Fortinet FortiRecorder 100D Instruction Manual
FortiRecorder
™
2.4.2
Administration Guide
FortiRecorder 2.4.2 Administration Guide
November 4, 2016
1st Edition
Copyright © 2016 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and
FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other
Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All
other product or company names may be trademarks of their respective owners. Performance
and other metrics contained herein were attained in internal lab tests under ideal conditions,
and actual performance and other results may vary. Network variables, different network
environments and other conditions may affect performance results. Nothing herein represents
any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or
implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s
General Counsel, with a purchaser that expressly warrants that the identified product will
perform according to certain expressly-identified performance metrics and, in such event, only
the specific performance metrics expressly identified in such binding written contract shall be
binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the
same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants,
representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves
the right to change, modify, transfer, or otherwise revise this publication without notice, and the
most current version of the publication shall be applicable.
Technical Documentation http://help.fortinet.com
Knowledge Base http://kb.fortinet.com
Forums https://support.fortinet.com/forum
Customer Service & Support https://support.fortinet.com
Training Services http://training.fortinet.com
FortiGuard Threat Research & Response http://www.fortiguard.com
Page 3
Table of contents
Key concepts .................................................................................................... 7
FortiRecorder NVR................................................................................................... 7
Camera support ....................................................................................................... 7
Deployment scenarios and camera discovery......................................................... 8
Local camera deployments................................................................................ 8
Same network deployments ........................................................................ 8
Routed network deployments...................................................................... 8
Private network vs office network................................................................ 8
Remote camera deployments............................................................................ 9
Video clips ............................................................................................................... 9
Performance guidelines ........................................................................................... 9
NVR performance .............................................................................................. 9
Number of supported cameras.................................................................... 9
General performance factors ..................................................................... 10
Variable versus constant bit rate................................................................ 10
Bandwidth per camera or live view............................................................ 10
Storage capacity ........................................................................................ 11
Client Performance .......................................................................................... 12
GUI and CLI ........................................................................................................... 13
NVR configuration .......................................................................................... 14
Connecting to FortiRecorder web UI..................................................................... 14
Connecting to FortiRecorder CLI........................................................................... 15
Basic NVR configuration........................................................................................ 17
Setting the “admin” account password ........................................................... 17
Configuring the network settings..................................................................... 18
Configuring the DHCP server .......................................................................... 23
Setting the system time ................................................................................... 26
Configuring schedules ........................................................................................... 28
Setting the sunrise and sunset time................................................................. 29
Advanced/optional NVR configuration .................................................................. 29
Configuring system timeout, ports, and public access ................................... 29
About FortiRecorder logical interfaces ............................................................ 30
VLAN subinterfaces.................................................................................... 30
Redundant interfaces................................................................................. 31
Aggregate interfaces.................................................................................. 31
Loopback interfaces .................................................................................. 31
Configuring FortiRecorder system appearance............................................... 31
Configuring logging ......................................................................................... 31
Alert email ........................................................................................................ 34
Table of contents Page 4 FortiRecorder 2.4.2 Administration Guide
Camera settings ............................................................................................. 36
Camera configuration workflow............................................................................. 36
Configuring video profiles...................................................................................... 36
Configuring camera profiles................................................................................... 37
Camera groups ...................................................................................................... 39
Camera connection........................................................................................ 40
Camera discovery and DHCP service ................................................................... 40
Connecting FortiRecorder to the cameras ............................................................ 41
Configuring cameras.............................................................................................. 44
User management .......................................................................................... 53
User types.............................................................................................................. 53
User configuration workflow .................................................................................. 53
Configuring access profiles ................................................................................... 54
Configuring user profiles........................................................................................ 54
Configuring user accounts..................................................................................... 54
Configuring LDAP authentication .......................................................................... 60
Configuring RADIUS authentication ...................................................................... 66
Notifications.................................................................................................... 68
Notification configuration workflow ....................................................................... 68
Configuring FortiRecorder to send notification email ............................................ 68
Configuring FortiRecorder to send SMS messages .............................................. 70
Configuring cameras to send notifications ............................................................ 71
Video monitoring ............................................................................................ 73
Watching live video feeds ...................................................................................... 73
Video and image sharing ....................................................................................... 74
Watching recorded video clips .............................................................................. 77
Reviewing motion detection notifications.............................................................. 79
Video management ........................................................................................ 81
Local storage ......................................................................................................... 81
Configuring RAID levels ................................................................................... 81
Recommended HDD models and capacities................................................... 81
Adding a RAID disk .......................................................................................... 82
Replacing a RAID disk ..................................................................................... 82
Replacing all RAID disks .................................................................................. 83
External storage..................................................................................................... 84
System monitoring ......................................................................................... 86
The dashboard....................................................................................................... 86
SNMP traps & queries ........................................................................................... 86
Configuring an SNMP community ................................................................... 88
Configuring SNMP v3 users............................................................................. 90
MIB support ..................................................................................................... 91
Table of contents Page 5 FortiRecorder 2.4.2 Administration Guide
Logging ................................................................................................................. 92
About logs........................................................................................................ 92
Log types ................................................................................................... 92
Log severity levels...................................................................................... 93
Viewing log messages ..................................................................................... 93
Displaying & sorting log columns & rows......................................................... 95
Downloading log messages............................................................................. 96
Deleting log files............................................................................................... 96
Searching logs ................................................................................................. 97
Event Monitor......................................................................................................... 98
Secure connections and certificates............................................................ 99
Supported cipher suites & protocol versions................................................... 99
Replacing the default certificate for the web UI............................................. 100
Generating a certificate signing request .................................................. 103
Uploading & selecting to use a certificate ............................................... 105
Uploading trusted CAs’ certificates ............................................................... 107
Example: Downloading the CA’s certificate from
Microsoft Windows 2003 Server............................................................ 108
Revoking certificates...................................................................................... 109
Revoking certificates by OCSP query...................................................... 109
Updating the firmware ................................................................................. 111
Installing NVR firmware........................................................................................ 111
Installing alternate firmware ........................................................................... 114
Booting from the alternate partition ............................................................... 115
Upgrading/downgrading the camera firmware.................................................... 116
Fine-tuning & best practices ....................................................................... 118
Hardening security............................................................................................... 118
Topology ........................................................................................................ 118
Administrator access ..................................................................................... 119
Operator access............................................................................................. 120
Patches .......................................................................................................... 120
Improving performance........................................................................................ 121
Video performance......................................................................................... 121
System performance...................................................................................... 121
Logging & alert performance ......................................................................... 122
Packet capture performance ......................................................................... 122
Regular backups.................................................................................................. 122
Restoring a previous configuration ................................................................ 124
Troubleshooting ........................................................................................... 125
Solutions by issue type........................................................................................ 125
Video viewing issues...................................................................................... 125
Live feed delay ......................................................................................... 126
Video not being sent to the NVR.............................................................. 126
Snapshot notification issues .......................................................................... 126
Table of contents Page 6 FortiRecorder 2.4.2 Administration Guide
Login issues ................................................................................................... 127
When an administrator account cannot log in from a specific IP ............ 127
Remote authentication query failures ...................................................... 127
Resetting passwords ............................................................................... 127
Connectivity issues ........................................................................................ 127
Checking hardware connections ............................................................. 128
Bringing up network interfaces ................................................................ 128
Examining the ARP table ......................................................................... 129
Checking routing...................................................................................... 129
Facilitating discovery ............................................................................... 133
DHCP issues ............................................................................................ 133
Unauthorized DHCP clients or DHCP pool exhaustion...................... 134
Establishing IP sessions........................................................................... 134
Resolving IP address conflicts................................................................. 136
Packet capture......................................................................................... 137
Resource issues............................................................................................. 142
Data storage issues ....................................................................................... 143
Resetting the configuration.................................................................................. 143
Restoring firmware (“clean install”)...................................................................... 144
Questions and answers ............................................................................... 147
How to connect cameras to FortiRecorder for the first time ............................... 147
Scenario 1: Direct connection........................................................................ 147
Scenario 2: Connection with a third party DHCP server................................ 150
How to use recorded video clips ......................................................................... 151
How to use DIDO terminal connectors on FortiCam MB13 cameras.................. 154
Appendix A: Port numbers........................................................................... 157
Appendix B: Maximum values ..................................................................... 159
Index .............................................................................................................. 161
Page 7
Key concepts
This chapter defines basic FortiRecorder concepts and terms.
If you are new to FortiRecorder, or new to digital video surveillance systems, this chapter can
help you to quickly understand how to use your FortiRecorder system.
•FortiRecorder NVR
•Camera support
•Deployment scenarios and camera discovery
•Video clips
•Performance guidelines
FortiRecorder NVR
The FortiRecorder network video recorder (NVR) provides central management for:
• configuring your cameras
• recording your video feeds
• viewing recordings and live video feeds
Camera support
The FortiRecorder NVR supports FortiCam series cameras from Fortinet and third-party
ONVIF-compliant cameras, although some of the third-party camera features may not be fully
supported. Therefore, you may want to configure those features through its built-in camera web
interface.
By default, every FortiRecorder or FortiRecorder-VM appliance supports one third-party
camera. If you want to connect more than one, you must purchase licenses from Fortinet. For
more information, please contact Fortinet or the resellers.
Key concepts Page 8 FortiRecorder 2.4.2 Administration Guide
Deployment scenarios and camera discovery
Cameras are deployed in two basic scenarios: local to the NVR and remote to the NVR.
FortiCamera deployments can combine both scenarios.
Local camera deployments
Local cameras deployments have two specific scenarios:
• Cameras are installed on the same network as the NVR.
• Cameras are installed on a local network, but there are one or more routers between the
NVR and the cameras.
Same network deployments
Installing the cameras on the same subnet as the NVR is the easiest deployment scenario since
the NVR can automatically discover the cameras.
Routed network deployments
If there are routers between the cameras and the NVR, the routers must be configured to allow
mDNS multicast packets between the camera network and the NVR network in order for the
NVR to automatically discover the cameras. Once the cameras are discovered, you can leave
the address mode as DHCP or change it to static.
If the routers are not configured to pass the mDNS packets, the cameras can be configured
manually by selecting the static address mode on the camera configuration page.
Private network vs office network
You can install the NVR and cameras on your existing network, which saves your efforts and
costs. You can also install the system on a dedicated private network only reachable by the
Key concepts Page 9 FortiRecorder 2.4.2 Administration Guide
NVR. Although this involves installing a new network and thus increasing the costs, there are
some advantages of using a private network:
• the video streams are protected.
• the cameras are protected because they cannot be reached from outside the network.
• easier to determine bandwidth requirements.
• better quality of service since bandwidth is known.
See also
•Facilitating discovery
Remote camera deployments
Remote camera deployments refer to scenarios where there is a firewall between the NVR and
the cameras – i.e. camera discovery will not work and the cameras will likely have virtual IP
addresses on the firewall. The cameras are configured by selecting the VIP address mode on
the camera configuration page.
Video clips
You can use FortiRecorder to:
• Manually record activities
• Continuously record activities by schedules
• Record sudden activities only (motion detection)
• Record audio activities (if the camera supports audio detection)
• Record on triggers from digital input (if the camera support DIDO)
• View live video
Motion detection will record a video clip up to about 40 seconds long each time the camera’s
sensor detects movement. In contrast, continuous video records for the entire duration of the
schedule, regardless of movement.
Performance guidelines
There are two components to consider when looking at FortiRecorder performance – the NVR
(FortiRecorder) and the Client computer with FortiRecorder Central or a browser. Overall
FortiRecorder performance is a combination of the video input (video compression, image
quality level, complexity of the scene, video resolution, frame rate per second, number of
cameras) and the video output (to the clients for live views and playback). The performance
bottleneck in a FortiCamera deployment will likely be the network bandwidth to and from
FortiRecorder and the CPU performance of the computer running the FortiRecorder Central or
browser client, which must decode and render the video streams from the NVR. Displaying
multiple video streams on the client is very CPU intensive.
NVR performance
Number of supported cameras
The FortiRecorder-100D can support 16 cameras, 200D and 400D can support up to 64
cameras depending on the camera configuration. VM version of FortiRecorder depends on the
hardware performance.
Key concepts Page 10 FortiRecorder 2.4.2 Administration Guide
General performance factors
The following factors affect the input side of performance:
• Total number of video streams from the cameras (i.e. not just the number of cameras)
• The video recording types (motion only or continuous) per camera
• The video stream parameters per camera – i.e. video compression (constant or variable bit
rate mode), image quality level, complexity of the scene, video resolution and frame rate per
second.
The following factors affect the output side of performance:
• Number of administrator/operator/viewer sessions
• Peak number of simultaneous administrator/operator/viewer live views
• The video stream parameters per camera live view – i.e. video compression (constant or
variable bit rate mode), image quality level, complexity of the scene, video resolution and
frame rate per second.
Variable versus constant bit rate
The variable bit rate mode means the bandwidth used by the camera will vary according to what
the camera is seeing and the video profile settings. The video profile settings for the variable bit
rate mode are resolution, frame rate and image quality. High resolution creates more data than
medium or low resolution (see following sections for more detail). The degree of motion present
in a video stream also affects the amount of data created.
The constant bit rate mode means the bandwidth used by the camera will stay relatively
constant regardless of what the camera is seeing. The constant bit rate mode is therefore more
predictable in deployments where bandwidth and/or storage capacities are important
considerations. The video profile settings for the constant bit rate mode are resolution, frame
rate and bit rate. The bandwidth used by the stream is dictated by the bit rate setting.
In general, using the variable bit rate mode results in relatively consistent video quality but
fluctuating bandwidth and using the constant bit rate mode results in varying video quality but
predictable bandwidth. Choosing a high bandwidth constant bit rate mode avoids the video
quality drop e.g. during high motion, but may use some unnecessary bandwidth during times of
no activity.
However, in most cases the difference in video quality between the variable and constant bit
modes is negligible (assuming the same resolution and frame rates) and the constant bit rate
mode produces more reliable output from the cameras.
Bandwidth per camera or live view
Variable bit rate
Depending on resolution, frame rate and video quality a camera using H.264 compression may
generate the following bit rates:
• 352 x 240 @ 30 FPS, high quality = 0.4 Mbps
• 720 x 576 @ 30 FPS, high quality = 1 Mbps
• 1280 x 720 @ 30 FPS, high quality = 2 Mbps
• 1920 x 1080 @ 30 FPS, high quality = 4 Mbps
• 1920 x 1080 @ 30 FPS, medium quality = 2.8 Mbps
• 1920 x 1080 @ 30 FPS, low quality = 2 Mbps
• 1920 x 1080 @ 10 FPS, high quality = 2.4 Mbps
• 1920 x 1080 @ 10 FPS, low quality = 1.2 Mbps
Key concepts Page 11 FortiRecorder 2.4.2 Administration Guide
Table 1: Bitrate table (H.264 estimate) in Mbps with high quality image (x0.7 = standard quality)
Please note that these are estimates providing a high quality image under most conditions. If
the scene is less complex (indoors with little detail and not much motion) or the camera has very
little noise (daylight, good DNR) the bit rate can be lowered further. Generally do not use less
than half of the indicated values.
If video compression is set to lower quality or capped at a defined max bandwidth, the bit rate
can be significantly lower at the cost of lower image quality. DNR can further reduce bandwidth,
especially for grainy night images, but shows less detail during motion.
Storage capacity
We will use FortiRecorder 100D, 200D and 400D configuration with different camera parameters
to demonstrate the video retention period.
FortiRecorder 100D has a built in 1 TB hard drive and it can connect up to 16 cameras. We
configure 16 cameras with 1280 x 720 resolution using 30 FPS with high quality image in
continuous recording. Each camera will generate an estimated bandwidth of 2 Mbps. Referring
to the FortiRecorder Capacity calculator spreadsheet below, 100D can store approximately 3.2
days of video footage.
Table 2: Capacity Calculator
FortiRecorder 200D has 3 TB HD capacity. With the same configuration it can record 16
cameras for 10 days.
FortiRecorder 400D has 6 TB HD capacity. With the same configuration it can record 16
cameras for 19 days.
Frames/s 1 6 10 15 30
CIF
(352x240)
0.16 0.2 0.24 0.3 0.4
D1 0.4M
(720x576)
0.4 0.5 0.6 0.75 1
720p 1M 0.8 1 1.2 1.5 2
SXGA 1.3M
(1280x1024)
1 1.25 1.5 1.9 2.5
HD 2M
(1920x1080)
1.6 2 2.4 3 4
3M 2 2.5 3 3.75 5
5M 3.2 4 4.8 6 8
Bit rate
(Mbps)
HD
Capacity
(TB)
Cameras
(#)
Usage
(%)
Time
(days)
Input 2 1 16 100 30
Resolve each for all other inputs as specified
Result 0.2 9.4 1.7 11 3.2
Key concepts Page 12 FortiRecorder 2.4.2 Administration Guide
The above examples use the same configuration for 16 cameras with different hard drive
capacity per FortiRecorder model. The table below shows the number of days that one camera
can be stored in different configurations.
Table 3: Video retention period in days for one camera
Use the following guideline for a quick bandwidth consumption calculation:
• 1 TB HD can store 1 camera configured to consume 1Mbps for approximately 100 days.
Therefore:
• 1 TB HD can store 1 camera configured to consume 2 Mbps for approximately 50 days.
• 6 TB HD can store 10 cameras configured to consume 2 Mbps each for approximately 30
days.
For more information about bandwidth consumption calculation, see the FortiCamera
Bandwidth Calculator User Guide on
http://docs.fortinet.com/d/fortirecorder-forticamera-bandwidth-calculator-user-guide.
In practice Fortinet suggests to use the numbers provided in the bandwidth calculator as a
starting point and then adjust them after installation to achieve the desired balance between
quality and bandwidth.
Client Performance
If you need to display 8 or more camera live views, you may need to configure the second
camera stream so that viewing is done at a lower frame rate or resolution, depending on how
powerful the client PC is. RAM is less important than CPU for rendering video.
Video playback is very CPU intensive. If you are experiencing choppy video playback and
cameras “freezing” during playback, you likely have a client performance problem. Use the
diagnostic tools available on your client OS and look at the CPU usage when you are
experiencing video problems. If possible, keep the CPU usage below 50%.
FortiRecorder
100D with 1 TB
HD
FortiRecorder
200D with 3 TB
HD
FortiRecorder
200D with 3 TB
HD plus 16 TB
remote
storage
FortiRicorder
400D with 6
TB HD
The same resolution and frame rate with different video quality
1920x1080@15 FPS
high quality video = 3
Mbps
34 102 645 204
1920x1080@15 FPS
medium quality video
= 2.1 Mbps
49 145 921 291
The same resolution and video quality with different frame rate
2048x1536@10 FPS
high quality video = 3
Mbps
34 102 645 204
2048x1536@30 FPS
high quality video = 5
Mbps
20 61 387 122
Key concepts Page 13 FortiRecorder 2.4.2 Administration Guide
To optimize client performance, use the video and camera profiles to define and assign a
second video stream for each camera. To increase the number of live views the client computer
can display, or to reduce the CPU requirement for a given number of live views, reduce the
resolution, quality and/or frames per second of the second video streams.
Ten FPS is a good general setting for live views, which provides a reasonable frame rate for the
live views, but significantly reduces the load on the client (compared to 30 FPS which is more
ideal for higher traffic area surveillance).
GUI and CLI
This document only describes how to use the web UI. If you are familiar with the command line
interface (CLI), go to Monitor > System Status > Console to use the CLI commands.
Page 14
NVR configuration
To be able to configure the FortiRecorder NVR appliance, you must connect to its management
web UI or CLI console. This document mainly describes the web UI usage.
Connecting to FortiRecorder web UI
You can connect to the web UI using its default settings. (By default, HTTPS access to the
web UI is enabled.)
Requirements
• a computer with an RJ-45 Ethernet network port
• a crossover Ethernet cable
• a web browser. For supported web browsers, see the release notes.
• If you are running FortiRecorder version 2.3 and older firmware, Apple QuickTime 7.1 or
greater plug-in is required for video display. Note that starting from QuickTime 7.7.9,
QuickTime typical install does not install the web plugin by default. You have to use
custom install and select the web plugin.
Starting from FortiRecorder version 2.4, HTML5 is supported. On most platforms, QuickTime
plugin is not required anymore. For details, see the FortiRecorder version 2.4 release notes.
To connect to the web UI
1. On your management computer, configure the Ethernet port with the static IP address
192.168.1.2 with a netmask of 255.255.255.0.
2. Using the Ethernet cable, connect your computer’s Ethernet port to the FortiRecorder
appliance’s port1.
3. Start your browser and enter the URL:
https://192.168.1.99/
(Remember to include the “s” in https://.)
Your browser connects the appliance.
Table 4: Default settings for connecting to the web UI
Network Interface port1
URL https://192.168.1.99/
Administrator
Account
admin
Password
NVR configuration Page 15 FortiRecorder 2.4.2 Administration Guide
4. In the Name field of the login page, type admin, then click Login. (In its default state, there is
no password for this account.)
Login credentials entered are encrypted before they are sent to the FortiRecorder appliance.
If your login is successful, the web UI appears.
See also
•Connectivity issues
•Login issues
Connecting to FortiRecorder CLI
For initial configuration, you can access the CLI from your management computer using either
of these two ways:
• a local serial console connection
• an SSH connection, either local or through the network
To connect to the CLI using a local serial console connection, you must have:
• a computer with a serial communications (COM) port
• the RJ-45-to-DB-9 serial or null modem cable included in your FortiRecorder package
• terminal emulation software, such as HyperTerminal for Microsoft Windows
To connect to the CLI using an SSH connection, you must have:
• a computer with an Ethernet port
• a crossover Ethernet cable
• an SSH client, such as PuTTY
Table 5: Default settings for connecting to the CLI by SSH
Network Interface port1
IP Address 192.168.1.99
SSH Port Number 22
Administrator
Account
admin
Password (none)
NVR configuration Page 16 FortiRecorder 2.4.2 Administration Guide
To connect to the CLI using a local serial console connection
1. Using the RJ-45-to-DB-9 or null modem cable, connect your computer’s serial
communications (COM) port to the FortiRecorder unit’s console port.
2. Verify that the FortiRecorder unit is powered on.
3. On your management computer, start HyperTerminal.
4. On Connection Description, enter a Name for the connection, and select OK.
5. On Connect To, from Connect using, select the communications (COM) port where you
connected the FortiRecorder unit.
6. Select OK.
7. Select the following Port settings and select OK.
8. Press Enter.
The terminal emulator connects to the CLI, and the CLI displays a login prompt.
9. Type admin and press Enter twice. (In its default state, there is no password for this
account.)
To connect to the CLI using an SSH connection
1. On your management computer, configure the Ethernet port with the static IP address
192.168.1.2 with a netmask of 255.255.255.0.
2. Using the Ethernet cable, connect your computer’s Ethernet port to the FortiRecorder unit’s
port1.
3. Verify that the FortiRecorder unit is powered on.
4. On your management computer, start your SSH client.
5. In Host Name (or IP Address), type 192.168.1.99.
6. In Port, type 22.
7. From Connection type, select SSH.
8. Select Open.
The SSH client connects to the FortiRecorder unit.
The SSH client may display a warning if this is the first time you are connecting to the
FortiRecorder unit and its SSH key is not yet recognized by your SSH client, or if you have
The following procedure uses Microsoft HyperTerminal. Steps may vary with other terminal
emulators.
Bits per second 9600
Data bits 8
Parity None
Stop bits 1
Flow control None
The following procedure uses PuTTY. Steps may vary with other SSH clients.
NVR configuration Page 17 FortiRecorder 2.4.2 Administration Guide
previously connected to the FortiRecorder unit but it used a different IP address or SSH key.
If your management computer is directly connected to the FortiRecorder unit with no
network hosts between them, this is normal.
9. Click Yes to verify the fingerprint and accept the FortiRecorder unit’s SSH key. You will not
be able to log in until you have accepted the key.
The CLI displays a login prompt.
10.Type admin and press Enter. (In its default state, there is no password for this account.)
Basic NVR configuration
Either to integrate the FortiRecorder NVR into your existing network or to set it up in its
dedicated, private network, you must configure the following settings to have the appliance up
and running:
•Setting the “admin” account password
•Configuring the network settings
•Configuring the DHCP server
•Setting the system time
Setting the “admin” account password
The default administrator account, named admin, initially has no password.
Unlike other administrator accounts, the admin administrator account exists by default and
cannot be deleted. This administrator account always has full permission to view and change all
FortiRecorder configuration options, including viewing and changing all other administrator
accounts. Its name and permissions cannot be changed.
To change the admin administrator password
1. Log in to the admin administrator account.
2. Go to System > Administrator > Administrator.
3. Change the password and log out.
The new password takes effect the next time that administrator account logs in.
See also
•Login issues
For security reasons, you must set a password for the admin account after you log on to
FortiRecorder. Set a strong password for the admin administrator account, and change the
password regularly.
NVR configuration Page 18 FortiRecorder 2.4.2 Administration Guide
Configuring the network settings
When shipped, each of the FortiRecorder appliance’s physical network adapter ports has a
default IP address and netmask. If these IP addresses and netmasks are not compatible with
the design of your unique network, you must configure them.
To connect to the CLI and web UI, you should configure the following FortiRecorder network
settings:
•Interface: you Two configure at least one network interface on your FortiRecorder
appliance (usually port1) with an IP address and netmask so that it can receive your
connections.
•Static route: Depending on your network, you also usually must configure a static route so
that the FortiRecorder can connect to the Internet, your computer, and FortiCam cameras.
•DNS server: FortiRecorder appliances require connectivity to DNS servers for DNS lookups.
The appliance will query the DNS servers whenever it needs to resolve a domain name into
an IP address, such as for NTP servers defined by their domain names.
To configure a network interface’s IP address
1. Log in to the admin administrator account.
2. Go to System > Network > Interface.
3. Double-click the row to select the physical network interface that you want to modify.
4. If you want to manually assign an IP address and subnet mask to this network interface,
select Manual and then provide the IP address and netmask in IP/Netmask. IPv4 and IPv6
subnet masks should be provided in CIDR format, e.g. /24 instead of 255.255.255.0. The
IP address must be on the same subnet as the network to which the interface connects. Two
network interfaces cannot have IP addresses on the same subnet.
Otherwise, select DHCP and enable Connect to server to retrieve a DHCP lease when you
save this configuration. If you want the FortiRecorder appliance to also retrieve DNS and
default route (“gateway”) settings, also enable Retrieve default gateway and DNS from
server.
Table 6: Default IP addresses and netmasks
Network Interface* IP Address Netmask
port1 192.168.1.99 255.255.255.0
port2 192.168.2.99 255.255.255.0
port3 192.168.3.99 255.255.255.0
port4 192.168.4.99 255.255.255.0
* The number of network interfaces may vary by model.
If you use DHCP on an interface and there are cameras connected to the interface, you must
make sure the IP address will ne change on that interface because the cameras need to
communicate with the NVR and thus need to be aware of the IP address of the NVR.
NVR configuration Page 19 FortiRecorder 2.4.2 Administration Guide
5. Configure these settings:
Retrieve default gateway and DNS from server will overwrite the existing DNS and default route,
if any.
Setting name Description
Discover cameras
on this port
Enable to send multicast camera discovery traffic from this network
interface. For more information, see “Connecting FortiRecorder to the
cameras” on page 41.
Access Enable the types of administrative access that you want to permit to
this interface.
Caution: Enable administrative access only on network interfaces
connected to trusted private networks or directly to your management
computer. If possible, enable only secure administrative access
protocols such as HTTPS or SSH. Failure to restrict administrative
access could compromise the security of your FortiRecorder
appliance.
HTTPS Enable to allow secure HTTPS connections to the web UI through this
network interface. To configure the listening port number, see
“Configuring system timeout, ports, and public access”. To upload a
certificate, see “Replacing the default certificate for the web UI”.
PING Enable to allow:
• ICMP type 8 (ECHO_REQUEST)
• UDP ports 33434 to 33534
for ping and traceroute to be received on this network interface.
When it receives an ECHO_REQUEST, FortiRecorder will reply with
ICMP type 0 (ECHO_RESPONSE).
Note: Disabling PING only prevents FortiRecorder from receiving
ICMP type 8 (ECHO_REQUEST) and traceroute-related UDP.
It does not disable FortiRecorder CLI commands such as execute
ping or execute traceroute that send such traffic.
HTTP Enable to allow HTTP connections to the web UI through this network
interface. To configure the listening port number, see “Configuring
system timeout, ports, and public access”.
Caution: HTTP connections are not secure, and can be intercepted by
a third party. If possible, enable this option only for network interfaces
connected to a trusted private network, or directly to your
management computer. Failure to restrict administrative access
through this protocol could compromise the security of your
FortiRecorder appliance.
SSH Enable to allow SSH connections to the CLI through this network
interface.
NVR configuration Page 20 FortiRecorder 2.4.2 Administration Guide
6. Click OK.
If you were connected to the web UI through this network interface, you are now
disconnected from it.
7. To access the web UI again, in your web browser, modify the URL to match the new IP
address of the network interface. For example, if you configured the network interface with
the IP address 10.10.10.5, you would browse to: https://10.10.10.5
If the new IP address is on a different subnet than the previous IP address, and your
computer is directly connected to the FortiRecorder appliance, you may also need to modify
the IP address and subnet of your computer to match the FortiRecorder appliance’s new IP
address.
SNMP Enable to allow SNMP queries to this network interface, if queries have
been configured and the sender is a configured SNMP manager. To
configure the listening port number and configure queries and traps,
see “SNMP traps & queries”.
TELNET Enable to allow Telnet connections to the CLI through this network
interface.
Caution: Telnet connections are not secure, and can be intercepted
by a third party. If possible, enable this option only for network
interfaces connected to a trusted private network, or directly to your
management computer. Failure to restrict administrative access
through this protocol could compromise the security of your
FortiRecorder appliance.
FRC-
Central
Enable to allow access from FortiRecorder Central.
MTU Enable to change the maximum transmission unit (MTU) value, then
enter the maximum packet or Ethernet frame size in bytes.
If network devices between the FortiRecorder unit and its traffic
destinations require smaller or larger units of traffic, packets may
require additional processing at each node in the network to fragment
or defragment the units, resulting in reduced network performance.
Adjusting the MTU to match your network can improve network
performance.
The default value is 1500 bytes. The MTU size must be between 576
and 1500 bytes. Change this if you need a lower value. For example,
RFC 2516 prescribes a value of 1492 for PPPoE.
Administrative
status
Select either:
•Up — Enable (that is, bring up) the network interface so that it can
send and receive traffic.
•Down — Disable (that is, bring down) the network interface so that
it cannot send or receive traffic.
Setting name Description
This manual suits for next models
2
Table of contents
