Dahua IPC HFW4431R-z Reset or setup- troubleshoot

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
I have a new IPC HFW4431R-z, just shipped, Eth is connected with POE. Red lights come on then 30 seconds later off. I've scanned my network and the device does not show up. Nada.
I have downloaded ISPY just to ensure the camera is working and nothing. No IP that I can find.
Any suggestions on possibly resetting if needed? I'd like to find an Dahua manual for the camera, I've searched here and no luck.
I do have a DAHUA NVR in transit, I'd at least like to know the camera is functioning.

Thanks
 

fenderman

Staff member
Joined
Mar 9, 2014
Messages
36,901
Reaction score
21,269
I have a new IPC HFW4431R-z, just shipped, Eth is connected with POE. Red lights come on then 30 seconds later off. I've scanned my network and the device does not show up. Nada.
I have downloaded ISPY just to ensure the camera is working and nothing. No IP that I can find.
Any suggestions on possibly resetting if needed? I'd like to find an Dahua manual for the camera, I've searched here and no luck.
I do have a DAHUA NVR in transit, I'd at least like to know the camera is functioning.

Thanks
What is your network subnet? is it the same as the cameras default ip?
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
I have a 5 port poe switch hung off my netgear nighthawk , all assigned 172.16.0.0/24. I've done an nmap scan of that network as well as watching the 'attached' devices on the Netgear. Nothing shows up,
I'm scanning the 10.0.0.0/8 and 176 range again just in case. I also scanned the 192 subnets with no luck.
I have two swann cameras, and a swann dvr on the same switch, they received an ip of 172.16.0.38 + 39, This Camera is also on that switch.
 

fenderman

Staff member
Joined
Mar 9, 2014
Messages
36,901
Reaction score
21,269
I have a 5 port poe switch hung off my netgear nighthawk , all assigned 172.16.0.0/24. I've done an nmap scan of that network as well as watching the 'attached' devices on the Netgear. Nothing shows up,
I'm scanning the 10.0.0.0/8 and 176 range again just in case. I also scanned the 192 subnets with no luck.
I have two swann cameras, and a swann dvr on the same switch, they received an ip of 172.16.0.38 + 39, This Camera is also on that switch.
the camera is set to static 192.168.1.108...you will not see it unless you either change your network, or temporarily set your pc ipv4 to the same subnet and connect only the camera and pc to the switch...bunch of threads explaining how to do this.
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
Perfect, that is what I needed to know. I'll work around the IP issue.
Thanks
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
yikes, I searched here for the ip (192.168.1.108) and lots of info. I guess my initial search failed here. ...
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
Odd,
I setup my PC to a static ip 192.168.1.107, connected directly to the switch where the camera is. Verified my IP, and nothing.
The camera's red lights should be on all the time or just upon rebooting the camera.
 

fenderman

Staff member
Joined
Mar 9, 2014
Messages
36,901
Reaction score
21,269
Odd,
I setup my PC to a static ip 192.168.1.107, connected directly to the switch where the camera is. Verified my IP, and nothing.
The camera's red lights should be on all the time or just upon rebooting the camera.
make sure nothing else is attached to the switch....just pc and camera...
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
Frustratingly , with a single computer switch and only the camera nothing. The camera is catting with the switch, activity and POE light on. nothing lives at the 108 ip. Doing a full scan of all ip ranges, just to see.
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
Thats the next step, I have that loaded. I'm also going to wire power, change cables, eliminate all possible hardware devices.

Thanks again.
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
So this device is using ip 10.1.1.66,
And default creds don't work...
Is there a way to reset the device back?
I found it by trying a single network with a single device on first the 192 subnets then the entire /8. and It appeared.
Hopefully I can break the creds or reset this.
 

c hris527

Known around here
Joined
Oct 12, 2015
Messages
1,793
Reaction score
2,090
Location
NY
Just Curious, where did you purchase it from? I have some history with this model and it turned out to be a Dahua reject with re worked english firmware on a chinese camera. It was very unstable and the features were mostly non working or unstable. My Dahua NVR hated it and would drop out and cause re-boots.
The fact that you are in a 10.x.x.x subnet on this camera with a non working default PW raises some serious red flags.
 

c hris527

Known around here
Joined
Oct 12, 2015
Messages
1,793
Reaction score
2,090
Location
NY
Yea, the international market is flooded with these models now, I bought mine on amazon and had ZERO help from the seller and I kept telling myself to send it back. I was too lazy and missed my return date..However, If you can get it reset, there is updated chinese firmware translated into english that cured a lot of the rebooting issues and stability problems. here is a link to the thread here.
-->Pixelated motion on IPC-HFW4431R-Z

I now use this cam for testing purposes when I go on sites for cam mounting locations.
 

c hris527

Known around here
Joined
Oct 12, 2015
Messages
1,793
Reaction score
2,090
Location
NY
I looked at your link, does your cam have a slot for a sd card, mine did not but the pic in the description did. You might well have to take it apart and find the reset button inside to reset.
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
Thanks again.
NO reset button, so either I go after my money back, or spend some time with learning firmware upgrades, perhaps only to find other issues.
I've purchased two other cameras from Andy, here, waiting on those.
I've found numerous pages and links to ali for cameras here, is there a suggested way to find ones that are solid english firmware, or any other seller besides Ali?
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
Well I've followed all steps here, Dahua IPC EASY unbricking / recovery over TFTP, according to the page, my model is included.
I've tried 3 times to flash. TFTP transfer takes place, no noticeable errors.
Attempted to log in via config tool and default 192.168.1.108 ip and nothing.
Spun up wireshark, rebooted camera,
I get the bootloader from the 192, ip, tries to connect to TFTP server,sends out some ARP requests, still from the 192 ip. Does the same via an IPv6 addy, I hear the camera click, then the ip of 10.1.1.66 begins to broadcast, the 192 addy is gone.
Am I not flashing properly? Or is there a chance the firmware is not being allowed to change?
 

Tim Briggs

n3wb
Joined
May 10, 2017
Messages
25
Reaction score
1
Log file :
Ncat: Version 7.40 ( Ncat - Netcat for the 21st Century )
Ncat: Listening on 192.168.254.254:5002
gBootLogPtr:80b80008.
Check spi flash controller v350... Found
Spi(cs1) ID: 0xC8 0x40 0x18 0xC8 0x40 0x18
Spi(cs1): Block:64KB Chip:16MB Name:"GD25Q128"
partition file version 2
rootfstype squashfs root /dev/mtdblock7
In: serial
Out: serial
Err: serial
TEXT_BASE:81000000
Net: PHY found at 3
ETH0: PHY(phyaddr=-1, rmii) link UP: DUPLEX=FULL : SPEED=100M
MAC: E0-50-8B-53-A1-DA
Using gmac device
TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1Download Filename 'upgrade_info_7db780a713a4.txt'.Download to address: 0x84000000
Downloading: *
done
Bytes transferred = 202 (ca hex)
ETH0: PHY(phyaddr=-1, rmii) link UP: DUPLEX=FULL : SPEED=100M
MAC: E0-50-8B-53-A1-DA
Using gmac device
TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1Download Filename 'romfs-x.squashfs.img'.Download to address: 0x82000000
Downloading: *
done
Bytes transferred = 909376 (de040 hex)

## Checking Image at 82000000 ...
Legacy image found
Image Name: romfs
Image Type: ARM Linux Standalone Program (gzip compressed)
Data Size: 909312 Bytes = 888 KiB
Load Address: 01200000
Entry Point: 01a00000
Verifying Checksum ... OK
Programing start at: 0x01200000
SPI probe: 16384 KiB hi_sfc at 0:1 is now current device
write : 0%hisfc350.c(311): read area out of range.
__do_write_flashSpi: error!
ETH0: PHY(phyaddr=-1, rmii) link UP: DUPLEX=FULL : SPEED=100M
MAC: E0-50-8B-53-A1-DA
Using gmac device
TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1Download Filename 'kernel.img'.Download to address: 0x82000000
Downloading: *
done
Bytes transferred = 2319632 (236510 hex)

## Checking Image at 82000000 ...
Legacy image found
Image Name: kernel
Image Type: ARM Linux Firmware (uncompressed)
Data Size: 2319568 Bytes = 2.2 MiB
Load Address: 00d00000
Entry Point: 01200000
Verifying Checksum ... OK
Programing start at: 0x00d00000
SPI probe: 16384 KiB hi_sfc at 0:0 is now current device
write : 100%
done
ETH0: PHY(phyaddr=-1, rmii) link UP: DUPLEX=FULL : SPEED=100M
MAC: E0-50-8B-53-A1-DA
Using gmac device
TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1Download Filename 'user-x.squashfs.img'.Download to address: 0x82000000
Downloading: *
done
Bytes transferred = 22765632 (15b6040 hex)
Dest address:0x2200000 invalid!
Outside available Flash
flwrite error 1!
cmd Failed run du!
partition file version 2
rootfstype squashfs root /dev/mtdblock7
fail to load bootargsParameters.txt
fail to load bootargsParameters.txt file
get bootargs info failed
cmdLine mem=85M console=ttyS0,115200 root=/dev/mtdblock7 rootfstype=squashfs
ETH0: PHY(phyaddr=-1, rmii) link UP: DUPLEX=FULL : SPEED=100M
MAC: E0-50-8B-53-A1-DA
 
Top