First determine whether one camera or the whole system is offline and whether recording also stopped. Check recorder, switch or PoE indicators, camera power and the physical link before changing network settings. Then verify the intended address, credentials, time and compatible stream from an authorized local management path. Save configuration and a system report when available; do not factory-reset, expose ports or weaken passwords as a first response.
Start with blast radius and evidence
| Observation | Investigate next | Evidence to preserve |
|---|---|---|
| One camera offline; others record | Camera power/PoE, cable, port, address, credentials or device state | Camera name, switch port, status lights and last-seen time |
| All cameras offline but recorder is reachable | PoE switch, camera network, uplink, VLAN or credential-wide change | Switch state, uplink and recent configuration changes |
| Recorder and cameras all unreachable | Site power, UPS, recorder, core switch or network path | Power indicators, alarm state and outage time |
| Local view works; remote view fails | Internet, DNS, secure remote-access service, account or certificate path | Local recording proof and provider/service status |
| Live view works; recording missing | Schedule, storage health, time, recorder channel or event settings | Timeline gap, storage alerts and configuration export |
A layer-by-layer recovery sequence
- Record the affected cameras, last-known-good time, recorder status, error text and any power or network change.
- Confirm whether live view, playback and recording fail locally; remote-only failure is a different path.
- Check device, PoE and switch status indicators against the exact manuals. Axis documentation uses power and network LEDs as an initial isolation point.
- Inspect accessible cable seating, weather damage and the assigned switch port without working on unsafe mains wiring or elevated equipment.
- From an authorized local management network, verify the expected device address, reachability, time, account status and recorder channel mapping.
- Confirm client-device interoperability and the exact required stream or event feature; an ONVIF claim alone does not prove every feature pair.
- Save configuration and diagnostic reports before a firmware, account, address or recorder change. Apply one reversible change at a time.
- Escalate with the evidence when power budget, damaged cabling, inaccessible mounting, configuration recovery or hardware is uncertain.
Recovery must not create a security incident
CISA recommends changing default passwords, maintaining supported security updates and reducing unnecessary internet exposure. Do not expose camera or recorder administration directly to the public internet simply to restore a remote view.
A factory reset can erase addresses, accounts, certificates, recording rules, analytics and network settings. Use it only when the exact manufacturer recovery procedure, configuration backup and authorized credentials are available.
Sources and further reading
Technical statements were reviewed against these references. External pages may change after our review date.
- Troubleshooting Axis cameras — Axis Communications
- Internet Exposure Reduction Guidance — Cybersecurity and Infrastructure Security Agency
- ONVIF Profiles — ONVIF