Configuration. Software Version. Products for Solutions. Box Cameras. Dome Cameras. English MDF4220HD DF4620HD-DN

Transcription

1 English Configuration Software Version Box Cameras MDF4220HD DF4620HD-DN Dome Cameras DDF4220HDV Picodome DDF4320HD-DN DDF4520HDV-DN DDF4620HDV-DN Products for Solutions Rev /

2 Information about Copyright, Trademarks, Design Patents 2014 Dallmeier electronic The reproduction, distribution and utilization of this document as well as the communication of its contents to others without express authorization is prohibited. Offenders will be held liable for the payment of damages. All rights reserved in the event of the grant of a patent, utility model or design. We reserve the right to make technical modifications. The manufacturer accepts no liability for damage to property or pecuniary damages arising due to minor defects of the product or documentation, e.g. print or spelling errors, and for those not caused by intention or gross negligence of the manufacturer. Dallmeier electronic GmbH & Co.KG Cranachweg Regensburg Germany info@dallmeier.com All trademarks identified by are registered trademarks of Dallmeier electronic. All trademarks identified by *) are trademarks or registered trademarks of the following owners: Adobe and Flash of Adobe Systems Incorporated headquartered in San José, California, USA; AMD and AMD Athlon of Advanced Micro Devices, Inc. headquartered in Sunnyvale, California, USA; Intel and Pentium or Intel Pentium of Intel Corporation headquartered in Santa Clara, California, USA; JavaScript of Oracle Corporation (and/or its affiliates) headquartered in Redwood Shores, California, USA; Linux of Linus Torvalds (in the USA and/or other countries); Microsoft, ActiveX, DirectX, Internet Explorer, Windows, Windows Server and Windows Vista of Microsoft Corporation headquartered in Redmond, Washington, USA Third-party trademarks are named for information purposes only. Dallmeier electronic respects the intellectual property of third parties and always attempts to ensure the complete identification of third-party trademarks and indication of the respective holder of rights. In case that protected rights are not indicated separately, this circumstance is no reason to assume that the respective trademark is unprotected.

3 Contents Chapter 1: Introduction Validity Disclaimer Documents This Document Other Applicable Documents Typographical Conventions 8 Chapter 2: Connection and Login System Requirements Connection Login 13 Chapter 3: Common Settings User Interface System Time Manual Configuration Time Server Camera Name User Management Information about User Names and Passwords Login Mode Group Login User Login LDAP Login Rights 26 Chapter 4: Network Basic Settings Manual Configuration DHCP Security Streaming Video Server Transfer Protocol and Format Transfer Method TTL RTCP Dynamic Servers Audio Client RTSP 39 3

4 Chapter 5: Video Video Standard Sensor Global Settings Preset Color Flip Brightness Contrast Sharpness Saturation Slow Shutter Limit WDR Mode Lens (CS-Mount Cameras) Lens (P-Iris Cameras) Iris Expert Settings Exposure/WB Day/Night Mode Threshold Level Response Time Exposure Control Privacy Zones Encoder Settings Encoder Frames/Second Bitrate Bitrate Mode GOP-Size Hybrid Cam Scale Analog Output Encoder Encoder Audio In 65 Chapter 6: Event Management SMTP Server FTP Server Scheduler Week Timer Exceptions Copy Exceptions Copy Event Settings Delete Event Handler 81 Chapter 7: Interfaces Data Display Filter Position 84 Chapter 8: Digital Image Shift 86 4

5 Chapter 9: Lens Control (Remote Back Focus Control) 88 Chapter 10: Lens Control (Motor-Driven P-Iris Lens) 90 Chapter 11: Service and Info Downloads Factory Settings Licenses Event Log Configuration File Download Upload Configuration Recovery Configuration Transfer to Multiple Devices Info 97 Chapter 12: Image Transmission Web Browser Live Video (ActiveX) Single Image (JPEG) RTSP Application Analog Video Output 101 Chapter 13: LAN LED 102 5

6 Chapter 1: Introduction 1.1 Validity This document applies to the following Dallmeier HD cameras: Box Cameras MDF4220HD DF4620HD-DN Dome Cameras DDF4220HDV Picodome DDF4320HD-DN DDF4520HDV-DN DDF4620HDV-DN The descriptions in this document are based on the software version and apply to all abovementioned Dallmeier HD cameras. For simplicity reasons, the term device or camera is used in the following. However, if passages in the text require distinctions between the individual devices, the complete product names will be mentioned instead. Figures (screenshots) in this document may differ from the actual product. 1.2 Disclaimer This documentation includes the full functionality of the above-mentioned software version. However, note that certain functions and features are only available if supported by the hardware. the functional range of the devices depends on the ordered equipment or device variant and may differ from the contents of this documentation. certain functions and features may require purchasing a license. 6

7 1.3 Documents The product documentation contains several documents which are included in the delivery in printed form and/or on a digital medium. Read all documents included in the delivery carefully and thoroughly before using the respective device. Always follow the instructions, notes and warnings and observe the technical specifications in the relevant product data sheet. Keep all documents in legible condition and in a suitable location for future reference. Regularly check the website for the latest updates on product documentation (and product software) This Document The document Configuration (this document) contains detailed descriptions of the configuration of the respective device. The target audience of this document is trained system integrators Other Applicable Documents Data Sheet The product data sheet contains detailed technical specifications, features and characteristics of the respective device. The target audience of the document is trained system integrators. Commissioning The document Commissioning contains detailed descriptions of the installation, connection and commissioning of the respective device as well as information on the appropriate use, safety instructions and general notes. The target audience of the document is trained system integrators. 7

8 1.4 Typographical Conventions For reasons of clarity and readability, various text formatting elements and types of emphasis are used in this documentation: NOTICE NOTICE indicates practices for preventing property damage, incorrect configurations or faulty operations. Instructions are indicated by arrows ( ). Always carry out instructions one after the other in the sequence described. Expressions in quotation marks generally indicate a control element on the device (switches or labels) or on its user interface (buttons, menu items). Paragraphs in italics provide information on basic principles, special features and efficient procedures as well as general recommendations. 8

9 Chapter 2: Connection and Login The configuration of the device is carried out with a PC and web browser over the Local Area Network (LAN). Alternatively, the PC can be connected directly to the device via an Ethernet crossover cable (for devices which are powered with Power-over-Ethernet, a PoE injector is additionally required). Note that the configuration of the device must always be carried out with a web browser over an IPbased network, even if you want to operate the hybrid camera solely as an analog camera later on. 2.1 System Requirements To configure the device with live video display and live audio output, the client PC must meet the following minimum system requirements: Minimum System Requirements Operating system (OS) Microsoft *) Windows *) XP Windows Vista *) Windows 7 (each with latest service pack) Processor (CPU) 3 GHz Intel *) Pentium *) 4 AMD *) Athlon *) or faster (or equivalent) Random access memory (RAM) Graphics card Sound Ethernet Web browser Software 1 GB (Windows XP) 2 GB (Windows Vista, Windows 7) DirectX *) 9.0 or 10.0 compatible 64 MB of graphics memory (128 MB or higher recommended) Sound card or on-board sound chip (min. 16 bit) 100 Mbps Microsoft Internet Explorer *) (latest version) Adobe *) Flash *) Player (latest version) JavaScript *) enabled Microsoft ActiveX *) enabled Dallmeier Live Video ActiveX (latest version) 9

10 Note that a more powerful client PC is required if several devices are configured with live video display (and/ or live audio output) simultaneously. a DirectX compatible graphics card and the Dallmeier Live Video ActiveX are not required for the configuration without live video display or live audio output. the latest Dallmeier Live Video ActiveX can be directly downloaded from the device or from the Dallmeier Partner Forum. the latest Dallmeier Live Video ActiveX can be automatically downloaded from the Internet after the connection to the device is established (only with the web browser Microsoft Internet Explorer and if it is not already installed). the configuration without live video display and without live audio output can theoretically be carried out with any operating system and web browser. However, the configuration always requires the Adobe Flash Player. Always install the latest version of the Dallmeier Live Video ActiveX after the connection to the device is established in order to obtain the optimal system performance. Information on downloading the Dallmeier Live Video ActiveX directly from the device can be found in the section Downloads on page

11 2.2 Connection The factory default IP address of the device is: Ensure that the PC/web browser can establish a connection to the device via Ethernet. Start the web browser. Enter the IP address of the device into the address bar of the web browser. Confirm the input. The connection to the device is established. The graphical user interface (GUI) of the live mode is displayed: A B C D E F G H Fig. 2-1: Live mode with adjustable video resolution A B C D Hide/show title bar Switch between live and configuration mode Live video Connection method (UDP or TCP) E F G H Adjust video resolution Audio On/Off (live audio) IP address of the device Log out of configuration mode 11

12 Note the following explanations. Hide the title bar (A) if required. Change the connection method (D) if required. Adjust the live video resolution (E) if required. Enable the live audio output (F) if required. The Connection method does not affect the Streaming function of the device (see section Streaming on page 33). The video resolution setting mentioned above only affects the display of the live video in the web browser, and is not related to the encoder settings. Live audio is only available for logged-in (authenticated) users or user groups. In addition, the audio encoding must be enabled (see section Audio In on page 65). Connection Method If the network connection to the device is established via a router with NAT (Network Address Translation) enabled, the live video may not be displayed in the web browser. In this case, two solutions are available: The router has to be configured for a correct address translation of the incoming UDP data packets sent by the device. The User Datagram Protocol (UDP) is by default used by the streaming function of the device. An easier solution is to select TCP from the Connection method drop-down list. The device then switches the protocol of the streaming function to the Transmission Control Protocol (TCP). To receive the TCP data packets, the following ports on the client side must be open: Port for the DaVid Protocol 1) Port 80 for the Hypertext Transfer Protocol (HTTP) Note that during data transmissions over TCP usually no packet loss (lack of images) occurs. short-term peaks in network traffic may occur. low delays may occur. 1) Dallmeier Video Protocol 12

13 2.3 Login The graphical user interface of the configuration mode is displayed for authenticated and authorized users only. The factory default admin password is: 3 NOTICE Risk of access and misuse by unauthorized users Change the factory default admin password as soon as possible (see section Group Login on page 21). Click CONFIG in the user interface of the live mode. The login dialog is displayed: Fig. 2-2 Enter the User name (Default: admin) if required. Enter the Password (Default: 3). Confirm with OK. 13

14 The graphical user interface of the configuration mode is displayed: A B C D E F G H Fig. 2-3: Configuration mode with live video in the bottom left A B C D E F G H Hide/show title bar Switch between live and configuration mode IP address of the device Log out of configuration mode Deactivate/activate live video display Live video Configuration menu Configuration dialogs Configure the required settings (described in the following) and finally click LOGOUT. Note that the live video display can be deactivated in the configuration mode if only a lowbandwidth network is available. a new login is required after 5 minutes without user action. 14

15 Chapter 3: Common Settings 3.1 User Interface The graphical user interface can be displayed in various languages. Open the User interface dialog via Common settings > User interface.... Fig. 3-1 Select the required Language. Clear (uncheck) the Show live video (ActiveX) in WebConfig check box if network bottlenecks occur or your system is overloaded. Clear (uncheck) the Use DirectX for video in Lens control dialog check box if the live video in the Lens Control dialog turns black (or rather is not displayed) at 8 magnification. Further information on the Lens Control can be found in the following chapters: Lens Control (Remote Back Focus Control) on page 88 Lens Control (Motor-Driven P-Iris Lens) on page 90 Clear (uncheck) the LED signal check box if you want to deactivate the LAN LED signal. Further information on the LAN LED signal can be found in the chapter LAN LED on page 102. Confirm with OK. 15

16 3.2 System Time The system time can be set manually or synchronized with a UTC time server. In both cases, however, the time zone must be set first. Open the Time settings dialog via Common Settings > Time.... Click the Time zone tab. Fig. 3-2 Select the Time zone. Confirm with OK Manual Configuration Note that manual configuration is not possible if the UTC time server synchronization is activated (see section Time Server on page 17). Click the Date/Time tab. Fig. 3-3 Set the Date and Time. Confirm with OK. 16

17 3.2.2 Time Server Note that the specified UTC time server must be constantly accessible over the network. Click the Time server tab. Fig. 3-4 Enter the IP address of the UTC time server. Select (check) the Use time server check box if you want to activate the synchronization with the specified UTC time server. Confirm with OK. If using a host name instead of an IP address, you must ensure that the settings of the Domain Name System (DNS) are correctly configured (see section Domain Name System (DNS) on page 29). Contact your network administrator for more information and assistance. 17

18 3.3 Camera Name The camera can be assigned a unique name which then is displayed in an external application 2) and, in addition, can be inserted directly into the video (max. 16 characters). Open the Camera name dialog via Common settings > Camera name.... Fig. 3-5 Enter a unique name for the camera. From the Insert name in video drop-down list, select the position where the camera name is required to be inserted directly into the video. From the Color drop-down list, select the color for the characters that are displayed directly in the video. The color option automatic automatically displays the characters of the camera name in either black or white depending on the current image content (image brightness based on pixel values). This option provides for a better readability of the camera name and is particularly useful if the surrounding contrast or brightness levels at the specified position are constantly changing. Confirm with OK. 2) e.g. SMAVIA Viewing Client (Dallmeier video management software) 18

19 3.4 User Management The configuration of the device is accessible for authenticated and authorized users only. The user management allows you to grant multiple access levels to the device and to select custom permission settings for three different local user groups. In addition, individual local users can be assigned to each user group if necessary. Furthermore, a centralized user and group management based on LDAP (Lightweight Directory Access Protocol) is supported using an Active Directory (AD) service such as Microsoft Windows Server *) or Linux *) Server with Samba Information about User Names and Passwords For security reasons, passwords should consist of at least 8 characters. Do not use any personal information, conventional expressions (real words) or names. A secure password needs to be complex, random and long. A combination of upper-case letters (e.g. ABC), lower-case letters (e.g. abc), numerals (e.g. 123) and non-alphanumeric keyboard symbols (e.g. _ / ^) is usually secure. Character Sets Supported by the Camera The following character sets are supported by the camera: ISO (all languages except Russian) Windows-1251 (Russian language only) Characters Supported by Dallmeier Recording Systems NOTICE Invalid user name or password due to unsupported characters Dallmeier recording systems currently only support a combination of the following characters: Upper-case letters (A Z) Lower-case letters (a z) Digits (0 9) Non-alphanumeric keyboard symbols ( _ -. ) In addition, user names must always start with a letter. 19

20 3.4.2 Login Mode The login mode defines the authentication type: Login Mode Group login User login LDAP login Authentication Type Group password User name + user password or Group password LDAP user name + LDAP user password An authentication with the group password is also possible in the User login mode. Open the Login options dialog via Common settings > User management > Login options.... Fig. 3-6 Note the following sections on the various login modes. Select the required Login mode. Confirm with OK. 20

21 Group Login Group Name The factory default group names of the three local user groups are: Group 1: admin Group 2: user Group 3: guest The name of each user group can be changed. Group Password Note that a factory default password is set for the local user group Group 1: admin (Default: 3). the factory default password of the local user group Group 1: admin must be changed for security reasons. no factory default password is set for the local user groups Group 2: user and Group 3: guest. a login of the local user groups Group 2: user and Group 3: guest is only possible after a password has been set. Open the User groups dialog via Common settings > User management > User groups.... Fig. 3-7 Click the tab of the relevant group. Enter a new Group name if required. Enter a New password (pay attention to section Information about User Names and Passwords on page 19). Repeat the new password in the Confirm password field. Confirm with Apply. 21

22 User Login In the User login mode, individual local users can be assigned to the three local user groups. Define New User Ensure that the User login mode is selected (see section Login Mode on page 20). Open the User groups dialog via Common settings > User management > User groups.... Fig. 3-8 Click the tab of the relevant group. Click New. The New user dialog is displayed: Fig. 3-9 Pay attention to section Information about User Names and Passwords on page 19. Enter a new User name. Enter a New password. Repeat the new password in the Confirm password field. Confirm with OK. Edit or Delete User Ensure that the User login mode is selected (see section Login Mode on page 20). Open the User groups dialog via Common settings > User management > User groups.... Click the tab of the relevant group. In the Users list, select the relevant user. Edit or Delete the user by clicking the appropriate button. 22

23 LDAP Login This setting allows for an LDAP-based centralized user and group management using an Active Directory (AD) service such as Microsoft Windows Server or Linux Server with Samba. The individual user rights/permissions are granted by three different group policies defined on the LDAP client (this device). NOTICE Login failure In the LDAP login mode, a login as a local user group or a local user is no longer possible. Incorrect LDAP settings The following LDAP settings may only be performed by an administrator with advanced skills in LDAP technology. In order to be able to set the respective group policies/rights on the LDAP client (this device), each LDAP user intended to obtain access to the device must first be assigned to a specific LDAP group on the LDAP server. Then, the defined LDAP group (user-group-relation) can be read out by the LDAP client (this device). A valid LDAP group name for each directory entry on the LDAP server must be structured as follows: [Group prefix][group suffix] The group prefix is a user-definable expression (e.g. myhostname), however, it is required. This allows administrators to assign different user groups and, thus, variable user rights to multiple simultaneously installed LDAP clients of the same system design (e.g. Dallmeier HD cameras described here). The available group suffixes are fixed expressions: Group 1 (administrator): _G4 Group 2 (user): _G2 Group 3 (guest): _G1 On the LDAP server, the LDAP group names with the group prefix myhostname would in this case be as follows: Group 1 (administrator): myhostname_g4 Group 2 (user): myhostname_g2 Group 3 (guest): myhostname_g1 However, it is mandatory to also enter the used group prefix (here: myhostname) on the LDAP client (this device). For further information regarding this requirement, see the following descriptions. 23

24 Note that the following settings require at least one existing LDAP user to be a member of Group 1 (administrator). After the LDAP settings have been made on the LDAP server, the LDAP client (this device) must be configured accordingly. In this respect, note the following steps and descriptions: Ensure that the LDAP login mode is selected (see section Login Mode on page 20). Click the LDAP options tab. Fig For the correct access to the directory entries on the LDAP server, the following information must be entered: LDAP server: LDAP host: LDAP base: Name or IP address of the LDAP server Example: ldap://servername ldap:// Group prefix of LDAP group name Example: myhostname Base DN (Distinguished Name, search base on the LDAP server); object location in the LDAP directory hierarchy Example: ou=department,dc=example,dc=co,dc=uk LDAP filter: Default entry: (samaccountname=%unam%) LDAP attributes: Default entry: memberof Enter the relevant data for the access to the LDAP server. 24

25 Before you can save the LDAP settings, your entries have to be verified. The validation is performed by querying the LDAP directory for an existing authorized LDAP user with administration rights (member of Group 1). The settings on the LDAP client (this device) can only be saved if the query has been successful (returns an internal valid result). Click Test. The corresponding dialog is displayed: Fig Enter the LDAP user name and associated LDAP user password of an authorized LDAP user with administration rights (member of Group 1). Click Start test. After a successful test, confirm with OK to save the settings. From this point in time, a login to this device (now LDAP client) is possible for authorized LDAP users only. 25

26 3.4.3 Rights The three user groups and, thus, the assigned users can be granted individual rights. In addition, the general public (user group anonymous ) can be granted or denied access to certain types of live images. Note that the rights of Group 1 (administrator) cannot be restricted. certain permission levels cannot be set for all rights. certain rights are partially or fully relevant for external applications only (e.g. for the DaVid Protocol). Open the Rights configuration dialog via Common settings > User management > Rights.... Fig The various user rights are each displayed in a separate row. The permission level of each user group (column) is represented by an icon (see below). 26

27 Icon Tooltip Permission allow allow read only deny The dialog will be displayed. The settings can be changed. The function can be used. The dialog will be displayed. The settings can NOT be changed. The dialog will NOT be displayed. The settings can NOT be changed. The function can NOT be used. Find the relevant user right (row). Change the permission level by clicking on the icon in the column of the relevant group. Proceed as described above for all user rights and groups. Confirm with OK. 27

28 Chapter 4: Network 4.1 Basic Settings The network settings of the device can be configured manually or automatically assigned by a DHCP (Dynamic Host Configuration Protocol) server. NOTICE Network conflicts due to invalid or incorrect IP address In order to avoid network conflicts, you should clarify if the intended network settings are permitted. In particular, the allocation of an already used IP address may result in malfunctions. Open the Network settings dialog via Network > Basic settings.... Fig. 4-1: Network settings and MAC address of the device Default Factory Settings Connection type: automatic Bandwidth limit: none Get IP settings from DHCP: unchecked IP address: Netmask: Gateway: Allow IP-Finder network configuration: selected (checked) 28

29 NOTICE Network connection failures due to incorrect configuration settings Incorrect settings may result in the device being no longer available over the network. Contact your network administrator for more information and assistance. For troubleshooting purposes, write down the MAC address of the device and all new settings before changing the configuration. Note the following explanations. Connection Type This Connect type setting defines the transfer rate and duplex mode. The connection type automatic (Autonegotiation) is sufficient for most applications. Bandwidth Limit Limiting the bandwidth (maximum allowed peak bit rate) can be useful to prevent video artifacts or frame drops due to packet loss with low-bandwidth connections. Domain Name System (DNS) Since IP addresses are rather difficult to remember, you can also refer to devices by their host names which allows you to locate the devices or hosts more easily in the LAN (Local Area Network). The mapping of host names to their corresponding IP addresses is handled by the so-called Domain Name Service (DNS server required). In addition, the IP address mapping can also be stored directly in the hosts file on your local computer. The Host name (or more accurately, the short host name) specifies the name of the machine itself (e.g. myhostname). The Domain name is usually the network domain within your LAN associated with your company and department (e.g. example.com or intranet.example.com). Host names are resolved by special DNS servers, also known as name servers. Resolving host names into IP addresses requires the assignment of a primary name server ( DNS server 1, e. g. ns1.example.com) and, for reasons of reliability and availability, a secondary name server ( DNS server 2, e.g. ns2.example.com). For example, to refer to the device by its long host name or fully qualified domain name (FQDN), you can simply use myhostname.example.com. Depending on the settings of the DNS server or entries in your local hosts file, you can also refer to the device by simply using its short host name (here: myhostname). Search domains (max. 5 allowed, separated by spaces) are useful if a defined alarm host or UTC time server is not located in your specified Domain name. 29

30 4.1.1 Manual Configuration If no DHCP server is available in your Local Area Network (LAN) or if you want to assign the network settings manually, proceed as follows: First, pay attention to the designated and valid IP address ranges in your network. Contact your network administrator for more information and assistance. Ensure that the Get IP settings from DHCP check box is not selected (unchecked). Enter the IP address that you want to assign to the device. Enter the Netmask. Enter the Gateway address. If required, configure the available DNS settings (see section Domain Name System (DNS) on page 29). If required, clear (uncheck) the Allow IP-Finder network configuration 3) check box. Confirm with OK. The connection to the device is then terminated and the new network settings will be assigned. After changing the network settings, you have to re-establish a connection to the device (with the newly assigned IP address). 3) IP-Finder (PService): Dallmeier software for the determination and configuration of network-compatible Dallmeier devices 30

31 4.1.2 DHCP To have a DHCP server assign the network settings automatically, proceed as follows: Ensure that an active DHCP server is available in your Local Area Network (LAN). Contact your network administrator for more information and assistance. Select (check) the Get IP settings from DHCP check box. The IP address, subnet mask and gateway address can then no longer be set manually but are automatically assigned by the central DHCP server after saving the network settings. If required, configure the available DNS settings (see section Domain Name System (DNS) on page 29). To send the Host name to the DHCP server, clear (uncheck) the Get host name from DHCP check box and enter a specific host name. If required, clear (uncheck) the Allow IP-Finder network configuration 4) check box. Confirm with OK. The connection to the device is then terminated and the new network settings are assigned by the DHCP server (pay attention to the lease duration). After changing the network settings, you have to re-establish a connection to the device (with the newly assigned IP address): The newly assigned IP address can be determined in the IP Finder (PService) or on the DHCP server by searching for the MAC address of the device. The IP Finder (PService) must be running on the same LAN where this device is located. 4) IP-Finder (PService): Dallmeier software for the determination and configuration of network-compatible Dallmeier devices 31