Table Of Contents
The Cisco Physical Access Gateway
Support for Multiple Cisco Physical Access Gateways
CAN Bus Connections for Optional Modules
Installation and Configuration Summary
Power Options and Requirements
Installing Surge Suppressors on Output Device Connections
Connect Reader Devices with Module Power Off
Mounting a Gateway or Optional Module
Wall Mounting a Gateway or Optional Module
Overview
This document provides information to install and configure the components located near each door of a Cisco Physical Access Control system.
This document includes the following information:
–
The Cisco Physical Access Gateway
–
Support for Multiple Cisco Physical Access Gateways
–
Cisco Physical Access Manager
–
CAN Bus Connections for Optional Modules
•
Installation and Configuration Summary
•
Power Options and Requirements
–
Installing Surge Suppressors on Output Device Connections
–
Connect Reader Devices with Module Power Off
•
Mounting a Gateway or Optional Module
System Overview
Cisco Physical Access Control is a comprehensive solution of hardware and software components, connected through an IP network as shown in Figure 1-1.
Figure 1-1 Cisco Physical Access Control: System Overview
![]()
The Cisco Physical Access Gateway
A Cisco Physical Access Gateway is installed near each door to provide processing and control for the connected door hardware, such as card readers, locks, and other input and output devices. This architecture allows access control to be deployed incrementally, door by door, eliminating the central panel and simplifying system design, wiring, and planning.
The Gateway is required, and can control up to two doors. Each Gateway supports the following:
If additional connections are required, you can connect up to 15 optional modules using a three-wire Controller Area Network (CAN) bus. These modules can be added or removed without affecting the operation of the system or other modules. See Optional Expansion Modules for more descriptions of the available modules.
![]()
Note
The modules are connected using the CAN1 interface. The CAN2 interface is not supported in this release.
Related Documentation
For installation and configuration instructions, see Chapter 2, "Installing and Configuring the Cisco Physical Access Gateway". See the Cisco Physical Access Manager User Guide for advanced configuration and management of the access control components.
Support for Multiple Cisco Physical Access Gateways
A Cisco Physical Access Gateway is installed for each door, and connected to the IP network using an Ethernet connection, as shown in Figure 1-2. This network connection provides communication with the Cisco Physical Access Manager for advanced configuration, and management with the other Gateways in the system. If the network connection is lost, the Gateway continues to provide access control functionality for the connected door devices.
Figure 1-2 Multiple Cisco Physical Access Gateways
![]()
![]()
Note
See Power Options and Requirements for more information on support for Power over Ethernet (PoE).
Cisco Physical Access Manager
The Cisco Physical Access Manager appliance (Cisco PAM) is a hardware and software solution that provides advanced configuration, monitoring, and report generation for the entire system. Each Cisco Physical Access Gateway is connected to the Cisco PAM appliance over an Ethernet-based IP network, as shown in Figure 1-2. A Java-based desktop application is installed on a PC connected to the network, and used to configure and monitor the system, as shown in Figure 1-3.
Figure 1-3 Configuring and Monitoring Using the Cisco Physical Access Manager
![]()
The Cisco PAM appliance includes the following main features:
•
1 RU appliance
•
Java thin client architecture
•
Policy support: two-door, anti-passback
•
Report generator (canned & custom)
•
Badge design & enrollment
•
Microsoft Active Directory integration
•
Fine grained user rights
•
Global I/O
•
Device pre-provisioning
•
Capacity & feature licenses
•
IT data integration
•
Warm standby high availability
•
Audit trails
Related Documentation
For more information on the Cisco PAM appliance, including installation and configuration instructions, see the Cisco Physical Access Manager User Guide.
Optional Expansion Modules
Each Cisco Physical Access Control system includes at least one Cisco Physical Access Gateway to provide processing and connections for input and output devices such as card readers and locks. If additional connections are required, you can add optional modules to extend the functionality of the Gateway.
Module Features
Figure 1-4 shows the modules for a Cisco Physical Access Control system. Table 1-1 summarizes the features for each module.
Figure 1-4 Cisco Physical Access Gateway and the Optional Modules
![]()
Table 1-1
Gateway Cisco Reader Module Cisco Input Module Cisco Output Module•
Mandatory module.
•
Connects up to two doors using the 10 pin Weigand reader port, which can be configured as two five-pin ports.
•
Connects up to 15 optional expansion modules using a three-wire CAN bus.1
•
Power-over-Ethernet (POE) or 12 through 24V DC
•
Two Ethernet ports
•
Three output ports: Form C contacts rated at 5A 30VDC
•
Three supervised input ports2
•
Tamper & Power Fail inputs (can be configured as additional unsupervised inputs)
•
One RS-485 serial port (not supported in this release).
•
Requires connection to an Access Gateway using a three-wire CAN bus.
•
Connects up to two doors using the 10 pin Weigand reader port, which can be configured as two 5 pin ports.
•
Power: 12 through 24V DC
•
Three output ports: Form C contacts rated at 5A 30VDC
•
Three supervised input ports
•
Tamper & Power Fail inputs (can be configured as additional unsupervised inputs)
•
One RS-485 serial port (not supported in this release).
•
Requires connection to an Access Gateway using a three-wire CAN bus.
•
10 supervised input ports
•
Example inputs are: Push button switches, Glass Break sensors, or any contact closure input. circuit
•
Power: 12 through 24V DC
•
Tamper & Power Fail inputs (can be configured as additional unsupervised ports)
•
Requires connection to an Access Gateway using a three-wire CAN bus.
•
8 output ports: Form C contacts rated at 5A 30VDC
•
Example outputs are: lights, LEDs, or any contact closure output circuit.
•
Power: 12 through 24V DC
•
Tamper & Power Fail inputs (can be configured as additional unsupervised ports)
1 The modules are connected using the CAN1 interface. The CAN2 interface is not supported in this release.
2 A supervised input supports four states: normal, alarm, open and short. An unsupervised input only indicates normal or alarm.
Main Features of the Cisco Physical Access Control Modules
CAN Bus Connections for Optional Modules
The optional modules are connected to a Cisco Physical Access Gateway using a CAN bus connection, as shown in Figure 1-5.
Figure 1-5 CAN Bus Wiring
![]()
The CAN bus must adhere to the following rules:
•
The maximum length for the CAN bus is 1320 feet (400 Metres).
•
The last device in a CAN bus must be terminated by setting the CAN terminator switch to ON.
–
The CAN terminator switch in included on the Reader, Input and Output modules only (the Gateway is always the first device in the CAN bus).
–
Set the terminator switch to OFF for all other modules in the CAN bus.
–
For the location of the CAN terminator on each device, see the physical port description for that device.
•
The Gateway and Reader modules are connected using the CAN1 interface. The CAN2 interface is not supported in this release.
Related Documentation
See the following chapters for instructions to install the modules and related equipment:
•
Chapter 2, "Installing and Configuring the Cisco Physical Access Gateway"
•
Chapter 3, "Connecting a Cisco Reader Module"
•
Chapter 4, "Connecting a Cisco Input Module"
•
Chapter 5, "Connecting a Cisco Output Module"
Installation and Configuration Summary
The following steps are an example of the main installation and configuration tasks for a Cisco Physical Access Control system. The exact procedure and order of installation for your system may vary.
Step 1
Unpack and mount the Cisco Physical Access Gateway.
Step 2
Unpack and mount optional reader, input or output modules, if necessary.
Step 3
Connect door readers, input and output devices to the Cisco Physical Access Gateway or optional modules.
Step 4
Connect power to the Cisco Physical Access Gateway and any optional modules.
Step 5
Connect an Ethernet cable from a PC to the ETH1 interface on the Gateway module.
![]()
Note
To enter the Gateway initial configuration, be sure to connect your PC to the ETH1 port. The ETH0 port is used for network communication.
Step 6
Open a web browser on your PC and enter
https://192.168.1.42
. This URL opens the web-based configuration page.![]()
Note
Be sure to include the s in
https://
. This connects your browser to the secure URL.
Step 7
Enter the default username and password:
default username: gwadmin
default password: gwadmin
Step 8
Enter and save the Network settings in the Initial Setup window. See Configuring and Managing the Gateway Using a Direct Connection, page 2-15. Wait until the Gateway resets and the web browser displays the screen Network Settings Applied.
Step 9
Verify the connections to the optional modules, door readers and other input and output devices.
Step 10
Connect an Ethernet cable from the Gateway ETH0 port to the IP network, and verify IP network connectivity.
Step 11
Perform additional configuration, verification, and monitoring tasks as described in the Cisco Physical Access Manager User Guide.
Power Options and Requirements
This section includes the following information:
•
Installing Surge Suppressors on Output Device Connections
•
Connect Reader Devices with Module Power Off
Power Options
Table 1-2 summarizes the power options for each module. The Cisco Physical Access Gateway supports Power over Ethernet (PoE) and DC power. All other modules support DC power only.
•
The DC power connections on each module are Voltage In (VIN) and Ground (GND).
•
For information on configuring PoE, see the documentation for your network switch. Your switch must support PoE and be properly configured to use this feature with the Cisco Physical Access Gateway.
Current Draw Requirements
Each Cisco Physical Access Control module requires a minimum amount of available power, as described in Table 1-3. The current draw requirements listed in Table 1-3 account for inefficiencies in power supplies and are to be used for power budgeting. The requirements do not represent actual power usage.
Installing Surge Suppressors on Output Device Connections
Install a surge suppressor between all output devices and the Gateway, Reader, or Output modules to protect the devices from power surges. Use one of the following methods:
•
If the base on a lock device receives power from an external power source, install an isolation relay between the output device and the Gateway, Reader, or Output module.
•
Install a MOV (Metal Oxide Varistor) surge protection product, such as the Ditek DTK-ESS Electric Switch Supressor kit from Diversified Technology Group. An example installation is shown in Figure 1-6. You can also use a diode 4N4001 for surge suppression.
Figure 1-6 Sample Surge Suppressor Installation
![]()
Connect Reader Devices with Module Power Off
Disconnect power from the Gateway or Reader module before connecting reader devices to the modules. Connecting a reader device when the modules are powered can cause the Gateway or Reader module to malfunction.
Mounting a Gateway or Optional Module
Each Cisco Physical Access Gateway and optional module includes two mounting brackets and four screws to mount the Gateway to the wall.
Wall Mounting a Gateway or Optional Module
Figure 1-7 shows the three options for attaching the included wall-mount brackets to a module.
Figure 1-7 Three Options for Installing Wall Mount Brackets
![]()
The following items are shown in Figure 1-7:
1Option 1: Bottom end mounting
4Mounting Brackets (included)
2Option 2: Bottom side mounting
5Screws
3Option 3: Side mounting
Wall Mount Installation Kit Contents
Each module includes a wall mount installation kit that contains the following:
Table 1-4 Wall Mount Installation Kit Contents
Hardware Item QuantityWall Mount brackets
2
Screws
8