About Server Message Block Support (SMB)
AXIS products with FW 5.90 and lower only support SMB 1.0. All AXIS products with FW 6.10 and onwards do support SMB 1.0, 2.0, 2.1, 3.0 and 3.02. Therefore, the following SMB behavior, default settings and changes apply only to AXIS products with FW 6.10 and higher.
Firmware 8.20.1 and lower
SMB 1.0 was enabled per default only while all other supported SMB versions (SMB 2.0, 2.1, 3.0, 3.02) needed to be used in PlainConfig as described below.
Firmware 8.30.1 and higher
SMB 1.0 and SMB 2.0 are disabled per default now in order to increase the overall minimum cyber security level of the cameras. In addition, we added support for the camera to auto-negotiate its SMB version with the NAS or edge storage device starting with SMB 2.1 or higher SMB version such as SMB 3.0 and SMB 3.02.
Why has AXIS decided to disable SMB 1.0 and SMB 2.0 per default ?
SMB 1.0 and SMB 2.0 are considered unsecure and vulnerable to cyber security attacks due to their age and end of development. In order to increase the overall cyber security level of our products, AXIS has decided to disable those SMB version.
My cameras cannot connect to the network share after updating to FW 8.30.1 or higher?
If the network share connection previously was working, then this is an indication that the NAS or edge storage device used does not support any of the higher SMB version. See below on how to adjust the settings.
What if my NAS or edge storage device does not support SMB 2.1 or higher?
In case SMB 1.0 or SMB 2.0 is required due to compatibility issues, we recommend setting the Extra Mount Options in Settings -> System -> PlainConfig -> Storage to a specific version"vers=x.y" (e.g vers=1.0, vers=2.0).
Please note that there are two storage groups per mounted network share (normally Storage S1 and Storage S2) and both of them need to have the correct version in Extra Mount Options. Please see below a example of how the configuration need to look like when the NAS storage supports only SMB 1.0
Another option to set the correct SMB version is using VAPIX, see a example below:
Below are some configuration examples that should describe how the camera is dealing with the Extra Mount Options parameters when configured:
Example 1: vers=1.0 -> Camera tries to connect via SMB 1.0
Example 2: vers=1.0,vers=2.0 -> Camera tries to connect via SMB 2.0
Example 3: vers=1.0,vers=2.0,sec=ntlm -> Camera tries to connect via 2.0 SMB with NTLM only
Example 4: vers=1.0,vers=2.0,sec=ntlm -> Camera tries to connect via 2.0 SMB with NTLM only
Please note that the camera will only consider the latter of two SMB versions entered as described in the example above. Preferrebly only a single SMB version should be entered.
What if I send images to a network share via recipient/action rule?
Then it is recommend to proceed as following:
1) Mount the network share first with the changes mentioned above
2) Create the recipient + action rule
3) Go into PlainConfig -> Storage and also edit the new Extra Mount Options in the newly created storage group (usually S3) to the correct version. A new storage group is created after 2) as a recipient and action rule has been configured.
How to find out which SMB version is supported by my NAS or edge storage device?
Please contact the NAS or edge storage device vendor for more information and/or additional documentation on this. Usually the NAS or edge storage device have this configurable in their web-interface as well.
I cannot add my camera into AXIS Companion because mounting the storage fails?
It is recommended to mount the network share via camera web-interface + additional PlainConfig configuration as described in What if my NAS or edge storage device does not support SMB 2.1 or higher? and then later on switch to the AXIS Companion interface and open the storage configuration of the camera and accept the retrieved storage mounting information from the camera.