PERCEPT Milestone XProtect Quick reference guide
IONODES PERCEPT Body Camera /
Milestone XProtect®
Deployment Guide
Document Date: April 19th, 2022
2
Contents
Contents................................................................................................................................................... 2
1Introduction...................................................................................................................................... 5
2Recommended Deployment ......................................................................................................... 5
2.1 Layout ......................................................................................................................................... 5
2.2 Available Functionalities ......................................................................................................... 7
3Configuring the PERCEPT Body Camera.................................................................................... 8
3.1 Deploying Multiple PERCEPT Body Cameras ..................................................................... 8
3.2 Configure Networking ............................................................................................................. 8
3.2.1 Configure Cellular.............................................................................................................. 8
3.2.2 Configure Cellular Data Usage ....................................................................................... 9
3.2.3 Configure Wi-Fi Data Usage..........................................................................................10
3.2.4 Configure Docking Station(s) .......................................................................................11
3.3 Configure Video ......................................................................................................................13
3.3.1 Disable orientation metadata .......................................................................................13
3.3.2 Video profiles....................................................................................................................14
3.4 Setup local recording on the body camera......................................................................16
3.5 Setup time synchronization on the body camera ..........................................................18
3.6 Create a new dedicated ONVIF user (recommended) ..................................................19
4Configuring VPN ............................................................................................................................ 20
4.1 VPN requirements ..................................................................................................................20
3
4.2 VPN example ...........................................................................................................................20
4.2.1 Configure L2TP server....................................................................................................21
4.2.2 LAN IP address reservation .......................................................................................... 22
4.2.3 VPN IP address reservation .......................................................................................... 24
4.2.4 Configure PERCEPT VPN settings ................................................................................26
5Configuring XProtect® Before Integration ............................................................................. 27
5.1 Configure Time Synchronization ........................................................................................27
5.2 Configure Device Groups......................................................................................................28
6Adding the PERCEPT Body Camera in XProtect®................................................................. 31
6.1 Configure Camera ..................................................................................................................39
6.1.1 Settings..............................................................................................................................39
6.1.2 Streams..............................................................................................................................40
6.1.3 Record ................................................................................................................................41
6.1.4 Motion.................................................................................................................................42
6.1.5 Fisheye Lens .....................................................................................................................43
6.1.6 Events................................................................................................................................. 44
6.1.7 Client ..................................................................................................................................45
6.2 Configure Microphones .........................................................................................................46
6.2.1 Settings..............................................................................................................................46
6.2.2 Record ................................................................................................................................47
6.3 Configure Speaker .................................................................................................................48
6.3.1 Settings..............................................................................................................................48
4
6.3.2 Record ................................................................................................................................49
7Configuring XProtect® Rules ..................................................................................................... 50
7.1.1 Default Start Audio Feed Rule......................................................................................50
7.1.2 PERCEPT On-demand Audio Feed ............................................................................... 52
7.1.3 PERCEPT Edge Storage Transfer Rule........................................................................56
8Event to Alarm............................................................................................................................... 59
9Validating the Integration........................................................................................................... 62
9.1 On-Demand Streaming......................................................................................................... 62
9.2 Live Streaming........................................................................................................................62
9.3 Recording .................................................................................................................................65
9.3.1 Edge Storage Transfer ...................................................................................................67
9.4 Network Interface Switching ...............................................................................................70
5
1Introduction
One of the unique features of the IONODES PERCEPT Body Camera is that it is an open platform
device, allowing for integration with industry-leading VMS solutions such as Milestone XProtect®.
It implements extensive features of ONVIF profiles G, S and T, along with flexible network
configurations (LAN, Wi-Fi, 4G/LTE) for live video and edge recording retrieval.
This integration is supported as of IONODES PERCEPT Body Camera firmware 10.7.2.5 and has
been validated with XProtect® Expert 2022R3. It requires the Professional+ or higher-featured
edition of XProtect®. Essential+ and Express+ editions do not support Edge Storage transfer. This
document describes the recommended integration deployment as validated by IONODES and
Milestone and a sample scenario is demonstrated to illustrate the various deployment steps.
System Integrators and End Users should adjust to their specific needs and system environment.
2Recommended Deployment
2.1 Layout
A typical deployment scenario, shown in the diagram below, includes the following:
•PERCEPT Body Camera,
•PERCEPT Docking Station,
•Wi-Fi Access Point,
•Virtual Private Network (VPN) server,
•Local Area Network (LAN) infrastructure, and
•Local Video Management Software (VMS), Milestone XProtect®
6
The PERCEPT Body Camera can technically record directly to XProtect® through 4G LTE or Wi-Fi
streaming, but this is not recommended due to bandwidth constraints. The recommended
configuration consists of setting up two (2) video stream settings; an on-demand low-bitrate live
stream enabled over 4G LTE and Wi-Fi, and a high-bitrate recording stream saved to the camera’s
internal storage and later transferred to XProtect® Recording Server via the Docking Station’s
wired Ethernet.
Note: Although the diagram above shows the Wi-Fi Access Point and Docking Station connected to the
LAN infrastructure, these can also connect to the internet. In such a configuration, they reach
the LAN infrastructure via the VPN, enabling live video and recording transfer from a remote
location with internet access.
7
2.2 Available Functionalities
The table below summarizes functionalities available with the deployment detailed in this guide.
Functionality
Remark
Low-bitrate Live Audio & Video triggered from
XProtect® Smart Client and XProtect® Web Client
Live stream on-demand to minimize Wi-Fi/LTE data usage
Two-way audio communication using XProtect®
Smart Client and XProtect® Web Client
High-bitrate Audio & Video Recording saved on
device Edge Storage (SD card)
Automatic Edge Storage transfer of Audio & Video
to XProtect® Recording Server
With Rules that trigger recurring Edge Storage transfer job
Configurable Events and Alarms triggered by
Wearer. Visible in real-time in XProtect® Smart
Client and XProtect® Web Client
Date / Time synchronization
With NTP server common to XProtect® and PERCEPT
Firmware updates from XProtect® Management
Client
Automatic switching between Docking Station, Wi-
Fi, and LTE
With VPN server/router
End-to-end Encryption
With VPN server/router
8
3Configuring the PERCEPT Body Camera
Start by initializing the PERCEPT Body Camera’s network connectivity with XProtect® via Wi-Fi.
Refer to the PERCEPT Quick Start Guide for network initialization instructions.
Note: Instructions in this guide assume the PERCEPT Body Camera’s initial state is set to factory
default. If the body camera was previously used, it is strongly advised to reset it before
integrating it with XProtect®.
3.1 Deploying Multiple PERCEPT Body Cameras
The PERCEPT Body Camera has multiple configuration settings. To avoid the risk of human error
when deploying many cameras, it is recommended to start by configuring and validating a single
camera.
Once the configuration is fully validated, the IONConfigTool utility (link IONConfigTool - IONODES)
can be used to export its configuration then import it to other cameras. All configuration
parameters are exported/imported except users and credentials, network settings and media at-
rest encryption key. These must be re-entered manually after the import.
3.2 Configure Networking
To integrate with XProtect®, the PERCEPT Body Camera and LAN infrastructure shall be
configured for each camera to always obtain the same IP address on all network interfaces; Wi-Fi,
Docking Station, and VPN. If the Wi-Fi and Docking Station always connect to the video LAN, setting
static IP addresses for these interfaces may be appropriate.
However, static IP addresses can prevent connecting with other networks to access the video LAN
via VPN. For that reason, it is recommended to keep the camera’s network interfaces to DHCP and
configure the VPN router and/or video LAN DHCP server to hand out reserved IP addresses to
each camera. This is further detailed in section 3.6 below.
3.2.1 Configure Cellular
All PERCEPT Body Cameras include a SIM card that can be activated at any time. Contact us to
activate a data plan.
9
3.2.2 Configure Cellular Data Usage
To better control data usage, the PERCEPT Body Camera can be configured to block different types
of data over cellular links.
1. From the Configuration page
2. Select the Network tab
3. Expand the CELLULAR section and configure parameters in the Data Usage tab
a. Uncheck Audio & Video Streaming to allow live streaming over cellular
b. Check Recorded Audio & Video Clips to block Edge storage transfer over cellular
c. Check System Information Files to block troubleshooting log download over
cellular
d. Check Firmware Updates to block firmware upload over cellular
e. Set sampling rate to 0for both GPS and System Resources to block metadata
streaming over cellular
10
Note: Settings above are intended to keep cellular data to strict minimum to achieve functionalities of
this deployment scenario. Other data types can be allowed based on individual use case.
Note: It is recommended to disable metadata because the PERCEPT Body Camera integration with
Milestone XProtect® does not currently use it. Future revisions are planned to include use cases
for metadata.
3.2.3 Configure Wi-Fi Data Usage
PERCEPT Body Cameras can be configured to block media playback and metadata streaming over
Wi-Fi. This impacts Edge Storage transfer since it is achieved through media playback. Playback
can take up all the available bandwidth of a Wi-Fi network, especially when multiple camera users
return to a central location at the end of a shift.
XProtect® Recording Server can be configured to limit edge storage concurrent jobs and
bandwidth, or playback can be disabled over Wi-Fi altogether from the PERCEPT Body Camera
Web UI. The latter is recommended when deploying with PERCEPT Docking Stations. Edge storage
transfers will be performed exclusively over docking stations’ wired Ethernet port.
11
1. From the Configuration page
2. Select the Network tab
3. Expand the STREAMING section and check Prevent Media Playback Over a Wireless
Connection in the Media tab
4. Select the Metadata tab and set both GPS and System Resources sampling to 0to
disable metadata streaming
3.2.4 Configure Docking Station(s)
When deploying with PERCEPT Docking Station(s). It is recommended to disable live streaming
and playback over Wi-Fi when docked.
12
1. From the Configuration page
2. Select the System tab
3. Expand the DOCKING STATION section and configure parameters as follows
a. Check Enable Online Mode
b. Uncheck Allow Live Media Streaming When Docked
c. Uncheck Allow Recorded Playback and Clip Download Over Wi-Fi When Docked
Note: Edge storage transfer can create bandwidth surges of more than 200Mbps when body cameras
start offloading data. Ensure that the network can handle the increased traffic. XProtect®
Recording Server advanced configuration (RecorderConfig.xml) can be adjusted to limit edge
storage jobs based on system scale and capacity.
13
3.3 Configure Video
3.3.1 Disable orientation metadata
The PERCEPT Body Camera includes orientation metadata used by some client software to
stabilize dewarped video. This feature is not supported by XProtect® and must be disabled in the
body camera.
1. From the Configuration page
2. Select the Video tab
3. Uncheck the Orientation Enable box
14
3.3.2 Video profiles
The PERCEPT Body Camera supports two H.264/265 video encoder profiles and one MJPEG profile.
Each profile enabled in the camera will be accessible to XProtect®.
1. From the Configuration page
2. Select the Video tab
3. Enable and configure each video profile. Recommended settings are:
a. PROFILE 1 (Recording Stream):
i. Encoder Type: H264
ii. Resolution: 6 MP
iii. Frame Rate: 30 fps
iv. Target Bit Rate: 8000 kbps
v. Intra Interval: 240 frames
vi. Rate Control: Variable Bitrate
vii. Profile: Main
viii. VBR Aggressiveness: Moderate
15
b. PROFILE 2 (Live Stream):
i. Encoder Type: H264
ii. Resolution: 1 MP
iii. Frame Rate: 10 fps
iv. Target Bit Rate: 800 kbps
v. Intra Interval: 30 frames
vi. Rate Control: Variable Bitrate
vii. Profile: Main
viii. VBR Aggressiveness: Moderate
c. PROFILE 3 (for PERCEPT Web UI only): Encoder Type: MJPEG
Note: The Encoder Type (codec) and profile’s Enabled status are detected by XProtect® when adding
the body camera. These settings must therefore be configured in the PERCEPT Body Camera
before adding it to XProtect®. Changing Encoder Type requires rebooting the device.
Note: Once added to XProtect®, video profile settings such as resolution, frame rate, etc shall be
configured from within XProtect® Management Client.
Note: H.264 is recommended for users that intend on viewing streams from XProtect® Web Client
without XProtect® Mobile Server expending computing resources for transcoding. Video
profiles can be configured with H.265 codec if Web Client or transcoding resource limitations is
not of concern.
16
3.4 Setup local recording on the body camera
1. From the Configuration page
2. Select the Recorder tab
3. Select the Media Recording subtab
4. Select the Video Profile for edge/onboard storage recording (Profile 1 for recording
throughout this guide)
5. Enable Pre/Post-Recording as required and set their duration. The Pre-Recording Video
Profile shall be set to the low bitrate live streaming profile (Profile 2 in this guide)
Note: When Pre-Recording is enabled, the camera is constantly encoding and buffering video. If Pre-
Recording is not required, disabling it significantly increases battery life. If Pre-Recording is set
to the high bitrate profile, the camera will overheat in certain environmental conditions.
Note: To prevent unauthorized usage of locally recorded media in case of loss or theft, the camera
features AES-256 encryption for at-rest files.
17
6. Under Configuration, Recorder, Media Recording tab, expand the General subtab
7. Select the Security section
8. Enter a password for AES-256 encryption of at-rest local media recording (enter and
confirm Encryption Key). There is no password policy or complexity requirement.
9. Save
18
3.5 Setup time synchronization on the body camera
1. From the Configuration page
2. Select the System tab
3. In the NTP Configuration section, enter the IP address of the network time server used by
Milestone XProtect® server(s) to synchronize clocks
Note: Time synchronization ensures media recorded on PERCEPT Body Cameras’ SD cards and later
transferred to XProtect® are accurately timestamped.
Note: By configuring its time service, any computer running Windows® can act as the NTP server for
all devices connected to the surveillance LAN. PERCEPT Body Cameras that connect to the LAN
directly or via VPN can keep their clocks synchronized with XProtect® using this approach.
19
3.6 Create a new dedicated ONVIF user (recommended)
The default administrator account can be used for integrating the body camera to XProtect®.
However, it is recommended to create a dedicated ONVIF user account for this purpose. The role
“Superuser” gives the account permissions for every function supported from XProtect®.
1. Once logged into the PERCEPT Body Camera’s Web UI, click on the Security page
2. Click on the Create User button
3. In the New User pop-up window, enter Username
4. Enter Password and repeat it to confirm
5. Select Super user Role
6. Click on Create User
Note: Configuration detailed in this guide shall be made using an ‘Administrator’ account, the
dedicated ONVIF user is to integrate the PERCEPT Body Camera in XProtect®.
20
4Configuring VPN
This section details VPN requirements, including a practical example.
4.1 VPN requirements
•Protocol: The PERCEPT Body Camera supports VPN protocol L2TP/IPSec with Pre-shared
Key (PSK). VPN function is always-on; it connects when it can reach the VPN server.
•Tunnel# and Bandwidth: This protocol encrypts VPN tunnels. When assessing a VPN server
(hardware or software), maximum number of VPN tunnels and encrypted bandwidth
supported shall cover the number of PERCEPT body cameras deployed.
•Public Static IP address: The VPN server or router shall connect to the internet with a public
static IP address. Port forwarding for the L2TP/IPSec protocol shall be configured when the
VPN server is connected behind another internet router.
•Address reservation: VPN solution shall provide a mean to assign specific IP addresses to
each device. This can be implemented by having a distinct VPN user for each device and
assigning a specific IP to each user.
4.2 VPN example
Specific VPN selection and configuration is outside the scope of this guide. This example is
included to better illustrate VPN requirements.
This example uses TP-Link’s Omada VPN Router; more specifically, the entry model of the series,
the ER605 v2. It supports up to sixteen (16) L2TP VPN tunnels with a throughput of 47.11 Mbps
encrypted. The recommended settings in this deployment guide yields ~ 1.0–1.2 Mbps per camera
when live streaming audio and video on-demand. Presuming edge storage transfer is not
performed remotely through VPN, this entry-level router can accommodate a small-scale PERCEPT
deployment.
Other manuals for Milestone XProtect
1
Table of contents
Other PERCEPT Digital Camera manuals
