AXIS I8307-VE Network Intercom
Specifications
- Product Name: AXIS I8307-VE Network Intercom
- Model: AUXseIrSmI8an3u0a7l-VENetworkIntercom
- Intercom Options: Intercom, Intercom combined with AXIS A9801,
- Intercom combined with AXIS A9210, Intercom combined with an access control system
Installation
To install the AXIS I8307-VE Network Intercom, please refer to the web version of the user manual for detailed instructions.
Preview Mode
Preview mode is useful for installers to adjust the camera view during installation without the need for login. This feature is only available in the factory default state for a limited time after device power-up.
Finding the Device on the Network
- Refer to the section on how to find and assign IP addresses in the user manual.
Browser Support
The AXIS I8307-VE Network Intercom is compatible with the following browsers:
- ChromeTM (recommended)
- EdgeTM (recommended)
If you experience video streaming issues, consider using a different browser.
Opening the Device’s Web Interface
- Open a web browser and enter the IP address or host name of the Axis device. If you don’t know the IP address, use AXIS IP Utility or AXIS Device Manager to locate the device on the network.
- Enter the username and password. If accessing the device for the first time, you need to create an administrator account.
AXIS I8307-VE Network Intercom
Follow the instructions in the user manual to create an administrator account for accessing and managing the device.
“`
Installation
To watch this video, go to the web version of this document.
Preview mode Preview mode is ideal for installers when fine tuning the camera view during the installation. No login is required to access the camera view in preview mode. It is available only in factory defaulted state for a limited time from powering up the device.
To watch this video, go to the web version of this document. This video demonstrates how to use preview mode.
6
AXIS I8307-VE Network Intercom
Get started
Find the device on the network
To find Axis devices on the network and assign them IP addresses in Windows®, use AXIS IP Utility or AXIS Device Manager. Both applications are free and can be downloaded from axis.com/support.
For more information about how to find and assign IP addresses, go to How to assign an IP address and access your device.
Browser support
You can use the device with the following browsers:
Windows® macOS® Linux®
Other operating systems
ChromeTM recommended recommended recommended
Firefox®
EdgeTM recommended recommended recommended
Safari® *
*Not fully supported. If you encounter video streaming issues, use a different browser.
Open the device’s web interface
1. Open a browser and type the IP address or host name of the Axis device. If you do not know the IP address, use AXIS IP Utility or AXIS Device Manager to find the device on the network.
2. Type the username and password. If you access the device for the first time, you must create an administrator account. See .
For descriptions of all the controls and options in the device’s web interface, see .
Create an administrator account
The first time you log in to your device, you must create an administrator account.
1. Enter a username. 2. Enter a password. See . 3. Re-enter the password. 4. Accept the license agreement. 5. Click Add account. Important The device has no default account. If you lose the password for your administrator account, you must reset the device. See .
Secure passwords
Important Use HTTPS (which is enabled by default) to set your password or other sensitive configurations over the network. HTTPS enables secure and encrypted network connections, thereby protecting sensitive data, such as passwords.
AXIS I8307-VE Network Intercom The device password is the primary protection for your data and services. Axis devices do not impose a password policy as they may be used in various types of installations. To protect your data we strongly recommend that you:
· Use a password with at least 8 characters, preferably created by a password generator. · Don’t expose the password. · Change the password at a recurring interval, at least once a year. Make sure that no one has tampered with the device software To make sure that the device has its original AXIS OS, or to take full control of the device after a security attack: 1. Reset to factory default settings. See .
After the reset, secure boot guarantees the state of the device. 2. Configure and install the device.
8
AXIS I8307-VE Network Intercom
Configure your device
This section covers all the important configurations that an installer needs to do to get the product up and running after the hardware installation has been completed.
Set up direct SIP (P2P)
VoIP (Voice over IP) is a group of technologies that enables voice and multimedia communication over IP networks. For more information, see .
In this device VoIP is enabled through the SIP protocol. For more information about SIP, see
There are two types of setups for SIP. Direct or peer-to-peer (P2P) is one of them. Use peer-to-peer when the communication is between a few user agents within the same IP network and there is no need for extra features that a PBX-server could provide. For information on how to set it up, see .
1. Go to Communication > SIP > Settings and select Enable SIP. 2. To allow the device to receive incoming calls, select Allow incoming calls.
NOTICE When you allow incoming calls, the device accepts calls from any device connected to the network. If the device is accessible from a public network or the internet, we recommend you not to allow incoming calls. 3. Click Call handling. 4. In Calling timeout, set the number of seconds that a call will last before it ends if there is no answer. 5. If you have allowed incoming calls, set the number of seconds before timeout for incoming calls in Incoming call timeout. 6. Click Ports. 7. Enter the SIP port number and TLS port number.
Note · SIP port for SIP sessions. Signalling traffic through this port is non-encrypted. The default port number is 5060. · TLS port for SIPS and TLS secured SIP sessions. Signalling traffic through this port is encrypted with Transport Layer Security (TLS). The default port number is 5061. · RTP start port the port used for the first RTP media stream in a SIP call. The default start port is 4000. Some firewalls can block RTP traffic on certain port numbers. The port number must be between 1024 and 65535. 8. Click NAT traversal. 9. Select the protocols you want to enable for NAT traversal.
Note Use NAT traversal when the device is connected to the network from behind a NAT router or a firewall. For more information see . 10. Click Save.
Set up SIP through a server (PBX)
VoIP (Voice over IP) is a group of technologies that enables voice and multimedia communication over IP networks. For more information, see .
In this device, VoIP is enabled through the SIP protocol. For more information about SIP, see
There are two types of setups for SIP. A PBX server is one of them. Use a PBX server when the communication should be between an infinite number of user agents within and outside the IP network. Additional features could be added to the setup depending on the PBX provider. For more information, see .
1. Request the following information from your PBX provider:
9
AXIS I8307-VE Network Intercom
User ID
Domain
Password
Authentication ID
Caller ID
Registrar
RTP start port
2. Go to Communication > SIP > Accounts and click + Add account.
3. Enter a Name for the account.
4. Select Registered.
5. Select a transport mode.
6. Add the account information from the PBX provider.
7. Click Save.
8. Set up the SIP settings in the same way as for peer-to-peer, see . Use the RTP start port from the PBX provider.
Create a contact
This example explains how to create a new contact in the contact list. Before you start, enable SIP in Communication > SIP.
To create a new contact:
1. Go to Communication > Contact list. 2. Click + Add contact. 3. Enter the first and last name of the contact. 4. Enter the contact’s SIP address.
Note For information about SIP addresses, see . 5. Select the SIP account to call from.
Note Availability options are defined in System > Events > Schedules. 6. Choose the contact’s Availability. If there’s a call when the contact isn’t available, the call gets canceled unless a there’s a fallback contact.
Note A fallback is a contact, to whom the call gets forwarded if the original contact doesn’t reply or isn’t available. 7. In Fallback, select None. 8. Click Save.
Add a call button to the display
This example explains how to configure the display to show a button that visitors can press to call the reception. Before you start
· Create the reception contact. For instructions, see . 1. Go to Display > Pages.
10
AXIS I8307-VE Network Intercom
2. On Default Homepage, click and select Edit. 3. Click + Add. 4. In the Type list, select Button. 5. In the list of contacts, select the reception. 6. Select a button size. 7. To save the button, click Save. 8. To save the default homepage, click Save.
Set up as card reader – network connection
To use the intercom as a card reader, you must connect it to a door controller. The door controller stores all credentials and keeps track of who is allowed through the door. In this example we connect the devices over the network. We also modify the allowed card types.
Important The network connection only works with Axis door controllers. To connect to a non-Axis door controller, you need to physically connect the devices with wires. See .
Set up the intercom as a card reader 1. Go to Reader > Connection. 2. Select the VAPIX reader protocol type. 3. Select the protocol for communicating with the door controller.
Note We recommend turning on Verify certificate if you’re using HTTPS. 4. Enter the IP address for the door controller. 5. Enter the credentials for the door controller. 6. Click Connect. 7. Select the entrance reader for the appropriate door. 8. Click Save.
Set up as card reader – wired connection
To use the intercom as a card reader, you must connect it to a door controller. The door controller stores all credentials and keeps track of who is allowed through the door. In this example, we connect the devices with wires, we use the Wiegand protocol, activate the beeper and use one I/O port for the LED. We also modify the allowed card types.
Important Use I/O ports that are not already in use. If you use I/O ports already in use, any events created for these ports will stop working.
Before you start · Connect the intercom to a door controller. See the electrical wiring drawings, which you can find in . · Configure the door controller’s hardware, using the Wiegand protocol for the reader. See the door controller’s user manual for instructions.
Set up the intercom as a card reader 1. Go to Reader > Connection. 2. Select Wiegand as protocol type. 3. Turn on Beeper.
11
AXIS I8307-VE Network Intercom
4. Under Input for beeper, select I3. 5. In Input used for LED control, select 1. 6. Under Input for LED1, select I1. 7. Select what colors to use for each state. 8. Under Keypress format, select FourBit. 9. Click Save. 10. Go to Reader > Chip types and activate the chip types you want to use. Note You can keep the default set of chip types but we recommend that you modify the list according to your specific needs. 11. Click Add data set to specify the data sets for the different chip types. 12. Click Save.
Use protected data on cards to increase security
To increase security in your access control system, you can choose to use secure card data stored on some types of cards. The data is protected by a secret key. To read the card data, you need to store the secret key and other information about the card on the device.
1. Go to Reader > Chip types. 2. Under Data sets, select the chip type you want to edit and click Add data set. 3. Enter information about the card data. What information to enter depends on the card type and how
the cards were enrolled. 4. If you use the OSDP or Wiegand protocols, select Use as UID to send the secure data as the UID/CSN
instead of the normal card UID/CSN. 5. To only allow cards that comply with the specified card data to be sent to the access controller, select
Required data. Cards that don’t comply are silently ignored by the reader. 6. Click Save.
Use DTMF to show a map on the display
When a visitor makes a call from the intercom and needs directions, the person who answers can use DTMF (Dual-Tone Multi-Frequency) signaling to show a map on the intercom’s display.
This example explains how to:
· Upload a map image to the intercom. · Create a page that contains the map image in the intercom. · Define the DTMF sequence in the intercom. · Set up the intercom to show the map page for 30 seconds as a response to the DTMF sequence. Before you start
· Allow SIP calls from the device and create a SIP account. For instructions, see and . Upload map image
1. Go to Media. 2. Click + Add. 3. Drag-and-drop an image that shows a map of the building. The recommended image resolution is
480×800 pixels, and the maximum resolution is 2048×2048 pixels. 4. Click Save.
12
AXIS I8307-VE Network Intercom
Create a map page for the display 5. Go to Display > Pages. 6. Click + Add. 7. Type a name for the page, for example Map page. 8. Click + Add. 9. In the list of types, select Image. 10. Type a name for the image, for example Map image. 11. In the list of images, select the map image. 12. Click Save. 13. Click Save again.
Define the DTMF sequence 14. Go to Communication > SIP > DTMF. 15. Click + Add sequence. 16. In Sequence, type 9. 17. In Description, type Show map. 18. Select an account. 19. Click Save.
Create a rule 20. Go to System > Events > Rules and add a rule. 21. Type a name for the rule, for example Use DTMF to show map. 22. In the list of conditions, select Call > DTMF. 23. In the list of DTMF event IDs, select Show map. 24. In the list of actions, select Display > Show page. 25. In the list of pages, select Map page. 26. In Duration, enter 00:00:30 to show the map for 30 seconds. 27. Click Save.
Allow credential holders to open the door
With Entry list, you can make it possible for credential holders to use their card or PIN to trigger actions, such as opening a door. This example explains how to add a credential holder who can use their card to open the door 10 times.
Prerequisites
· Make sure the correct chip type is active in Reader > Chip types. Turn on Entry list and add a credential holder:
1. Go to Reader > Entry list. 2. Turn on Use Entry list. 3. Click + Add credential holder. 4. Enter the credential holder’s first and last name. The first name must be unique. 5. Select Card. 6. Swipe the credential holder’s card on the device and click Get latest. 7. Keep the event condition Access granted. 8. Under Valid to, select Number of times. 9. In Number of times, enter 10.
13
AXIS I8307-VE Network Intercom 10. Click Save.
Create a rule: 1. Go to System > Events. 2. Under Rules, click + Add a rule. 3. In Name, enter Open door. 4. In the list of conditions, select Entry list > Access granted. 5. In the list of actions, select I/O > Toggle I/O once. 6. In the list of ports, select Door. 7. Under State, select Active. 8. Set the duration to 00:00:07. 9. Click Save.
14
AXIS I8307-VE Network Intercom
The web interface
To reach the device’s web interface, type the device’s IP address in a web browser. Note
Support for the features and settings described in this section varies between devices. This icon indicates that the feature or setting is only available in some devices.
Show or hide the main menu. Access the release notes. Access the product help. Change the language. Set light theme or dark theme.
The user menu contains: · Information about the user who is logged in.
·
Change account : Log out from the current account and log in to a new account.
·
Log out : Log out from the current account.
The context menu contains:
· Analytics data: Accept to share non-personal browser data. · Feedback: Share any feedback to help us improve your user experience. · Legal: View information about cookies and licenses. · About: View device information, including AXIS OS version and serial number.
Status
Device info Shows the device information, including AXIS OS version and serial number.
Upgrade AXIS OS: Upgrade the software on your device. Takes you to the Maintenance page where you can do the upgrade.
Time sync status
Shows NTP synchronization information, including if the device is in sync with an NTP server and the time remaining until the next sync.
NTP settings: View and update the NTP settings. Takes you to the Time and location page where you can change the NTP settings.
Security 15
AXIS I8307-VE Network Intercom
Shows what kind of access to the device that is active, what encryption protocols are in use, and if unsigned apps are allowed. Recommendations to the settings are based on the AXIS OS Hardening Guide. Hardening guide: Link to AXIS OS Hardening guide where you can learn more about cybersecurity on Axis devices and best practices.
Power status Shows power status information, including current power, average power, and max power. Power settings: View and update the power settings for the device. Takes you to the Power settings page where you can change the power settings.
Ongoing recordings Shows ongoing recordings and their designated storage space. Recordings: View ongoing and filtered recordings and their source. For more information, see
Shows the storage space where the recording is saved.
Connected clients Shows the number of connections and connected clients. View details: View and update the list of connected clients. The list shows IP address, protocol, port, state, and PID/process of each connection.
Video Installation
Capture mode : A capture mode is a preset configuration that defines how the camera captures images. When you change the capture mode, it can affect many other settings, such as view areas and privacy masks. Mounting position : The orientation of the image can change depending on how you mount the camera. Power line frequency: To minimize image flicker, select the frequency your region uses. The American regions usually use 60 Hz. The rest of the world mostly uses 50 Hz. If you’re not sure of your region’s power line frequency, check with the local authorities.
Roll: Use the slider to adjust the angle to make the image horizontal.
Image Appearance
16
AXIS I8307-VE Network Intercom
Scene profile : Select a scene profile that suits your surveillance scenario. A scene profile optimizes image settings, including color level, brightness, sharpness, contrast, and local contrast, for a specific environment or purpose.
· Forensic : Suitable for surveillance purposes. · Indoor : Suitable for indoor environments. · Outdoor : Suitable for outdoor environments. · Vivid : Useful for demonstration purposes. · Traffic overview : Suitable for vehicle traffic monitoring. · License plate : Suitable for capturing license plates. Saturation: Use the slider to adjust the color intensity. You can, for example, get a grayscale image.
Contrast: Use the slider to adjust the difference between light and dark.
Brightness: Use the slider to adjust the light intensity. This can make objects easier to see. Brightness is applied after image capture, and doesn’t affect the information in the image. To get more details from a dark area, it’s usually better to increase gain or exposure time.
Sharpness: Use the slider to make objects in the image appear sharper by adjusting the edge contrast. If you increase the sharpness, it may increase the bitrate and the amount of storage space needed as well.
Wide dynamic range
17
AXIS I8307-VE Network Intercom WDR : Turn on to make both bright and dark areas of the image visible. Local contrast : Use the slider to adjust the contrast of the image. A higher value makes the contrast higher between dark and light areas. Tone mapping : Use the slider to adjust the amount of tone mapping that is applied to the image. If the value is set to zero, only the standard gamma correction is applied, while a higher value increases the visibility of the darkest and brightest parts in the image. White balance When the camera detects the color temperature of the incoming light, it can adjust the image to make the colors look more natural. If this is not sufficient, you can select a suitable light source from the list. The automatic white balance setting reduces the risk of color flicker by adapting to changes gradually. If the lighting changes, or when the camera is first started, it can take up to 30 seconds to adapt to the new light source. If there is more than one type of light source in a scene, that is, they differ in color temperature, the dominating light source acts as a reference for the automatic white balance algorithm. This behavior can be overridden by choosing a fixed white balance setting that matches the light source you want to use as a reference.
18
AXIS I8307-VE Network Intercom
Light environment: · Automatic: Automatic identification and compensation for the light source color. This is the recommended setting which can be used in most situations.
· Automatic outdoors : Automatic identification and compensation for the light source color. This is the recommended setting which can be used in most outdoor situations.
· Custom indoors : Fixed color adjustment for a room with some artificial light other than fluorescent lighting and good for a normal color temperature around 2800 K.
· Custom outdoors : Fixed color adjustment for sunny weather conditions with a color temperature around 5500 K.
· Fixed fluorescent 1: Fixed color adjustment for fluorescent lighting with a color temperature around 4000 K.
· Fixed fluorescent 2: Fixed color adjustment for fluorescent lighting with a color temperature around 3000 K.
· Fixed indoors: Fixed color adjustment for a room with some artificial light other than fluorescent lighting and good for a normal color temperature around 2800 K.
· Fixed outdoors 1: Fixed color adjustment for sunny weather conditions with a color temperature around 5500 K.
· Fixed outdoors 2: Fixed color adjustment for cloudy weather condition with a color temperature around 6500 K.
· Street light mercury : Fixed color adjustment for ultraviolet emission in mercury vapor lights common in street lighting.
· Street light sodium : Fixed color adjustment that compensates for the yellow orange color of sodium vapor lights common in street lighting.
· Hold current: Keep the current settings and do not compensate for light changes.
· Manual : Fix the white balance with the help of a white object. Drag the circle to an object that you want the camera to interpret as white in the live view image. Use the Red balance and Blue balance sliders to adjust the white balance manually.
Exposure Select an exposure mode to reduce rapidly changing irregular effects in the image, for example, flicker produced by different types of light sources. We recommend you to use the automatic exposure mode, or the same frequency as your power network.
19
AXIS I8307-VE Network Intercom
Exposure mode: · Automatic: The camera adjusts the aperture, gain, and shutter automatically.
· Automatic aperture fixed.
: The camera adjusts the aperture and gain automatically. The shutter is
· Automatic shutter fixed.
: The camera adjusts the shutter and gain automatically. The aperture is
· Hold current: Locks the current exposure settings.
· Flicker-free : The camera adjusts the aperture and gain automatically, and uses only the following shutter speeds: 1/50 s (50 Hz) and 1/60 s (60 Hz).
· Flicker-free 50 Hz : The camera adjusts the aperture and gain automatically, and uses the shutter speed 1/50 s.
· Flicker-free 60 Hz : The camera adjusts the aperture and gain automatically, and uses the shutter speed 1/60 s.
· Flicker-reduced : This is the same as flicker-free, but the camera might use shutter speeds faster than 1/100 s (50 Hz) and 1/120 s (60 Hz) for brighter scenes.
· Flicker-reduced 50 Hz : This is the same as flicker-free, but the camera might use shutter speeds faster than 1/100 s for brighter scenes.
· Flicker-reduced 60 Hz : This is the same as flicker-free, but the camera might use shutter speeds faster than 1/120 s for brighter scenes.
· Manual : The aperture, gain, and shutter are fixed.
Exposure zone : Use exposure zones to optimize the exposure in a selected part of the scene, for example, the area in front of an entrance door.
Note The exposure zones are related to the original image (unrotated), and the names of the zones apply to the original image. This means, for example, that if the video stream is rotated 90°, then the Upper zone becomes the Right zone in the stream, and Left becomes Lower.
· Automatic: Suitable for most situations.
· Center: Uses a fixed area in the center of the image to calculate the exposure. The area has a fixed size and position in the live view.
· Full : Uses the entire live view to calculate the exposure.
· Upper : Uses an area with a fixed size and position in the upper part of the image to calculate the exposure.
· Lower : Uses an area with a fixed size and position in the lower part of the image to calculate the exposure.
· Left : Uses an area with a fixed size and position in the left part of the image to calculate the exposure.
20
AXIS I8307-VE Network Intercom
· Right : Uses an area with a fixed size and position in the right part of the image to calculate the exposure.
· Spot: Uses an area with a fixed size and position in the live view to calculate the exposure.
· Custom: Uses an area in the live view to calculate the exposure. You can adjust the size and position of the area.
Max shutter: Select the shutter speed to provide the best image. Low shutter speeds (longer exposure) might cause motion blur when there is movement, and a too high shutter speed might affect the image quality. Max shutter works with max gain to improve the image.
Max gain: Select the suitable max gain. If you increase the max gain, it improves the visible level of detail in dark images, but also increases the noise level. More noise can also result in increased use of bandwidth and storage. If you set the max gain to a high value, images can differ a lot if the light conditions are very different from day to night. Max gain works with max shutter to improve the image.
Motion-adaptive exposure : Select to reduce motion blur in low-light conditions.
Blur-noise trade-off: Use the slider to adjust the priority between motion blur and noise. If you want to prioritize low bandwidth and have less noise at the expense of details in moving objects, move the slider towards Low noise. If you want to prioritize the preservation of details in moving objects at the expense of noise and bandwidth, move the slider towards Low motion blur.
Note You can change the exposure either by adjusting the exposure time or by adjusting the gain. If you increase the exposure time, it results in more motion blur, and if you increase the gain, it results in more noise. If you adjust the Blur-noise trade-off towards Low noise, the automatic exposure will prioritize longer exposure times over increasing gain, and the opposite if you adjust the trade-off towards Low motion blur. Both the gain and exposure time will eventually reach their maximum values in low-light conditions, regardless of the priority set.
Lock aperture : Turn on to keep the aperture size set by the Aperture slider. Turn off to allow the camera to automatically adjust the aperture size. You can, for example, lock the aperture for scenes with permanent light conditions.
Aperture : Use the slider to adjust the aperture size, that is, how much light passes through the lens. To allow more light to enter the sensor and thereby produce a brighter image in low-light conditions, move the slider towards Open. An open aperture also reduces the depth of field, which means that objects close to or far from the camera can appear unfocused. To allow more of the image to be in focus, move the slider towards Closed.
Exposure level: Use the slider to adjust the image exposure.
Defog image.
: Turn on to detect the effects of foggy weather and automatically remove them for a clearer
Note
We recommend you not to turn on Defog in scenes with low contrast, large light level variations, or when the autofocus is slightly off. This can affect the image quality, for example, by increasing the contrast. Furthermore, too much light can negatively impact the image quality when defog is active.
Stream General
21
AXIS I8307-VE Network Intercom
Resolution: Select the image resolution suitable for the surveillance scene. A higher resolution increases bandwidth and storage.
Frame rate: To avoid bandwidth problems on the network or reduce storage size, you can limit the frame rate to a fixed amount. If you leave the frame rate at zero, the frame rate is kept at the highest possible rate under the current conditions. A higher frame rate requires more bandwidth and storage capacity.
P-frames: A P-frame is a predicted image that shows only the changes in the image from the previous frame. Enter the desired number of P-frames. The higher the number, the less bandwidth is required. However, if there is network congestion, there could be a noticeable deterioration in the video quality.
Compression: Use the slider to adjust the image compression. High compression results in a lower bitrate and lower image quality. Low compression improves the image quality, but uses more bandwidth and storage when you record.
Signed video : Turn on to add the signed video feature to the video. Signed video protects the video from tampering by adding cryptographic signatures to the video.
Zipstream
Zipstream is a bitrate reduction technology, optimized for video surveillance, that reduces the average bitrate in an H.264 or H.265 stream in real time. Axis Zipstream applies a high bitrate in scenes where there are multiple regions of interest, for example, in scenes with moving objects. When the scene is more static, Zipstream applies a lower bitrate, and thereby reduces the required storage. To learn more, see Reducing the bit rate with Axis Zipstream
Select the bitrate reduction Strength: · Off: No bitrate reduction. · Low: No visible quality degradation in most scenes. This is the default option and it can be used in all types of scenes to reduce the bitrate. · Medium: Visible effects in some scenes through less noise and a slightly lower level of detail in regions of lower interest, for example, where there’s no movement. · High: Visible effects in some scenes through less noise and a lower level of detail in regions of lower interest, for example, where there’s no movement. We recommend this level for cloud-connected devices and devices that use local storage. · Higher: Visible effects in some scenes through less noise and a lower level of detail in regions of lower interest, for example, where there’s no movement. · Extreme: Visible effects in most scenes. The bitrate is optimized for smallest possible storage.
Optimize for storage: Turn on to minimize the bitrate while maintaining quality. The optimization does not apply to the stream shown in the web client. This can only be used if your VMS supports B-frames. Turning on Optimize for storage also turns on Dynamic GOP.
Dynamic FPS (frames per second): Turn on to allow the bandwidth to vary based on the level of activity in the scene. More activity requires more bandwidth.
Lower limit: Enter a value to adjust the frame rate between minimal fps and the stream default fps based on scene motion. We recommend you to use lower limit in scenes with very little motion, where the fps could drop to 1 or lower.
Dynamic GOP (Group of Pictures): Turn on to dynamically adjust the interval between I-frames based on the level of activity in the scene.
Upper limit: Enter a maximum GOP length, that is, the maximum number of P-frames between two I-frames. An I-frame is a self-contained image frame that is independent of other frames.
Bitrate control
22
AXIS I8307-VE Network Intercom
· Average: Select to automatically adjust the bitrate over a longer time period and provide the best possible image quality based on the available storage.
Click to calculate the target bitrate based on available storage, retention time, and
bitrate limit.
Target bitrate: Enter desired target bitrate.
Retention time: Enter the number of days to keep the recordings.
Storage: Shows the estimated storage that can be used for the stream.
Maximum bitrate: Turn on to set a bitrate limit.
Bitrate limit: Enter a bitrate limit that is higher than the target bitrate.
· Maximum: Select to set a maximum instant bitrate of the stream based on your network bandwidth.
Maximum: Enter the maximum bitrate.
· Variable: Select to allow the bitrate to vary based on the level of activity in the scene. More activity requires more bandwidth. We recommend this option for most situations.
Orientation Mirror: Turn on to mirror the image.
Audio Include: Turn on to use audio in the video stream. Source : Select what audio source to use. Stereo : Turn on to include built-in audio as well as audio from an external microphone.
23
AXIS I8307-VE Network Intercom
Overlays
: Click to add an overlay. Select the type of overlay from the dropdown list:
· Text: Select to show a text that is integrated in the live view image and visible in all views, recordings and snapshots. You can enter your own text, and you can also include pre-configured modifiers to automatically show, for example, time, date, and frame rate.
: Click to add the date modifier %F to show yyyy-mm-dd.
: Click to add the time modifier %X to show hh:mm:ss (24-hour clock).
Modifiers: Click to select any of the modifiers shown in the list to add them to the text box.
For example, %a shows the day of the week.
Size: Select the desired font size.
Appearance: Select the text color and background color, for example, white text on a black
background (default).
: Select the position of the overlay in the image or click and drag the overlay to move it
around in the live view.
· Image: Select to show a static image superimposed over the video stream. You can use .bmp, .png, . jpeg, or .svg files. To upload an image, click Manage images. Before you upload an image, you can choose to:
Scale with resolution: Select to automatically scale the overlay image to fit the video
resolution.
Use transparency: Select and enter the RGB hexadecimal value for that color. Use the format
RRGGBB. Examples of hexadecimal values: FFFFFF for white, 000000 for black, FF0000 for red,
6633FF for blue, and 669900 for green. Only for .bmp images.
· Scene annotation : Select to show a text overlay in the video stream that stays in the same position, even when the camera pans or tilts in another direction. You can choose to only show the overlay within certain zoom levels.
: Click to add the date modifier %F to show yyyy-mm-dd.
: Click to add the time modifier %X to show hh:mm:ss (24-hour clock).
Modifiers: Click to select any of the modifiers shown in the list to add them to the text box.
For example, %a shows the day of the week.
Size: Select the desired font size.
Appearance: Select the text color and background color, for example, white text on a black
background (default).
: Select the position of the overlay in the image or click and drag the overlay to move it
around in the live view. The overlay is saved and remains in the pan and tilt coordinates of
this position.
Annotation between zoom levels (%): Set the zoom levels which the overlay will be shown
within.
Annotation symbol: Select a symbol that appears instead of the overlay when the camera is
not within the set zoom levels.
· Streaming indicator : Select to show an animation superimposed over the video stream. The animation indicates that the video stream is live, even if the scene doesn’t contain any motion.
24
AXIS I8307-VE Network Intercom
Appearance: Select the animation color and background color, for example, red animation on
a transparent background (default).
Size: Select the desired font size.
: Select the position of the overlay in the image or click and drag the overlay to move it
around in the live view.
· Widget: Linegraph : Show a graph chart that displays how a measured value changes over time.
Title: Enter a title for the widget.
Overlay modifier: Select an overlay modifier as data source. If you have created MQTT
overlays, they will be located at the end of the list.
: Select the position of the overlay in the image or click and drag the overlay to move it
around in the live view.
Size: Select the size of the overlay.
Visible on all channels: Turn off to show only on your currently selected channel. Turn on to
show on all active channels.
Update interval: Choose the time between data updates.
Transparency: Set the transparency of the entire overlay.
Background transparency: Set the transparency only of the background of the overlay.
Points: Turn on to add a point to the graph line when data is updated.
X axis
Label: Enter the text label for the x axis.
Time window: Enter how long time the data is visualized.
Time unit: Enter a time unit for the x axis.
Y axis
Label: Enter the text label for the y axis.
Dynamic scale: Turn on for the scale to automatically adapt to the data values. Turn
off to manually enter values for a fixed scale.
Min alarm threshold and Max alarm threshold: These values will add horizontal
reference lines to the graph, making it easier to see when the data value becomes too
high or too low.
· Widget: Meter : Show a bar chart that displays the most recently measured data value.
Title: Enter a title for the widget.
Overlay modifier: Select an overlay modifier as data source. If you have created MQTT
overlays, they will be located at the end of the list.
: Select the position of the overlay in the image or click and drag the overlay to move it
around in the live view.
Size: Select the size of the overlay.
Visible on all channels: Turn off to show only on your currently selected channel. Turn on to
show on all active channels.
Update interval: Choose the time between data updates.
Transparency: Set the transparency of the entire overlay.
Background transparency: Set the transparency only of the background of the overlay.
Points: Turn on to add a point to the graph line when data is updated.
25
AXIS I8307-VE Network Intercom
Y axis
Label: Enter the text label for the y axis.
Dynamic scale: Turn on for the scale to automatically adapt to the data values. Turn
off to manually enter values for a fixed scale.
Min alarm threshold and Max alarm threshold: These values will add horizontal
reference lines to the bar chart, making it easier to see when the data value becomes
too high or too low.
Privacy masks
: Click to create a new privacy mask. Privacy masks: Click to change the color of all privacy masks, or to delete all privacy masks permanently.
Mask x: Click to rename, disable, or permanently delete the mask.
Communication SIP Settings Session Initiation Protocol (SIP) is used for interactive communication sessions between users. The sessions can include audio and video.
26
AXIS I8307-VE Network Intercom
SIP setup assistant: Click to set up and configure SIP step by step.
Enable SIP: Check this option to make it possible to initiate and receive SIP calls.
Allow incoming calls: Check this option to allow incoming calls from other SIP devices.
Call handling · Calling timeout: Set the maximum duration of an attempted call if no one answers.
· Incoming call duration: Set the maximum time an incoming call can last (max 10 min).
· End calls after: Set the maximum time that a call can last (max 60 minutes). Select Infinite call duration if you don’t want to limit the length of a call.
Ports A port number must be between 1024 and 65535.
· SIP port: The network port used for SIP communication. The signaling traffic through this port is nonencrypted. The default port number is 5060. Enter a different port number if required.
· TLS port: The network port used for encrypted SIP communication. The signaling traffic through this port is encrypted with Transport Layer Security (TLS). The default port number is 5061. Enter a different port number if required.
· RTP start port: The network port used for the first RTP media stream in a SIP call. The default start port number is 4000. Some firewalls block RTP traffic on certain port numbers.
NAT traversal Use NAT (Network Address Translation) traversal when the device is located on an private network (LAN) and you want to make it available from outside of that network.
Note For NAT traversal to work, the router must support it. The router must also support UPnP®.
Each NAT traversal protocol can be used separately or in different combinations depending on the network environment.
· ICE: The ICE (Interactive Connectivity Establishment) protocol increases the chances of finding the most efficient path to successful communication between peer devices. If you also enable STUN and TURN, you improve the ICE protocol’s chances.
· STUN: STUN (Session Traversal Utilities for NAT) is a client-server network protocol that lets the device determine if it is located behind a NAT or firewall, and if so obtain the mapped public IP address and port number allocated for connections to remote hosts. Enter the STUN server address, for example, an IP address.
· TURN: TURN (Traversal Using Relays around NAT) is a protocol that lets a device behind a NAT router or firewall receive incoming data from other hosts over TCP or UDP. Enter the TURN server address and the login information.
Audio and video · Audio codec priority: Select at least one audio codec with the desired audio quality for SIP calls. Drag-and-drop to change the priority.
Note
The selected codecs must match the call recipient codec, since the recipient codec is decisive when a call is made.
· Audio direction: Select allowed audio directions.
· H.264 packetization mode: Select which packetization mode to use.
Auto: (Recommended) The device decides which packetization mode to use.
None: No packetization mode is set. This mode is often interpreted as mode 0.
0: Non-interleaved mode.
1: Single NAL unit mode.
· Video direction: Select allowed video directions.
27
AXIS I8307-VE Network Intercom · Show video in call : Show the incoming video stream on the device’s display.
Additional · UDP-to-TCP switching: Select to allow calls to switch transport protocols from UDP (User Datagram Protocol) to TCP (Transmission Control Protocol) temporarily. The reason for switching is to avoid fragmentation, and the switch can take place if a request is within 200 bytes of the maximum transmission unit (MTU) or larger than 1300 bytes. · Allow via rewrite: Select to send the local IP address instead of the router’s public IP address. · Allow contact rewrite: Select to send the local IP address instead of the router’s public IP address. · Register with server every: Set how often you want the device to register with the SIP server for the existing SIP accounts. · DTMF payload type: Changes the default payload type for DTMF. · Max retransmissions: Set the maximum number of times the device tries to connect to the SIP server before it stops trying. · Seconds until failback: Set the number of seconds until the device tries to reconnect to the primary SIP server after it has failed over to a secondary SIP server.
Accounts
28
AXIS I8307-VE Network Intercom
All current SIP accounts are listed under SIP accounts. For registered accounts, the colored circle lets you know the status.
The account is successfully registered with the SIP server.
There is a problem with the account. Possible reasons can be authorization failure, that the account credentials are wrong, or that the SIP server can’t find the account. The peer to peer (default) account is an automatically created account. You can delete it if you create at least one other account and set that account as default. The default account is always used when a VAPIX® Application Programming Interface (API) call is made without specifying which SIP account to call from.
Add account: Click to create a new SIP account. · Active: Select to be able to use the account.
· Make default: Select to make this the default account. There must be a default account, and there can only be one default account.
· Answer automatically: Select to automatically answer an incoming call.
· Prioritize IPv6 over IPv4 : Select to prioritize IPv6 addresses over IPv4 addresses. This is useful when you connect to peer-to-peer accounts or domain names that resolve in both IPv4 and IPv6 addresses. You can only prioritize IPv6 for domain names that are mapped to IPv6 addresses.
· Name: Enter a descriptive name. This can, for example, be a first and last name, a role, or a location. The name is not unique.
· User ID: Enter the unique extension or phone number assigned to the device.
· Peer-to-peer: Use for direct calls to another SIP device on the local network.
· Registered: Use for calls to SIP devices outside the local network, through a SIP server.
· Domain: If available, enter the public domain name. It will be shown as part of the SIP address when calling other accounts.
· Password: Enter the password associated with the SIP account for authenticating against the SIP server.
· Authentication ID: Enter the authentication ID used for authenticating against the SIP server. If it is the same as the user ID, you don’t need to enter the authentication ID.
· Caller ID: The name which is presented to the recipient of calls from the device.
· Registrar: Enter the IP address for the registrar.
· Transport mode: Select the SIP transport mode for the account: UPD, TCP, or TLS.
· TLS version (only with transport mode TLS): Select the version of TLS to use. Versions v1.2 and v1.3 are the most secure. Automatic selects the most secure version that the system can handle.
· Media encryption (only with transport mode TLS): Select the type of encryption for media (audio and video) in SIP calls.
· Certificate (only with transport mode TLS): Select a certificate.
· Verify server certificate (only with transport mode TLS): Check to verify the server certificate.
· Secondary SIP server: Turn on if you want the device to try to register on a secondary SIP server if registration on the primary SIP server fails.
· SIP secure: Select to use Secure Session Initiation Protocol (SIPS). SIPS uses the TLS transport mode to encrypt traffic.
· Proxies
Proxy: Click to add a proxy.
Prioritize: If you have added two or more proxies, click to prioritize them.
29
AXIS I8307-VE Network Intercom
Server address: Enter the IP address of the SIP proxy server.
Username: If required, enter the username for the SIP proxy server.
Password: If required, enter the password for the SIP proxy server.
· Video
View area: Select the view area to use for video calls. If you select none, the native view is
used.
Resolution: Select the resolution to use for video calls. The resolution affects the required
bandwidth.
Frame rate: Select the number of frames per second for video calls. The frame rate affects the
required bandwidth.
H.264 profile: Select the profile to use for video calls.
DTMF
Add sequence: Click to create a new dual-tone multifrequency (DTMF) sequence. To create a rule that is activated by touch-tone, go to Events > Rules. Sequence: Enter the characters to activate the rule. Allowed characters: 09, A-D, #, and *. Description: Enter a description of the action to be triggered by the sequence. Accounts: Select the accounts that will use the DTMF sequence. If you choose peer-to-peer, all peer-to-peer accounts will share the same DTMF sequence.
Protocols
Select the protocols to use for each account. All peer-to-peer accounts share the same protocol settings.
Use RTP (RFC2833): Turn on to allow dual-tone multifrequency (DTMF) signaling, other tone signals and telephony events in RTP packets.
Use SIP INFO (RFC2976): Turn to include the INFO method to the SIP protocol. The INFO method adds optional application layer information, generally related to the session.
Test call SIP account: Select which account to make the test call from. SIP address: Enter a SIP address and click to make a test call and verify that the account works.
Access list Use access list: Turn on to restrict who can make calls to the device. Policy:
· Allow: Select to allow incoming calls only from the sources in the access list. · Block: Select to block incoming calls from the sources in the access list.
Add source: Click to create a new entry in the access list. SIP source: Type the caller ID or SIP server address of the source.
30
AXIS I8307-VE Network Intercom
VMS calls VMS calls Allow calls in the video management software (VMS): Select to allow calls from the device to the VMS. You can make VMS calls even if SIP is turned off. Call timeout: Set the maximum duration of an attempted call if no one answers.
Contact list Contacts
Click to download the contact list as a json file. Click to import a contact list (json). Add contact: Click to add a new contact to the contact list. Upload image : Click to upload an image to represent the contact. First name: Enter the contact’s first name. Last name: Enter the contact’s last name. Speed dial : Enter an available speed dial number for the contact. This number is used to call the contact from the device. SIP address: If you use SIP, enter the contact’s IP address or extension. : Click to make a test call. The call will automatically end when answered. SIP account: If you use SIP, select the SIP account to use for the call from the device to the contact. Availability: Select the contact’s availability schedule. You can add or adjust schedules in System > Events > Schedules. If a call is attempted when the contact isn’t available, the call is canceled unless there’s a fallback contact. Fallback: If applicable, select a fallback contact from the list. Notes: Add optional information about the contact. The context menu contains: Edit contact: Edit the contact’s properties. Delete contact: Delete the contact.
Groups
31
AXIS I8307-VE Network Intercom
Click to download the contact list as a json file. Click to import a contact list (json). Add group: Click to create a new group of existing contacts. Upload image : Click to upload an image to represent the group. Name: Enter a name for the group. Use for group calls only: Turn on if you want to use the group only for group calls. Turn off if you want to add individual contacts in a group but not use the group for group calls. Speed dial: Enter an available speed dial number for the group. This number is used to call the group from the device. Only for group call groups. Recipients: Select the contacts to include in the group. Calls will be placed to all recipients at the same time. The maximum number of recipients is six. Fallback: If applicable, select a fallback contact from the list. Only for group call groups. Notes: Add optional information about the group. The context menu contains: Edit group: Edit the group’s properties. Delete group: Delete the group.
Calls General Audio
Note · The selected audio clip is only played when a call is made. · If you change the audio clip or gain during an ongoing call, it doesn’t take effect until the next call.
Ringtone: Select the audio clip to play when someone makes a call to the device. Use the slider to adjust the gain. Ringback tone: Select the audio clip to play when someone makes a call from the device. Use the slider to adjust the gain.
32
AXIS I8307-VE Network Intercom
Display Pages
Add: Create a new page for the display.
Name: Give the page a name to help you identify it.
Background image: Select an image from the media library to use as a background. The optimal image resolution is 480×800 pixels. The maximum image resolution allowed is 2048×2048 pixels.
Add: Add a widget, such as a button, text, or image to the page. A widget is a graphical element.
Type: Select a widget type. · Button Button type: Select a type of button.
Contact
Contact: Assign a contact to the button. Visitors press the button to make a call to
the contact.
Size: Select the size of the contact button.
Custom
Text: Type a text to show on the button.
Name: Give the button a name to help you identify it when you create a rule in the
events system.
Size: Select the size of the button.
· Image
Name: Give the image a name.
Image scaling
Auto: Let the system optimize the scaling of the image.
Fit: Adjust the scaling so the image fits in the display.
Fill: Adjust the scaling so the image fills the display.
Image: Select an image from the media library. The maximum image resolution allowed is
2048×2048 pixels.
· Text
Text: Type a text to show on the display.
Styling: Choose how to format the text.
Save: Save the page to be able to show it on the display and to create rules for the widgets.
The context menu contains:
Edit: Adjust the page.
Reset: Undo unsaved changes to the page.
Duplicate: Create a copy of the page.
Set as default homepage: Make this page the one to show when no scheduled page is active. You must save a page before you can set it as homepage.
Schedule: Select to show the page according to one of the schedules defined in System > Events > Schedules.
Delete: Delete the page. You can’t delete the page set as default homepage.
33
AXIS I8307-VE Network Intercom
General
Device language: Select the language for default texts on the display. Show keypad on homepage: Turn on to show a keypad button on the default homepage. Visitors can press the button to open a keypad and use their credentials to unlock the door.
Screensaver
Add: Click to create a new screensaver. Page: Select a page to show when the screensaver is active. Duration: Select the amount of time to show the screensaver. Edit: Select a screensaver from the list and click to adjust it. Remove: Select one or more screensavers from the list and click to delete them. Settings: Click to adjust general screensaver settings. Turn off display when inactive: Set how long the display is allowed to be inactive before it’s turned off. Start screensaver when inactive: Set how long the display is allowed to be inactive before the screensaver is activated. If you set a time that is longer than the time set in Turn off display when inactive, the screensaver will never be activated. Screensaver sequence: Select in what order to show the screensavers, if there is more than one. Each screensaver is shown for the time set in Duration.
· Listed: Show screensavers in the listed order. · Random: Show screensavers in a randomized order. Wake-up trigger: Select how to wake up the display while the screensaver is active or the display is turned off. · Touch: Wake up the display when someone touches it. · Touch or presence detection: Wake up the display when someone touches it or when the device
detects someone in front of it.
Analytics
AXIS Object Analytics
Start: Click to start AXIS Object Analytics. The application will run in the background, and you can create rules for events based on the application’s current settings. Open: Click to open AXIS Object Analytics. The application opens up in a new browser tab where you can configure its settings.
Not installed: AXIS Object Analytics is not installed on this device. Upgrade AXIS OS to the latest version to get the latest version of the application.
Metadata configuration
RTSP metadata producers Lists the apps that stream metadata and the channels they use.
34
AXIS I8307-VE Network Intercom
Note These settings are for the RTSP metadata stream that use ONVIF XML. Changes made here don’t affect the Metadata visualization page.
Producer: The app that produces the metadata. Below the app is a list of the types of metadata the app streams from the device.
Channel: The channel that the app uses. Select to enable the metadata stream. Deselect for compatibility or resource management reasons.
PTZ
Preset positions
A preset position is a specific pan, tilt, and zoom position stored in your camera’s memory. You can use preset positions to quickly navigate between different fields of view. If your device supports guard tours, you can use preset positions to create automated guard tours.
Preset positions
·
Create preset position: Create a new preset position based on the current position of your
camera.
Thumbnail: Turn on to add a thumbnail image for the preset position.
Name: Enter a name for the preset position.
Home position: Turn on to set this position as your camera’s default field of view. The home
position is marked with . Your camera will always have a home position. Settings
· Return to home position when inactive: Turn on to make the camera return to its home position after a specified period of inactivity.
· Use thumbnails: Turn on to automatically add a thumbnail to any new preset position you create.
The context menu contains:
· Create thumbnails : Create a thumbnail for all your preset positions.
· Refresh thumbnails: Replace the thumbnails for your preset positions with new and updated thumbnails.
· Delete all preset positions: Remove all your preset positions. This will also create a new home position automatically.
Guard tours
Guard tour: Create a guard tour. · Preset position: Select to create a guard tour with preset positions. · Recorded: Select to create a recorded guard tour.
Preset position A guard tour with preset positions continuously streams footage from a selection of preset positions in a random or fixed sequence. You can choose how long the camera should stay at each preset position before
35
AXIS I8307-VE Network Intercom
moving on to the next. The guard tour will continue to run in an endless loop until you stop it, even when there are no clients (web browsers) streaming the footage.
Settings
· General settings
Name: Enter a name for the guard tour.
Play guard tour in random order: Turn on to make the camera move unpredictably between
the preset positions during the guard tour.
Pause between runs: Enter your desired time interval between guard tours. You can enter any
interval from 0 minutes to 2 hours and 45 minutes.
· Step settings
Duration: Choose how long you want the camera to stay at each preset position. The default
value is 10 seconds, and the maximum allowed value is 60 minutes.
Move speed: Choose how quickly you want the camera to move to the next preset position.
The default value is 70, but you can select any value from 1100.
Preset positions: To select multiple preset positions, press SHIFT while selecting the preset positions. Click and drag the preset positions to the View order area.
View order: Displays the preset positions included in the guard tour.
· Import all preset positions: Add all preset positions in the order they were created, starting from the oldest one.
·
: Start the guard tour.
Recorded
A recorded tour replays a sequence of recorded pan/tilt/zoom movements, including their variable speeds and lengths.
General settings
· Name: Enter a name for the guard tour. · Pause between runs: Enter your desired time interval between guard tours. You can enter any interval
from 0 minutes to 2 hours and 45 minutes. Recorded tour
· Start recording tour: Start recording the pan/tilt/zoom movements you want the guard tour to replicate.
· Stop recording tour: Stop recording the pan/tilt/zoom movements you want the guard tour to replicate.
· Re-record: Start a new recording of pan/tilt/zoom movements. This will overwrite your most recent recording.
·
Start the recorded tour.
·
Pause the recorded tour.
·
Stop the recorded tour.
36
AXIS I8307-VE Network Intercom
Limits
To narrow down the area under surveillance, you can limit the PTZ movements. Save as Pan 0: Click to set the current position as zero-point for pan coordinates. Pan-tilt limits: The camera uses the coordinates of the center of the image when you set pan-tilt limits.
·
Left pan limit: Click to limit the camera’s pan movements to the left. Click again to remove the
limit.
·
Right pan limit: Click to limit the camera’s pan movements to the right. Click again to remove
the limit.
·
Top tilt limit: Click to limit the camera’s tilt movements to the top. Click again to remove the
limit.
·
Bottom tilt limit: Click to limit the camera’s tilt movements to the bottom. Click again to remove
the limit.
Auto-flip : Enables the camera head to instantly reverse 360° and continue to pan beyond its mechanical limit.
E-flip : Automatically corrects the camera view by flipping the image 180° when the camera tilts beyond -90°.
Nadir-flip : Enables the camera to pan 180° when tilting beyond -90°, and then continue upwards.
Zoom limit: Select a value to limit the camera’s maximum zoom level. Optical or digital (e.g. 480x D) values can be selected. When using a joystick, only digital zoom levels can be used to set the zoom limit.
Near focus limit: Select a value to prevent the camera from autofocusing on objects close to the camera. This way, the camera can ignore objects such as overhead wires, streetlights, or other nearby objects. To make the camera focus on the areas of interest, set the near focus limit to a value greater than the distance at which the objects of no interest tend to appear.
37
AXIS I8307-VE Network Intercom
Motion
Proportional speed : Turn on to set the maximum proportional speed.
· Max proportional speed : Set a value between 1 and 1000 to limit the pan and tilt speed. Max proportional speed is defined as a percentage, where the value 1000 equals 1000%. This is useful when the joystick is pushed all the way out. For example, if the image is approximately 44 degrees wide when fully zoomed out and the max proportional speed is set to 100 (100%), the maximum speed is about 44 degrees/second. If the image is then zoomed in from 44 to 10 degrees wide, the maximum speed reaches about 10 degrees/second, which is probably too fast for easy viewing. To limit the speed, set the max proportional speed to 50 (50%). This way, the maximum speed only reaches 50% of the maximum for the currently selected zoom level. This means that when the image is 44 degrees wide, the greatest possible speed is limited to about 22 degrees/second, and when the view is zoomed in to 10 degrees the speed is limited to about 5 degrees/second.
Adjustable zoom speed: Turn on to use variable speeds when controlling the zoom with a joystick or a mouse wheel. The zoom speed is automatically set through the command continuouszoommove in the VAPIX® Application Programming Interface (API). Turn off to use the highest zoom speed which is the same speed for moving to presets.
Freeze image on PTZ
· Off: Never freeze image.
· All movements: Freeze the image while the camera is moving. Once the camera reaches its new position, the view from that position is shown.
· Preset positions: Freeze the image only when the camera moves between preset positions.
Pan-tilt speed: Select the speed of the camera’s pan and tilt movements.
Control queue
User control queue
· PTZ control queue: Turn on to place PTZ control requests in a queue. This displays the users status and position in the queue. To use the PTZ controls in AXIS Camera Station, turn off this setting.
Enter queue: Click to add your request for PTZ control to the queue.
Release control: Click to release the PTZ control.
· The user groups are listed in a prioritized order with the highest priority on top. To change the priority
of a user group, click and drag the user group up or down. For each user group:
Timeout duration: Set the amount of time to wait before timeout. The default value is 1
minute, and allowed values are from 1 second to 60 minutes.
Timeout type
Timespan: Time out after reaching the set duration.
Activity: Time out after reaching the set duration since the last activity.
Infinity: Never to time out until a user with higher priority takes control.
Settings
· Limit number of users in queue: Set the maximum number of users allowed in a queue. The default number is 20, and allowed values are 1100.
· Control queue poll time: Set how often to poll the camera to update the place of the users or user groups in the queue. The default value is 20 seconds, and allowed values are from 5 seconds to 60 minutes.
38
AXIS I8307-VE Network Intercom Settings Use PTZ: Turn on to allow PTZ functionality in the selected view. Reader Connection External reader (Input) Use external OSDP reader: Turn on to use the device with an external reader. Connect the reader to the reader connector (IO1, IO2, 12V and GND). Status:
· Connected: The device is connected to the active external reader. · Connecting: The device is trying to connect to the external reader. · Not connected: OSDP is turned off.
39
AXIS I8307-VE Network Intercom
Reader protocol
Reader protocol type: Select the protocol to use for the reader functionality.
· VAPIX reader: Can only be used with an Axis door controller.
Protocol: Select HTTPS or HTTP.
Door controller address: Enter the IP address for the door controller.
User name: Enter the username of the door controller.
Password: Enter the password of the door controller.
Connect: Click to connect to the door controller.
Select reader: Select the entrance reader for the appropriate door.
· OSDP:
OSDP address: Enter the OSDP reader address. 0 is the default and most common address for
single readers.
· Wiegand :
Beeper: Turn on to activate the beeper input.
Input for beeper: Select the I/O port used for the beeper.
Input used for LED control: Select how many I/O ports to use for controlling LED feedback on
the device.
Input for LED1/LED2: Select which I/O ports to use for LED input.
Idle color: If no I/O port is used to control the LED, you can select a static color to show on
the card reader indicator stripe.
Color for state low/high: If one I/O port is used for LED control, select the color to show for
state low and state high respectively.
Idle color/LED1 color/LED2 color/LED1 + LED2 color: If two I/O ports are used for LED
control, select the colors to show for idle, LED1, LED2, and LED1 + LED2 respectively.
Keypress format: Select how to format the PIN when it’s sent to the access control unit.
FourBit: PIN 1234 is encoded and sent as 0x1 0x2 0x3 0x4. This is the default and
most common behaviour.
EightBitZeroPadded: PIN 1234 is encoded and sent as 0x01 0x02 0x03 0x04.
EightBitInvertPadded: PIN 1234 is encoded and sent as 0xE1 0xD2 0xC3 0xB4.
Wiegand26: The PIN is encoded in Wiegand26 format with an 8 bit facility code and
a 16 bit id.
Wiegand34: The PIN is encoded in a Wiegand34 format with a 16 bit facility code
and a 16 bit id.
Wiegand37: The PIN is encoded in a Wiegand37 format (H10302) with a 35 bit id.
Wiegand37FacilityCode: The PIN is encoded in a Wiegand37 format (H10304) with a
16 bit facility code and a 19 bit id.
Facility code: Enter the facility code to be sent. This option is only available for some keypress
formats.
40
AXIS I8307-VE Network Intercom
Output format
Select data format: Select in which format to send card data to the access control unit. · Raw: Transmits the card data as it is. · Wiegand26: Encodes the card data in Wiegand26 format with an 8 bit facility code and a 16 bit id. · Wiegand34: Encodes the card data in Wiegand34 format with a 16 bit facility code and a 16 bit id. · Wiegand37: Encodes the card data in Wiegand37 format (H10302) with a 35 bit id. · Wiegand37FacilityCode: Encodes the card data in Wiegand37 format (H10304) with a 16 bit facility code and a 19 bit id. · Custom: Define your own formatting.
Facility code override mode: Select an option for overriding the facility code. · Auto: Doesn’t override the facility code, and creates a facility code from the input data auto detection. Either uses the card’s original facility code, or forges it from excess bits of a card number. · Optional: Uses the facility code from the input data, or overrides with a configured optional value. · Override: Always overrides with a specified facility code.
Chip types
Chip types
Activate chip type: Select a chip type from the list to activate it. Active chip types shows a list of all active chip types and whether they use default or custom data sets.
The context menu contains: · Deactivate: Click to remove the chip type from the list of active chip types.
Data sets
Invert byte order for all chip types using the full card serial number (CSN): Turn on to reverse the byte order of the card serial number. The card serial number is the default data. Invert byte order for all chip types using secure card data: Turn on to reverse the byte order of the secure card data for chip types that use a custom data set. Add data set: Select a chip type and click to add a data set. For custom data.
· Name of data set: Rename the data set to help you identify the data. The name must be unique. It works as an ID in, for example, the API.
· Enabled: Turn off to stop using the data set without deleting it. · Required data: If secure card data for some reason isn’t accessible, the device doesn’t send any data
to the door controller when this setting is turned on. Turn off to send CSN to the door controller in case secure card data isn’t accessible. · Use as authenticator: Turn off if you don’t want to use secure card data for authentication, but only send it as metadata valid for VAPIX protocol. · Offset (bits): Enter the start position of the data. 0 means that the start position is the first bit. · Length (bits): Enter the length of the data. 0 means that any length of data will be read. · Use data on card: Turn on to use secure card data. Turn off to use CSN instead of secure card data. The remaining settings are chip type specific, and are used to define how to read secure card data.
41
AXIS I8307-VE Network Intercom
PIN
The PIN settings must match the ones configured in the access control unit.
Length (032): Enter the number of digits in the PIN. If users aren’t required to use a PIN when they use the reader, set the length to 0. Timeout (seconds, 350): Enter the number of seconds that need to pass before the device returns to idle mode when no PIN is received.
Entry list
With Entry list, you can set up the device to allow credential holders to use their card or PIN to perform different actions, such as opening a door. You store the credentials locally in the device. You can also combine this functionality with an external door controller.
Credential holders
Use Entry list: Turn on to use the Entry list functionality.
Use connected door controller: Turn on if the device is already connected to a door controller. If someone presents a credential that doesn’t exist in Entry list, we’ll send the request to the connected door controller. We don’t send credentials that are available in Entry list.
Add credential holder: Click to add a new credential holder.
First name: Enter a first name.
Last name: Enter a last name.
Credential type:
· PIN:
PIN: Enter a unique PIN or click Generate to create one automatically.
· Card:
UID: Enter the card’s UID and bit length, or click Get latest to fetch the data from the latest
card swipe.
Event condition: Select one or more conditions to trigger when the credential holder uses their credential. To set up the resulting action, go to System > Events and create a rule, using the same condition you select here.
Valid from: Select Current device time to activate the credential immediately. Clear to specify when to activate the credential.
Valid to:
· No end date: Credential is valid indefinitely.
· End date: Specify the date and time when the credential becomes invalid. · Number of times: Specify how many times the credential holder can use the credential. The value in
the field reduces as the credential is used, to show the remaining uses.
Notes: Enter optional information.
Suspend: Select to make the credential temporarily invalid.
Event log
The event log shows a list of entry list events. The maximum size of the log file is 2 MB, which equals approximately 6000 events.
42
AXIS I8307-VE Network Intercom
Export all: Click to export all events in the list. To export only a subset, select the events that you are interested in. The events are exported into a CSV file. Filter: Click to show events that occurred during a specific time range.
: Type to search for all matching content in the list. Audio Device settings Input: Turn on or off audio input. Shows the type of input. Input type : Select the type of input, for instance, if it’s internal microphone or line. Power type : Select power type for your input. Apply changes : Apply your selection. Noise cancellation: Turn on to improve audio quality by removing background noise. Echo cancellation : Turn on to remove echoes during two-way communication. Separate gain controls : Turn on to adjust the gain separately for the different input types. Automatic gain control : Turn on to dynamically adapt the gain to changes in the sound. Gain: Use the slider to change the gain. Click the microphone icon to mute or unmute. Output: Shows the type of output. Gain: Use the slider to change the gain. Click the speaker icon to mute or unmute. Automatic volume control : Turn on to make the device automatically and dynamically adjust the gain based on the ambient noise level. Automatic volume control affects all audio outputs, including line and telecoil. Stream Encoding: Select the encoding to use for the input source streaming. You can only choose encoding if audio input is turned on. If audio input is turned off, click Enable audio input to turn it on.
43
AXIS I8307-VE Network Intercom
Audio clips
Add clip: Add a new audio clip. You can use .au, .mp3, .opus, .vorbis, .wav files. Play the audio clip. Stop playing the audio clip. The context menu contains: · Rename: Change the name of the audio clip. · Create link: Create a URL that, when used, plays the audio clip on the device. Specify the volume and
number of times to play the clip. · Download: Download the audio clip to your computer. · Delete: Delete the audio clip from the device.
Recordings Ongoing recordings: Show all ongoing recordings on the device.
Start a recording on the device. Choose which storage device to save to. Stop a recording on the device. Triggered recordings will end when manually stopped or when the device is shut down. Continuous recordings will continue until manually stopped. Even if the device is shut down, the recording will continue when the device starts up again.
Play the recording. Stop playing the recording.
Show or hide information and options about the recording. Set export range: If you only want to export part of the recording, enter a time span. Note that if you work in a different time zone than the location of the device, the time span is based on the device’s time zone. Encrypt: Select to set a password for exported recordings. It will not be possible to open the exported file without the password.
Click to delete a recording. Export: Export the whole or a part of the recording.
44
AXIS I8307-VE Network Intercom Click to filter the recordings.
From: Show recordings done after a certain point in time. To: Show recordings up until a certain point in time. Source : Show recordings based on source. The source refers to the sensor. Event: Show recordings based on events. Storage: Show recordings based on storage type. Media + Add: Click to add a new file. Storage location: Select to store the file in the internal memory or in the onboard storage (SD card).
The context menu contains: · Information: View information about the file. · Copy link: Copy the link to the file’s location on the device. · Delete: Delete the file from the storage location.
45
AXIS I8307-VE Network Intercom
Apps
Add app: Install a new app. Find more apps: Find more apps to install. You will be taken to an overview page of Axis apps.
Allow unsigned apps : Turn on to allow installation of unsigned apps.
View the security updates in AXIS OS and ACAP apps. Note
The device’s performance might be affected if you run several apps at the same time. Use the switch next to the app name to start or stop the app. Open: Access the app’s settings. The available settings depend on the application. Some applications don’t have any settings.
The context menu can contain one or more of the following options: · Open-source license: View information about open-source licenses used in the app. · App log: View a log of the app events. The log is helpful when you contact support. · Activate license with a key: If the app requires a license, you need to activate it. Use this option if
your device doesn’t have internet access. If you don’t have a license key, go to axis.com/products/analytics. You need a license code and the Axis product serial number to generate a license key. · Activate license automatically: If the app requires a license, you need to activate it. Use this option if your device has internet access. You need a license code to activate the license. · Deactivate the license: Deactivate the license to replace it with another license, for example, when you change from a trial license to a full license. If you deactivate the license, you also remove it from the device. · Settings: Configure the parameters. · Delete: Delete the app permanently from the device. If you don’t deactivate the license first, it remains active.
System Time and location Date and time The time format depends on the web browser’s language settings. Note
We recommend you synchronize the device’s date and time with an NTP server.
46
AXIS I8307-VE Network Intercom
Synchronization: Select an option for the device’s date and time synchronization.
· Automatic date and time (manual NTS KE servers): Synchronize with the secure NTP key establishment servers connected to the DHCP server.
Manual NTS KE servers: Enter the IP address of one or two NTP servers. When you use two
NTP servers, the device synchronizes and adapts its time based on input from both.
Max NTP poll time: Select the maximum amount of time the device should wait before it
polls the NTP server to get an updated time.
Min NTP poll time: Select the minimum amount of time the device should wait before it polls
the NTP server to get an updated time.
· Automatic date and time (NTP servers using DHCP): Synchronize with the NTP servers connected to the DHCP server.
Fallback NTP servers: Enter the IP address of one or two fallback servers.
Max NTP poll time: Select the maximum amount of time the device should wait before it
polls the NTP server to get an updated time.
Min NTP poll time: Select the minimum amount of time the device should wait before it polls
the NTP server to get an updated time.
· Automatic date and time (manual NTP servers): Synchronize with NTP servers of your choice.
Manual NTP servers: Enter the IP address of one or two NTP servers. When you use two NTP
servers, the device synchronizes and adapts its time based on input from both.
Max NTP poll time: Select the maximum amount of time the device should wait before it
polls the NTP server to get an updated time.
Min NTP poll time: Select the minimum amount of time the device should wait before it polls
the NTP server to get an updated time.
· Custom date and time: Manually set the date and time. Click Get from system to fetch the date and time settings once from your computer or mobile device.
Time zone: Select which time zone to use. Time will automatically adjust to daylight saving time and standard time.
· DHCP: Adopts the time zone of the DHCP server. The device must connected to a DHCP server before you can select this option.
· Manual: Select a time zone from the drop-down list.
Note The system uses the date and time settings in all recordings, logs, and system settings.
Device location
Enter where the device is located. Your video management system can use this information to place the device on a map.
· Format: Select the format to use when you enter your device’s latitude and longitude. · Latitude: Positive values are north of the equator. · Longitude: Positive values are east of the prime meridian. · Heading: Enter the compass direction that the device is facing. 0 is due north. · Label: Enter a descriptive name for your device. · Save: Click to save your device location.
47
AXIS I8307-VE Network Intercom
Configuration check
Interactive device image: Click the buttons in the image to simulate real key presses. This allows you to try out configurations or troubleshoot the hardware without having physical access to the device.
Latest credentials : Shows information about the credentials that were last registered.
Show the latest credentials data.
The context menu contains: · Reverse UID: Invert the byte order of the UID. · Revert UID: Revert the byte order of the UID back to the original order. · Copy to clipboard: Copy the UID.
Check credentials : Enter a UID or a PIN and submit to check the credentials. The system will respond in the same way as if you used the credentials at the device. If both UID and PIN is required, start by entering the UID.
Network IPv4 Assign IPv4 automatically: Select to let the network router assign an IP address to the device automatically. We recommend automatic IP (DHCP) for most networks. IP address: Enter a unique IP address for the device. Static IP addresses can be assigned at random within isolated networks, provided that each address is unique. To avoid conflicts, we recommend you contact your network administrator before you assign a static IP address. Subnet mask: Enter the subnet mask to define what addresses are inside the local area network. Any address outside the local area network goes through the router. Router: Enter the IP address of the default router (gateway) used to connect devices that are attached to different networks and network segments. Fallback to static IP address if DHCP isn’t available: Select if you want to add a static IP address to use as fallback if DHCP is unavailable and can’t assign an IP address automatically.
Note If DHCP isn’t available and the device uses a static address fallback, the static address is configured with a limited scope.
IPv6 Assign IPv6 automatically: Select to turn on IPv6 and to let the network router assign an IP address to the device automatically.
Hostname
48
AXIS I8307-VE Network Intercom
Assign hostname automatically: Select to let the network router assign a hostname to the device automatically. Hostname: Enter the hostname manually to use as an alternative way of accessing the device. The server report and system log use the hostname. Allowed characters are AZ, az, 09 and -. Enable dynamic DNS updates: Allow your device to automatically update its domain name server records whenever its IP address changes. Register DNS name: Enter a unique domain name that points to your device’s IP address. Allowed characters are AZ, az, 09 and -. TTL: Time to Live (TTL) sets how long a DNS record stays valid before it needs to be updated.
DNS servers Assign DNS automatically: Select to let the DHCP server assign search domains and DNS server addresses to the device automatically. We recommend automatic DNS (DHCP) for most networks. Search domains: When you use a hostname that is not fully qualified, click Add search domain and enter a domain in which to search for the hostname the device uses. DNS servers: Click Add DNS server and enter the IP address of the DNS server. This provides the translation of hostnames to IP addresses on your network.
HTTP and HTTPS HTTPS is a protocol that provides encryption for page requests from users and for the pages returned by the web server. The encrypted exchange of information is governed by the use of an HTTPS certificate, which guarantees the authenticity of the server. To use HTTPS on the device, you must install an HTTPS certificate. Go to System > Security to create and install certificates. Allow access through: Select if a user is allowed to connect to the device through the HTTP, HTTPS, or both HTTP and HTTPS protocols.
Note If you view encrypted web pages through HTTPS, you might experience a drop in performance, especially when you request a page for the first time.
HTTP port: Enter the HTTP port to use. The device allows port 80 or any port in the range 1024-65535. If you are logged in as an administrator, you can also enter any port in the range 1-1023. If you use a port in this range, you get a warning. HTTPS port: Enter the HTTPS port to use. The device allows port 443 or any port in the range 1024-65535. If you are logged in as an administrator, you can also enter any port in the range 1-1023. If you use a port in this range, you get a warning. Certificate: Select a certificate to enable HTTPS for the device.
Network discovery protocols
49
AXIS I8307-VE Network Intercom
Bonjour®: Turn on to allow automatic discovery on the network. Bonjour name: Enter a friendly name to be visible on the network. The default name is the device name and MAC address. UPnP®: Turn on to allow automatic discovery on the network. UPnP name: Enter a friendly name to be visible on the network. The default name is the device name and MAC address. WS-Discovery: Turn on to allow automatic discovery on the network. LLDP and CDP: Turn on to allow automatic discovery on the network. Turning LLDP and CDP off can impact the PoE power negotiation. To resolve any issues with the PoE power negotiation, configure the PoE switch for hardware PoE power negotiation only.
Global proxies Http proxy: Specify a global proxy host or IP address according to the allowed format. Https proxy: Specify a global proxy host or IP address according to the allowed format. Allowed formats for http and https proxies:
· http(s)://host:port · http(s)://user@host:port · http(s)://user:pass@host:port Note Restart the device to apply the global proxy settings. No proxy: Use No proxy to bypass global proxies. Enter one of the options in the list, or enter several separated by a comma: · Leave empty · Specify an IP address · Specify an IP address in CIDR format · Specify a domain name, for example: www.<domain name>.com · Specify all subdomains in a specific domain, for example .<domain name>.com
One-click cloud connection One-click cloud connection (O3C) together with an O3C service provides easy and secure internet access to live and recorded video from any location. For more information, see axis.com/end-to-end-solutions/hosted-services.
50
AXIS I8307-VE Network Intercom
Allow O3C: · One-click: This is the default option. To connect to O3C, press the control button on the device. Depending on the device model, either press and release or press and hold, until the status LED flashes. Register the device with the O3C service within 24 hours to enable Always and stay connected. If you don’t register, the device will disconnect from O3C. · Always: The device continuously attempts to connect to an O3C service over the internet. Once you register the device, it stays connected. Use this option if the control button is out of reach. · No: Disconnects the O3C service.
Proxy settings: If needed, enter the proxy settings to connect to the proxy server. Host: Enter the proxy server’s address. Port: Enter the port number used for access. Login and Password: If needed, enter username and password for the proxy server. Authentication method:
· Basic: This method is the most compatible authentication scheme for HTTP. It’s less secure than the Digest method because it sends the username and password unencrypted to the server.
· Digest: This method is more secure because it always transfers the password encrypted across the network.
· Auto: This option lets the device select the authentication method depending on the supported methods. It prioritizes the Digest method over the Basic method.
Owner authentication key (OAK): Click Get key to fetch the owner authentication key. This is only possible if the device is connected to the internet without a firewall or proxy. SNMP The Simple Network Management Protocol (SNMP) allows remote management of network devices.
51
AXIS I8307-VE Network Intercom
SNMP: Select the version of SNMP to use.
· v1 and v2c:
Read community: Enter the community name that has read-only access to all supported
SNMP objects. The default value is public.
Write community: Enter the community name that has read or write access to all supported
SNMP objects (except read-only objects). The default value is write.
Activate traps: Turn on to activate trap reporting. The device uses traps to send messages for
important events or status changes to a management system. In the web interface, you can
set up traps for SNMP v1 and v2c. Traps are automatically turned off if you change to SNMP
v3 or turn off SNMP. If you use SNMP v3, you can set up traps through the SNMP v3
management application.
Trap address: Enter the IP address or host name of the management server.
Trap community: Enter the community to use when the device sends a trap message to the
management system.
Traps:
Cold start: Sends a trap message when the device starts.
Link up: Sends a trap message when a link changes from down to up.
Link down: Sends a trap message when a link changes from up to down.
Authentication failed: Sends a trap message when an authentication attempt fails.
Note
All Axis Video MIB traps are enabled when you turn on SNMP v1 and v2c traps. For more information, see AXIS OS Portal > SNMP.
· v3: SNMP v3 is a more secure version, which provides encryption and secure passwords. To use SNMP v3, we recommend you to activate HTTPS, as the password is then sent through HTTPS. This also prevents unauthorized parties’ access to unencrypted SNMP v1 and v2c traps. If you use SNMP v3, you can set up traps through the SNMP v3 management application.
Password for the account “initial”: Enter the SNMP password for the account named “initial”.
Although the password can be sent without activating HTTPS, we don’t recommend it. The
SNMP v3 password can only be set once, and preferably only when HTTPS is enabled. Once the
password is set, the password field is no longer displayed. To set the password again, you must
reset the device to factory default settings.
Security Certificates
52
AXIS I8307-VE Network Intercom
Certificates are used to authenticate devices on a network. The device supports two types of certificates: · Client/server certificates A client/server certificate validates the device’s identity, and can be self-signed or issued by a Certificate Authority (CA). A self-signed certificate offers limited protection and can be used before a CA-issued certificate has been obtained. · CA certificates You can use a CA certificate to authenticate a peer certificate, for example to validate the identity of an authentication server when the device connects to a network protected by IEEE 802.1X. The device has several pre-installed CA certificates.
These formats are supported: · Certificate formats: .PEM, .CER, and .PFX · Private key formats: PKCS#1 and PKCS#12
Important If you reset the device to factory default, all certificates are deleted. Any pre-installed CA certificates are reinstalled.
Add certificate : Click to add a certificate. A step-by-step guide opens up.
· More : Show more fields to fill in or select. · Secure keystore: Select to use Trusted Execution Environment (SoC TEE), Secure element or Trusted
Platform Module 2.0 to securely store the private key. For more information on which secure keystore to select, go to help.axis.com/axis-os#cryptographic-support. · Key type: Select the default or a different encryption algorithm from the drop-down list to protect the certificate.
The context menu contains: · Certificate information: View an installed certificate’s properties. · Delete certificate: Delete the certificate. · Create certificate signing request: Create a certificate signing request to send to a registration
authority to apply for a digital identity certificate. Secure keystore :
· Trusted Execution Environment (SoC TEE): Select to use SoC TEE for secure keystore. · Secure element (CC EAL6+): Select to use secure element for secure keystore. · Trusted Platform Module 2.0 (CC EAL4+, FIPS 140-2 Level 2): Select to use TPM 2.0 for secure
keystore.
Network access control and encryption
53
AXIS I8307-VE Network Intercom
IEEE 802.1x IEEE 802.1x is an IEEE standard for port-based network admission control providing secure authentication of wired and wireless network devices. IEEE 802.1x is based on EAP (Extensible Authentication Protocol). To access a network protected by IEEE 802.1x, network devices must authenticate themselves. The authentication is performed by an authentication server, typically a RADIUS server (for example, FreeRADIUS and Microsoft Internet Authentication Server). IEEE 802.1AE MACsec IEEE 802.1AE MACsec is an IEEE standard for media access control (MAC) security that defines connectionless data confidentiality and integrity for media access independent protocols. Certificates When configured without a CA certificate, server certificate validation is disabled and the device tries to authenticate itself regardless of what network it is connected to. When using a certificate, in Axis’ implementation, the device and the authentication server authenticate themselves with digital certificates using EAP-TLS (Extensible Authentication Protocol – Transport Layer Security). To allow the device to access a network protected through certificates, you must install a signed client certificate on the device. Authentication method: Select an EAP type used for authentication. Client certificate: Select a client certificate to use IEEE 802.1x. The authentication server uses the certificate to validate the client’s identity. CA certificates: Select CA certificates to validate the authentication server’s identity. When no certificate is selected, the device tries to authenticate itself regardless of what network it is connected to. EAP identity: Enter the user identity associated with the client certificate. EAPOL version: Select the EAPOL version that is used in the network switch. Use IEEE 802.1x: Select to use the IEEE 802.1x protocol. These settings are only available if you use IEEE 802.1x PEAP-MSCHAPv2 as the authentication method:
· Password: Enter the password for your user identity. · Peap version: Select the Peap version that is used in the network switch. · Label: Select 1 to use client EAP encryption; select 2 to use client PEAP encryption. Select the Label
that the network switch uses when using Peap version 1. These settings are only available if you use IEEE 802.1ae MACsec (Static CAK/Pre-Shared Key) as the authentication method:
· Key agreement connectivity association key name: Enter the connectivity association name (CKN). It must be 2 to 64 (divisible by 2) hexadecimal characters. The CKN must be manually configured in the connectivity association and must match on both ends of the link to initially enable MACsec.
· Key agreement connectivity association key: Enter the connectivity association key (CAK). It should be either 32 or 64 hexadecimal characters long. The CAK must be manually configured in the connectivity association and must match on both ends of the link to initially enable MACsec.
Prevent brute-force attacks
54
AXIS I8307-VE Network Intercom Blocking: Turn on to block brute-force attacks. A brute-force attack uses trial-and-error to guess login info or encryption keys. Blocking period: Enter the number of seconds to block a brute-force attack. Blocking conditions: Enter the number of authentication failures allowed per second before the block starts. You can set the number of failures allowed both on page level and device level. Firewall
55
AXIS I8307-VE Network Intercom
Firewall: Turn on to activate the firewall.
Default Policy: Select how you want the firewall to handle connection requests not covered by rules. · ACCEPT: Allows all connections to the device. This option is set by default.
· DROP: Blocks all connections to the device.
To make exceptions to the default policy, you can create rules that allows or blocks connections to the device from specific addresses, protocols, and ports.
+ New rule: Click to create a rule.
Rule type: · FILTER: Select to either allow or block connections from devices that match the criteria defined in the rule.
Policy: Select Accept or Drop for the firewall rule.
IP range: Select to specify a range of addresses to allow or block. Use IPv4/IPv6 in Start and
End.
IP address: Enter an address that you want to allow or block. Use IPv4/IPv6 or CIDR format.
Protocol: Select a network protocol (TCP, UDP, or Both) to allow or block. If you select a
protocol, you must also specify a port.
MAC: Enter the MAC address of a device that you want to allow or block.
Port range: Select to specify the range of ports to allow or block. Add them in Start and End.
Port: Enter a port number that you want to allow or block. Port numbers must be between 1
and 65535.
Traffic type: Select a traffic type that you want to allow or block.
UNICAST: Traffic from a single sender to a single recipient.
BROADCAST: Traffic from a single sender to all devices on the network.
MULTICAST: Traffic from one or more senders to one or more recipient.
· LIMIT: Select to accept connections from devices that match the criteria defined in the rule but apply limits to reduce excessive traffic.
IP range: Select to specify a range of addresses to allow or block. Use IPv4/IPv6 in Start and
End.
IP address: Enter an address that you want to allow or block. Use IPv4/IPv6 or CIDR format.
Protocol: Select a network protocol (TCP, UDP, or Both) to allow or block. If you select a
protocol, you must also specify a port.
MAC: Enter the MAC address of a device that you want to allow or block.
Port range: Select to specify the range of ports to allow or block. Add them in Start and End.
Port: Enter a port number that you want to allow or block. Port numbers must be between 1
and 65535.
Unit: Select the type of connections to allow or block.
Period: Select the time period related to Amount.
Amount: Set the maximum number of times a device is allowed to connect within the set
Period. The maximum amount is 65535.
Burst: Enter the number of connections allowed to exceed the set Amount once during the
set Period. Once the number has been reached, only the set amount during the set period is
allowed.
Traffic type: Select a traffic type that you want to allow or block.
UNICAST: Traffic from a single sender to a single recipient.
BROADCAST: Traffic from a single sender to all devices on the network.
56
AXIS I8307-VE Network Intercom
MULTICAST: Traffic from one or more senders to one or more recipient.
Test rules: Click to test the rules that you have defined.
· Test time in seconds: Set a time limit for testing the rules. · Roll back: Click to roll back the firewall to its previous state, before you have tested the rules. · Apply rules: Click to activate the rules without testing. We don’t recommend that you do this.
Custom signed AXIS OS certificate
To install test software or other custom software from Axis on the device, you need a custom signed AXIS OS certificate. The certificate verifies that the software is approved by both the device owner and Axis. The software can only run on a specific device which is identified by its unique serial number and chip ID. Only Axis can create custom signed AXIS OS certificates, since Axis holds the key to sign them. Install: Click to install the certificate. You need to install the certificate before you install the software.
The context menu contains: · Delete certificate: Delete the certificate.
Accounts Accounts
Add account: Click to add a new account. You can add up to 100 accounts.
Account: Enter a unique account name.
New password: Enter a password for the account. Passwords must be 1 to 64 characters long. Only ASCII printable characters (code 32 to 126) are allowed in the password, for example, letters, numbers, punctuation, and some symbols.
Repeat password: Enter the same password again.
Privileges:
· Administrator: Has full access to all settings. Administrators can also add, update, and remove other accounts.
· Operator: Has access to all settings except:
All System settings.
· Viewer: Has access to:
Watch and take snapshots of a video stream.
Watch and export recordings.
Pan, tilt, and zoom; with PTZ account access.
The context menu contains: Update account: Edit the account properties. Delete account: Delete the account. You can’t delete the root account.
Anonymous access
57
AXIS I8307-VE Network Intercom
Allow anonymous viewing: Turn on to allow anyone access the device as a viewer without logging in with an account.
Allow anonymous PTZ operating : Turn on to allow anonymous users to pan, tilt, and zoom the image.
SSH accounts
Add SSH account: Click to add a new SSH account. · Enable SSH: Turn on to use SSH service. Account: Enter a unique account name. New password: Enter a password for the account. Passwords must be 1 to 64 characters long. Only ASCII printable characters (code 32 to 126) are allowed in the password, for example, letters, numbers, punctuation, and some symbols. Repeat password: Enter the same password again. Comment: Enter a comment (optional).
The context menu contains: Update SSH account: Edit the account properties. Delete SSH account: Delete the account. You can’t delete the root account.
Virtual host
Add virtual host: Click to add a new virtual host. Enabled: Select to use this virtual host. Server name: Enter the name of the server. Only use numbers 0-9, letters A-Z, and hyphen (-). Port: Enter the port the server is connected to. Type: Select the type of authentication to use. Select between Basic, Digest, and Open ID.
The context menu contains: · Update: Update the virtual host. · Delete: Delete the virtual host. Disabled: The server is disabled.
Client Credentials Grant Configuration Admin claim: Enter a value for the admin role. Verification URI: Enter the web link for the API endpoint authentication. Operator claim: Enter a value for the operator role. Require claim: Enter the data that should be in the token. Viewer claim: Enter the value for the viewer role. Save: Click to save the values.
58
AXIS I8307-VE Network Intercom
OpenID Configuration Important
If you can’t use OpenID to sign in, use the Digest or Basic credentials you used when you configured OpenID to sign in. Client ID: Enter the OpenID username. Outgoing Proxy: Enter the proxy address for the OpenID connection to use a proxy server. Admin claim: Enter a value for the admin role. Provider URL: Enter the web link for the API endpoint authentication. Format should be https://[insert URL]/. well-known/openid-configuration Operator claim: Enter a value for the operator role. Require claim: Enter the data that should be in the token. Viewer claim: Enter the value for the viewer role. Remote user: Enter a value to identify remote users. This assists to display the current user in the device’s web interface. Scopes: Optional scopes that could be part of the token. Client secret: Enter the OpenID password Save: Click to save the OpenID values. Enable OpenID: Turn on to close current connection and allow device authentication from the provider URL. Events Rules A rule defines the conditions that triggers the product to perform an action. The list shows all the currently configured rules in the product. Note You can create up to 256 action rules.
59
AXIS I8307-VE Network Intercom
Add a rule: Create a rule. Name: Enter a name for the rule. Wait between actions: Enter the minimum time (hh:mm:ss) that must pass between rule activations. It is useful if the rule is activated by, for example, day-night mode conditions, to avoid that small light changes during sunrise and sunset activate the rule repeatedly. Condition: Select a condition from the list. A condition must be met for the device to perform an action. If multiple conditions are defined, all of them must be met to trigger the action. For information about specific conditions, see Get started with rules for events. Use this condition as a trigger: Select to make this first condition function only as a starting trigger. It means that once the rule is activated, it remains active for as long as all the other conditions are met, no matter the state of the first condition. If you don’t select this option, the rule will simply be active whenever all the conditions are met. Invert this condition: Select if you want the condition to be the opposite of your selection.
Add a condition: Click to add an additional condition. Action: Select an action from the list and enter its required information. For information about specific actions, see Get started with rules for events. Recipients You can set up your device to notify recipients about events or send files. Note
If you set up your device to use FTP or SFTP, don’t change or remove the unique sequence number that’s added to the file names. If you do that, only one image per event can be sent. The list shows all the recipients currently configured in the product, along with information about their configuration. Note You can create up to 20 recipients.
60
AXIS I8307-VE Network Intercom
Add a recipient: Click to add a recipient. Name: Enter a name for the recipient. Type: Select from the list:
· FTP
Host: Enter the server’s IP address or hostname. If you enter a hostname, make sure that a DNS server is specified under System > Network > IPv4 and IPv6.
Port: Enter the port number used by the FTP server. The default is 21.
Folder: Enter the path to the directory where you want to store files. If this directory doesn’t
already exist on the FTP server, you will get an error message when uploading files.
Username: Enter the username for the login.
Password: Enter the password for the login.
Use temporary file name: Select to upload files with temporary, automatically generated
filenames. The files get renamed to the desired names when the upload completes. If the
upload is aborted/interrupted, you don’t get any corrupt files. However, you probably still get
the temporary files. This way you know that all files that have the desired name are correct.
Use passive FTP: Under normal circumstances, the product simply requests the target FTP
server to open the data connection. The device actively initiates both the FTP control and data
connections to the target server. This is normally needed if there is a firewall between the
device and the target FTP server.
· HTTP
URL: Enter the network address to the HTTP server and the script that will handle the request.
For example, http://192.168.254.10/cgi-bin/notify.cgi.
Username: Enter the username for the login.
Password: Enter the password for the login.
Proxy: Turn on and enter the required information if a proxy server must be passed to connect
to the HTTP server.
· HTTPS
URL: Enter the network address to the HTTPS server and the script that will handle the
request. For example, https://192.168.254.10/cgi-bin/notify.cgi.
Validate server certificate: Select to validate the certificate that was created by HTTPS server.
Username: Enter the username for the login.
Password: Enter the password for the login.
Proxy: Turn on and enter the required information if a proxy server must be passed to connect
to the HTTPS server.
· Network storage You can add network storage such as NAS (network-attached storage) and use it as a recipient to store files. The files are stored in the Matroska (MKV) file format.
Host: Enter the IP address or hostname for the network storage.
Share: Enter the name of the share on the host.
Folder: Enter the path to the directory where you want to store files.
Username: Enter the username for the login.
Password: Enter the password for the login.
61
AXIS I8307-VE Network Intercom
· SFTP
Host: Enter the server’s IP address or hostname. If you enter a hostname, make sure that a
DNS server is specified under System > Network > IPv4 and IPv6.
Port: Enter the port number used by the SFTP server. The default is 22.
Folder: Enter the path to the directory where you want to store files. If this directory doesn’t
already exist on the SFTP server, you will get an error message when uploading files.
Username: Enter the username for the login.
Password: Enter the password for the login.
SSH host public key type (MD5): Enter the fingerprint of the remote host’s public key (a 32-
digit hexadecimal string). The SFTP client supports SFTP servers using SSH-2 with RSA, DSA,
ECDSA, and ED25519 host key types. RSA is the preferred method during negotiation,
followed by ECDSA, ED25519, and DSA. Make sure to enter the right MD5 host key that is
used by your SFTP server. While the Axis device supports both MD5 and SHA-256 hash keys,
we recommend using SHA-256 due to stronger security over MD5. For more information on
how to configure an SFTP server with an Axis device, go to the AXIS OS Portal.
SSH host public key type (SHA256): Enter the fingerprint of the remote host’s public key (a
43-digit Base64 encoded string). The SFTP client supports SFTP servers using SSH-2 with RSA,
DSA, ECDSA, and ED25519 host key types. RSA is the preferred method during negotiation,
followed by ECDSA, ED25519, and DSA. Make sure to enter the right MD5 host key that is
used by your SFTP server. While the Axis device supports both MD5 and SHA-256 hash keys,
we recommend using SHA-256 due to stronger security over MD5. For more information on
how to configure an SFTP server with an Axis device, go to the AXIS OS Portal.
Use temporary file name: Select to upload files with temporary, automatically generated
filenames. The files get renamed to the desired names when the upload completes. If the
upload is aborted or interrupted, you don’t get any corrupt files. However, you probably still
get the temporary files. This way, you know that all files that have the desired name are
correct.
· SIP or VMS : SIP: Select to make a SIP call. VMS: Select to make a VMS call.
From SIP account: Select from the list.
To SIP address: Enter the SIP address.
Test: Click to test that your call settings works.
Documents / Resources
 |
AXIS I8307-VE Network Intercom [pdf] User Manual I8307-VE Network Intercom, I8307-VE, Network Intercom, Intercom |