Digital Door Station

Foreword

General

This manual introduces basic operations of the digital door station (hereinafter referred to as "VTO").

Safety Instructions

The following categorized signal words with defined meaning might appear in the manual:

Revision History

Privacy Protection Notice

As the device user or data controller, you might collect the personal data of others such as their face, fingerprints, and license plate number. You need to be in compliance with your local privacy protection laws and regulations to protect the legitimate rights and interests of other people by implementing measures which include but are not limited: Providing clear and visible identification to inform people of the existence of the surveillance area and provide required contact information.

Interface Declaration

This manual mainly introduces the relevant functions of the device. The interfaces used in its manufacture, the procedures for returning the device to the factory for inspection and for locating its faults are not described in this manual. Please contact technical support if you need information on these interfaces.

About the Manual

• The manual is for reference only. Slight differences might be found between the manual and the product.
• Dahua is not liable for losses incurred due to operating the product in ways that are not in compliance with the manual.
• The manual will be updated according to the latest laws and regulations of related jurisdictions.
• For detailed information, see the paper user's manual, use the CD-ROM, scan the QR code or visit the official website. The manual is for reference only. Slight differences might be found between the electronic version and the paper version.
• All designs and software are subject to change without prior written notice. Product updates might result in some differences appearing between the actual product and the manual. Please contact customer service for the latest program and supplementary documentation.
• There might be errors in the print or deviations in the description of the functions, operations and technical data. If there is any doubt or dispute, Dahua reserves the right of final explanation.
• Upgrade the reader software or try other mainstream reader software if the manual (in PDF format) cannot be opened.
• All trademarks, registered trademarks and company names in the manual are properties of their respective owners.
• Please visit the Dahua website, contact the supplier or customer service if any problems occur while using the device.
• If there is any uncertainty or controversy, Dahua reserves the right of final explanation.

Important Safeguards and Warnings

This section introduces content covering the proper handling of the device, hazard prevention, and prevention of property damage. Read carefully before using the device, comply with the guidelines when using it, and keep the manual safe for future reference.

Operation Requirements

• Make sure that the power supply of the device works properly before use.
• Do not pull out the power cable of the device while it is powered on.
• Only use the device within the rated power range.
• Transport, use and store the device under allowed humidity and temperature conditions.
• Prevent liquids from splashing or dripping on the device. Make sure that there are no objects filled with liquid on top of the device to avoid liquids flowing into it.
• Do not disassemble the device.
• Please use battery properly to avoid fire, explosion and other dangers.
• Please replace used battery with battery of the same type.
• If you use power plug or appliance coupler as disconnecting device, please maintain the disconnecting device available to be operated all the time.

Installation Requirements

WARNING

• Connect the device to the adapter before power on.
• Strictly abide by local electrical safety standards, and make sure that the voltage in the area is steady and conforms to the power requirements of the device.
• Do not connect the device to more than one power supply. Otherwise, the device might become damaged.

General Installation Precautions

• Observe all safety procedures and wear required protective equipment provided for your use while working at heights.
• Do not expose the device to direct sunlight or heat sources.
• Do not install the device in humid, dusty or smoky places.
• Install the device in a well-ventilated place, and do not block the ventilator of the device.
• Use the power adapter or case power supply provided by the device manufacturer.
• The power supply must conform to the requirements of ES1 in IEC 62368-1 standard and be no higher than PS2. Note that the power supply requirements are subject to the device label.
• Connect class I electrical appliances to a power socket with protective earthing.
• The device must be installed on solid and flat surface in order to guarantee safety under load and earthquake. Otherwise, it may cause the device to fall off or turnover.

1 Structure

1.1 Front Panel

The front panel of the Digital Door Station features various components for user interaction and device functionality.

Components:

The front panel includes an installation screw area, microphone (MIC), white illuminator, camera, display, loudspeaker, keyboard, and a card swiping area.

1.2 Rear Panel

The rear panel of the Digital Door Station houses connection ports and a tamper button.

Components:

The rear panel features a tamper button and function ports for connecting external devices such as locks, access controllers, and alarm systems.

2 Cable Connection

This section details the wiring for connecting the Digital Door Station to various peripherals and power sources.

Connections:

• Network Port (LAN): Connects the device to the network.
• ALARM PORT: For connecting alarm devices (alarm in/out).
• LOCK1: Connects to door locks (magnetic lock, electric lock, motor lock). Includes terminals for COM, NO (Normally Open), NC (Normally Closed), and EXIT button input.
• RS485: For RS485 communication with devices. Includes terminals for 485A, 485B, GND.
• WIEGAND (IN/OUT): For connecting Wiegand devices like card readers. Includes terminals for WG_D0, WG_D1, GND, WG_LED.
• POWER: Connects to the power supply. Includes terminals for DC power input (12 VDC) and power output (12 VDC/200mA).
• Door contact feedback: For door status detection.
• Access controller/New card reader: Connection point for external access control devices.

The diagram illustrates connections for power, network, locks (magnetic, electric, motor), exit button, door contact feedback, alarm devices, RS485 devices, and Wiegand devices.

3 Installation

Important Installation Precautions:

• Do not expose the VTO to condensation, high temperature, direct sunlight, stain, dust, and chemically corrosive substances.
• Engineering installation and debugging must be done by professionals. Do not dismantle or repair the device by yourself. Contact technical support.
• Prepare cross screwdrivers and gloves yourself.

Recommended Installation Height:

The recommended distance between the camera and the ground is 1.4 m–1.6 m. This ensures optimal field of view for facial recognition and general surveillance.

4 Web Configuration

This chapter introduces the basic configurations of the VTO and the indoor monitor (VTH) for network connection and calling.

4.1 Procedure

Follow these steps to configure the VTO and VTH in the network:

1. Before configuration, check every device to make sure that there is no short or open circuit.
2. Plan IP address and number (working as a phone number) for each device.
3. Configure the VTO. Refer to sections: "4.2 Initializing VTO", "4.3 Configuring Network Parameters", "4.4 Configuring VTO Number", "4.5 Configuring SIP Servers", and "4.6 Adding Room Number".
4. Configure the VTH. For details, see the VTO user's manual.

4.2 Initializing VTO

For the first-time login, you need to create a password.

1. Power on the VTO.
2. Go to the default IP address (192.168.1.108) of the VTO in the browser. Ensure the PC's IP address is on the same network segment as the VTO.
3. Enter and confirm the password, then click Next.

Password Requirements: The password must consist of 8–32 non-blank characters and contain at least two types of the following characters: Uppercase, lowercase, numbers, and special characters (excluding ';', ':', '&').

4. Select Email and enter the email address for resetting the password.
5. Click Next, and then click OK to go to the login interface.

4.3 Configuring Network Parameters

To enable calling between devices, the IP address of the VTO must be on the same network segment as other devices. If not, change the VTO's IP address.

1. Log in to the VTO web interface.
2. Select Network Setting > Basic.
3. Configure the network parameters, select the transmission mode, and click Save.

Note: You may need to change the IP address of your PC to the same network segment as the VTO to log in again.

4.4 Configuring VTO Number

Numbers are used to distinguish each VTO. It is recommended to set the VTO number according to the unit or building number.

1. Log in to the VTO web interface.
2. Select Local Setting > Basic.
3. Enter the device name and the number in VTO No., and then click Save.

A VTO number can contain up to 5 digits and cannot be the same as any room number. The VTO number can be changed when it is not working as the SIP server.

4.5 Configuring SIP Servers

When connected to the same SIP server, all VTOs and VTHs can call each other. You can use a VTO or other servers as the SIP server.

VTO as the SIP Server (for One Building)

1. Select Network Setting > SIP Server.
2. Set Server Type as VTO.
3. Configure parameters. Refer to Table 4-1 for details.
4. Enable SIP Server.
5. Click Save. The VTO will restart automatically.

Platform as the SIP Server (for Multiple Buildings or Units)

1. Select Network Setting > SIP Server.
2. Set Server Type as DSS Express/DSS Pro.
3. Configure parameters. Refer to Table 4-1 for details.
4. Click Save. The VTO will restart automatically.

Table 4-1 SIP server parameter description:

When the platform works as the SIP server, if it is necessary to set building number and building unit number, enable Support Building and Support Unit first.

4.6 Adding Room Number

You can add room numbers to the SIP server, and then configure the room number on the VTHs to connect them to the network.

The room number can contain up to 6 digits of numbers, letters, or their combination, and it cannot be the same as any VTO number.

Adding a Single Room Number

1. Log in to the web interface of the SIP server, and then select Household Setting > Room No. Management.
2. Click Add.
3. Configure room information: First Name, Last Name, Nick Name, Room No., Register Type (select 'public'), and Register Password.
4. Click Save.

You can click Modify [✏️] to modify room information, and click Delete [?️] to delete the room.

Table 4-2 Room information:

Adding Multiple Room Numbers

1. Configure the Unit Layer Amount, Room Amount in One Layer, First Floor Number, and Second Floor Number.
2. Click Add.
3. All the added room numbers are displayed.
4. Click Refresh [?] to view the latest status, and click Clear [?] to delete all the room numbers.

5 Engineering Setting

5.1 Entering Engineering Setting

Engineering setting is intended for administrators or engineers.

• Tap "*project password#" on the VTO.
• You need to set the project password by selecting Local Setting > Access Control > Local on the web interface.

5.2 Changing IP Address

You need to plan an IP address for the VTO to connect it to the network.

1. Select IP Settings on the Engineering Setting interface.
2. Enter IP address, subnet mask, and gateway.
3. Tap Save [?] to complete the setting.

6 User Registration

Only registered users can unlock doors.

1. Tap "*project password#" on the VTO to go to the Engineering Setting interface.
2. On the Engineering Setting interface, select User Registration.
3. Select Add [➕].
4. Enter user ID and room number.
5. Tap OK [✅] to complete the settings.
6. Issue cards. You can issue five cards at most for each user.
   • Issue cards through password: Tap Issue card > Add > Password. Enter the password to complete the setting.
   • Issue cards through master card: Tap Issue card > Add > Master card. You need a master card before you start issuing. If you do not have one, issue a card on the VTO through password. Then go to the web interface of the VTO, select Household Setting > Personnel Management > Card > Main card, set a card as your master card.
7. Swipe cards on the card issuing interface, and card numbers will be automatically recognized.

Appendix 1 Cybersecurity Recommendations

Mandatory actions to be taken for basic device network security:

1. Use Strong Passwords
   • The length should not be less than 8 characters.
   • Include at least two types of characters: upper and lower case letters, numbers, and symbols.
   • Do not contain the account name or the account name in reverse order.
   • Do not use continuous characters (e.g., 123, abc).
   • Do not use overlapped characters (e.g., 111, aaa).
2. Update Firmware and Client Software in Time
   • Keep device firmware up-to-date to ensure the system is equipped with the latest security patches. When connected to the public network, enable "auto-check for updates".
   • Download and use the latest version of client software.

"Nice to have" recommendations to improve your device network security:

1. Physical Protection

   Perform physical protection to devices, especially storage devices. Place the device in a secure room/cabinet with access control and key management to prevent unauthorized physical access.

2. Change Passwords Regularly

   Change passwords regularly to reduce the risk of guessing or cracking.

3. Set and Update Passwords Reset Information Timely

   Set up related information for password reset (e.g., user's mailbox, password protection questions). Do not use easily guessable questions.

4. Enable Account Lock

   Keep the account lock feature enabled. If an attacker attempts to log in with the wrong password multiple times, the account and source IP address will be locked.

5. Change Default HTTP and Other Service Ports

   Change default HTTP and other service ports to numbers between 1024~65535 to reduce the risk of outsiders guessing your ports.

6. Enable HTTPS

   Enable HTTPS for secure web service communication.

7. MAC Address Binding

   Bind the IP and MAC address of the gateway to the device to reduce the risk of ARP spoofing.

8. Assign Accounts and Privileges Reasonably

   Add users and assign a minimum set of permissions based on business and management requirements.

9. Disable Unnecessary Services and Choose Secure Modes

   Turn off unnecessary services (e.g., SNMP, SMTP, UPnP) to reduce risks. Use secure modes like SNMP v3 with strong passwords, TLS for SMTP, SFTP for FTP, and WPA2-PSK for AP hotspots.

10. Audio and Video Encrypted Transmission

    Use encrypted transmission for sensitive audio and video data to prevent theft during transmission. Note: Encryption may cause some loss in transmission efficiency.

11. Secure Auditing
    • Check online users regularly for unauthorized logins.
    • Check device logs to identify IP addresses and key operations of users.
12. Network Log

    Enable the network log function to save logs for a long time on a network log server for tracing, due to the device's limited storage capacity.

13. Construct a Safe Network Environment
    • Disable the port mapping function of the router to prevent direct external access to intranet devices.
    • Partition and isolate the network using VLAN, network GAP, etc., if there are no communication requirements between sub-networks.
    • Establish 802.1x access authentication to reduce unauthorized access to private networks.
    • Enable IP/MAC address filtering to limit hosts allowed to access the device.