This guide walks through configuring a Hikvision NVR and its IP cameras from a factory state: device activation, network setup, adding cameras, building RTSP stream URLs for integration, and setting recording schedules. It targets engineers and competent administrators. Commands and URLs below reflect current Hikvision firmware behaviour; always confirm against your exact model and firmware version, and never paste live passwords into shared documents.
1. Before you start: ports and defaults
Know these Hikvision defaults before touching the network:
- Default camera IP (out of the box):
192.168.1.64 - HTTP: port
80| HTTPS: port443 - RTSP: port
554 - Service / SDK port (used by iVMS-4200, Hik-Connect):
8000 - Default username:
admin. There is no default password on current firmware — the device is inactive until you set one.
2. Activate devices with the SADP tool
A new Hikvision camera or NVR ships inactive and must be given a strong password before it will work. Download Hikvision's free SADP tool (Windows) and connect your PC to the same Layer-2 subnet as the devices.
- Run SADP. It auto-discovers Hikvision devices on the LAN and lists each with its security status (Inactive/Active), IP and MAC.
- Tick an inactive device. In the right-hand pane, enter a new password and confirm it. Hikvision enforces a strong password: 8–16 characters using at least two of {lowercase, uppercase, digits, special characters} — use all four.
- Click Activate. Repeat or multi-select to activate several devices.
- Still in SADP, set each device's network. Untick Enable DHCP to assign a static address (recommended for cameras and the NVR), then fill IP Address, Subnet Mask and Gateway, enter the admin password and click Modify.
Plan addresses so cameras sit in a dedicated CCTV range, e.g. NVR 10.20.30.10, cameras 10.20.30.11–.60, all /24, gateway 10.20.30.1. If your NVR has built-in PoE ports, cameras plugged into those ports live on the NVR's internal switch subnet (often 192.168.254.x) and you do not address them by hand.
3. Configure the NVR network
Connect a monitor and mouse to the NVR, complete the activation wizard (set the admin password and, optionally, the unlock pattern), then go to Configuration > Network > General (web UI) or Menu > Configuration > Network (local UI):
- Set a static IPv4 address, mask and gateway matching your CCTV VLAN.
- Set DNS (e.g. your internal resolver or 8.8.8.8 for cloud features).
- Under Network > Advanced > NTP, enable NTP, point it at a reliable time source, and set the time zone to (GMT+03:00) Arabia Standard Time. Correct time is mandatory — recordings are evidence.
- Under Network > Advanced > Platform Access, enable Hik-Connect only if you need cloud P2P access, and set a strong verification code.
4. Add IP cameras to the NVR
Go to Configuration > System > Camera Management (web) or Menu > Camera (local):
- Click Custom Adding / the + icon. The NVR scans the network and lists discovered cameras.
- Select a camera, set the protocol to Hikvision (or ONVIF for third-party/older units), enter the camera's IP, management port
8000(or80for ONVIF), the camera'sadminaccount and its password, then add it. - Confirm the channel shows a green/connected status. A red status usually means a password mismatch, an unreachable IP, or a protocol/port mismatch.
For each channel, open Configuration > Video/Audio and set two streams: a Main Stream for recording (full resolution, H.265+/H.265 to save disk, 12–15 fps is plenty for most scenes) and a Sub Stream for remote viewing (e.g. 640×480 / 25% bitrate).
5. Build RTSP stream URLs (for integration)
To pull a Hikvision stream into a third-party VMS, our SKYLINE SSMS, VLC, or analytics, use the standard ISAPI RTSP path on port 554. The channel/stream is encoded as <channel>0<stream> where stream 1 = main and 2 = sub:
# Channel 1, main stream
rtsp://admin:YourPass1@10.20.30.10:554/Streaming/Channels/101
# Channel 1, sub stream
rtsp://admin:YourPass1@10.20.30.10:554/Streaming/Channels/102
# Channel 2, main stream
rtsp://admin:YourPass1@10.20.30.10:554/Streaming/Channels/201
# Channel 12, main stream
rtsp://admin:YourPass1@10.20.30.10:554/Streaming/Channels/1201
Pointing at the camera directly (not the NVR) uses the same path with channel 1: rtsp://admin:Pass@10.20.30.11:554/Streaming/Channels/101. Quick test from a workstation with ffmpeg/ffprobe:
# Probe stream metadata (codec, resolution, fps)
ffprobe "rtsp://admin:YourPass1@10.20.30.10:554/Streaming/Channels/101"
# Force TCP transport if UDP is dropped by the network
ffprobe -rtsp_transport tcp "rtsp://admin:YourPass1@10.20.30.10:554/Streaming/Channels/101"
If special characters in the password break the URL (e.g. @ or /), URL-encode them (@ → %40). Enable RTSP authentication under Configuration > Network > Advanced > Integration Protocol if you also need ONVIF, and confirm port 554 is reachable: nc -vz 10.20.30.10 554 (or Test-NetConnection 10.20.30.10 -Port 554 on Windows PowerShell).
6. Configure recording schedules
Go to Configuration > Storage > Schedule Settings > Record (web) or Menu > Record (local):
- Select a channel. On the weekly grid, paint the schedule and pick the record type per block: Continuous (always), Event/Motion, or a mix (e.g. continuous in business hours, motion overnight).
- Set Pre-record (e.g. 5 s) and Post-record (e.g. 5–10 s) so events capture context.
- Copy the schedule to other channels with Copy to.
- Under Storage > Storage Management > HDD, confirm the disks are Normal and initialised; set Overwrite on so the oldest footage is recycled when full.
- If you use motion recording, tune detection under Configuration > Event > Basic Event > Motion Detection (or, on AcuSense models, Smart Event with human/vehicle filtering and line-crossing/intrusion areas) to cut false triggers.
Verify the result the next day: open Playback, confirm an unbroken timeline for continuous channels and event markers for motion channels, and estimate retention against your required number of days. Adjust bitrate, frame rate or disk capacity if retention falls short.
7. Harden before you finish
- Keep the NVR and cameras on a dedicated VLAN, not the office LAN, and never port-forward 8000/80 to the internet — use Hik-Connect P2P or a VPN instead.
- Update firmware to a current, vendor-signed release.
- Use unique strong passwords per device; disable unused services and protocols.
- Create a separate operator account for day-to-day viewing instead of sharing
admin.
Need this done for a live site, or integrated into a central dashboard? See SKYLINE's Hikvision installation & support service, browse the Marketplace, or contact us on +966 50 993 9334.
Comments
0 total · 0 threads