Quick Reference

Field cheatsheet

Default Camera Credentials

Always change defaults before leaving site. Most modern firmware forces activation — use these for legacy / OEM units only.
Hikvision
192.168.1.64
user admin
pass Activate on first boot
No factory password since 2015 — SADP tool to activate. Web port 80, RTSP 554, SDK 8000.
Hanwha / Wisenet
192.168.1.100
user admin
pass Set on first login
Newer firmware forces strong password. Older Samsung SNB/SNH used admin / 4321.
Dahua
192.168.1.108
user admin
pass Set on first login
Older firmware: admin / admin. ConfigTool for discovery. Port 37777 SDK.
Uniview (UNV)
192.168.1.13
user admin
pass 123456
EZStation / EZTools for discovery. Activation required on newer firmware.
LTS (Hikvision OEM)
192.168.1.64
user admin
pass Activate on first boot
Same as Hikvision — uses SADP. Older units: admin / 12345.
Axis
DHCP / 192.168.0.90
user root
pass Set on first login
AXIS IP Utility / Device Manager. Older units shipped with root / pass.
Bosch
192.168.0.1
user service
pass service
Configuration Manager. Also 'live' / 'live' for live-only access on some models.
Avigilon
DHCP
user administrator
pass (blank)
Legacy units. Newer ACC requires password set on enrollment.
Panasonic / i-PRO
192.168.0.10
user admin
pass 12345
WV-/WJ- series. New i-PRO firmware requires strong password on activation.
ACTi
192.168.0.100
user Admin
pass 123456
Capital A in 'Admin'. NVR3 / Mobile Client for discovery.
Vivotek
DHCP
user root
pass (blank)
Shepherd discovery utility. Force-set on first browser login.
Amcrest (Dahua OEM)
192.168.1.108
user admin
pass admin
Older units. Newer firmware enforces password set on first power-up.
Reolink
DHCP
user admin
pass (blank)
Set during Reolink app pairing. RTSP path /h264Preview_01_main.
Lorex (Dahua OEM)
192.168.1.108
user admin
pass Set on first boot
Same workflow as Dahua. Lorex Cirrus app for cloud access.
Speco
192.168.1.108
user admin
pass 1111
Older NVRs. Newer 4K series enforce setup wizard password.
Pelco
DHCP / 192.168.0.20
user admin
pass admin
Sarix series. VxToolbox or Device Utility for discovery.
Sony / Bosch IP
192.168.0.100
user admin
pass admin
Legacy SNC series. Most have transitioned to Bosch firmware.
Mobotix
10.x.x.x (last 4 of MAC)
user admin
pass meinsm
MxManagementCenter for discovery and config.

Common Ports

80HTTPWeb admin (unsecured)
443HTTPSSecure web admin
554RTSPCamera streaming
1935RTMPStreaming legacy
5060SIPVoIP signaling (UDP)
5061SIPSVoIP TLS
8000ONVIF/HIKHikvision SDK
37777DahuaDahua DVR/NVR
8200AxisSome Axis services
22SSHSecure shell
23TelnetAvoid in production

PoE Standards

StandardNamePSEPD
802.3afPoE15.4 W12.95 W (port)
802.3atPoE+30 W25.5 W
802.3bt T3PoE++60 W51 W
802.3bt T4PoE++90–100 W71.3 W

Subnet Examples

CIDRMaskHosts
/24255.255.255.0254
/25255.255.255.128126
/26255.255.255.19262
/27255.255.255.22430
/28255.255.255.24014
/29255.255.255.2486
/30255.255.255.2522

Storage Conversions

  • 1 Byte8 bits
  • 1 kB (decimal)1,000 B
  • 1 MB (decimal)1,000 kB
  • 1 GB (decimal)1,000 MB
  • 1 KiB (binary)1,024 B
  • 1 MiB (binary)1,024 KiB
  • 1 GiB (binary)1,024 MiB
  • 1 Mbps × 1 hr450 MB (0.45 GB)
  • 1 Mbps × 24 hr10.8 GB/day
  • 1 GB / day≈ 0.0926 Mbps avg
  • 1 Mbps125 kB/s
  • 1 Gbps125 MB/s

ONVIF / RTSP Notes

  • Discovery uses WS-Discovery on port 3702 (UDP multicast).
  • Default RTSP ports: 554 (most), some vendors 8554/10554.
  • Profile S = streaming, Profile T = H.265, Profile G = recording.
  • Verify with VLC: rtsp://user:pass@ip:554/Streaming/Channels/101 (HIK).

IP Speakers / VLAN / SIP

  • SIP signaling: 5060/UDP (unencrypted), 5061/TCP (TLS). RTP audio: 10000–20000/UDP range.
  • ONVIF speakers: discovery 3702/UDP multicast, control 80/8000 TCP, audio backchannel via RTSP 554.
  • Multicast paging: typical group 239.0.0.0/8. Enable IGMP snooping on the speaker VLAN switch or audio floods every port.
  • Dedicated VLAN recommended (e.g. VLAN 30 — 10.30.30.0/24). Tag uplinks; access ports untagged on the speaker VLAN.
  • Allow SIP/RTP between speaker VLAN and PBX VLAN only — block speaker → camera/data VLAN traffic.
  • PoE: most IP horns/ceiling speakers are 802.3af class 3 (≤12.95W). High-output paging horns may require 802.3at.
  • Common SIP PBX hosts: 3CX, FreePBX/Asterisk, Grandstream UCM. Register each speaker as an extension or use a multicast page group.
  • Test path: ONVIF Device Manager to enumerate audio outputs; or POST a test SIP INVITE from the PBX console.

Field Tips

  • Always test PoE switch budget BEFORE adding outdoor heater cameras.
  • Document camera credentials before leaving site.
  • Photograph rack, switch, and demarc for your records.
  • Run speedtest from inside the network closet, not just on Wi-Fi.
  • Label cables at both ends. Future-you will thank you.
  • Verify external IP and port forwarding while on cellular, not site Wi-Fi.