Access Control Unit Version 6.0 User Guide If this panel is to be added to an existing loop, then some panels may need to be upgraded. Please go to https://mywebtech.honeywell.com Document 800-05168V5 – Rev A – 02/2018...
Revisions Issue Date Revisions 09/2017 Revised document based on 800-05168V4. 01/2018 Revised document based on 800-05168V5.
Navigating through NetAXS ............... . 12 The NetAXS-123 Dashboard ............................12 Accessing the Menu................................
Caches................... . 113 Clearing the Cache and Cookies Used by the NetAXS-123 Web Server ..........113 Generating and Installing Certificates .
All product and brand names are the service marks, trademarks, registered trademarks, or registered service marks of their respective owners. Printed in the United States of America. Honeywell reserves the right to change any information in this document at any time without prior notice.
NetAXS-123 Access Control Unit User’s Guide www.honeywell.com/security...
Getting Started Overview The NetAXS-123 is a modular 1-, 2- or 3-Door access control system. A NetAXS-123 access control site is configured with a host system and access control units that exceed existing N-1000-III/IV specifications and approvals. These units also communicate with each other and with a variety of input and output devices.
Honeywell recommends Chrome™ for the best performance. Register and log-in to mywebtech.honeywell.com. Click Download Center > Access Control > NetAXS > "NetAXS-123 Resources and USB Driver Media CD." Click on download link. Accept the license agreement and then download it.
Click Install to initiate the installation. When the installation is complete, the closing screen appears: Click Finish. Connect the computer to the NetAXS-123 controller with a USB-A to Micro USB-B cable. Supply power to the NetAXS-123 controller. Login at https://192.168.2.150.
NetAXS-123 Access Control Unit User’s Guide Setting Up an Ethernet Port There are two options for connecting the panel to a PC via a web server: • Using a hub/LAN connection • Using a direct connection To set up an Ethernet Port...
Identify your local Ethernet connection (commonly labeled Local Area Connection), and right-click the icon to display the Local Area Connection Properties screen. Highlight the Internet Protocol (TCP/IP) connection. Click Properties to display your system’s current Internet Protocol properties. TIP! Keep a record of your computer’s current network configuration as it appears in this screen.
When connecting to the web using a browser, you must use https:// for a secure connection. The standard http:// that is the default in most browsers will not work. Press the Enter key to display the Honeywell NetAXS-123 login screen. www.honeywell.com/security...
On initial signing in, you will be asked to change your password to a new password. For more information see Creating NetAXS-123 Accounts on page 123. Click Sign In. By default, the NetAXS-123 opens to the Dashboard. 800-05168V5 - A - 02/2018...
12 | NetAXS-123 Access Control Unit User’s Guide Navigating through NetAXS The NetAXS-123 Dashboard On the NetAXS-123 Dashboard, you can see the following: • A list of all the panels in the loop. • Any offline panels. • The number of currently existing entries in the database.
| 13 Accessing the Menu In the upper left corner is the Menu button, allows you access to all of the NetAXS functions. Figure 1-1 Main Menu 800-05168V5 - A - 02/2018...
14 | NetAXS-123 Access Control Unit User’s Guide Table 1-1 Main Menu Selections For more information, Icon Description see... Access configuration Configuring Spaces on page 39 options for Spaces, Configuring People and Cards on Schedules, Holiday, Peo- page 66 Entering a Panel Name on...
| 15 Basic Settings Overview This chapter explains the NetAXS-123 configuration functions as accessed via the web server. These functions should be performed only by the system administrator or service personnel. CAUTION: The sequence of NetAXS-123 configuration tasks is critical. If you do not follow the sequence...
DHCP. DIP Switch Settings (EVL Mode) When a NetAXS-123 panel is used in EVL mode, DIP (dual in-line package) switches 1-5 are not used to identify the panel. The panel is identified by its MAC address. TIP! When setting up an EVL loop, create a list of MAC addresses for all Panels and what doors they control.
Connect all Controllers to a common IP network. The Secondary IP controllers must have DIP switch 6 set to OFF, and will be configured using the Primary controller. Log into NetAXS-123 Primary panel from a browser through the USB (192.168.2.150).
18 | NetAXS-123 Access Control Unit User’s Guide Figure 2-2 Selecting Host/Loop Communication Tab Set up Communication attributes (see Figure 2-2): Select Web as Host Connection Type. Select Ethernet Virtual Loop as Mode. Click Save. The panel automatically reboots. Log into the NetAXS-123 panel.
| 19 Figure 2-3 Network Configuration for EVL Log into the Primary controller from a browser. Setting Up an Ethernet Port on page Register Secondary EVL controllers (see Figure 2-4): Note Only secondary panels can be Registered and Unregistered. Navigate to the EVL tab: Menu > Panel Configuration > Advanced > EVL Discovery.
IMPORTANT: Only 1 Primary controller may be in a RS-485 loop. All of the Secondary controllers must have DIP switch 6 set to the OFF position. Log into NetAXS-123 Primary panel from a browser through Ethernet (default 192.168.1.150), or USB (192.168.2.150).
Select Web as Host Connection Type. Select RS-485 as Mode. Click Save. The panel automatically reboots. Log into the NetAXS-123 panel. RS-485 Unregister RS-485 Unregister page will list all of the secondary panels that are physically wired together in a RS-485 communication loop.
22 | NetAXS-123 Access Control Unit User’s Guide Navigate to the RS-485 Unregister tab: Menu > Panel Configuration > Advanced > RS-485 Unregister. If a secondary panel is offline, it will display as red in the status list. None of its devices (readers, inputs, outputs, etc.) will be accessible until the panel comes back online.
| 23 Panel-specific data includes: • Access Group Schedule Reader Assignments • Space/Door/Reader Configuration • Panel Configuration (General) • Panel Configuration (Firmware Version) • Panel Configuration (Network) (IP addresses apply only to primary panel) • Panel Configuration (Host/Loop Communications) (applies only to primary panel) •...
24 | NetAXS-123 Access Control Unit User’s Guide Configuring Host/Loop Communications To maintain your NetAXS-123 system configuration or to monitor its status, you must connect to the panel using one of three modes: • Host mode (monitor only) – a host software system, such as WIN-PAK™ or MAXPRO Cloud, connects to the panel (through the primary panel, which has an on-board PCI communications adapter).
Whenever this box is checked and the page is saved, the new key must be entered in WIN-PAK. Disable Encryption Select to disable encrypted communication between NetAXS-123 Primary and WIN-PAK Host. Disabling encryption creates an insecure system and is not recommended.
26 | NetAXS-123 Access Control Unit User’s Guide Setting the Communication Mode to Web Navigate to Host/Loop Communications: • Dashboard > Panels > Host/Loop Communications, or • Menu > Panel Configuration > Host/Loop Communications. Click to select Web. Figure 2-7 Selecting WEB on the Host/Loop Communications Tab Configure the host settings.
| 27 Note When switching from EVL back to RS-485 mode, all EVL Secondary (DS) controllers are automatically unregistered from the primary so that they may be used again as RS-485 DS controllers. Note When switching from EVL to RS-485 mode, if the EVL primary can not communicate with the DS controller, then the DS controller remains an EVL controller until it is set back to factory defaults.
28 | NetAXS-123 Access Control Unit User’s Guide Note The Unique Key automatically generates. Click Save. Initial Panel Setup You can access Panel configuration in two ways: • Click Panels in the Dashboard to access the Panels interface, or Figure 2-9 Navigating to the Panels Interface •...
| 29 Figure 2-10 Panels Interface Entering a Panel Name Note Panels can be configured only if the Host Communications is set to Web. Navigate to the Settings panel: • Dashboard > Panels > Settings, or • Menu > Panel Configuration > Settings Figure 2-11 Settings Panel 800-05168V5 - A - 02/2018...
30 | NetAXS-123 Access Control Unit User’s Guide Click the Panel Name field, and then enter a panel name. Click Save. Configuring the Network Settings In the Panel Configuration page, you can configure the following network-related settings: • View the panels MAC Address •...
| 31 Figure 2-12 Time Management Section Configuring the Current Panel Time Between the Settings tab and the Host/Loop Communications tab, you can configure the following for the current panel time: 800-05168V5 - A - 02/2018...
32 | NetAXS-123 Access Control Unit User’s Guide Settings Tab • Specify the time format (12 hour/24 hour). • Set a new date. • Set a new time. • Set the geographic time zone. • Enable a time server, and then specify the IP address of the time server being used.
Enable/Disable Time Sync. Enabling Time Sync Communications synchronizes the secondary panels with the main panel. Time (in mins) Enter a value for how often the NetAXS-123 panels checks and synchronizes the panel times. Enter between 60 and 32,767 minutes. 800-05168V5 - A - 02/2018...
34 | NetAXS-123 Access Control Unit User’s Guide Configuring Behavior Settings In the Behavior Settings section of Panel Configuration, you can enable/disable the following: • Anti-Passback–When enabled, a valid card is required for entry and exit. The card holder must use the card in the proper IN/OUT sequence—that is, a card swiped at an IN reader must then be swiped at an OUT reader, or vice versa—a card swiped at...
(3-59) or hours (1-12). Configuring Schedules The NetAXS-123 panel controls access by using schedules, or time schedules. Inputs, outputs, groups, readers, access groups, and cards through access groups are all configured with schedules by which they will be energized or de-energized, enabled or disabled.
36 | NetAXS-123 Access Control Unit User’s Guide Figure 2-13 Time Management - Schedules Creating a schedule Click in the Schedules interface to add a new schedule. Enter a schedule name. Click and drag to define the parameters of the schedule, including days of the week and hours.
| 37 Configuring Holidays Holidays are special days of a week. They are similar, but override standard weekdays. If a day programmed as a Holiday occurs in the panel, the panel treats that day as the Holiday type, regardless of the actual day of the week (Monday-Sunday). During this Holiday, only Schedules that contain that specific Holiday type work.
38 | NetAXS-123 Access Control Unit User’s Guide Note Each Holiday added is considered a full day, extending from midnight to midnight. Modifying a Holiday Click to select the holiday in the Holidays list. Figure 2-15 Modifying a Holiday Modify the holiday.
| 39 Figure 2-16 Deleting a Holiday A delete icon appears Click the delete icon. A Delete Confirmation message appears. Click OK. A Successfully Deleted message appears to indicate the deletion was successful. Configuring Spaces Configuring Spaces Before you can configure doors, you must assign doors to a space. Navigating to the Spaces interface.
40 | NetAXS-123 Access Control Unit User’s Guide Figure 2-17 Navigating to the Spaces Interface • Or click Configuration in the Menu. Click to create a new space. Figure 2-18 Creating a New Space The ASSIGN DOORS TO SPACE window opens.
| 41 Figure 2-19 ASSIGN DOORS TO A SPACE window Enter a space name in the Name your Space field. Click in the AVAILABLE DOORS pane to select the door. The door appears in the ADDED DOORS pane. Click Save. A message appears confirming the new Space. Note You cannot delete a door that is assigned to an access group.
42 | NetAXS-123 Access Control Unit User’s Guide Figure 2-20 Access Groups Interface Click to select an Access Group, then click EDIT. Figure 2-21 Selecting an Access Group Click + under Entity to expand a space and reveal the doors that belong to that space.
| 43 Figure 2-22 Selecting a Door Click Save. Configuring Doors Each panel supports from 1-3 doors. For each door, you must configure the readers, inputs, and outputs. Note You must assign doors to a Space before you can configure the doors. See Configuring Spaces on page Accessing the Doors Configurations Navigate to the Configure your Spaces tab by doing one of the following:...
44 | NetAXS-123 Access Control Unit User’s Guide Figure 2-23 Configure your Spaces Tab Click Configure your Spaces to expand the configured spaces, then click a Space to open it, then click on a door in that space to select it.
| 45 Figure 2-25 Door Configurations Enter a Door Name. Select a schedule for the following settings: • Disable Reader • Lockdown Reader • Card and PIN • Card or PIN • PIN only • Card Only Note The order of the above list is the priority order. Select an Access Type, if desired, either SUPERVISOR or ESCORT, for Card and PIN, Card or PIN, PIN only, and Card only.
46 | NetAXS-123 Access Control Unit User’s Guide About Supervisor Mode Supervisor mode enables a supervisor to enter without allowing general access. When this mode is enabled, the reader LED changes color four times per second (usually red then green).
| 47 Note You must enable Anti-Passback in Panel Configuration before you can enable it here. See the Behaviour Settings section in Figure 2-10 page Anti-Passback: When enabled, a valid card is required for entry and exit. The card holder must use the card in the proper IN/OUT sequence—that is, a card swiped at an IN reader must then be swiped at an OUT reader, or vice versa—a card swiped at an OUT reader must then be swiped at an IN reader.
48 | NetAXS-123 Access Control Unit User’s Guide Note The duress output feature requires the following configurations: • Duress must be enabled on the Panel Configuration > Settings > Behaviour Settings tab. See Figure 2-10 page • A schedule/schedule must be selected for Card and PIN in the Doors configuration.
| 49 Four inputs are associated with each of the doors on a NetAXS-123 panel: • Status – Provides door status information. • Egress – Allows the door to open or close normally without generating an alarm. • Tamper A – Reports abnormal handling of the reader device or wiring for Reader A.
50 | NetAXS-123 Access Control Unit User’s Guide Select Input Modes. Configuration Description Normally Normally Closed means that the input’s normal state is closed. (Default setting). Normally Open means that the input’s normal state is open. State Unsupervised means that the input’s electrical circuit is wired in one path without alternative paths supervised by resistors.
| 51 Configuring Panel I/O and Groups To view a configuration of a group of outputs, click Group and select the group number from the drop-down list. The group configuration screen appears. Note that you can only view the group configuration from this screen. The edit the Group configuration, go to Panel Configuration >...
52 | NetAXS-123 Access Control Unit User’s Guide Figure 2-28 Configuring Panel Inputs Click to select an input. Select Input Modes. Configuration Description Normally Normally Closed means that the input’s normal state is closed. (Default setting). Normally Open means that the input’s normal state is open.
| 53 Configure Shunt and Debounce times. Configuration Description Shunt Time Specifies the amount of time for which the inputs are shunted, or (h:m:s) de-activated. The maximum length of time is 1 hour, 45 minutes, 59 seconds. You can express seconds in tenths of a second. Debounce Time Specifies the period of time (MIN = 0 second, MAX = 6553.5 (h:m:s)
54 | NetAXS-123 Access Control Unit User’s Guide Figure 2-29 Configuring Individual Outputs Click to select an individual output from the list. Configure the following for each output: Setting Description Name Enter a unique name for the output Pulse Time Configure how long a device assumes abnormal status, such as a horn sounding or a released door strike.
| 55 The Output Groups tab allows you to configure the following: • A group of horns to sound for a set time during a set period • Energize or de-energize a group of doors during a set period In the Output Groups tab, you can configure the following for one or more groups: •...
56 | NetAXS-123 Access Control Unit User’s Guide Configuring Card Formats A card format tells the panel how the card number will be read. The panel supplies the format to the card readers. Then, the card readers can correctly read the card.
| 57 Table 2-9 Card Format Settings Settings Description Available Formats Lists all the formats in the panel. All formats, new ones as well as the eight default formats, are listed under Available Formats. This information allows all readers by default to use all formats to try and decipher card reads.
58 | NetAXS-123 Access Control Unit User’s Guide Card Format data layout screen: Use the field descriptions in Table 2-10 to define the layout and click Save. Table 2-10 Panel Configuration > Card Formats Settings Description Card Format Name Displays the name by which the format will be listed in the Card Formats tab.
| 59 Table 2-10 Panel Configuration > Card Formats (continued) Settings Description Even Parity Lists where on the card that even parity is being observed. Start - First bit in the card where even parity begins. Num - Number of bits to the right of the start bit, including the start bit, to include in the even parity check.
60 | NetAXS-123 Access Control Unit User’s Guide Managing Site Codes Site codes (also called facility codes) identify an enterprise’s site with unique numbers for each site. You can create a maximum of eight site codes to serve as secondary IDs (in addition to the card number) on the card for additional validation.
| 61 The Name and Code fields become active. Make your modifications, then click the green check mark to save. A message appears confirming that the new site has been Successfully Updated. Deleting a Site Code Click to delete a site code. Configuring Interlocks An interlock is a programmed connection between two points.
62 | NetAXS-123 Access Control Unit User’s Guide Figure 2-33 Create Interlocks Interface Enter a name for the new Interlock. Select configurations for the Triggers (Input, Output, or Group), Reaction (Input, Output, or Group), Alarm Action, and Normalcy (the state to which the trigger returns).
| 63 Configuration Description Interlock Then Execute (Alarm Action) – Specifies the reacting Actions component’s action when the trigger’s change of state occurs. Select the action from the available options. Upon Resuming (Normalcy) – Specifies the reacting component’s action when the trigger returns to the normal state. Select the action from the available options.
Click the Enable/Disable button . A confirmation appears if successful. Downstream Devices The NetAXS® downstream devices provide the NetAXS-123 panels with additional inputs and outputs. The NetAXS-123 panels supports two downstream board types: • NX4IN - Provides 32 supervised, four-state inputs that are limited to 2.2K ohms resistance.
| 65 Figure 2-35 Menu > Panel Configuration > Advanced > Downstream Devices The Downstream Devices tab enables you to: • View and modify the names of the devices that communicate with the panel. • View the types and addresses of the devices that communicate with the panel. Configuring People and Cards Configuring People The People tab on the People &...
66 | NetAXS-123 Access Control Unit User’s Guide Figure 2-36 People & Cards Configuration Interface Creating a Person Click to on the People tab to create a new user. Figure 2-37 Creating a New Person Enter a first and last name.
| 67 Optional: Enter a note, such as Department number, phone extension, or a birthday, for example. Notes can be up to 20 characters. Turn Trace on or off. Trace provides a record of the card holder’s path through the facility by sending an alarm message to the alarm monitor whenever a card with trace enabled is presented at a reader.
68 | NetAXS-123 Access Control Unit User’s Guide Figure 2-39 Deleting a Person Click the delete icon . A confirmation message appears. Click OK to confirm the deletion. Configuring Cards A card is encoded with a unique number and the person’s access group grants rights to access system resources.
| 69 Navigate to the Cards tab on the People & Cards window: • Click Cards in the Dashboard to access the People & Cards interface, or • Click Configuration in the Menu, then click People & Access > People & Cards > Cards.
70 | NetAXS-123 Access Control Unit User’s Guide Enter a PIN if you’re adding a single card. See the note on page 66 for PIN number rules. Note A PIN is optional; however, if the door reader is configured to require PIN...
| 71 Figure 2-42 Modifying a Card Make the changes to the card, then click Save. Deleting Cards Click the box next to the card. A delete icon appears Figure 2-43 Deleting a Card Click the delete icon . A confirmation message appears. Click OK to confirm the deletion.
72 | NetAXS-123 Access Control Unit User’s Guide Configuring Access Groups Every card is assigned an access group, which specifies the schedule, or time schedule, during which the card holder can be granted access at a specific door. For example, an access group embedded in an employee’s card might allow the employee to enter the...
| 73 Creating a New Access Group Click to open the new access group configuration panel. Figure 2-45 Access Group Configuration Page Enter a name in the Access Group name field. Click to select People for this access group. Click to expand a space/entity to show the doors and readers assigned to that space. Click the drop-down menu to assign a schedule to that door and/or reader.
74 | NetAXS-123 Access Control Unit User’s Guide www.honeywell.com/security...
NetAXS-123 has been evaluated for standalone use only. Monitoring features are supplementary only and have not been evaluated by UL. Monitoring Monitoring Alarms and Events Note NetAXS-123 is listed for access control only. No burglary applications have been investigated. 800-05168V5 - A - 02/2018...
76 | NetAXS-123 Access Control Unit User’s Guide Alarms Alarms are system-generated messages that might indicate the need for user attention. To view alarms and events, you have to navigate to the Alarms & Events window. Events Events are both panel- and web-generated events. Panel events include the recording of a card read by a reader.
A number at the board level that is assigned to a specific Number) alarm generating point. NetAXS-123 Controller starts at 1 and goes to 8, 1-Door I/O board as a new board goes from 1 to 4, and 2-door I/O board goes from 1 to 8. System alarms, such as a reset, which are not board-specific, will report a value of 0.
78 | NetAXS-123 Access Control Unit User’s Guide Table 3-1 Alarms & Events Fields Field Description Cred-PIN/Site Identifies the card number, and either the PIN or site code number of the card. Reports only events that have an invalid Card Number, invalid Site Code, or invalid PIN.
| 79 The Door Status screen enables you to: • View the current status of each input (Normal, Alarm, Cut, Short, Unshunt/Shunt). • Shunt or un-shunt any input. Shunt means that the input’s change of state is ignored. This way you can allow a door to be held open without signaling an alarm. The default state of an input point is "unshunted."...
80 | NetAXS-123 Access Control Unit User’s Guide Figure 3-3 Device Management Window - Auxiliary Connections - Inputs Shunting/Unshunting an Input Shunt an input to manually override a schedule setting. Click either the Shunt or Unshunt button. Click OK. Restoring the Schedule Click Restore to Schedule to restore the input to its shunt state based on its current schedule.
| 81 On the Outputs tab, you can do the following: • View the current status of each output in the Discrete tab (Energized or De-energized). • View the current status of each group of outputs in the Groups tab. •...
82 | NetAXS-123 Access Control Unit User’s Guide Navigating to the Auxiliary Connections-Output Groups tab: Click to open the menu, then click Device Management > Auxiliary Connections > Output Groups. Figure 3-5 Device Management - Auxiliary Connections - Output Groups...
| 83 The Outputs tab allows you to configure the following settings: • Output Name • Pulse time • Latch and Interlock (enable/disable) • Scheduling • TZ Card Toggle • First Card Rule Click Outputs on the Doors configuration window to open the Outputs configuration pane.
84 | NetAXS-123 Access Control Unit User’s Guide Configure the following general settings. Configuration Description Pulse Specifies the duration for which the device will assume abnormal status. For example, it specifies how long a horn will sound or a door strike will remain released. The maximum length of time is 1 hour, 45 minutes, 59 seconds.
| 85 Reporting Generating Event Reports On the Alarms & Events window, you can download Alarms/Events or Web events. Click to open the menu, then click Alarms & Events or Web Events. Figure 3-7 Alarms & Events Window When you click on one of the download events buttons, a dialog box pops up to advise that the file you are downloading is not secure, and that you save that file in a secure location.
It then asks for you to confirm that you want to upload the report. Click OK to confirm. A .bin file is generated which can be saved and sent to Honeywell technical support for diagnosis. Click to save the file in a secure location of your choice.
| 87 Figure 3-9 Generating a People/Card Report Click the download button in the top right corner. You see a message confirming that you want to download a People/Cards report. Click OK. A comma-separated values (.CSV) report is generated and appears in the lower toolbar of your browser.
88 | NetAXS-123 Access Control Unit User’s Guide www.honeywell.com/security...
| 89 Maintenance Overview This chapter contains: • System-wide backup • Panel Resets and Restorations • Firmware Upgrades • Primary / Secondary Panel Replacement Use Case Scenarios • Primary / Secondary Panel Hard Default Use Case Scenarios Backing Up Navigate to the File Management interface: Select a panel from the Panel Configuration interface.
Diagnostic Report Troubleshooting information can be retrieved from the panel using this function. The report is not readable to the customer and is useful only as a tool to help Honeywell technical support troubleshoot certain unusual problems. To generate a diagnostic report, Select "Diagnostic Report"...
| 91 Note The Diagnostic Reports saves as a .bin file. System-wide Backup Uploads Card, Common and Panel configuration data in a proprietary internal format. Common data includes: • Schedules • Cards • Card Formats • Holidays • Access Group Name (access group details are panel-specific) •...
92 | NetAXS-123 Access Control Unit User’s Guide Taking System-wide Backup for panel(s) is only allowed from Primary (gateway) panel's file management page. • Upon selecting system wide backup, UI will show a field to enter password • Password Must follow rules for valid password checks - need not be same as current user/admin password: •...
| 93 Downloading a Card Database Report (.CVS file) from the Host System to the Panel Click Browse to locate the .CSV file. This .CSV file is usually the Card Report that was previously uploaded from the panel as a backup. Click Download to download the file.
94 | NetAXS-123 Access Control Unit User’s Guide When the restore is completed, the panel is rebooted. Note Restoring any panel whose back-up info is not available in the bkp file will not be restored. Note During the restore process, the system will prompt for a password that must match the password that was used when the backup file was created.
Replace a v6.0 Primary Panel in an Existing Loop (Web Mode) Overview Details the steps to replace a NetAXS-123 v6.0 "Primary" panel with existing "Secondary" panels wired via RS-485 or Ethernet Virtual Loop (EVL). The System Wide Restore in the Primary is required with an existing backup.
Replace a v6.0 Secondary Panel (Web Mode) Overview Details the steps to replace a NetAXS-123 v6.0 "Secondary" panel in an existing loop of either a wired via RS-485 or Ethernet Virtual Loop (EVL) in Web Mode. Secondary Panel Replacement and Synchronization Step # 1.
Hard Default a v6.0 Primary in an Existing Loop (Web Mode) Overview Details the synchronization process of a NetAXS-123 v6.0 "Primary | Secondary" panel after hard defaulting an existing "Primary" Panel in a loop of either a wired via RS-485 or Ethernet Virtual Loop (EVL) in Web Mode.
Hard Default an Existing v6.0 Secondary Panel (Web Mode) Overview This section details the synchronization process of a NetAXS-123 v6.0 "Primary | Secondary" panel after hard defaulting an existing "Secondary" Panel in a loop of either a wired via RS-485 or Ethernet Virtual Loop (EVL) in Web Mode.
| 99 Synchronization Detail Chart Synchronization Primary panel to the Secondary panel synchronization occurs at the time the Secondary panels are "Registered" with the Primary. The Synchronization only occurs at the time of panel registration and will include Common Data. The Secondary panel will reboot after synchronization.
100 | NetAXS-123 Access Control Unit User’s Guide Restore Entire Loop Detail Chart System Wide Backup Restore: Primary panel to the Secondary panel downloads the following: • Common Data • Panel-specific data Example: System Restore in the following order with (3) Secondary Panels: The 1st Secondary panel will receive the backup and reboot.
If the Secondary panel comes back on line the panel will not be serviced at the time of the restore. The "Panel Only" restore will only restore "Panel-specific data" to the particular panel. Panel Resets and Restorations DIP Switch Settings NetAXS-123 SW1 DIP Switch Settings Selection Address 1 (default) Address 2 Address 3...
| 103 NetAXS-123 SW2 DIP Switch Settings Selection RS-485_2 termination (EOL) DISABLED (Default) RS-485_2 termination (EOL) ENABLED (Future) Both DIP Switch 1 and DIP Switch 2 need to be either On or Off to be properly configured. Note When you use the DIP switches to reset a panel to the original factory default values, the Event History is lost and any customzed databases are removed.
Click OK to reboot the panel. Firmware Upgrades Panel Requirements NetAXS-123 panels must first be upgraded to latest Release 6.0 firmware. See the release notes for more information. Note The secondary (downstream) EVL panels should be upgraded first, and then the primary (gateway).
| 105 Upgrading the firmware can involve the following actions: • "Backing up the database from each panel • "Updating the panel firmware (Using Web Interface) • "Updating the OS 2nd in series, if necessary IMPORTANT: Recommend to back up the database before and after the firmware upgrade.
Supported upgrade from firmware v5.01.07 or higher: Upgrade Procedure - Download the following file to the NetAXS-123 panel: 1-NetAXS-123_Upgrade_apps06.00.10.xx.bin Supported upgrade from firmware v 5.0.16 or lower: Upgrade Procedure - Download the following files to the NetAXS-123 panel in the following order: 1-NetAXS-123_Upgrade_apps06.00.10.xx.bridge.bin 2-NetAXS-123_Upgrade_OS107_R5.1-or-later.bin Note If required after the NetAXS-123 v6.0 upgrade the user can toggle to the...
Click the to select the firmware version. A message appears advising that switching to an alternate firmware set requires that the panel reboots. Click Save. Updating a NetAXS-123 Panel Using the NetAXS Upgrade Utility NetAXS Upgrade Utility (NUU) Overview The NUU is a standalone Windows application used to update the latest firmware and operating system in the NetAXS series of panels.
Once all panels are powered up, reconnect the 485 loop to clear the issue. After upgrading a NetAXS-123 panel to Rel 6.0, you must clear your browser’s cache. See Clearing the Cache and Cookies in the Internet Browsers Used by the NetAXS-123 Web Server for details.
• NetAXS-4 v3.6.25 *WIN-PAK must be version 3.3 or higher for native NetAXS support. Note Note: Ethernet Virtual Loop (EVL) - NetAXS-123 v6.0 or higher required for both the Primary and all Secondary panels. NetAXS-4 and WIN-PAK doesn't support EVL.
112 | NetAXS-123 Access Control Unit User’s Guide www.honeywell.com/security...
Chrome. It is recommended that the cache be cleared following a successful upgrade. Note After upgrading a NetAXS-123 panel to Rel 6.0 , you must clear your browser’s cache. Open your Chrome browser and click the menu button (three vertical dots) in the top right corner of the browser window.
114 | NetAXS-123 Access Control Unit User’s Guide Select Settings to display the settings screen. • Click the Advanced link at the bottom of the Settings screen to display the Clear Browsing Data screen: • Ensure that the selections pictured in the above image are chosen.
| 115 Go to Advanced Menu > Security Certificate tab. Create Request will be selected at the top of the pane. Fill in the fields as shown above. Make sure that the panel IP address is in the common name field. Select Create SSL Certificate Signing Request.
116 | NetAXS-123 Access Control Unit User’s Guide You will then note that there is text in the Certificate Signing Request field. Copy all of the text out of this field and send it to the signing authority of your choice.
| 117 Navigate to the Update Certificate pane and paste the certificate into the designated field. Select Save Certificate. When the save is complete you will notice that the text at the bottom of the page reports "Currently using: User Certificate." Section 2 - Installing the master certificate into the browser When using a self-signed certificate it is necessary to install the matching master certificate into all computer’s browsers that access the NetAXS panels.
118 | NetAXS-123 Access Control Unit User’s Guide After you have installed the certificate file onto the panel but before you install the master certificate, the browser will still display the broken lock. Open Internet Explorer and select Tools (gear icon) > Internet options.
| 119 Select the Trusted Root Certificate Authorities tab, then select Import: The Certificate Import Wizard will appear. 800-05168V5 - A - 02/2018...
120 | NetAXS-123 Access Control Unit User’s Guide Select Next and Browse. Change the file type to All Files. Then select the master signed certificate from its location on your machine. www.honeywell.com/security...
| 121 Click Open to load the file. Confirm Yes when this warning comes up: Success! 800-05168V5 - A - 02/2018...
122 | NetAXS-123 Access Control Unit User’s Guide Now if you scroll down the list of Trusted Root Certificate Authorities you should see the signed certificate in the list: Close any Chrome windows that were open. Navigate to the URL NetAXS Address and the login screen will appear.
| 123 NetAXS-123 Accounts Creating NetAXS-123 Accounts A User is someone who will be using the NetAXS-123 software in one or more functional roles. The Manage Accounts configuration window allows you to configure the following: • Add, modify, delete user accounts •...
124 | NetAXS-123 Access Control Unit User’s Guide Figure 7-1 Manage Accounts Configuration Interface Note When creating passwords, they must meet the following minimum requirements: • Consist of letters, numbers, and symbols. • Contain at least one character from each of the following four types: lower-case letters (a–z), UPPER CASE letters (A–Z), numbers (0–9), and...
| 125 Figure 7-2 Accounts Configuration Interface Click to create a new account. Enter a name. Enter a Password. Select an Account Type, either Administrator, Service, or Operator. See Table 7-1 page 123 for more about these accounts. Enable/disable the Account Status. Select a language.
126 | NetAXS-123 Access Control Unit User’s Guide Figure 7-3 Modifying a User Account Make the changes, and then click Save. Deleting a User Account Click to select an account in the Manage Accounts interface. A delete icon appears. Click , then click OK to confirm the deletion.