Cisco OL-20932-02 User Manual

Cisco Physical Access Gateway User Guide

Release 1.1.0 and higher

Americas Headquarters

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-20932-02

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their own expense.

The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it is not installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception. This equipment has been tested and found to comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These specifications are designed to provide reasonable protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation.

Modifying the equipment without Cisco’s written authorization may result in the equipment no longer complying with FCC requirements for Class A or Class B digital devices. In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television communications at your own expense.

You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its peripheral devices. If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures:

• Turn the television or radio antenna until the interference stops.

• Move the equipment to one side or the other of the television or radio.

• Move the equipment farther away from the television or radio.

• Plug the equipment into an outlet that is on a different circuit from the television or radio. (That is, make certain the equipment and the television or radio are on circuits controlled by different circuit breakers or fuses.)

Modifications to this product not authorized by Cisco Systems, Inc. could void the FCC approval and negate your authority to operate the product.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at

www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1005R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

Cisco Physical Access Gateway User Guide

Preface vii

Obtaining Documentation and Submitting a Service Request vii

Safety Warnings vii

CHAPTER

1 Overview 1-1

System Overview 1-2

The Cisco Physical Access Gateway 1-2

Support for Multiple Cisco Physical Access Gateways 1-3 Cisco Physical Access Manager 1-4

Optional Expansion Modules 1-5

Module Features 1-6 CAN Bus Connections for Optional Modules 1-7

Installation and Configuration Summary 1-8

Door Device Wiring Requirements 1-9

Understanding Supervised and Unsupervised Input Devices 1-10

Power Options and Requirements 1-12

Power Options 1-12 Current Draw Requirements 1-12 Installing Surge Suppressors on Output Device Connections 1-13 Connect Reader Devices with Module Power Off 1-13

Mounting a Gateway or Optional Module 1-14

Wall Mounting a Gateway or Optional Module 1-14

CHAPTER

OL-20932-02

2 Installing and Configuring the Cisco Physical Access Gateway 2-1

Contents 2-1

Overview 2-2

Package Contents 2-3

Physical Overview and Port Description 2-3

LED Status 2-5

Installing the Cisco Physical Access Gateway 2-7

Configuring and Managing the Gateway Using a Direct Connection 2-15

Understanding Network Time Protocol (NTP) Settings 2-15 Connecting a PC to the Gateway 2-16

Cisco Physical Access Gateway User Guide

iii

Contents

Entering the Gateway Network Settings 2-17 Changing the User Password 2-19 Upgrading the Gateway Firmware Using a Direct Connection 2-20 Displaying Serial Numbers and Other Information 2-22

Configuring the Gateway Using the Cisco Physical Access Manager 2-23

Resetting the Cisco Physical Access Gateway 2-24

Soft Reset (Powercycle) 2-24 Hard Reset (Restore Factory Defaults) 2-24

CHAPTER

3 Connecting a Cisco Reader Module 3-1

Overview 3-1

Package Contents 3-2

Physical Overview and Port Description 3-3

Status LEDs 3-6

Installing the Cisco Reader Module 3-6

4 Connecting a Cisco Input Module 4-1

Overview 4-1

Package Contents 4-2

Physical Overview and Port Description 4-3

Status LEDs 4-5

Installing the Cisco Input Module 4-5

5 Connecting a Cisco Output Module 5-1

Overview 5-1

Package Contents 5-2

APPENDIX

Physical Overview and Port Description 5-3

Status LEDs 5-5

Installing the Cisco Output Module 5-6

6 Safety Warnings 6-1

Statement 1071—Warning Definition 6-1 Statement 369—Power over Ethernet (PoE) IEEE 802.3af 6-6 Statement 353—This Product Must be Connected 6-7 Statement 1040—Product Disposal 6-9 Statement 1004—Installation Instructions 6-10

Cisco Physical Access Gateway User Guide

OL-20932-02

Contents

APPENDIX

A Environmental Specifications A-1

Environmental Specifications for the Cisco Physical Access Gateway A-1

Environmental Specifications for the Cisco Reader Module A-2

Environmental Specifications for the Cisco Input Module A-2

Environmental Specifications for the Cisco Output Module A-3

OL-20932-02

Cisco Physical Access Gateway User Guide

Contents

Cisco Physical Access Gateway User Guide

OL-20932-02

Preface

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.

Safety Warnings

Before you install the device, observe the safety warnings described in Appendix 6, “Safety Warnings”.

OL-20932-02

Cisco Physical Access Gateway User Guide

vii

Preface

viii

Cisco Physical Access Gateway User Guide

OL-20932-02

CHAP T ER

Overview

This document provides information to install and configure the components located near each door of a Cisco Physical Access Control system.

This document includes the following information:

• System Overview, page 1-2

–

The Cisco Physical Access Gateway, page 1-2

–

Support for Multiple Cisco Physical Access Gateways, page 1-3

–

Cisco Physical Access Manager, page 1-4

• Optional Expansion Modules, page 1-5

–

CAN Bus Connections for Optional Modules, page 1-7

• Installation and Configuration Summary, page 1-8

• Door Device Wiring Requirements, page 1-9

• Power Options and Requirements, page 1-12

–

Power Options, page 1-12

OL-20932-02

–

Current Draw Requirements, page 1-12

–

Installing Surge Suppressors on Output Device Connections, page 1-13

–

Connect Reader Devices with Module Power Off, page 1-13

• Mounting a Gateway or Optional Module, page 1-14

Cisco Physical Access Gateway User Guide

1-1

System Overview

Cisco Physical Access Control is a comprehensive solution of hardware and software components, connected through an IP network as shown in Figure 1-1.

Figure 1-1 Cisco Physical Access Control: System Overview

Chapter 1 Overview

Cisco Access

Gateway

POE

Ethernet Low speed copper wiring

Access Layer

Network

The Cisco Physical Access Gateway

A Cisco Physical Access Gateway is installed near each door to provide processing and control for the connected door hardware, such as card readers, locks, and other input and output devices. This architecture allows access control to be deployed incrementally, door by door, eliminating the central panel and simplifying system design, wiring, and planning.

The Gateway is required, and can control up to two doors. Each Gateway supports the following:

Table 1-1 Cisco Physical Access Gateway Features and Benefits

switch

Cisco

Physical Access

Manager

LDAP/Microsoft active directory

Other IT apps

HR database

187055

1-2

Feature Benefit

250,000 cardholder cache and a 150,000 Transaction buffer

Door continues to function in case network connectivity is lost

Web server built in Simplifies configuration and monitoring

All communication is128 Bit AES encrypted Protects credentials, preserves security

Device pre-provisioning using network services Simplifies deployment

Plug & Play support Modules can be added or deleted without

disrupting service

If additional connections are required, you can connect up to 15 optional modules using a three-wire Controller Area Network (CAN) bus. These modules can be added or removed without affecting the operation of the system or other modules. See the “Optional Expansion Modules” section on page 1-5 for more descriptions of the available modules.

Note The modules are connected using the CAN1 interface. The CAN2 interface is not supported in this

release.

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 1 Overview

Support for Multiple Cisco Physical Access Gateways

A Cisco Physical Access Gateway is installed for each door, and connected to the IP network using an Ethernet connection, as shown in Figure 1-2. This network connection provides communication with the Cisco Physical Access Manager for advanced configuration, and management with the other Gateways in the system. If the network connection is lost, the Gateway continues to provide access control functionality for the connected door devices.

Figure 1-2 Multiple Cisco Physical Access Gateways

Doors and

Related Hardware

System Overview

Cisco Access

Gateways

Copper wiring

Ethernet/ POE

Access Layer

switch

Cisco Access Control Manager

Appliance (Cisco PAM)

Network

Cisco PAM desktop

clients

187053

OL-20932-02

Note See the “Power Options and Requirements” section on page 1-12 for more information on support for

Power over Ethernet (PoE).

Cisco Physical Access Gateway User Guide

1-3

System Overview

Cisco Physical Access Manager

The Cisco Physical Access Manager appliance (Cisco PAM) is a hardware and software solution that provides advanced configuration, monitoring, and report generation for the entire system. Each Cisco Physical Access Gateway is connected to the Cisco PAM appliance over an Ethernet-based IP network, as shown in Figure 1-2 on page 1-3. A Java-based desktop application is installed on a PC connected to the network, and used to configure and monitor the system, as shown in Figure 1-3.

Figure 1-3 Configuring and Monitoring Using the Cisco Physical Access Manager

Chapter 1 Overview

Cisco PAM Configuration Interface

Cisco PAM Appliance

IP Network

Direct Ethernet

Connection

Cisco PAM

Desktop Software

(Java Thin Clients)

Network

Connection

271595

1-4

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 1 Overview

Optional Expansion Modules

The Cisco PAM appliance includes the following main features:

• 1 RU appliance

• Java thin client architecture

• Policy support: two-door, anti-passback

• Report generator (canned & custom)

• Badge design & enrollment

• Microsoft Active Directory integration

• Fine grained user rights

• Global I/O

• Device pre-provisioning

• Capacity & feature licenses

• IT data integration

• Warm standby high availability

• Audit trails

Module Features

Figure 1-4 shows the modules for a Cisco Physical Access Control system.

Figure 1-4 Cisco Physical Access Gateway and the Optional Modules

Chapter 1 Overview

Cisco Physical

Access Gateway

Reader Module

Input

Module

Output

Module

Gateway Cisco Reader Module Cisco Input Module Cisco Output Module

• Mandatory module.

• Connects up to two doors

using the 10 pin Wiegand reader port, which can be configured as two five-pin ports.

• Connects up to 15

optional expansion modules using a three-wire CAN bus.

• Power-over-Ethernet

(POE) or 12 through 24V DC

• Two Ethernet ports

• Three output ports:

Form C contacts rated at 5A 30VDC

• Three supervised input

• Tamper & Power Fail

ports

inputs (can be configured as additional

• Requires connection to

an Access Gateway using a three-wire CAN bus.

• Connects up to two doors

using the 10 pin Wiegand reader port, which can be configured as two 5 pin ports.

• Power: 12 through 24V

• Three output ports: Form

C contacts rated at 5A 30VDC

• Three supervised input

ports

• Tamper & Power Fail

inputs (can be configured as additional unsupervised inputs)

• One RS-485 serial port

(not supported in this release).

• Requires connection to

an Access Gateway using a three-wire CAN bus.

• 10 supervised input ports

• Example inputs are: Push

button switches, Glass Break sensors, or any contact closure input. circuit

• Power: 12 through 24V

• Tamper & Power Fail

inputs (can be configured as additional unsupervised ports)

• Requires connection to

an Access Gateway using a three-wire CAN bus.

• 8 output ports: Form C

contacts rated at 5A 30VDC

• Example outputs are:

lights, LEDs, or any contact closure output circuit.

• Power: 12 through 24V

• Tamper & Power Fail

inputs (can be configured as additional unsupervised ports)

unsupervised inputs)

• One RS-485 serial port

(not supported in this release).

1. The modules are connected using the CAN1 interface. The CAN2 interface is not supported in this release.

2. A supervised input supports four states: normal, alarm, open and short. An unsupervised input only indicates normal or alarm.

1-6

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 1 Overview

CAN Bus Connections for Optional Modules

The optional modules are connected to a Cisco Physical Access Gateway using a CAN bus connection, as shown in Figure 1-5.

Figure 1-5 CAN Bus Wiring

CAN+

Sheild

CAN-

Gateway Module Reader Module Input Module Output Module

Optional Expansion Modules

271589

Installation and Configuration Summary

The following steps are an example of the main installation and configuration tasks for a Cisco Physical Access Control system. The exact procedure and order of installation for your system may vary.

Step 1 Unpack and mount the Cisco Physical Access Gateway. Step 2 Unpack and mount optional reader, input or output modules, if necessary. Step 3 Connect door readers, input and output devices to the Cisco Physical Access Gateway or optional

modules.

Step 4 Connect power to the Cisco Physical Access Gateway and any optional modules. Step 5 Connect an Ethernet cable from a PC to the ETH1 interface on the Gateway module.

Note To enter the Gateway initial configuration, be sure to connect your PC to the ETH1 port. The

ETH0 port is used for network communication.

Step 6 Open a web browser on your PC and enter https://192.168.1.42. This URL opens the web-based

configuration page.

Chapter 1 Overview

Note Be sure to include the s in https://. This connects your browser to the secure URL.

Step 7 Enter the default username and password:

default username:

gwadmin

default password: gwadmin

Step 8 Enter and save the Network settings in the Initial Setup window. See the “Configuring and Managing the

Gateway Using a Direct Connection” section on page 2-15. Wait until the Gateway resets and the web

browser displays the screen Network Settings Applied.

Step 9 Verify the connections to the optional modules, door readers and other input and output devices. Step 10 Connect an Ethernet cable from the Gateway ETH0 port to the IP network, and verify IP network

connectivity.

Step 11 Perform additional configuration, verification, and monitoring tasks as described in the Cisco Physical

Access Manager User Guide.

1-8

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 1 Overview

Door Device Wiring Requirements

The wires used for an access control door depend on the devices installed at the door. Before installing the wiring for an access control system, do the following:

• Determine the number and type of door devices used at each door (as shown in Figure 1-6).

• Determine the number and type of wires used for each device, based on the descriptions in Tab le 1-2.

• Determine the length of the wires based on the distance between the device and the access control

Gateway, or optional module (such as a Reader, Output or Input module).

Figure 1-6 Air Return Using Ceiling Space or Using Ductwork

Door Device Wiring Requirements

OL-20932-02

Table 1-2 describes the wires used for typical input and output door devices. Refer to the device

documentation for more information and to verify the following requirements.

Table 1-2 Wires Used for Typical Door Devices

Typical

# of

Function

Request to Exit 2 22 Input Used to exit the door. This may be replaced by an

Door position switch

Wires

2 22 Input Used to determine if door is open or closed. This

Wire Gauge Type Use

egress crash bar if the exit is not alarmed.

device can cause a door forced open alarm after a time out. This devise is usually supervised.

Cisco Physical Access Gateway User Guide

1-9

Understanding Supervised and Unsupervised Input Devices

Table 1-2 Wires Used for Typical Door Devices (continued)

# of

Function

Wires

Reader 6 per

reader

Electric strike or

2 18 Output Opens the locking device. Include a reverse bias

magnetic lock

Alarm bypass 2 22 Output Optionally used to turn off the alarm contact at the

Bell or call 2 22 Input Optional call button that creates an event to notify a

Chapter 1 Overview

Typical Wire Gauge Type Use

22 Wiegand A reader device includes the following:

• 2 Wiegand data wires

• 1 LED

• 1 beeper

• 2 power (12VDC) wires (500 feet maximum

length)

diode or other surge suppressor to protect against reverse current. See the “Installing Surge

Suppressors on Output Device Connections” section on page 1-13 for more information.

door while the strike is energized.

CPAM user that a person is trying to get in the door.

Understanding Supervised and Unsupervised Input Devices

Door input devices can be supervised or unsupervised

• Unsupervised input devices have two states: active or inactive.

• Supervised input devices have four states: active, inactive, short, and open.

Unsupervised inputs have limited functionality. If a wire is cut or shorted between the input module and a normally open device. The server cannot determine the change and the device would remains in inactive state even when the switch is closed.

To make the input device supervised, use two 1K resistors in the circuit (Figure 1-7).

• In the inactive state, the circuit measures 2000 ohms.

• In the active state, the circuit measures 1000 ohms.

• In the short state the circuit measures 0 ohms

• In the open state the circuit measures infinite ohms.

Once the input device is supervised, CPAM can determine if a wire is cut or shorted.

Note You must also configure the device as supervised in CPAM. See the Cisco Physical Access Manager User

Guide for more information.

1-10

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 1 Overview

Understanding Supervised and Unsupervised Input Devices

Figure 1-7 Example of a Supervised Door Sensor

OL-20932-02

Cisco Physical Access Gateway User Guide

1-11

Power Options and Requirements

This section includes the following information:

• Power Options

• Current Draw Requirements

• Installing Surge Suppressors on Output Device Connections

• Connect Reader Devices with Module Power Off

Power Options

Table 1-3 summarizes the power options for each module. The Cisco Physical Access Gateway supports

Power over Ethernet (PoE) and DC power. All other modules support DC power only.

• The DC power connections on each module are Voltage In (VIN) and Ground (GND).

• For information on configuring PoE, see the documentation for your network switch. Your switch

must support PoE and be properly configured to use this feature with the Cisco Physical Access Gateway.

Chapter 1 Overview

Table 1-3 Power Options for the Cisco Physical Access Control Modules

Module Power over Ethernet (PoE) 12 through 24V DC

Cisco Physical Access Gateway Supported Supported

Cisco Reader Module Not Supported Supported

Cisco Input Module Not Supported Supported

Cisco Output Module Not Supported Supported

Current Draw Requirements

Each Cisco Physical Access Control module requires a minimum amount of available power, as described in Table 1-4. The current draw requirements listed in Table 1-4 account for inefficiencies in power supplies and are to be used for power budgeting. The requirements do not represent actual power usage.

Table 1-4 Current Draw Requirements for the Cisco Physical Access Control Modules

Module

Cisco Physical Access Gateway 1.5A 1.5A is required for the Gateway module only.

Cisco Reader Module 1A 1A is required for the Reader module only. Add

Cisco Input Module 1A N/A

Cisco Output Module 1A N/A

Current Draw Requirement Notes

Add an additional 1A if a reader or lock is attached to the module.

an additional 1A if a reader or lock is attached to the module.

1-12

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 1 Overview

Installing Surge Suppressors on Output Device Connections

Install a surge suppressor between all output devices and the Gateway, Reader, or Output modules to protect the devices from power surges. Use one of the following methods:

• If the base on a lock device receives power from an external power source, install an isolation relay

between the output device and the Gateway, Reader, or Output module.

• Install a MOV (Metal Oxide Varistor) surge protection product, such as the Ditek DTK-ESS Electric

Switch Suppressor kit from Diversified Technology Group. An example installation is shown in

Figure 1-8. You can also use a diode 4N4001 for surge suppression.

Figure 1-8 Sample Surge Suppressor Installation

Cisco Access

Control Module

Power Options and Requirements

Surge

Suppressor

Surge

Suppressor

Power Source

Terminal Strip

Connect Reader Devices with Module Power Off

Disconnect power from the Gateway or Reader module before connecting reader devices to the modules. Connecting a reader device when the modules are powered can cause the Gateway or Reader module to malfunction.

Output Device

277557

OL-20932-02

Cisco Physical Access Gateway User Guide

1-13

Mounting a Gateway or Optional Module

Each Cisco Physical Access Gateway and optional module includes two mounting brackets and four screws to mount the Gateway to the wall.

Wall Mounting a Gateway or Optional Module

Figure 1-9 shows the three options for attaching the included wall-mount brackets to a module.

Figure 1-9 Three Options for Installing Wall Mount Brackets

Chapter 1 Overview

187050

1 Option 1: Bottom end mounting 4 Mounting Brackets (included) 2 Option 2: Bottom side mounting 5 Screws 3 Option 3: Side mounting

1-14

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 1 Overview

Wall Mount Installation Kit Contents

Each module includes a wall mount installation kit that contains the following:

Table 1-5 Wall Mount Installation Kit Contents

Hardware Item Quantity

Wall Mount brackets 2

Screws 8

Mounting a Gateway or Optional Module

OL-20932-02

Cisco Physical Access Gateway User Guide

1-15

Mounting a Gateway or Optional Module

Chapter 1 Overview

1-16

Cisco Physical Access Gateway User Guide

OL-20932-02

CHAP T ER

Installing and Configuring the Cisco Physical Access Gateway

This chapter includes the following information:

• Overview, page 2-2

• Package Contents, page 2-3

• Physical Overview and Port Description, page 2-3

• Installing the Cisco Physical Access Gateway, page 2-7

• Configuring and Managing the Gateway Using a Direct Connection, page 2-15

–

Understanding Network Time Protocol (NTP) Settings, page 2-15

–

Connecting a PC to the Gateway, page 2-16

–

Entering the Gateway Network Settings, page 2-17

OL-20932-02

–

Changing the User Password, page 2-19

–

Upgrading the Gateway Firmware Using a Direct Connection, page 2-20

–

Displaying Serial Numbers and Other Information, page 2-22

• Configuring the Gateway Using the Cisco Physical Access Manager, page 2-23

• Resetting the Cisco Physical Access Gateway, page 2-24

Cisco Physical Access Gateway User Guide

2-1

Overview

Chapter 2 Installing and Configuring the Cisco Physical Access Gateway

The Cisco Physical Access Gateway (Figure 2-1) is installed near each door to provide access control and connections for card readers, door locks and other input and output devices. The Gateway is connected to the Cisco Physical Access Manager using an Ethernet connection to the IP network. Power is supplied through a Power over Ethernet (PoE) connection, or using a DC power source. Each Gateway includes connections for up to two Wiegand door readers, three input devices, and three output devices. Optional expansion modules are available to add additional doors and devices to the Gateway.

Figure 2-1 Cisco Physical Access Gateway

2-2

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 2 Installing and Configuring the Cisco Physical Access Gateway

Package Contents

Each Cisco Physical Access Gateway includes the following:

• Six End-Of-Line (EOL) 1K termination resistors (used for supervised input interfaces)

• Two mounting brackets, with 4 screws for each bracket

• Regulatory compliance and safety information

• Quick Start guide

• Connector plugs, including the following:

Type Quantity

10 Pin 1

3 Pin 4

2 Pin 6

Package Contents

Physical Overview and Port Description

Figure 2-2 and Figure 2-3 show the location of each port, including connections for power, Ethernet,

door readers and other input and output devices.

Figure 2-2 Cisco Physical Access Gateway Ports and Connectors: Side View

OL-20932-02

Cisco Physical Access Gateway User Guide

187040

2-3

Physical Overview and Port Description

Figure 2-3 Cisco Physical Access Gateway Ports and Connectors: Top View

Chapter 2 Installing and Configuring the Cisco Physical Access Gateway

2 5 6 7 8 9 10

187039

1 Power—Two-pin connector for Voltage In (VIN) and Ground (GND) to connect a 12 to 24 VDC

external power source.

2 CAN—A three-wire CAN bus is used to connect additional modules, including the Cisco Reader

Module, Cisco Input Module, and Cisco Output Module.

Note Modules are connected using the CAN1 interface. The CAN2 interface is not supported

in this release.

3 SVR (Server)—When the LED is steady green, the Gateway is connected to a Cisco PAM

appliance.

4 Fast Ethernet interfaces—There are two 10/100 BASE-TX RJ-45 connectors:

• ETH 0: connects the Gateway to the network. ETH 0 also supports Power over Ethernet

(PoE) for the device (optional).

• ETH 1: connects the device to a PC to access the device configuration web page.

5 Serial interface—The RS-485 interface is not supported in this release. 6 Wiegand interface—This interface can be configured as the following:

• One 10-pin Wiegand/clock and data reader interface to connect a single door reader.

• Two 5-pin Wiegand/clock and data interfaces to connect two door readers (for installations

where a 5-pin interface is sufficient).

Note Disconnect power from the Gateway or Reader module before connecting reader devices

to the modules. Connecting a reader device when the modules are powered can cause the Gateway or Reader module to malfunction.

2-4

Cisco Physical Access Gateway User Guide

OL-20932-02

Chapter 2 Installing and Configuring the Cisco Physical Access Gateway

7 Input interfaces—Three input interfaces used to sense the contact closure. Each input can be

configured as supervised or unsupervised and can be configured to sense a Normally Open (NO) or Normally Closed (NC) contact.

• An unsupervised input senses a simple contact closure state, including Normal or Alarm.

When connected to open contacts, the terminal voltage range is 4V to 5V. For closed contacts, the voltage range is 0V to 0.7V.

• A supervised input senses four contact states, including Normal, Alarm, Open and Short.

These inputs require 1K End-Of-Line (EOL) termination resistors installed at the contacts (two resistors are included in the accessory kits for each Input port).

8 Output interfaces—Three Form C (5A @ 30V) relay output interfaces. Each output connection

can be configured as either Normally Closed (NC) or Normally Open (NO).

• C & NO connection: The relay is normally open. The circuit is closed when triggered.

• C & NC connection: The relay is normally closed. The circuit is opened when triggered.

Notes:

• Install surge protection between the output device and the Cisco PAM module, as described

in the “Installing Surge Suppressors on Output Device Connections” section on page 1-13.

• Common (C) is always used, and either NC or NO is used to complete the connection.

• All Generic Output devices installed in Cisco PAM systems prior to release 1.1.0, were

connected to the Gateway, Reader, or Output modules with the wiring reversed. If upgrading to Cisco PAM release 1.1.0 from an earlier release, disconnect all Generic Output devices and do the following:

Physical Overview and Port Description

LED Status

–

Connect Normally Open devices to the N.O. and C connectors on the Gateway, Reader, or Output module.

–

Connect Normally Closed devices to the N.C. and C connectors on the Gateway, Reader, or Output module.

9 PF—Power fail input: an unsupervised input that raises a “power fail” alarm when the circuit is

open. Can be configured as an additional unsupervised port. An unsupervised input indicates only normal or alarm. The corresponding LED is red when circuit is open (when no input is connected).

10 TM—Tamper input: an unsupervised input that raises a “tamper” alarm when the circuit is open.

Can be configured as an additional unsupervised port. An unsupervised input indicates only normal or alarm. The corresponding LED is red when circuit is open (when no input is connected).

11 Reset—Resets the device. See the “Resetting the Cisco Physical Access Gateway” section on

page 2-24 for more information.

Table 2-1 describes the Gateway module status LEDs:

Table 2-1 Gateway LEDs

Status Description

SVR

Steady Green The Gateway is connected to a Cisco PAM appliance.

OL-20932-02

Cisco Physical Access Gateway User Guide

2-5

+ 65 hidden pages

Cisco OL-20932-02 User Manual

Cisco Physical Access Gateway User Guide

CONTENTS

Preface

Overview

System Overview

The Cisco Physical Access Gateway

Support for Multiple Cisco Physical Access Gateways

Cisco Physical Access Manager

Optional Expansion Modules

Module Features

CAN Bus Connections for Optional Modules

Installation and Configuration Summary

Door Device Wiring Requirements

Understanding Supervised and Unsupervised Input Devices

Power Options and Requirements

Power Options

Current Draw Requirements

Installing Surge Suppressors on Output Device Connections

Connect Reader Devices with Module Power Off

Mounting a Gateway or Optional Module

Wall Mounting a Gateway or Optional Module

Contents

Installing and Configuring the Cisco Physical Access Gateway

Overview

Package Contents

Physical Overview and Port Description

LED Status