AXIS A9210 Network I/O Relay Module

To find Axis devices on the network and assign them IP addresses in Windows®, use AXIS IP Utility or AXIS Device Manager. Both applications are free and can be downloaded from axis.com/support.

For more information about how to find and assign IP addresses, go to How to assign an IP address and access your device.

You can use the device with the following browsers:

✓: Recommended
*: Supported with limitations

1. Open a browser and type the IP address or host name of the Axis device.

   If you don’t know the IP address, use AXIS IP Utility or AXIS Device Manager to find the device on the network.

2. Type the username and password. If you access the device for the first time, you must create an administrator account. See Create an administrator account.

For descriptions of all features and settings in the web interface of devices with AXIS OS, see AXIS OS web interface help.

The first time you log in to your device, you must create an administrator account.

1. Enter a username.

2. Enter a password. See Secure passwords.

3. Re-enter the password.

4. Accept the license agreement.

5. Click Add account.

The device password is the primary protection for your data and services. Axis devices do not impose a password policy as they may be used in various types of installations.

To protect your data we strongly recommend that you:

• Use a password with at least 8 characters, preferably created by a password generator.

• Don’t expose the password.

• Change the password at a recurring interval, at least once a year.

1. To make sure that the device has its original AXIS OS, or to take full control of the device after a security attack:

2. Reset to factory default settings. See Reset to factory default settings.

   After the reset, secure boot guarantees the state of the device.

3. Configure and install the device.

This video gives you an overview of the device’s web interface.

1. Go to Device > I/Os and relays > AXIS A9210 > I/Os.

2. Click to expand the I/O port settings.

3. Rename the port.

4. Configure the normal state. Click for open circuit, or for closed circuit.

5. To configure the I/O port as input:

6. 1. Under Direction, click .

   2. To monitor the input state, turn on Supervised. See Supervised inputs.

   3. Note

      In APIs, the supervised I/O ports work differently from the supervised input ports. For more information, go to the VAPIX® Library.

7. To configure the I/O port as output:

8. 1. Under Direction, click .

   2. To view the URLs to activate and deactivate connected devices, go to Toggle port URL.

1. Go to Device > I/Os and relays > AXIS A9210 > Relays.

2. Click to expand the relay settings.

3. Turn on Relay.

4. Rename the relay.

5. To view the URLs to activate and deactivate the relay, go to Toggle port URL.

To learn more, see Get started with rules for events.

1. Go to System > Events and add a rule. The rule defines when the device will perform certain actions. You can set up rules as scheduled, recurring, or manually triggered.

2. Enter a Name.

3. Select the Condition that must be met to trigger the action. If you specify more than one condition for the rule, all of the conditions must be met to trigger the action.

4. Select which Action to perform when the conditions are met.

To read about all the features and settings available in the web interface of devices with AXIS OS, go to AXIS OS web interface help.

With analytics and apps you can get more out of your Axis device. AXIS Camera Application Platform (ACAP) is an open platform that makes it possible for third parties to develop analytics and other apps for Axis devices. Apps can be preinstalled on the device, available for download for free, or for a license fee.

To find the user manuals for Axis analytics and apps, go to help.axis.com.

This application monitors the door status, showing whether the door is open or closed, and if it stays open for too long. For example, use this application on a fire safety door that doesn’t require a lock but where you need to know if it is open.

A regular door has a door position sensor, REX, along with locks and readers, which requires a door controller.

A monitoring door requires only a door position sensor and REX, and can be monitored using a network I/O relay module. Each network I/O relay module can connect up to five monitoring doors.

Limitations

The application is only available on AXIS A9210. REX can only be connected to I/O 1 and I/O 2, not possible to configure REX on I 3, I 4, or I 5.

AXIS Monitoring Door Configuration

For product-specific information about cybersecurity, see the product's datasheet at axis.com.

For in-depth information about cybersecurity in AXIS OS, read the AXIS OS Hardening guide.

Axis Edge Vault provides a hardware-based cybersecurity platform that safeguards the Axis device. It offers features to guarantee the device’s identity and integrity and to protect your sensitive information from unauthorized access. It builds on a strong foundation of cryptographic computing modules (secure element and TPM) and SoC security (TEE and secure boot), combined with expertise in edge device security.

Signed OS is implemented by the software vendor signing the AXIS OS image with a private key. When the signature is attached to the operating system, the device will validate the software before installing it. If the device detects that the integrity of the software is compromised, the AXIS OS upgrade will be rejected.

Secure boot is a boot process that consists of an unbroken chain of cryptographically validated software, starting in immutable memory (boot ROM). Being based on the use of signed OS, secure boot ensures that a device can boot only with authorized software.

A tamper-protected environment for the protection of private keys and secure execution of cryptographic operations. It prevents unauthorized access and malicious extraction in the event of a security breach. Depending on security requirements, an Axis device can have either one or multiple hardware-based cryptographic computing modules, which provide a hardware-protected secure keystore. Depending on security requirements, an Axis device can have either one or multiple hardware-based cryptographic computing modules, like a TPM 2.0 (Trusted Platform Module) or a secure element, and/or a TEE (Trusted Execution Environment), which provide a hardware-protected secure keystore. Furthermore, selected Axis products feature a FIPS 140-2 Level 2-certified secure keystore.

Being able to verify the origin of the device is key to establishing trust in the device identity. During production, devices with Axis Edge Vault are assigned a unique, factory-provisioned, and IEEE 802.1AR-compliant Axis device ID certificate. This works like a passport to prove the origin of the device. The device ID is securely and permanently stored in the secure keystore as a certificate signed by Axis root certificate. The device ID can be leveraged by the customer’s IT infrastructure for automated secure device onboarding and secure device identification

The secure keystore prevents the malicious exfiltration of information and prevents configuration tampering by enforcing strong encryption upon the file system. This ensures no data stored in the file system can be extracted or tampered with when the device is not in use, unauthenticated access to the device is achieved and/or the Axis device is stolen. During the secure boot process, the read-write filesystem is decrypted and can be mounted and used by the Axis device.

To learn more about the cybersecurity features in Axis devices, go to axis.com/learning/white-papers and search for cybersecurity.

1. Relay is active when COM is connected to NO.

• The control button is used for:

• Resetting the product to factory default settings. See Reset to factory default settings.

• Connecting to a one-click cloud connection (O3C) service over the internet. To connect, press and release the button, then wait for the status LED to flash green three times.

RJ45 Ethernet connector with Power over Ethernet Plus (PoE+).

UL: Power over Ethernet (PoE) shall be over Ethernet IEEE 802.3af/802.3at Type 1 Class 3 or Power over Ethernet Plus (PoE+) IEEE 802.3at Type 2 Class 4 power limited injector that provides 44–57 V DC, 15.4 W / 30 W.  Power over Ethernet (PoE) has been evaluated by UL with AXIS T8133 Midspan 30 W 1-port.

This device can be powered by either PoE or DC input. See Network connector and Power connector.

• When PoE and DC are both connected before the device is powered, PoE is used for powering.

• PoE and DC are both connected and PoE is currently powering. When PoE is lost, the device uses DC for powering without restart.

• PoE and DC are both connected and DC is currently powering. When DC is lost, the device restarts and uses PoE for powering.

• When DC is used during startup and PoE is connected after the device has started, DC is used for powering.

• When PoE is used during startup and DC is connected after the device has started, PoE is used for powering.

2-pin terminal block for DC power input. Use a Safety Extra Low Voltage (SELV) compliant limited power source (LPS) with either a rated output power limited to ≤100 W or a rated output current limited to ≤5 A.

UL: DC power to be supplied by a UL 603 listed power supply, depending on application, with appropriate ratings.

One 4-pin terminal block for form C relays that can be used, for example, to control a lock or an interface to a gate. If used with an inductive load, for example a lock, connect a diode in parallel with the load to protect against voltage transients.

Relay power jumper

When the relay power jumper is fitted, it connects 12 V DC or 24 V DC to the relay COM pin.

It can be used to connect a lock between the GND and NO, or GND and NC pins.

One 4-pin terminal block for input.

It supports supervision with end of line resistors. If the connection is interrupted, an alarm is triggered. To use supervised inputs, install end of line resistors. Use the connection diagram for supervised inputs. See Supervised inputs.

One 8-pin terminal block including 4-pin RS485 and 4-pin I/O.

RS485

I/O

Use the auxiliary connector with external devices in combination with, for example, motion detection, event triggering, and alarm notifications. In addition to the 0 V DC reference point and power (DC output), the auxiliary connector provides the interface to:

Digital input

For connecting devices that can toggle between an open and closed circuit, for example PIR sensors, door/window contacts, and glass break detectors.

Supervised input

Enables possibility to detect tampering on a digital input.

Digital output

For connecting external devices such as relays and LEDs. Connected devices can be activated by the VAPIX® Application Programming Interface or from the product’s webpage.

4-pin terminal block

Two 2-pin terminal blocks for external devices, for example glass break or fire detectors.

UL: The connector has not been evaluated by UL for burglar or fire alarm use.

To use supervised inputs, install end of line resistors according to the diagram below.

Parallel first connection

The resistor values must be 4.7 kΩ and 22 kΩ.

Serial first connection

The resistor values must be the same and possible values are 1 kΩ, 2.2 kΩ, 4.7 kΩ and 10 kΩ, 1%, ¼ watt standard.

To reset the product to the factory default settings:

1. Disconnect power from the product.

2. Press and hold the control button while reconnecting power. See Product overview.

3. Keep the control button pressed for 25 seconds until the status LED indicator turns amber for the second time.

4. Release the control button. The process is complete when the status LED indicator turns green. If no DHCP server is available on the network, the device IP address will default to one of the following:

5. • Devices with AXIS OS 12.0 and later: Obtained from the link-local address subnet (169.254.0.0/16)

   • Devices with AXIS OS 11.11 and earlier: 192.168.0.90/24

6. Use the installation and management software tools, assign an IP address, set the password, and access the product.

You can also reset parameters to factory default through the device’s web interface. Go to Maintenance > Factory default and click Default.

Axis offers device software management according to either the active track or the long-term support (LTS) tracks. Being on the active track means continuously getting access to all the latest product features, while the LTS tracks provide a fixed platform with periodic releases focused mainly on bug fixes and security updates.

Using AXIS OS from the active track is recommended if you want to access the newest features, or if you use Axis end-to-end system offerings. The LTS tracks are recommended if you use third-party integrations, which are not continuously validated against the latest active track. With LTS, the products can maintain cybersecurity without introducing any significant functional changes or affecting any existing integrations. For more detailed information about Axis device software strategy, go to axis.com/support/device-software.

AXIS OS determines the functionality of our devices. When you troubleshoot a problem, we recommend that you to start by checking the current AXIS OS version. The latest version might contain a correction that fixes your particular problem.

To check the current AXIS OS version:

1. Go to the device’s web interface > Status.

2. Under Device info, see the AXIS OS version.

1. Download the AXIS OS file to your computer, available free of charge at axis.com/support/device-software.

2. Log in to the device as an administrator.

3. Go to Maintenance > AXIS OS upgrade and click Upgrade.

4. When the upgrade has finished, the product restarts automatically.

Problems upgrading AXIS OS

Problems setting the IP address

Problems accessing the device

Problems with MQTT

Problems with operating the device

If you can’t find what you’re looking for here, try the troubleshooting section at axis.com/support.

If you need more help, go to axis.com/support.