Last updated | Oct 19, 2026

Configure Network Settings

Network settings set the device IPv4 address, subnet, gateway, and DNS servers. They set ports for the web UI and live video streaming. Select either automatic assignment (DHCP) or manual (Static) according to your network environment.

Configure the profile that NVR/VMS uses to connect via ONVIF. Connect to the external Suprema CLUe cloud service to synchronize user information. Cloudflare Tunnel enables access to the web UI from outside the network.

Check network settings in the following situations.

• When the network supports DHCP and you need the device to obtain an IP address automatically.

• When you need stable network access using a fixed IP address.

• When the default ports conflict with other devices or you need to change ports for security.

• When connecting via ONVIF to a legacy NVR/VMS that does not support Profile T

• When synchronizing user information with the Suprema CLUe cloud service

• When accessing the device web UI from outside the network without port forwarding or a public IP address

Info

Changing network settings, especially the IP address, may disconnect active connections. Reconnect using the new IP address.

Automatic IP address

DHCP automatically assigns IP addresses on the network. In most typical network environments, it configures automatically without additional settings.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. Select DHCP in IP Type.

   

4. If you need DNS server addresses, enter them in the DNS 1 and DNS 2 input fields.

5. Adjust the MTU (Maximum Transmission Unit) value as needed in the MTU input field.

   • The default is 1500.

   • Set a value between 1280 and 1500.

6. Click Save to save the network settings.

If the settings save successfully, the assigned IP address appears in the IP Address, Subnet Mask, and Gateway input fields.

Info

DHCP mode is set by default and operates automatically in most standard network environments without additional settings.

Static IP address

Set the IP address manually when the network requires a fixed IP for stable access.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. Select Static in IP Type.

   

4. Enter the assigned IPv4 address in the IP Address input field.

   Example: 192.168.111.11

5. Enter the subnet mask in the Subnet Mask input field.

   Example: 255.255.255.0

6. Enter the gateway address in the Gateway input field.

7. Enter the DNS server address in the DNS 1 and DNS 2 input fields.

8. Adjust the value in the MTU input field as needed.

   • The default is 1500.

   • Set a value between 1280 and 1500.

9. Click Save to save the network settings.

If you do not enter a valid address in each input field, a red border appears around the field and Save is disabled. After entering all input fields correctly, try again.

Port settings

In the Port section, set port numbers used to access the web UI (HTTP, HTTPS) and for video streaming (RTSP).

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. Set the required ports in the Port section.

   

   • HTTP: Port for unencrypted access to the web UI (default: 8000)

   • HTTPS: Port for encrypted access to the web UI (default: 443)

   • RTSP: Port for streaming video through the RTSP protocol (default: 554)

4. Click Save to save the port settings.

Info

• Enter a number from 1 to 65535 in each port input field.

• Do not assign the same port number to multiple services. Each port must have a unique number.

• If a port differs from the default, include the port number in the web UI URL.

  Example: If the HTTPS port is 4000: https://{ip_address}:4000

Video transmission and encryption settings

In the RTSP section, configure video transmission and encryption settings.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. Set the following options in the RTSP section.

   

   • Transport: Select the transport protocol used for video streaming.

     • UDP: Enables faster transmission, but video may stutter depending on network conditions.

     • TCP: Provides stable transmission, but latency may occur compared with UDP depending on network conditions.

     • DUAL: Automatically selects UDP or TCP for streaming based on network conditions. This is the recommended default for general environments.

     • TLS: Sends the RTSP stream with TLS encryption. Enhances security, but may increase CPU load. Check whether the connected NVR/VMS supports TLS.

   • Secure RTP: Enable the RTSP stream encryption option.

4. Click Save to save the settings.

Info

If you need encryption for video and audio data, enable the Secure RTP option, and check whether it is compatible with the connected NVR/VMS.

Caution

After changing the Secure RTP option, you may need to reconnect the existing RTSP session. Configure the NVR/VMS to be compatible with the selected transport method.

ONVIF settings

In the ONVIF section, set the profile that NVR/VMS uses to connect via ONVIF. By default, the device uses only Profile T. Enable Profile S fallback when connecting to legacy NVR/VMS that does not support Profile T.

You can select one of the following two modes.

• Profile T Only: Connect using only Profile T (Media2). This mode supports H.264/H.265 codecs, HTTPS, metadata, and events, and it is the recommended default for modern NVR/VMS environments.

• Profile T priority / S fallback: NVR/VMS first tries to connect using Profile T, then connects using Profile S (Media1) if Profile T is not supported. NVR/VMS that supports Profile T connects using Profile T in this mode.

Item	Profile T (Media2)	Profile S (Media1)
Codec	H.264, H.265	H.264, MJPEG
Encrypted communication	HTTPS support	Not supported (plaintext communication)
Advanced Features	Metadata, events	Basic video streaming
Recommended environment	Latest NVR/VMS	Older NVR/VMS that does not support Profile T

Create an ONVIF-only account

Create an ONVIF-only account for ONVIF and RTSP authentication before enabling Profile S fallback. If you save settings without an account, the Enabling the Profile S fallback requires an ONVIF-only account message appears, and the system does not save the settings.

1. Click the System menu in the upper-left corner of the screen.

2. Click Account on the left sidebar.

3. In the Operator section, click + Add.

4. In the Add Operator pop-up window, enter the username and password, then select ONVIF Only in Permission.

   

5. Click the OK button to create an ONVIF-only account.

Enable Profile S fallback

Enable Profile S fallback.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. In the ONVIF section, select Profile T priority / S fallback in Mode.

4. When the Enable Profile S Fallback pop-up window appears, review the precautions for Profile S, then click the Confirm button.

   

5. Click Save to save the settings.

When settings save successfully, a success message appears in the upper right corner of the screen. When adding the device to the NVR/VMS, enter the ID and password for the ONVIF-only account.

To disable Profile S fallback, select Profile T Only, then click the Save button.

Caution

Profile S sends unencrypted plain-text traffic, which exposes it to network attacks. Profile S also does not support the H.265 codec or HTTPS/TLS. Use it only when connecting to older NVR/VMS that does not support Profile T.

Info

• Only administrators can change ONVIF settings.

• Each device allows only one ONVIF-only account. The account cannot log in to the web UI. The system does not allow ID or password changes after creation.

• Only these actions are available for the ONVIF-only account: enable, disable, or delete. If the account is disabled, the system cannot enable Profile S fallback.

• To delete the ONVIF-only account, first change to Profile T Only.

• The updated ONVIF settings apply to new connections. Connected streams keep the current connection method until they reconnect.

CLUe cloud connection

Suprema CLUe is a cloud-based access control service. Connect to CLUe to sync user information with the CLUe cloud service.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. Click the CLUe toggle in the Cloud section to enable it.

4. The system checks the Internet connection and the CLUe server connection. The connection status appears to the right of the CLUe toggle.

   

   • * Connecting...: Connecting to the CLUe server.

   • * Connected: Connected to the CLUe server.

   • * Connection failed: Failed to connect to the CLUe server. Check the Internet connection and try again.

   • * No certification status: The device is not CLUe-certified.

5. Enable the required options. Enable the CLUe toggle to use the following options.

   • User Sync: Syncs user information with the CLUe cloud service.

   • Use Tunnel: Uses a tunnel for external access to the device through CLUe. When the tunnel connects, the URL appears in the External URL field. Click the Copy button to copy the URL.

Info

• If the connection succeeds, the CLUe has been enabled message appears.

• If the connection fails, the CLUe has been disabled message appears. Check the Internet connection and try again.

• Disable the CLUe toggle to disconnect from the CLUe server. User Sync and Use Tunnel become unavailable. However, the registration information on the CLUe server is retained.

• CLUe connection successes and failures are recorded in the system log.

Tunnel settings

In the Tunnel section, use Cloudflare Tunnel to create an external URL to access the device web UI from the internet. Use this when remote access is required without router port forwarding or a public IP address.

In Tunnel > Type, select one of the following.

Type	Description	Required information
Not Used	Do not use Tunnel. This is the default setting.	None
Cloudflare Tunnel (Quick)	Get a temporary external URL without a Cloudflare account. The URL changes when the device restarts.	None
Cloudflare Tunnel (Named)	Create a Tunnel with a Cloudflare API token, and use a fixed external URL with your domain.	Cloudflare account, domain
Cloudflare Tunnel (Named, Token)	Connect to a Tunnel created in the Cloudflare dashboard using a Connector token.	Cloudflare account, domain, Connector token

Tip

Use Cloudflare Tunnel (Quick) for testing or temporary remote access. Use Cloudflare Tunnel (Named) or Cloudflare Tunnel (Named, Token) for continued access with a fixed address.

Info

• To disable Tunnel, select Not Used in Type.

• To use Tunnel, the device must be connected to the internet.

• Anyone who knows the external URL can access the device login page. Use strong passwords for administrator and operator accounts, and share the external URL only with authorized users.

• The system log records tunnel mode changes.

Use a temporary external URL

Access the device using a temporary external URL without a Cloudflare account.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. In the Tunnel section, select Cloudflare Tunnel (Quick) in Type.

   

4. When a temporary external URL is issued, it appears in the External URL field. Click the Copy button to copy the URL, then open it in a web browser.

Caution

The external URL issued with Cloudflare Tunnel (Quick) changes when the device restarts. After restarting, check the new URL in the External URL field.

Use a fixed external URL (API token)

Enter a Cloudflare API token. The device creates a Tunnel in Cloudflare and links the external URL to the hostname. Before starting, prepare a Cloudflare account and a domain registered in Cloudflare.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. In the Tunnel section, select Cloudflare Tunnel (Named) in Type.

   

4. Enter the following information.

   • Cloudflare API Token: Enter the API token issued in the Cloudflare dashboard.

   • Account ID: Enter the Cloudflare account ID.

   • Hostname: Enter the host name to use for external access.

     Example: cam.example.com

   • Tunnel Name (Option): Enter a name to identify the tunnel in Cloudflare. Optional.

5. Click Verify to verify the entered information.

6. Click Apply to apply the settings.

When the tunnel connects, the external URL appears in the External URL field. Click Copy to copy the URL.

Use a fixed external URL (Connector Token)

This option connects the device to a tunnel created in the Cloudflare dashboard. Before starting, complete the following tasks in the Cloudflare dashboard.

• Create a tunnel, and copy the Connector Token.

• Add the tunnel's Public Hostname and set the Service URL to http://127.0.0.1:81 or http://localhost:81.

After finishing the settings, follow these steps on the device.

1. Click Settings in the upper-left of the screen.

2. Click Network → Network on the left sidebar.

3. In the Tunnel section, select Cloudflare Tunnel (Named, Token) under Type.

   

4. Enter the following information.

   • Connector Token: Enter the Connector Token copied from the Cloudflare dashboard.

   • Tunnel Name (Option): Enter a name to identify the tunnel. Optional.

5. Click Verify to verify the entered information.

6. Click Apply to apply the settings.

When cloudflared connects, the external URL automatically appears in the External URL field.

Caution

Security policies prevent the tunnel from opening if the Public Hostname Service URL is not http://127.0.0.1:81 or http://localhost:81.