfromsystemtofetchthedateandtimesettings
oncefromyourcomputerormobiledevice.
Timezone:Selectwhichtimezonetouse.Timewillbeautomaticallyadjustedfordaylightsavingtimeandstandardtime.
Note
Thesystemusesthedateandtimesettingsinallrecordings,logsandsystemsettings.
Network
IPv4andIPv6
IPv4
•AutomaticIP(DHCP)andDNS(DHCP):Therecommendedsettingformostnetworks.Thecurrentsettingsare
updatedautomatically.
•AutomaticIP(DHCP)andmanualDNS:Contactyournetworkadministratortocongurethemanualsettings.The
currentautomaticsettingsareupdatedautomatically.
•ManualIPandDNS:Contactyournetworkadministratortocongurethesettings.
IPaddress:EnterauniqueIPaddressforthedevice.StaticIPaddressescanbeassignedatrandomwithinisolatednetworks,
providedthateachaddressisunique.Toavoidconicts,werecommendyoutocontactyournetworkadministratorbeforeyou
assignastaticIPaddress.
Subnetmask:Enterthesubnetmask.
Router:EntertheIPaddressofthedefaultrouter(gateway)usedtoconnectdevicesthatareattachedtodifferentnetworksand
networksegments.
Hostname:Enterthehostname.
Searchdomains:Whenyouuseahostnamethatisnotfullyqualied,clickAddsearchdomainandenteradomaininwhichto
searchforthehostnameusedbythedevice.
DNSservers:ClickAddDNSserverandentertheIPaddressoftheprimaryDNSserver.Thisprovidesthetranslationofhostnames
toIPaddressesonyournetwork.
13

AXISC8110NetworkAudioBridge
Tedeviceinterface
IPv6
AssignIPv6automatically:SelecttoletthenetworkrouterassignanIPaddresstothedeviceautomatically.
HTTPandHTTPS
Allowaccessthrough:SelectifauserisallowedtoconnecttothedevicethroughtheHTTP,HTTPS,orbothHTTPandHTTPS
protocols.
HTTPSisaprotocolthatprovidesencryptionforpagerequestsfromusersandforthepagesreturnedbythewebserver.The
encryptedexchangeofinformationisgovernedbytheuseofanHTTPScerticate,whichguaranteestheauthenticityoftheserver.
TouseHTTPSonthedevice,youmustinstallanHTTPScerticate.GotoSystem>Securitytocreateandinstallcerticates.
Note
IfyouviewencryptedwebpagesthroughHTTPS,youmightexperienceadropinperformance,especiallywhenyou
requestapageforthersttime.
HTTPport:EntertheHTTPporttouse.Port80oranyportintherange1024-65535areallowed.Ifyouareloggedinasan
administrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.
HTTPSport:EntertheHTTPSporttouse.Port443oranyportintherange1024-65535areallowed.Ifyouareloggedinasan
administrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.
Certicate:SelectacerticatetoenableHTTPSforthedevice.
Friendlyname
Bonjour®:Turnontoallowautomaticdiscoveryonthenetwork.
Bonjourname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMCaddress.
sePnP®:Turnontoallowautomaticdiscoveryonthenetwork.
PnPname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMCaddress.
One-clickcloudconnection
One-clickcloudconnection(O3C)togetherwithanO3Cserviceprovideseasyandsecureinternetaccesstoliveandrecordedvideo
fromanylocation.Formoreinformation,seeaxis.com/end-to-end-solutions/hosted-services.
AllowO3C:
•One-click:Thedefaultsetting.PressandholdthecontrolbuttononthedevicetoconnecttoanO3Cserviceoverthe
internet.YouneedtoregisterthedevicewiththeO3Cservicewithin24hoursafteryoupressthecontrolbutton.
Otherwise,thedevicedisconnectsfromtheO3Cservice.Onceyouhaveregisteredthedevice,Alwaysisenabledand
thedevicestaysconnectedtotheO3Cservice.
•Always:ThedeviceconstantlyattemptstoconnecttoanO3Cserviceovertheinternet.Onceyouhaveregisteredthe
device,itstaysconnectedtotheO3Cservice.Usethisoptionifthecontrolbuttononthedeviceisoutofreach.
•No:DisablestheO3Cservice.
Proxysettings:Ifneeded,entertheproxysettingstoconnecttotheHTTPserver.
Host:Entertheproxyserver’saddress.
Port:Entertheportnumberusedforaccess.
LoginandPassword:Ifneeded,enterusernameandpasswordfortheproxyserver.
Authenticationmethod:
1

AXISC8110NetworkAudioBridge
Tedeviceinterface
•Basic:ThismethodisthemostcompatibleauthenticationschemeforHTTP.It’slesssecurethantheDigestmethod
becauseitsendstheusernameandpasswordunencryptedtotheserver.
•Digest:Thismethodismoresecurebecauseitalwaystransfersthepasswordencryptedacrossthenetwork.
•Auto:Thisoptionletsthedeviceselecttheauthenticationmethoddependingonthesupportedmethods.Itprioritizes
theDigestmethodovertheBasicmethod.
Ownerauthenticationkey(OAK):ClickGetkeytofetchtheownerauthenticationkey.Thisisonlypossibleifthedeviceis
connectedtotheinternetwithoutarewallorproxy.
SNMP
TheSimpleNetworkManagementProtocol(SNMP)allowsremotemanagementofnetworkdevices.
SNMP:SelecttheversionofSNMPtouse.
•v1andv2c:
-Readcommunity:Enterthecommunitynamethathasread-onlyaccesstoallsupportedSNMPobjects.The
defaultvalueispublic.
-Writecommunity:Enterthecommunitynamethathasread/writeaccesstoallsupportedSNMPobjects
(exceptread-onlyobjects).Thedefaultvalueiswrite.
-Activatetraps:Turnontoactivatetrapreporting.Thedeviceusestrapstosendmessagesforimportant
eventsorstatuschangestoamanagementsystem.Inthedeviceinterface,youcansetuptrapsforSNMPv1
andv2c.TrapsareautomaticallyturnedoffifyouchangetoSNMPv3orturnoffSNMP.IfyouuseSNMPv3,
youcansetuptrapsthroughtheSNMPv3managementapplication.
-Trapaddress:EntertheIPaddressorhostnameofthemanagementserver.
-Trapcommunity:Enterthecommunitytousewhenthedevicesendsatrapmessagetothemanagement
system.
-Traps:
-Coldstart:Sendsatrapmessagewhenthedevicestarts.
-Warmstart:SendsatrapmessagewhenyouchangeanSNMPsetting.
-Linkup:Sendsatrapmessagewhenalinkchangesfromdowntoup.
-Authenticationfailed:Sendsatrapmessagewhenanauthenticationattemptfails.
Note
llxisVideoMIBtrapsareenabledwhenyouturnonSNMPv1andv2ctraps.Formoreinformation,see
AXISOSPortal>SNMP.
•v3:SNMPv3isamoresecureversion,whichprovidesencryptionandsecurepasswords.TouseSNMPv3,we
recommendyoutoactivateHTTPS,asthepasswordisthensentthroughHTTPS.Thisalsopreventsunauthorized
partiestoaccessunencryptedSNMPv1andv2ctraps.IfyouuseSNMPv3,youcansetuptrapsthroughtheSNMPv3
managementapplication.
-Passwordfortheaccount“initial”:EntertheSNMPpasswordfortheaccountnamed“initial”.lthoughthe
passwordcanbesentwithoutactivatingHTTPS,wedon’trecommendit.TheSNMPv3passwordcanonly
besetonce,andpreferablyonlywhenHTTPSisenabled.Oncethepasswordisset,thepasswordeldisno
longerdisplayed.Tosetthepasswordagain,youmustresetthedevicetofactorydefaultsettings.
Connectedclients
Thelistshowsallclientsthatareconnectedtothedevice.
pdate:Clicktorefreshthelist.
Security
Certicates
15

AXISC8110NetworkAudioBridge
Tedeviceinterface
Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:
•Client/servercerticates
client/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateuthority(C).
self-signedcerticateofferslimitedprotectionandcanbeusedbeforeaC-issuedcerticatehasbeenobtained.
•CAcerticates
YoucanuseaCcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication
serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedC
certicates.
Theseformatsaresupported:
•Certicateformats:.PEM,.CER,and.PFX
•Privatekeyformats:PKCS#1andPKCS#12
Important
Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.nypre-installedCcerticatesarereinstalled.
Filterthecerticatesinthelist.
Addcerticate:Clicktoaddacerticate.
Thecontextmenucontains:
•Certicateinformation:Viewaninstalledcerticate’sproperties.
•Deletecerticate:Deletethecerticate.
•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply
foradigitalidentitycerticate.
IEEE802.1x
IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless
networkdevices.IEEE802.1xisbasedonEP(ExtensibleuthenticationProtocol).
ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby
anauthenticationserver,typicallyaRDIUSserver(forexampleFreeRDIUSandMicrosoftInternetuthenticationServer).
Certicates
WhenconguredwithoutaCcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself
regardlessofwhatnetworkitisconnectedto.
Whenusingacerticate,inxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital
certicatesusingEP-TLS(ExtensibleuthenticationProtocol-TransportLayerSecurity).
Toallowthedevicetoaccessanetworkprotectedthroughcerticates,asignedclientcerticatemustbeinstalledonthedevice.
Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe
client’sidentity.
CAcerticate:SelectaCcerticatetovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice
triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.
EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.
EAPOLversion:SelecttheEPOLversionthatisusedinthenetworkswitch.
seIEEE802.1x:SelecttousetheIEEE802.1xprotocol.
Preventbrute-forceattacks
16

AXISC8110NetworkAudioBridge
Tedeviceinterface
Blocking:Turnontoblockbrute-forceattacks.brute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.
Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.
Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe
numberoffailuresallowedbothonpagelevelanddevicelevel.
IPaddresslter
selter:SelecttolterwhichIPaddressesthatareallowedtoaccessthedevice.
Policy:ChoosewhethertoAllowaccessorDenyaccessforcertainIPaddresses.
Addresses:EntertheIPnumbersthatareeitherallowedordeniedaccesstothedevice.YoucanalsousetheCIDRformat.
Custom-signedrmwarecerticate
Toinstalltestrmwareorothercustomrmwarefromxisonthedevice,youneedacustom-signedrmwarecerticate.The
certicateveriesthatthermwareisapprovedbyboththedeviceownerandxis.Thermwarecanonlyrunonaspecic
devicewhichisidentiedbyitsuniqueserialnumberandchipID.Custom-signedrmwarecerticatescanonlybecreated
byxis,sincexisholdsthekeytosignthem.
ClickInstalltoinstallthecerticate.Youneedtoinstallthecerticatebeforeyouinstallthermware.
Users
Adduser:Clicktoaddanewuser.Youcanaddupto100users.
sername:Enterauniqueusername.
Newpassword:Enterapasswordfortheuser.Passwordsmustbe1to64characterslong.OnlySCIIprintablecharacters(code
32to126)areallowedinthepassword,forexampleletters,numbers,punctuation,andsomesymbols.
Repeatpassword:Enterthesamepasswordagain.
Role:
•Administrator:Hasfullaccesstoallsettings.dministratorscanalsoadd,update,andremoveotherusers.
•Operator:Hasaccesstoallsettingsexcept:
-llSystemsettings.
-ddingapps.
•Viewer:Doesn’thaveaccesstochangeanysettings.
Thecontextmenucontains:
pdateuser:Edittheuser’sproperties.
Deleteuser:Deletetheuser.Youcan’tdeletetherootuser.
Anonymoususers
Allowanonymousviewers:Turnontoallowanyonetoaccessthedeviceasaviewerwithouthavingtologinwithauseraccount.
AllowanonymousPTZoperators:Turnontoallowanonymoususerstopan,tilt,andzoomtheimage.
Events
Rules
17

AXISC8110NetworkAudioBridge
Tedeviceinterface
ruledenestheconditionsthatmustbemetfortheproducttoperformanaction.Thelistshowsallthecurrentlycongured
rulesintheproduct.
Note
Youcancreateupto256actionrules.
Addarule:Clicktocreatearule.
Name:Enteranamefortherule.
Waitbetweenactions:Entertheminimumtime(hh:mm:ss)thatmustpassbetweenruleactivations.Itisusefuliftheruleis
activatedbyforexampleday-nightmodeconditions,toavoidthatsmalllightchangesduringsunriseandsunsetactivate
therulerepeatedly.
Condition:Selectaconditionfromthelist.conditionmustbemetforthedevicetoperformanaction.Ifmultiple
conditionsaredened,allofthemmustbemettotriggertheaction.Forinformationaboutspecicconditions,see
Getstartedwithrulesforevents.
sethisconditionasatrigger:Selecttomakethisrstconditionfunctiononlyasastartingtrigger.Itmeansthatoncetherule
isactivateditremainsactiveforaslongasalltheotherconditionsaremet,nomatterthestateoftherstcondition.Ifyoudon’t
selectthisoption,therulewillsimplybeactivewheneveralltheconditionsaremet.
Invertthiscondition:Selectifyouwanttheconditiontobetheoppositeofyourselection.
Addacondition:Clicktoaddanadditionalcondition.
Action:Selectanactionfromthelistandenteritsrequiredinformation.Forinformationaboutspecicactions,see
Getstartedwithrulesforevents.
Yourproductmayhavesomeofthefollowingpre-conguredrules:
Front-facingLEDActivation:LiveStream:Whenthemicrophoneisturnedonandalivestreamisreceived,thenthefront-facing
LEDontheaudiodevicewillturngreen.
Front-facingLEDActivation:Recording:Whenthemicrophoneisturnedonandarecordingisongoing,thenthefront-facing
LEDontheaudiodevicewillturngreen.
Front-facingLEDActivation:SIP:WhenthemicrophoneisturnedonandaSIPcallisactive,thenthefront-facingLEDonthe
audiodevicewillturngreen.SIPmustbeenabledontheaudiodevicebeforethiseventcanbetriggered.
Pre-announcementtone:Playtoneonincomingcall:WhenaSIPcallismadetotheaudiodevice,thenapre-denedaudioclip
isplayed.SIPmustbeenabledfortheaudiodevice.FortheSIPcallertoheararingtonewhiletheaudioclipisplayed,theSIP
accountfortheaudiodevicemustbeconguredtonotanswerthecallautomatically.
Pre-announcementtone:Answercallafterincomingcall-tone:Whentheaudiocliphasended,theincomingSIP-callis
answered.SIPmustbeenabledfortheaudiodevice.
Loudringer:WhenaSIPcallismadetotheaudiodevice,apre-denedaudioclipisplayedaslongastheruleisactive.SIP
mustbeenabledfortheaudiodevice.
Recipients
18

AXISC8110NetworkAudioBridge
Tedeviceinterface
Youcansetupyourdevicetonotifyrecipientsabouteventsorsendles.Thelistshowsalltherecipientscurrentlyconguredin
theproduct,alongwithinformationabouttheirconguration.
Note
Youcancreateupto20recipients.
Addarecipient:Clicktoaddarecipient.
Name:Enteranamefortherecipient.
Type:Selectfromthelist:
•FTP
-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris
speciedunderSystem>Network>IPv4andIPv6.
-Port:EntertheportnumberusedbytheFTPserver.Thedefaultis21.
-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.Ifthisdirectorydoesn’talreadyexist
ontheFTPserver,youwillgetanerrormessagewhenuploadingles.
-sername:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-setemporarylename:Selecttouploadleswithtemporary,automaticallygeneratedlenames.The
lesgetrenamedtothedesirednameswhentheuploadcompletes.Iftheuploadisaborted/interrupted,
youdon’tgetanycorruptles.However,youprobablystillgetthetemporaryles.Thiswayyouknowthat
alllesthathavethedesiredname,arecorrect.
-sepassiveFTP:UndernormalcircumstancestheproductsimplyrequeststhetargetFTPservertoopenthe
dataconnection.ThedeviceactivelyinitiatesboththeFTPcontrolanddataconnectionstothetargetserver.
ThisisnormallyneededifthereisarewallbetweenthedeviceandthetargetFTPserver.
•HTTP
-RL:EnterthenetworkaddresstotheHTTPserverandthescriptthatwillhandletherequest.Forexample:
http://192.168.254.10/cgi-bin/notify.cgi.
-sername:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-Proxy:TurnonandentertherequiredinformationifaproxyservermustbepassedtoconnecttotheHTTP
server.
•HTTPS
-RL:EnterthenetworkaddresstotheHTTPSserverandthescriptthatwillhandletherequest.Forexample:
https://192.168.254.10/cgi-bin/notify.cgi.
-Validateservercerticate:SelecttovalidatethecerticatethatwascreatedbyHTTPSserver.
-sername:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-Proxy:TurnonandentertherequiredinformationifaproxyservermustbepassedtoconnecttotheHTTPS
server.
•Networkstorage
YoucanaddnetworkstoragesuchasaNS(NetworkttachedStorage)anduseitasarecipienttostoreles.
ThelesarestoredintheMatroska(MKV)leformat.
-Host:EntertheIPaddressorhostnameforthenetworkstorage.
-Share:Enterthenameoftheshareonthehost.
-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.
-sername:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
•SFTP
-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris
speciedunderSystem>Network>IPv4andIPv6.
-Port:EntertheportnumberusedbytheSFTPserver.Thedefaultis22.
-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.Ifthisdirectorydoesn’talreadyexiston
theSFTPserver,youwillgetanerrormessagewhenuploadingles.
-sername:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-SSHhostpublickey(MD5):Enterthengerprintoftheremotehost’spublickey(a32hexadecimaldigits
string).TheSFTPclientsupportsSFTPserversusingSSH-2withRS,DS,ECDS,andED25519hostkey
19

AXISC8110NetworkAudioBridge
Tedeviceinterface
types.RSisthepreferredmethodduringnegotiation,followedbyECDS,ED25519,andDS.Makesureto
entertherightMD5hostkeythatisusedbyyourSFTPserver.
-setemporarylename:Selecttouploadleswithtemporary,automaticallygeneratedlenames.The
lesgetrenamedtothedesirednameswhentheuploadcompletes.Iftheuploadisaborted/interrupted,
youdon’tgetanycorruptles.However,youprobablystillgetthetemporaryles.Thiswayyouknowthat
alllesthathavethedesiredname,arecorrect.
•Email
-Sendemailto:Entertheemailaddresstosendemailsto.Toentermultipleaddresses,usecommasto
separatethem.
-Sendemailfrom:Entertheemailaddressofthesendingserver.
-sername:Entertheusernameforthemailserver.Leavethiseldemptyifthemailserverdoesnot
requireauthentication.
-Password:Enterthepasswordforthemailserver.Leavethiseldemptyifthemailserverdoesnotrequire
authentication.
-Emailserver(SMTP):EnterthenameoftheSMTPserver,forexamplesmtp.gmail.com,smtp.mail.yahoo.com.
-Port:EntertheportnumberfortheSMTPserver,usingvaluesintherange0-65535.Thedefaultvalueis587.
-Encryption:Touseencryption,selecteitherSSLorTLS.
-Validateservercerticate:Ifyouuseencryption,selecttovalidatetheidentityofthedevice.Thecerticate
canbeself-signedorissuedbyaCerticateuthority(C).
-POPauthentication:TurnontoenterthenameofthePOPserver,forexamplepop.gmail.com.
Note
Someemailprovidershavesecurityltersthatpreventusersfromreceivingorviewinglargeamountof
attachments,fromreceivingscheduledemailsandsimilar.Checktheemailprovider'ssecuritypolicytoavoid
youremailaccountbeinglockedormissingoutonyourexpectedemails.
•TCP
-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris
speciedunderSystem>Network>IPv4andIPv6.
-Port:Entertheportnumberusedtoaccesstheserver.
Test:Clicktotestthesetup.
Thecontextmenucontains:
Viewrecipient:Clicktoviewalltherecipientdetails.
Copyrecipient:Clicktocopyarecipient.Whenyoucopy,youcanmakechangestothenewrecipient.
Deleterecipient:Clicktodeletetherecipientpermanently.
Schedules
Schedulesandpulsescanbeusedasconditionsinrules.Thelistshowsalltheschedulesandpulsescurrentlyconguredinthe
product,alongwithinformationabouttheirconguration.
Addschedule:Clicktocreateascheduleorpulse.
Manualtrigger
Themanualtriggerisusedtomanuallytriggerarule.Themanualtriggercanforexamplebeusedtovalidateactionsduring
productinstallationandconguration.
20