Dahua DHI-ASC3202B - User Manual

Need help?

Do you have a question about the Dahua DHI-ASC3202B and is the answer not in the manual?

Overview

Function Description
Important Technical Specifications
Usage Features
Maintenance Features

This document is a Quick Start Guide for a Dahua Access Controller, providing comprehensive instructions for its setup, configuration, and maintenance.

Function Description

The Dahua Access Controller is a device designed for managing access to secured areas. It can function as a main controller, managing up to 19 sub-controllers and up to 40 doors, or as a sub-controller integrated into a larger management platform like DSS Pro or SmartPSS Lite. The main controller includes a management platform for comprehensive access control settings, person management, remote device management, and event records. Sub-controllers can be initialized, logged into, and configured for network and alarming settings, as well as firmware updates. The device supports various lock types, including magnetic locks and electric strike locks, with flexible power supply options (PoE or external 12V DC). It integrates with card readers (Wiegand, OSDP, RS-485), door detectors, and exit buttons.

Important Technical Specifications

Dimensions: The device measures 186.4 mm [7.34 in] in width, 185.8 mm [7.32 in] in height, and 58.3 mm [2.30 in] in depth. Power Supply: The Access Controller can be powered via Power over Ethernet (PoE) or an external 12V DC power supply. The lock connector provides 12V DC output with a maximum total load of 1000 mA. Relay devices can be connected with a maximum voltage of +12 VDC and a maximum load of 500 mA. Connectivity: It features RJ45 for network connection (PoE), RS485 connectors for readers, and auxiliary connectors for door detectors, exit buttons, and alarm inputs. Audio connectors are also present but marked as "not used" in the provided diagrams. Lock Control: Supports up to two locks, with configurable settings for "Relay Open = Unlocked" or "Relay Open = Locked" for relay-powered locks, and "Fail Secure" or "Fail Safe" for 12V-powered locks. User Capacity: The system supports adding users to departments and assigning roles. Each user can have up to 1 password, 5 IC/ID cards, 3 fingerprints, and 5 Bluetooth cards for authentication. Alarm Outputs: The device includes alarm output connectors (OUT1+, OUT1-, OUT2+, OUT2-) for linking with alarm devices. LED Indicators: A STATUS LED indicates the device's operational status (solid green for normal operation, solid red for startup, blue flashing for system updates). Lock indicators (L1, L2) show lock status (solid yellow and green for open, solid red for closed).

Usage Features

Installation: The device supports both wall mount and DIN rail mount installations. Detailed steps for drilling, wiring, and securing the device are provided. Initialization and Login: First-time users or after factory reset, the main controller requires initialization, including setting a password, email address, and system time. The login wizard guides users through configuring the controller type (main or sub) and hardware parameters. Device Management:

Adding Devices: Sub-controllers can be added to the main controller's management platform either one by one (by IP address, port, username, and password) or in batches using an auto-search function for devices on the same network segment.
User Management: Users can be added to departments and assigned roles (General User, VIP User, Guest User, Patrol User, Blocklist User, Other User). Basic user information, validity periods, and unlock attempts can be configured.
Authentication Methods: Supports multiple authentication methods:
- Passwords: Users can unlock doors by entering a password (either user ID#password# or just password# if PIN code authentication is enabled).
- Cards: IC or ID cards can be added manually, through an enrollment reader, or a card reader. Batch issuance of cards is also supported.
- Fingerprints: Fingerprint scanners can be connected to register fingerprints for user authentication.
- Bluetooth Cards: Bluetooth unlock requires the main controller to be added to DMSS. Bluetooth cards can be requested via email or registration code, supporting both individual and batch issuance. Bluetooth mode can be set to short-range, mid-range, or long-range. Auto Unlock and Shake to Unlock features are available. Access Control Configuration:
Weekly Plans: Users can create weekly plans to define unlock schedules, with a default full-day template and the ability to create up to 128 custom plans with up to 4 time sections per day.
Areas: Areas are collections of door access permissions. Users can create up to 40 areas and link them to users to grant access.
Permission Rules: Permission rules link users to areas and weekly plans, defining who can access which areas at what times. Alarm Linkages:
Global Alarm Linkages: Configurable across different Access Controllers. Users can link alarm inputs to alarm outputs (e.g., triggering an alarm device) or door linkages (e.g., automatically locking/unlocking doors upon an alarm). Cloud Service: The main controller can be added to DMSS (Dahua Mobile Surveillance Software) for remote access and Bluetooth card management.

Maintenance Features

Security Safeguards: The manual emphasizes strict compliance with local electrical safety codes, proper power adapter selection, and safe installation practices (avoiding direct sunlight, dampness, dust, and ensuring stable mounting and ventilation). Password Management: Recommends using complex passwords (8-32 non-blank characters, including at least two types of upper/lower case letters, numbers, and special characters), changing them periodically, and keeping them safe. Account Lockout: The account lockout function is enabled by default to protect against brute-force attacks. Password Reset Information: Advises setting and timely updating password reset information to mitigate risks from threat actors. Data Backup: Recommends regularly exporting user data to prevent loss due to equipment damage. Firmware Updates: The system automatically checks for and notifies users of available firmware updates. Client Software Updates: Recommends downloading and using the latest client software. Service Configuration:

HTTPS: Encourages enabling HTTPS for secure web service access.
Encrypted Transmission: Recommends using encrypted transmission for audio and video data to prevent eavesdropping.
Non-essential Services: Advises turning off unnecessary services (SSH, SNMP, SMTP, UPnP, AP hotspot) and using safe modes for essential services (SNMP v3, TLS for SMTP, SFTP for FTP, WPA2-PSK for AP hotspot).
Default Service Ports: Recommends changing default HTTP and other service ports to reduce the risk of being guessed by threat actors. Network Configuration:
Allow List: Suggests enabling an allow list to restrict device access to specific IP addresses.
MAC Address Binding: Recommends binding the gateway's IP address to its MAC address to prevent ARP spoofing.
Secure Network Environment: Advises disabling router port mapping, partitioning networks (VLANs), and establishing 802.1x access authentication for enhanced security. Security Auditing:
Online Users: Recommends regularly checking online users to identify unauthorized access.
Device Log: Suggests checking device logs for security auditing. Troubleshooting: Provides tips for solving problems and saving time, and additional information as a supplement to the text.