Page 1
AXISA1601NetworkDoorC ontroller AXIS A1601 Network Door Controller User manual...
Page 2
How to create a new hardware configuration without peripherals ............10 How to create a new hardware configuration for wireless locks............13 How to create a new hardware configuration with elevator control (AXIS A9188) .........14 How to add and setup network peripherals ..................14 Verify the Hardware Connections ......................15...
Page 3
AXIS A1601 Network Door Controller SOCKS............................29 QoS (Quality of Service) ........................29 SNMP............................29 UPnP .............................30 Bonjour ............................30 Ports & Devices .............................30 I/O ports ............................30 Port Status.............................30 Maintenance ............................30 Support..............................31 Support Overview ...........................31 System Overview ..........................31 Logs & Reports ..........................31 Advanced .............................31 Scripting............................31...
Page 4
AXIS A1601 Network Door Controller Solution overview The network door controller can easily be connected to and powered by your existing IP network with no need for special cabling. Each network door controller is an intelligent device that is easily mounted close to a door. It can power and...
Page 5
AXIS A1601 Network Door Controller Product overview 1 (2x) 2 (2x) 4 Reader overcurrent LED 5 Relay overcurrent LED 7 (2x) 8 Relay jumper (2x) 9 Relay LED (2x) 12 Power LED 13 Status LED 14 Network LED 17 Reversible cable cover...
Page 6
Access the device Open a browser and enter the IP address or host name of the Axis device. If you do not know the IP address, use AXIS IP Utility or AXIS Device Manager to find the device on the network.
Page 7
How to set the root password To access the Axis product, you must set the password for the default administrator user root. This is done in the Configure Root Password dialog, which opens when the product is accessed for the first time.
Page 8
If you restore or restart the product, or upgrade the firmware, the product’s web page will continue to use the selected language. Set the Date and Time To set the date and time of the Axis product, go to Setup > Date & Time. You can set the date and time in the following ways: •...
Page 9
For more information about network settings, see . Configure the hardware You can connect readers, locks and other devices to the Axis product before you complete the hardware configuration. However, it will be easier to connect devices if you complete the hardware configuration first.
Page 10
How to export a hardware configuration file The hardware configuration of the Axis product can be exported to make multiple copies of the same hardware setup. You can also store exported files as backups and use them to restore previous hardware configurations.
Page 11
AXIS A1601 Network Door Controller How to configure door monitors and locks When you have selected a door option in the new hardware configuration, you can configure the door monitors and locks. If a door monitor will be used, select Door monitor and then select the option that matches how the door monitor circuits will be connected.
Page 12
AXIS A1601 Network Door Controller 1 Access granted – lock unlocks 2 Access time 3 No action taken – lock locks 4 Action taken (door opened) – lock locks or stays unlocked until door closes 5 Open too long time...
Page 13
How to create a new hardware configuration for wireless locks Go to Setup > Hardware Configuration and click Start new hardware configuration. Enter a name for the Axis product. In the list of peripherals, select a manufacturer for a wireless gateway.
Page 14
How to create a new hardware configuration with elevator control (AXIS A9188) Important Before creating a HW configuration you need to add a user in AXIS A9188 Network I/O Relay Module. Go to the A9188 web interface > Preferences > Additional device configuration > Basic setup > Users > Add >...
Page 15
How to setup I/Os and relays in network peripherals Important Before setting up the network peripherals you need to add a user in AXIS A9188 Network I/O Relay Module. Go to the AXIS A9188 web interface > Preferences > Additional device configuration > Basic setup > Users >...
Page 16
AXIS A1601 Network Door Controller Configure cards and formats The door controller has a few predefined commonly used card formats that you can use as they are or modify as required. You can also create custom card formats. Each card format has a different set of rules, field maps, for how the information stored on the card is organized.
Page 17
AXIS A1601 Network Door Controller to 0. If the count is odd, the even parity bit value is set to 1, making the total count an even number. – OddParity – Odd parity bits make sure that there is an odd number of bits in the string. The bits that have the value 1 are counted.
Page 18
Maintenance Instructions To keep the access control system running smoothly, Axis recommends regular maintenance of the access control system, including door controllers and connected devices. Do maintenance at least once a year. The suggested maintenance procedure includes, but is not limited to, the following steps: •...
Page 19
AXIS A1601 Network Door Controller – Swipe a card and test the readers, doors, and locks. – If the system includes REX devices, sensors or other devices, test them as well. – If activated, test the tampering alarms. If the results from any of the steps above indicate faults or unexpected behavior: –...
Page 20
How to set up action rules The Event pages allow you to configure the Axis product to perform actions when different events occur. The set of conditions that defines how and when the action is triggered is called an action rule. If multiple conditions are defined, all of them must be met to trigger the action.
Page 21
AXIS A1601 Network Door Controller Select Door Alarm from the drop-down list. Select the desired door from the drop-down list. Select DoorForcedOpen from the drop-down list. Optionally, select a Schedule and Additional conditions. See below. 10. Under Actions, select Output Port from the Type drop-down list.
Page 22
The table below shows the events that are preconfigured in the door controller to trigger reader feedback and their typical reader feedback signals. Feedback signals for AXIS readers are presented in the Installation Guide supplied with the AXIS reader.
Page 23
AXIS A1601 Network Door Controller Feedback messages other than the above must be configured by a client such as an access management system, through the VAPIX® application programming interface, that supports this feature and use readers that can provide the required signals. For more information, see the user information supplied by the access management...
Page 24
IP address filtering is enabled on the Setup > Additional Controller Configuration > System Options > Security > IP Address Filter page. Once enabled, the listed IP address are allowed or denied access to the Axis product. Select Allow or Deny from the list and click Apply to enable IP address filtering.
Page 25
CA-issued certificate has been obtained. CA certificates - To authenticate peer certificates, for example the certificate of an authentication server in case the Axis product is connected to an IEEE 802.1X protected network. The Axis product is shipped with several preinstalled CA certificates.
Page 26
Axis product by name (host name). If DHCP is enabled and the product cannot be accessed, run AXIS IP Utility to search the network for connected Axis products, or reset the product to the factory default settings and then perform the installation again. For information about how to reset to factory default, see .
Page 27
Host Name Configuration The Axis product can be accessed using a host name instead of an IP address. The host name is usually the same as the assigned DNS name. The host name is configured under Setup > Additional Controller Configuration>...
Page 28
(LAN) from the public network (internet). Use NAT traversal when the Axis product is located on an intranet (LAN) and you wish to make it available from the other (WAN) side of a NAT router. With NAT traversal properly configured, all HTTP traffic to an external HTTP port in the NAT router is forwarded to the product.
Page 29
SOCKS is a networking proxy protocol. The Axis product can be configured to use a SOCKS server to reach networks on the other side of a firewall or proxy server. This functionality is useful if the Axis product is located on a local network behind a firewall, and notifications, uploads, alarms, etc need to be sent to a destination outside the local network (for example the Internet).
Page 30
To use SNMP v3, HTTPS must be enabled, see . To enable SNMP v3, check the box and provide the initial user password. Note The initial password can only be set once. If the password is lost, the Axis product must be reset to factory default, see . UPnP ®...
Page 31
Click Default to reset all settings, including the IP address, to the factory default values. This button should be used with caution. The Axis product can also be reset to factory default using the control button, see . For information about firmware upgrade, see .
Page 32
For more information, see www.axis.com/developer File Upload Files, for example webpages and images, can be uploaded to the Axis product and used as custom settings. To upload a file, go to Setup > Additional Controller Configuration > System Options > Advanced > File Upload.
Page 33
• Preconfigured and customized settings are saved when the firmware is upgraded (providing the features are available in the new firmware) although this is not guaranteed by Axis Communications AB. • If you install a previous firmware version, you need to restore the product to factory default settings afterwards.
Page 34
Axis product. Check all cabling and reinstall the product. Possible IP address The static IP address in the Axis product is used before the DHCP server sets a conflict with another dynamic address. This means that if the same default static IP address is also used device on the same by another device, there may be problems accessing the product.
Page 35
AXIS A1601 Network Door Controller The product is accessible locally but not externally Router configuration To configure your router to allow incoming data traffic to the Axis product, enable the NAT-traversal feature which will attempt to automatically configure the router ®...
Page 36
Type 1 Class 3 or Power over Ethernet Plus (PoE+) IEEE 802.3at Type 2 Class 4 power limited injector that provides 44–57 V DC, 15.4 W / 30 W. Power over Ethernet (PoE) has been evaluated by UL with AXIS T8133 Midspan 30 W 1-port.
Page 37
AXIS A1601 Network Door Controller Reader connector Two 8–pin terminal blocks supporting both RS485 and Wiegand protocols for communication with the reader. The specified power output values are shared between the two reader ports. It means that 486 mA at 12 V DC is reserved for all readers connected to the door controller.
Page 38
AXIS A1601 Network Door Controller Configurable (Input or 7–8 Digital input — Connect 0 to max 30 V DC Output) to pin 1 to activate, or leave floating (unconnected) to deactivate. Digital output — If used 0 to max 30 V DC, open with an inductive load, e.
Page 39
AXIS A1601 Network Door Controller Important The qualified cable length is up to 200 m (656 ft) if the following cable requirement is met: AWG 24. Relay connector Two 4-pin terminal blocks for form C relays that can be used, for example, to control a lock or an interface to a gate.
Page 40
AXIS A1601 Network Door Controller 6–pin terminal block Function Notes Specifications DC ground 0 V DC DC output Can be used to power auxiliary equipment. 12 V DC Note: This pin can only be used as power out. Max load = 50 mA for...
Page 41
AXIS A1601 Network Door Controller Configurable 2, 4 Digital input – Connect to pin 1 or 3 to 0 to max 30 V DC (Input or activate, or leave floating (unconnected) to Output) deactivate. Digital output – Connect to pin 1 or 3 to...
Page 42
AXIS A1601 Network Door Controller Safety information Hazard levels DANGER Indicates a hazardous situation which, if not avoided, will result in death or serious injury. WARNING Indicates a hazardous situation which, if not avoided, could result in death or serious injury.
Page 43
To reach the device’s web interface, type the device’s IP address in a web browser. Note This section is only valid for AXIS A1601 Network Door Controller with AXIS Camera Station Secure Entry firmware. Show or hide the main menu.
Page 44
AXIS A1601 Network Door Controller Device Alarms Device motion: Turn on to trigger an alarm in your system when it detects a movement of the device. Casing open : Turn on to trigger an alarm in your system when it detects an open door controller case.
Page 45
AXIS A1601 Network Door Controller Synchronization: Select an option for the device’s date and time synchronization. • Automatic date and time (manual NTS KE servers): Synchronize with the secure NTP key establishment servers connected to the DHCP server. – Manual NTS KE servers: Enter the IP address of one or two NTP servers. When you use two NTP servers, the device synchronizes and adapts its time based on input from both.
Page 46
AXIS A1601 Network Door Controller Assign IPv4 automatically: Select to let the network router assign an IP address to the device automatically. We recommend automatic IP (DHCP) for most networks. IP address: Enter a unique IP address for the device. Static IP addresses can be assigned at random within isolated networks, provided that each address is unique.
Page 47
PoE power negotiation. To resolve any issues with the PoE power negotiation, configure the PoE switch for hardware PoE power negotiation only. One-click cloud connection One-click cloud connection (O3C) together with an O3C service provides easy and secure internet access to live and recorded video from any location. For more information, see axis.com/end-to-end-solutions/hosted-services.
Page 48
AXIS A1601 Network Door Controller Allow O3C: • One-click: This is the default setting. Press and hold the control button on the device to connect to an O3C service over the internet. You need to register the device with the O3C service within 24 hours after you press the control button.
Page 49
– Authentication failed: Sends a trap message when an authentication attempt fails. Note All Axis Video MIB traps are enabled when you turn on SNMP v1 and v2c traps. For more information, see AXIS OS Portal > SNMP. • v3: SNMP v3 is a more secure version, which provides encryption and secure passwords. To use SNMP v3, we recommend you to activate HTTPS, as the password is then sent through HTTPS.
Page 50
AXIS A1601 Network Door Controller Certificates are used to authenticate devices on a network. The device supports two types of certificates: • Client/server certificates A client/server certificate validates the device’s identity, and can be self-signed or issued by a Certificate Authority (CA). A self-signed certificate offers limited protection and can be used before a CA-issued certificate has been obtained.
Page 51
When configured without a CA certificate, server certificate validation is disabled and the device tries to authenticate itself regardless of what network it is connected to. When using a certificate, in Axis' implementation, the device and the authentication server authenticate themselves with digital certificates using EAP-TLS (Extensible Authentication Protocol - Transport Layer Security).
Page 52
AXIS A1601 Network Door Controller Blocking: Turn on to block brute-force attacks. A brute-force attack uses trial-and-error to guess login info or encryption keys. Blocking period: Enter the number of seconds to block a brute-force attack. Blocking conditions: Enter the number of authentication failures allowed per second before the block starts.
Page 53
AXIS A1601 Network Door Controller To install test software or other custom software from Axis on the device, you need a custom signed AXIS OS certificate. The certificate verifies that the software is approved by both the device owner and Axis. The software can only run on a specific device which is identified by its unique serial number and chip ID.
Page 54
AXIS A1601 Network Door Controller ALPN is a TLS/SSL extension that allows for the selection of an application protocol during the handshake phase of the connection between the client and server. This is used to enable MQTT traffic over the same port that is used for other protocols, such as HTTP.
Page 55
AXIS A1601 Network Door Controller Connect: Turn on or off the MQTT client. Status: Shows the current status of the MQTT client. Broker Host: Enter the hostname or IP address of the MQTT server. Protocol: Select which protocol to use.
Page 56
AXIS A1601 Network Door Controller can let the broker deliver a message to other clients. This LWT message has the same form as an ordinary message and gets routed via the same mechanics. Send message: Turn on to send messages.
Page 57
AXIS A1601 Network Door Controller Port Name: Edit the text to rename the port. Direction: indicates that the port is an input port. indicates that it’s an output port. If the port is configurable, you can click the icons to change between input and output.
Page 58
AXIS A1601 Network Door Controller Syslog is a standard for message logging. It allows separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. Each message is labeled with a facility code, which indicates the software type generating the message, and assigned a severity level.
Page 59
Note All Axis device software is digitally signed to ensure that you only install verified software on your device. This further increases the overall minimum cybersecurity level of Axis devices. For more information, see the white paper “Axis Edge Vault” at axis.com.
Need help?
Do you have a question about the A1601 and is the answer not in the manual?
Questions and answers