Motorola Avigilon ACC VMA-RPA-4P4 User manual

User Guide
Avigilon ACC™ ES Analytics Appliance
VMA-RPA-4P2 and VMA-RPA-4P4

©2017 -2020,Avigilon Corporation. All rights reserved. AVIGILON, the AVIGILON logo, AVIGILON
CONTROL CENTER, ACC, and AVIGILON APPEARANCE SEARCH are trademarks of Avigilon Corporation.
MAC, MacOS, FINDER and MACINTOSH are registered trademarks of Apple Inc. FIREFOX is a registered
trademark of Mozilla Foundation. Android is a trademark of Google LLC. Other names or logos mentioned
herein may be the trademarks of their respective owners. The absence of the symbols ™ and ® in proximity
to each trademark in this document or at all is not a disclaimer of ownership of the related trademark.
Avigilon Corporation protects its innovations with patents issued in the United States of America and other
jurisdictions worldwide (see avigilon.com/patents). Unless stated explicitly and in writing, no license is
granted with respect to any copyright, industrial design, trademark, patent or other intellectual property
rights of Avigilon Corporation or its licensors.
This document has been compiled and published using product descriptions and specifications available at
the time of publication. The contents of this document and the specifications of the products discussed
herein are subject to change without notice. Avigilon Corporation reserves the right to make any such
changes without notice. Neither Avigilon Corporation nor any of its affiliated companies: (1) guarantees the
completeness or accuracy of the information contained in this document; or (2) is responsible for your use
of, or reliance on, the information. Avigilon Corporation shall not be responsible for any losses or damages
(including consequential damages) caused by reliance on the information presented herein.
Avigilon Corporation
avigilon.com
PDF-4PortAnalytics-B
Revision: 2 - EN
20200612
This device is provided with a battery powered real-time clock (RTC) circuit. There is a danger of explosion
if the RTCbattery is incorrectly replaced. Replace only with same or equivalent type recommended by the
manufacturer. Discard used batteries according to the manufacturer's instructions.
This equipment is to be connected only to PoE networks without routing to the outside plant.
ii

Table of Contents
Introduction 1
Before YouStart 1
Package Contents 1
Overview 2
Front View 2
Rear View 2
System Requirements 3
Camera Frame Rate 3
Web Browser 3
Supported Network Configurations 3
Starting the ACC ES Analytics Appliance for the First Time 5
Troubleshooting 7
Cannot Discover the Device 7
Network Configuration 8
Checking System Health 8
Configuring the Appliance 9
Launching the ACCESAdmin Web UI 9
Viewing PoE Port Status 10
Managing ACC Services and Storage 11
Providing Service Logs for Support 12
Rebooting the Device and Managing Device Settings 12
Monitoring the Storage Drive State 14
Connecting the Device to Users and Cameras 14
Assigning a PoE Power Budget 15
Providing Device Logs for Support 17
Installing and Starting the ACC Client 18
Connecting to ACC Software and ACS 18
Activating and Configuring ACC Software 19
Connecting to Avigilon Cloud Services 19
Starting Up and Shutting Down the ACC Client Software 19
Connecting to External Devices 20
Budgeting PoE Power 21
LEDIndicators 22
iii

Front Panel LEDs 22
Back Panel LEDs 23
Managing Certificates 24
Replacing the Web Certificate 24
Upload a Trusted CA Certificate 26
Upgrading the Firmware 27
Using the Reset Button 29
Restarting the System 29
Restoring Factory Default Settings 29
For More Information 31
iv

Introduction
The Avigilon ACC ES Analytics Appliance is an all-in-one solution for network video recording plus server
side video analytics. The appliance features:
lA network switch to connect and power IP cameras.
lBuilt-in server to run the Avigilon Control Center Server Software.
lVideo analytics engine to enable connected cameras to detect classified objects.
This guide describes how to configure the system after the appliance has been powered and is connected
the local area network.
Before YouStart
Avigilon recommends the use of an uninterruptible power supply (UPS) system to protect your video
surveillance system hardware. A UPS system is used to protect critical equipment from mains supply
problems, including spikes, voltage dips, fluctuations and complete power failures using a dedicated
battery. It can also be used to power equipment during the time it takes for a standby generator to be
started and synchronized.
Any UPS connection must include configuration to shut down the operating system on the appliance when
battery power is low or there is 15 minutes of power remaining.
It is recommended that cameras not be connected to the appliance until after the appropriate network
configuration has been set up.
Package Contents
Ensure the package contains the following:
lAvigilon Video Appliance
lPower cord
lPower supply and screwdriver to secure it
lWall installation hardware
lDigital input/output terminal block connector
Introduction 1

Overview
Front View
1. Reset button
Use this button to physically restart the appliance or perform a factory reset.
2. Status LED
Provides information about daily operations. For more information, see LEDIndicators on page22.
Rear View
1. Corporate network uplink port
Accepts a 1GbE Ethernet connection to the general network to allow users access to the web
interface and connected camera video.
2. Camera network uplink port
Accepts a 1GbE Ethernet connection to the cameras that are connected to the PoE switch
Overview 2

component. Can be used to link to other PoE switches and cameras.
3. PoE switch component
Connect cameras to the 10/100 speed PoE switch component to power the cameras and record
video.
4. Power connector
Accepts power to the appliance.
5. I/O connector
Provides connections to external input/output devices. For more information, see Connecting to
External Devices on page20.
System Requirements
Camera Frame Rate
The ACC ES Analytics Appliance can provide analytics for non-analytics cameras. For optimal analytics
performance, the source camera should stream a minimum of 10 images per second (ips).
Web Browser
Administrative settings for the appliance are managed through a web interface, accessed from any
Windows, Mac or mobile device using any of the following web browsers:
lMozilla Firefox browser version 3.6 or later
lGoogle Chrome browser 8.0 or later
lMicrosoft Edge browser 25 or later
lSafari 5.0 or later
lChrome on Android 2.2 or later
lSafari on Apple iOS 5 or later.
lWindows Internet Explorer browser version 7.0 or later
Note: Your web browser must be configured to accept cookies or the web interface will not
function correctly.
Supported Network Configurations
Note: The Camera Uplink Port does not support dynamically switching DHCP servers.
System Requirements 3

Network
Connections Camera Web
Interface
Access
Supported IP Configurations
Corporate LAN
Uplink
Camera LAN
Uplink
Notes
Corporate
LAN Uplink
only
No Static or DHCP
assigned
Unconnected
(leave as DHCP)
Camera LAN Uplink and
connected cameras will use
Zeroconf IP addresses.
Camera LAN
Uplink only
Yes Unconnected
(leave as DHCP)
Static, DHCP-
assigned, DHCP-
Zeroconf
Corporate
and Camera
LAN Uplink
via Camera
LAN Uplink
only
Static, DHCP-
assigned, DHCP-
Zeroconf
Static, DHCP-
assigned, DHCP-
Zeroconf
Corporate and Camera LAN
Uplinks must be on different
subnets.
Supported Network Configurations 4

Starting the ACC ES Analytics Appliance for the
First Time
Install the ACC ES Analytics Appliance in a location free of dust and particles, vibration, and within the
specified operating temperature range. Otherwise any issues that arise will not be covered by the warranty.
You must configure the device for the first time before connecting it to your security network.
Important: If static IPs are required, a laptop computer is required to manually configure the IP
address for the device. Ensure the laptop is not assigned any of these IP addresses: 169.254.100.99
or 169.254.100.100, and has an IP subnet mask of 255.255.0.0.
1. Connect power to the device and wait for it to start up. It may take several minutes to start up the first
time it is powered on.
Check that the appliance LED indicators display the correct status. See LEDIndicators on page22 for
more information.
2. If you are configuring the device with a static IP address, connect a DHCP enabled port on your
configuring laptop with an Ethernet cable directly to the camera network (eth0) port on the device.
Otherwise, connect the device to the corporate network using the corporate network (eth1) port.
3. On the connected laptop or network workstation, discover the appliance. Use File Explorer on a
Windows computer or Finder® on a Macintosh computer.
You are looking for a network device labeled “VMA-RPA-4Px-<serial number>". If you cannot locate
the appliance, see Troubleshooting on page7.
4. Click to open the device in a supported web browser. For a list of supported web browsers, see
System Requirements on page3.
Starting the ACC ES Analytics Appliance for the First Time 5

Important: The ACC ES Analytics Appliance is configured with a self-signed certificate,
which generates a connection warning in the web browser.
5. Click past any connection messages displayed by the browser. You will see two warning messages
that differ slightly depending on the browser. If the browser is:
lChrome—Click Advanced on the first screen and Proceed to <IPaddress>(unsafe) on the
second screen.
lFirefox—Click Advanced on the first screen and Add Exception on the second screen, check
Permanently store this exception, and click Confirm Security Exception.
6. You will see a security warning from the browser informing you that the connection between the
WebUI and the device is untrusted because the device is using a self-signed Web Certificate. This is
expected and you can safely ignore the warning and proceed to the ACCESAdmin Web UI.
The level of security provided by the certificates included with the device should be sufficient for
any organization that does not deploy a Public Key Infrastructure (PKI) on its internal servers.
Important: For organizations that deploy their own PKI, the device's certificates can be
managed from the ACCESAdmin Web UI after the device is installed and powered. The
default self-signed Web Certificate can be replaced, signed certificates from Certificate
Authorities (CAs) that are not provided with the device can be added, and the signed
certificates from CAs for public servers such as Google Mail that are provided with device
can be disabled. For more information, see Managing Certificates on page24
7. When you are prompted by the Web Interface, enter a new password for the administrator username.
The Strength meter measures the complexity of your password: Red is too simple, yellow is
reasonably complex, and green is complex. Complexity measures the difficulty to discover your
password, not how secure your password is. A complex password is recommended.
The page refreshes and you are prompted to log in.
8. Enter administrator as the username and your new password.
The Dashboard panel of the Web Interface is displayed.
9. Set the language for the Web Interface, a user-friendly hostname, and the time zone. In the navigation
sidebar, click Device to open the Device panel . In the:
a. General pane, select the Language from the drop-down.
b. Hostname pane, optionally replace the serial number of the appliance with a descriptive
hostname for the appliance.
c. Time pane, specify the Time Zone and identify the time source in the NTP drop-down and
Servers list.
Starting the ACC ES Analytics Appliance for the First Time 6

For more information see Rebooting the Device and Managing Device Settings on page12.
10. Select how the appliance obtains IPaddresses from the network. On the navigation sidebar, click
Network to open the Network panel. For each network port used, select Automatic or manually enter
the settings.
For more information, see Connecting the Device to Users and Cameras on page14.
11. If a laptop was used to configure the device:
a. Connect an Ethernet cable from the device to the corporate network port.
b. Disconnect the configuring laptop from the camera network port.
12. Connect the cameras to the PoE ports.
For more information about the Web Interface, see Configuring the Appliance on page9
You are now ready to install the ACC Client software and connect the ACC ES Analytics Appliance to an
ACC site. You can then configure the device and cameras for daily operation through the AvigilonControl
Center Client software. For more information, see Connecting to ACC Software and ACS on page18.
Troubleshooting
Cannot Discover the Device
If you cannot discover the device using File Explorer (Windows) or Finder (Macintosh) during the hardware
installation and it is connected to your network, try the following:
lAccess the appliance from your web browser using the URLhttps://VMA-RPA-4Px-<serial number>
lUse the Address Resolution Protocol (ARP) to determine the IP address for the device:
1. Locate and copy down the MAC Address (MAC) listed on the Serial Number Tag for reference.
2. Open a Command Prompt window and enter the following command:
arp -a
3. Scroll through the response and look for the IP address corresponding to the MAC address.
lDiscover the DHCP-assigned IPaddress from the ACC Client software:
1. Download and install and open the ACC Client software on to the configuration laptop. For
information see Installing and Starting the ACC Client on page18.
2. Log into the site that uses this naming convention: VMA-RPA-4Px-<serial number>.
Note: The username and password for the Web Interface application is separate from
the administrator username and password for the ACC Server.
3. Display the server Setup tab.
At the top of the window, the appliance IP address is displayed.
Troubleshooting 7

4. Open a web browser and enter the IP address in this format: https://<IP address>.
5. Continue the remaining steps for installing the appliance.
Network Configuration
By default, the ACC ES Analytics Appliance acquires an IP address on the network through DHCP. If you
need to set up the ACC ES Analytics Appliance to use a static IP address or any specific network
configuration, seeConnecting the Device to Users and Cameras on page14 files for more information.
Checking System Health
You can check on the health of the system components in the Site Health in the ACC Client software. See
Site Health in the ACC Client User Guide for more information.
Network Configuration 8

Configuring the Appliance
The ACC ES Analytics Appliance can be configured through a ACCESAdmin Web UI that is accessible from
any browser on the network. The ACCESAdmin Web UI allows you to configure the ACC ES Analytics
Appliance server settings, set how the server keeps time, and allows you to remotely restart or upgrade the
server. It also allows you to download the ACC Client software to the workstation you are using to access
the ACCESAdmin Web UI. Throughout this section, the term device is used to identify the ACC ES Analytics
Appliance.
Start backing up the system settings for the recorder after you configure it. These settings include the ACC
password, and the settings for the camera connections. For more information on backing up the site and
server configurations, see the Avigilon ACC Client User Guide.
Throughout this section, the term device is used to identify the appliance.
Launching the ACCESAdmin Web UI
You can access the ACCESAdmin Web UI from a network workstation with network access to the device.
The first time you access the ACCESAdmin Web UI of your device, use one of the following methods:
lDiscovering the Device
1. Open the Network tab in File Explorer (Windows) or Finder (Macintosh) to locate the device.
You are looking for a network device labeled “VMA-RPA-4Px-<serial number>".
2. Right click and select View Device Webpage to open the device sign in page in your default
web browser.
lUsing the IP Address or Hostname
1. Open a web browser from a network workstation with network access to the device.
2. Enter its IP address or hostname into the web browser to open the device sign in page:
https://<Device IP address >|<Device hostname>/
For example: https://169.254.100.100/ or https://my_AvigilonDevice/ ,
where my_AvigilonDevice/ is the hostname configured in the Device panel.
Note: If you forgot the IPaddress or hostname that was configured during the
installation process, the information is listed in the ACC Client software, in the server
Setup tab.
Tip: Bookmark the URLof sign-in web page for the device.
Configuring the Appliance 9

To log in to and out of the ACCESAdmin Web UI:
1. To log in, enter the ACCESAdmin Web UI username and password.
The username is always administrator. Use the password you configured when you logged in to
the device for the first time. For more information, see Starting the ACC ES Analytics Appliance for
the First Time on page5.
The ACCESAdmin Web UI launch page is displayed in your web browser.
2. To log out of the ACCESAdmin Web UI, click the log out icon on the right side of the top banner.
On the ACCESAdmin Web UI launch page, Dashboard is selected in the side navigation bar, and the
Dashboard status panels are displayed:
lACC Server — Displays Running when the ACC Server software is operating; otherwise it displays
Stopped. The panel provides technical information about the device:site name, server name, server
ID,server version, software version, the number of available camera channels, and the maximum
number of ACC client instances allowed.
lSystem — Displays Ready when the device is fully operational, and Rebooting then Initializing when
the device is restarting. The panel provides technical information about your device:product name,
part number, serial number, and firmware version.
Use the menu options under Services and System in the Dashboard navigation bar to access all the other
web interface panels.
lServices — Expand ACC in the left sidebar to navigate to
lThe Server page to control the ACC Server on the device. See Managing ACC Services and
Storage on the next page
lThe Logs page to view ACC Server service logs. See Providing Service Logs for Support on
page12.
lSystem — Access the five options to configure the device and view its status:
lDevice. See:
lRebooting the Device and Managing Device Settings on page12
lUpgrading the Firmware on page27
lManaging Certificates on page24
lStorage. See Monitoring the Storage Drive State on page14.
lNetwork. See Connecting the Device to Users and Cameras on page14.
lLogs. See Providing Device Logs for Support on page17
Viewing PoE Port Status
The PoE panel displays a status for each port in the Status column. Statuses include the following:
Green Powered A PoE device is connected to the port and is operating normally.
High PoE+ is turned on.
Viewing PoE Port Status 10

powered
Gray Disconnected There is no device connected to the port.
Unpowered The PoE port power is switched off from the PoE page in the ACCESAdmin
Web UI
Yellow Overloaded A PoE device is connected to the port but is not receiving power. This status
typically occurs when one port is overcurrent, or the device is requesting more
power than budgeted, etc.
Low current The device is getting low current from the port.
Red Error The device is in an error state.
Tip: If a camera is disconnected then reconnected to the device, you may need to refresh this page
to view the latest status and budget values.
Managing ACC Services and Storage
On the Server panel use the:
lGeneral pane:
To... Do this...
Shut down all the services before you shut
down the device.
Click Stop.
Start up all the services after they have been
shut down.
Click Start.
Format the storage drive. Click Reinitialize to delete all configuration and
recorded video data.
lNetwork Storage Management pane:
To allow users to archive video from this device using the ACC Client software:
1. Click Enabled.
2. From the Protocol drop down list, select one of the following:
lCIFS — Common Internet file system. The network path is typically in this format:
//<hostname or IP> /<path>
lNFS — Network file system. The network path is typically in this format: <hostname or
IP> :<path>
3. In the Network Path field, enter the path to the preferred video archiving location.
Managing ACC Services and Storage 11

4. If the network location requires authentication, enter the credentials in the Username and
Password fields.
5. Click Apply.
lService and RTP Ports panes
To change the UDPand TCP ports used to communicate with the appliance:
lIn the Service Ports pane, enter the Base value to use for the HTTP, HTTPS, and UDPports and
click Apply. The list of ports is updated.
lIn the RTP Ports pane, enter the Base value to use for the UDPports and click Apply. The
range of ports available for RTP is updated.
Important: These changes can only take effect after the system restarts. When you are
prompted, allow the system to restart.
Providing Service Logs for Support
Use the Logs page to view service logs. The logs are typically requested by Avigilon Technical Support to
help resolve an issue.
By default, the page displays 100 warning messages from the logs.
Typically, Avigilon Technical Support assists you to access and filter the logs on this panel to isolate the logs
that they require. You then copy and paste the logs into a text file, save it and send it to Avigilon Technical
Support.
You can filter the logs to display the information that you need:
1. In the drop down list, select the type of application log that you need. The options are:
oException Logs
oFCP Logs
oServer Logs
oWebEndpoint Logs
2. In the Maximum Logs drop down list, select the number of log messages you want to display each
time.
3. Enter text in the Filter field to apply a filter to the log listings.
4. Click the Sync button to display the updated logs.
Rebooting the Device and Managing Device Settings
On the Device panel use the:
Providing Service Logs for Support 12

lGeneral pane to:
lReboot the device from the ACCESAdmin Web UI. You can monitor the progress of the
device as it reboots from the ACCESAdmin Web UI launch page (see . For more infomation
see, Launching the ACCESAdmin Web UI on page9).
lSelect a Language for the ACCESAdmin Web UI from the drop down list.
lHostname pane to enter a new Hostname. Click Apply to make the change.
The default hostname is the same as the server name. The server name is in the form <Model>-
<Serial Number>
lPassword pane to change the administrator password:
Note: You cannot change the default administrator username on the ACCESAdmin Web UI,
only the password.
1. To change your password, confirm your identity by entering your current password in the Old
Password field.
2. Enter the new password in the New Password field.
3. Re-enter the new password in the Confirm Password field.
CAUTION — You will lose recorded video and configuration data if you forget your password. To
reset the administrator password, you must reset the device to the factory default settings. This will
also format the hard drives and delete the configuration data and recorded video. For more
information on performing a factory restore, see Restoring Factory Default Settings on page29.
lTime pane to customize how the device keeps time:
lSelect your Time Zone from the drop-down list. The time zone that you set here is used by the
recording schedules defined in the ACC Client software.
lSelect whether you want to keep synchronized time through a Network Time Protocol (NTP)
server (recommended) in the NTP field.
Select:
lDHCP to automatically use the existing NTP servers in the network.
lManual to enter the address of NTP servers in the Servers list. Controls to add and
delete addresses in the list, and reorder them are activated.
lOff if you do not use an NTP server.
Note: The default set of NTP servers is always present in the Servers list. The default
list cannot be rearranged or deleted:
Rebooting the Device and Managing Device Settings 13

l0.pool.ntp.org
l1.pool.ntp.org
l2.pool.ntp.org
l3.pool.ntp.org
Click Apply to save the time settings.
lUpgrade Firmware pane to install the latest version of the firmware on your device, or to reinstall the
firmware if it becomes corrupted. For more information, see Upgrading the Firmware on page27.
lCertificates pane to manage the certificates used by the ACCESAdmin Web UI and the device. For
more information, see Managing Certificates on page24.
Monitoring the Storage Drive State
On the Storage panel you can view the storage capacity of the device and the status of the storage drive on
ACCES4- and 8-port appliances (or drives on older 4-port ACCESappliances).
Click Storage on the navigation bar to open the Storage panel. You can perform any of the following actions
in the pane in the Storage panel:
To... Do this...
View the capacity and status of the
storage drive.
When the device is:
lCorrectly working, Ready and is displayed.
lNot correctly working, Error and is displayed.
View details about the drive. 1. Click the in the upper right of the pane to open the
storage details pane.
2. Click the to display details about the drive, including its
model and serial numbers.
Connecting the Device to Users and Cameras
On the Network panel, you can change network connections of the device. Two network connections are
supported: one for a corporate network and one for a camera network.
Note: The corporate network and the camera network must be on different IPsubnets.
The corporate network is the network that typically provides users with access to the device. Users who
monitor video through the ACC Client software connect to the device through this network.
Monitoring the Storage Drive State 14

Important: Before adding the appliance as a new ACC site, or merging the appliance to an existing
ACC Site, first set its IP address. It is highly recommended to be in the same IP subnet as the other
servers in the ACC Site.
The camera network is a closed network that typically only contains cameras. This reduces the amount of
interference with video recording.
When connecting an ONVIF device to the camera network, configure it to use the appliance as its time / NTP
server if the appliance is running ACC 7.x or later.
For more information about the network connections, see Supported Network Configurations on page3.
You can perform any of the following actions in each of the panes in the Network panel:
To... Do this...
Set how the
device obtains an
IP address for
each network.
Toggle Automatic on to discover connected networks automatically (the default
setting), or off to manually specify the connections. Enter the appropriate values in
the following fields if you are manually entering the connection settings:
In each of the panes in the Network panel, toggle Automatic IP on to discover
connected networks automatically (the default setting), or off to manually specify the
connections. Enter the appropriate values in the following fields if you are manually
entering the connection settings:
lIP Address
lSubnet Mask
lDefault Gateway
Click Apply to save your changes.
Set how the
device obtains a
named address
from a DNS
server.
Toggle Automatic DNSon to discover connected DNSservers automatically (the
default setting), or off to manually specify the DNSservers. Controls to add and
delete addresses in the list, and reorder them are activated when Automatic DNS is
toggled off.
Assigning a PoE Power Budget
Use the PoE panel to see how much power is available to, and being used by, connected devices. The
default setting for all ports is Auto. This setting automatically detects and budgets the amount of power
required by the device connected to the port. For each port you can adjust this setting manually, or turn off
power output completely. If you want to manually adjust the power output of the ports you must calculate a
PoE power budget, see Budgeting PoE Power on page21.
Assigning a PoE Power Budget 15

Tip: If you are using a midspan PoE power injector for cameras that require high power PoE, you
should set that PoE port to Off.
To open the PoE panel, either:
lClick on the PoE status panel on the ACCESAdmin Web UI launch page.
lClick PoE from the Dashboard navigation bar.
To... Do this...
See how much power is available to, and being used
by, connected devices.
Look at the two bars at the top of the panel:
lThe Budget bar indicates the total
amount of power budgeted for all
devices connected to the PoE ports.
lThe Consumption bar indicates the
actual amount of power currently used by
all the connected devices.
Adjust the power used by each PoE port.
Tip: You can also use the Power bar to
remotely power cycle the camera. After you
set the Power setting to Off, wait for the
camera to power off then change the Power
setting to Auto or Manual.
Tip: Devices that support both PoE and PoE+
(802.3at) modes of operation can be forced
into non-PoE+ mode (802.3af) by using a
manual 15W budget.
Use the Power bar for each port to configure a
PoE power budget:
lClick Off to disable power output to the
port. When power to a port is disabled,
the port no longer outputs power but can
act as a standard network connection for
any device.
lClick Auto to automatically output power
to the connected device depending on
its mode of operation.
lClick Manual to enter a power budget
value in watts. Make sure the budget
includes potential power loss at the
cable.
Settings are not implemented until you click Apply.
After you click Apply, allow the system to reboot when the following message is displayed:
Applying changes may power-cycle PoE-powered devices.
The ACCESAdmin Web UI automatically refreshes the screen and displays the updated settings after the
new power settings are applied.
Assigning a PoE Power Budget 16