Transcription
P2000 Third-Party Reader/Controller IntegrationProduct BulletinCode No. LIT-12012143Software Release 3.14 SP3Issued February 24, 2017Refer to the QuickLIT website for the most up-to-date version of this document.IntroductionThe Johnson Controls P2000 Security ManagementSystem (SMS) represents the latest technology inintegrated security solutions. The P2000 softwareseamlessly integrates with the following IP-based,third-party readers/controllers: ASSA ABLOY IP Enabled Wi-Fiand PoE Door Locks ASSA ABLOY Aperio Wireless Door Locks andReaders (requires a controller) HID Edge and Edge EVO Stanley Omnilock and Wi-Q Allegion Schlage AD-Series Door Locks(requires a controller) Allegion Schlage ENGAGE NDE-SeriesDoor Locks (requires a Mercury CKM-EP1501,CKM-EP2500 or third-party EP1501 or EP2500controller and GWE ENGAGE gateway)These devices control a single, fully configured doorand communicate directly with the host via TCP/IP. Inaddition, some controllers are Power Over Ethernet(PoE) compliant, enabling a single Ethernet cable toprovide both power to the reader and communicationswith the P2000 host.The P2000 software provides a single, central interfaceto configure and operate these controllers within theP2000 SMS. For a complete list and comparison ofsupported P2000 features available with the thesecontrollers, see Controller Feature Comparison onpage 6.ASSA ABLOY IP Enabled Wi-Fiand PoE Door LocksThe P2000 SMS supports ASSA ABLOY SARGENT and Corbin Russwin door locks, utilizing a Wi-Fi orPoE connection.Note: ASSA ABLOY Wi-Fi locks are not subject toreal-time updates. Synchronization between theselocks and the P2000 server is determined by theConnect Interval parameter set in the P2000system.ASSA ABLOY System Architecture DetailsThe P2000 ASSA ABLOY integration requires a serverrunning the Door Service Router (DSR) software. TheDSR server can be installed on a separate machine, oron a virtual server residing on the same machine as theP2000 server. The DSR software is located on theP2000 installation DVD.Figure 1 depicts the DSR server in a virtualenvironment, residing on the same machine as theP2000 server.DSR Server (Virtual)- Operating System- Database Engine- DSR Software PackageP2000 ServerP2000WorkstationWide AreaNetworkIP NetworkNote: HID Edge and Edge EVO controllers andStanley Omnilock and Wi-Q hardware are not currentlysupported by the advanced web user interface AlarmManager or Maps.ASSA ABLOYWireless LockASSA ABLOYWired LockFigure 1: One DSR Server Running in a VirtualEnvironmentP2000 Third-Party Reader/Controller Integration Product Bulletin1
Each DSR server supports up to 1,024 readers. Onlyone DSR server per P2000 is recommended. Forinstallations with multiple DSR servers or if more than1,024 locks are required in an installation, contacttechnical support for guidance.The following figure depicts a DSR server and P2000server installed on separate machines.P2000 ServerP2000WorkstationCorbin Russwin Door Locks: Access 800 IP1 (PoE) Access 800 WI1 (Wi-Fi) Access 700 PWI1 (Wi-Fi)First and Second Generation Access 700 PIP1 (PoE)First and Second Generation IN120 (Wi-Fi) IN220 (PoE)ASSA ABLOY Aperio Wireless DevicesWide AreaNetworkIP NetworkASSA ABLOYWireless LockDSR Server- Operating System- Database Engine- DSR Software PackageASSA ABLOYWired LockFigure 2: DSR Server and P2000 Server RunningOn Separate MachinesSupported ASSA ABLOY Door LocksThe P2000 SMS supports the following SARGENT andCorbin Russwin door locks.SARGENT Door Locks: Profile Series v.S1 (PoE) Profile Series v.S2 (Wi-Fi) Passport 1000 P1 (PoE)First and Second Generation Passport 1000 P2 (Wi-Fi)First and Second Generation IN120 (Wi-Fi) IN220 (PoE)Integration with ASSA ABLOY Aperio devices isdifferent from most integrations, in that it requires theuse of a controller. Solutions using a CK721-A orS321-IP require an integrated reader terminal,or a controller and reader terminal combination(for example, a CK721-A controller and anS300-DIN-RDR2S-A reader terminal). CKM Seriescontrollers require a single RS-485 connection. Aperiodevices are available from many ASSA ABLOY brandsand include door locks, cabinet locks, wireless readers,and more.CK721-A or S321-IP SeriesThe P2000 SMS CK721-A and S321-IP integration withthe Aperio Wiegand 1:1 Hub requires the use of aWiegand connection and supports a single Aperiodevice.CKM Authentic Mercury SeriesThe P2000 SMS CKM Series integration with theAperio RS-485 1:8 Hub requires the use of an RS-485connection and supports up to eight Aperio devices.HID Edge and Edge EVOHID Edge and Edge EVO PoE-compliant controllersinterface with the Johnson Controls P2000 SMS toprovide a single-door access control solution in an IPenvironment. Communications between thesecontrollers and the P2000 host occur over a TCP/IPEthernet connection, providing ease of installation,added flexibility, and potential cost savings in anexisting IT infrastructure. Edge EVO devices can addfunctionality with Hi-O interface modules, such asinputs and outputs, an additional reader, and more. TheP2000 software provides a single, central intuitiveinterface to configure and operate these controllerswithin the P2000 SMS.Note: Only HID Global EDWM-M, EDM-M, EWM-M,EIM-M, ELM, and EVM Hi-O devices have been tested.2P2000 Third-Party Reader/Controller Integration Product Bulletin
Stanley Omnilock and Wi-QThe Stanley Omnilock and Wi-Q hardware consists of aPortal Gateway that provides wireless communicationsto the individual readers using a Wireless PersonalArea Network (WPAN), and the individual Omnilockand Wi-Q wireless readers. The portal gatewaycommunicates with the P2000 server via standard 10/100Base-T Ethernet connectors. The transmit rangefrom the portal gateway to the reader is typically 150 to300 ft (46 to 91 m). Each portal gateway supports up to128 readers. The wireless reader performs the actualaccess validation and can support up to 65,000badges. The Stanley interface has no hard limit on thenumber of portal gateways but enforces the existingP2000 limits on the number of readers.Allegion Schlage AD-Series Wireless andHardwired DevicesIntegration with AD-Series hardware is different frommost integrations, in that it requires the use of acontroller. Solutions using a CK721-A or S321-IPrequire an integrated reader terminal, or a controller andreader terminal combination (for example, a CK721-Acontroller and an S300-DIN-RDR2SA reader terminal).CKM-EP1501 and CKM-EP2500 require a singleRS-485 connection.CK721-A or S321-IP SeriesThe P2000 SMS CK721-A and S321-IP integration withthe panel interface module PIM400-TD2 for wirelessdevices, and panel interface board PIB300-2D forAD-300 wired devices, require the use of two Wiegandconnections. Each interface module supports up to twowired or wireless readers.The following 900 MHz wireless readers can be usedwith the PIM400-TD2: AD-400 Series Integrated Locks WPR400 Portable Readers ECK400 Elevator Control Kit GCK400 Gate Control KitCKM-EP2500 or CKM-EP1501 Authentic MercurySeriesThe P2000 SMS CKM Series integration with the panelinterface module PIM400-485 for wireless devices andAD-300 wired locks require the use of CKM-EP2500 orCKM-EP1501 controllers. Each PIM400-485 supportsup to 16 wireless devices (8 recommended). TheCKM-EP2500 supports up to 16 PIM400-485(8 per RS-485 bus) and maximum 64 locks. The CKMEP1501 supports up to eight PIM400-485 or AD-300devices, for a maximum of 16 locks. Support forSchlage devices and the CKM-EP1501 controllerrequires firmware Version 1.18.7 or higher.The following 900 MHz wireless readers can be usedwith the PIM400-485: AD-400 Series Integrated Locks WPR400 Portable Readers ECK400 Elevator Control Kit GCK400 Gate Control KitAllegion Schlage ENGAGE NDE-SeriesDoor LocksThe Integration with ENGAGE NDE-Series Door Locksis very similar to the AD-Series integration to Mercurycontrollers. The solution requires a CKM-EP1501,CKM-EP2500, or third-party EP1501 or EP2500controller connected to a GWE ENGAGE gatewayusing a single RS-485 connection. Each gateway cansupport up to 10 NDE wireless locks. ENGAGEgateways can be on the same bus as AD-Seriesdevices and the same door control and bus devicelimits apply. The CKM-EP2500 supports up to 16ENGAGE gateways, PIM400-485, or AD-300 devices(8 per RS-485 bus) and maximum 64 locks. TheCKM-EP1501 supports up to eight ENGAGE gateways,PIM400-485, or AD-300 devices, for a maximum of 16locks. Support for ENGAGE NDE-Series Door Locksrequires Mercury firmware Version 1.22 or higher.P2000 Third-Party Reader/Controller Integration Product Bulletin3
P2000 Access Control Architecture OptionsThe following diagrams illustrate how to connect wired and wireless readers to the P2000 network.Figure 3 illustrates wired access control options, including examples of Johnson Controls controllers and readerterminals.Figure 4 illustrates third-party wireless access control options.P2000 ServerP2000WorkstationASSA ABLOY DSRServer (Virtual)Wide AreaNetworkIP NetworkS321-IPControllerCK721-AControllerASSA ABLOYWired LockHID Edge and Edge EVOReader/ControllerS300-DIN-RDR8SReader TerminalS300-RDR2S-AReader TerminalJohnson Controls controllersand reader terminalsFigure 3: P2000 Wired Access Control Architecture Options4P2000 Third-Party Reader/Controller Integration Product Bulletin
P2000 ServerP2000WorkstationASSA ABLOY DSRServer (Virtual)Wide AreaNetworkIP NetworkCKM-EP2500 ctionWiegandconnectionSchlagePanel InterfaceModule(PIM400-TD2)StanleyOmnilockIP PortalGatewayASSA ABLOYWireless LockSchlagePanel InterfaceModule(PIM400-485)Stanley OmnilockWireless ReaderSchlageSchlageIntegrated Lock Portable ReaderSchlageSchlageIntegrated Lock Portable ReaderFigure 4: P2000 Wireless Access Control Architecture OptionsP2000 Third-Party Reader/Controller Integration Product Bulletin5
Controller Feature ComparisonSee the last three columns for information specific to Stanley, HID, and ASSA ABLOY readers/controllers.Table 1: Controller Comparison Chart: Supported Features (Part 1 of 3)Mercury EP2500StanleyHIDAssa Abloy– –––––––Access Grant on Door Open –––––––Access Groups Per Badge323232–323232–832Add Hardware Module Wizard –––––––Air Crew PIN –––––––Alarm Debounce – –Americans with Disabilities Act (ADA) – Anti-Passback – –Anti-Tailgate – –––Aperio Lock–––– –––Backup DB to Flash Interval – –––5K31K231K2111K265K250K344K42KBadge Capacity200K1 200K1 200K1S321-IPMercury EP1502CK721-A (3.4)128-Bit Card SupportFeatureMercury EP1501CK721-A (3.2 / 3.3)Third PartyCK721-A (3.0 / 3.1)Johnson ControlsBadge Event Privilege Support –––––––Badge Override Support –––– –Badge Time Shunt – –––Calibration/Uncalibration –––Card Formats (simultaneously supported)21212111616162U5U5Card ID Support – 6 Central Mode (Card Processing) –––––––Custom Card Formats Custom PIN Code D620-ECG Elevator Mode –––––––Door Control - Access Time (manual) – 7Door Control - Timed (manual) –––Door Open Warning – –––Door Shunt Expiration Warning –––––––Dual Ethernet Support––––––8 –––Elevator Readers (max. per panel)161616–161616–––Elevator Support – –––Encrypted Communications 11 – –Encryption (FIPS 140-2 Compliant) 11 –––––––Entry/Exit Enforce – –––Executive Privilege – Exempt from Archive to Flash –––––––Extended Shunt Time –––––––Extended Time Override –––––––Facility Codes121212U5161616U5U5U5FICAM Certification (pivCLASS Integration)– –––––––HI-O Bus (partially supported on HID EVO only)–––––––– –HID Corp. 1000 Card Format High Level Elevator –––––––High Performance Entry/Exit Status Synchronization –––––––6P2000 Third-Party Reader/Controller Integration Product Bulletin
Table 1: Controller Comparison Chart: Supported Features (Part 2 of 3)Mercury EP1501Mercury EP1502Mercury EP2500 – ––– Holidays40404040404040–6432Input Groups –––––––Input Suppression –––3263263261264925695129–161054–Inputs (max. per panel)Assa AbloyS321-IP History Upload With SecondsHIDCK721-A (3.4)High Speed RS485FeatureStanleyCK721-A (3.2 / 3.3)Third PartyCK721-A (3.0 / 3.1)Johnson ControlsIntrusion *–––– –––Issue Level per Badge – Keyless Override Feature –––––––KONE HLI Elevator Support ––––––– 11 –––––––Multi Card Types – Multiple Facility Codes per Badge Type – N-Man Rule – 12 12 12–––Network OSDP Version 1 Reader Support– 13 13– –––Otis Compass Elevator Support –––––––Otis EMS Serial Elevator Support– –––––––Otis EMS - Security / BMS Elevator Support –––––––––Output Control (manual) – –Output Groups –––––––Output Groups associated with Time Zones –––––––Output Status Reporting –––Outputs (max. per panel)208208208864925695129–41024–Override Expiration Warning –––––––Override Reset Threat Level ––––––Panel Card Events202020–––––––Panel Relay Set/Reset –––––––Panel Relays111–––––––Peer to Peer Badge Sync –––––––PIN 1 Duress – –––PIN Code Digits Supported (Custom)99949993-69–Power over Ethernet (PoE) Connection––––– –– 7KONE IP Elevator SupportRaw 128 Bit Card Format––– ––––––Reader Override –Reverse Card Reading – –––Reverse Swipe Duress –––––––Security Level ––––––Schlage AD300 Lock (without Wiegand converter)–––– – –––Schlage AD400 Lock (without Wiegand converter)–––– – –––Schlage ENGAGE Gateway (RS-485) and Lock–––– – –––Special Flags (A, B, C) – Star Feature –––––––Strike Status ––– ––P2000 Third-Party Reader/Controller Integration Product Bulletin7
Table 1: Controller Comparison Chart: Supported Features (Part 3 of 3)CK721-A (3.4)S321-IPMercury EP1501Mercury EP1502Mercury EP2500StanleyHIDAssa AbloyTerminal Override StatusCK721-A (3.2 / 3.3)FeatureThird PartyCK721-A (3.0 / 3.1)Johnson Controls – 7Terminal Readers646464217646412821014Terminal Time Zone Enabled 14 14 14 –Terminal Time Zone Override 14 14 14 Terminal Time Zone PIN Suppression 14 14 14 ––1ThyssenKrupp Elevator Support– ––––––Time Zones per Badge3232322–15–15–15–88Time Zones per Panel64646464646464326432 –––––––Valid and Unauthorized* Intrusion is also supported with Aritech and Bosch panels.1. When the number of badges exceeds 120,000 (100,000 for 128-bit badges), the number of access groups should be limited to 50,000.2. Using the standard feature set EP2500 supports 111,000 badges. EP1501, EP1502, and Schlage PIM400-1501 support 31,000. With a reducedfeature set, EP2500 supports 500,000. EP1501, EP1502, and Schlage PIM400-1501 support 250,000. To exceed the lower numbers, contactTechnical Support for details on changing the badge configuration.3. Available for HID Edge EVO if not using card ID; otherwise, the badge capacity is 125,000.4. For HID Edge.5. Unlimited.6. Up to 15 digits.7. Supported by hard-wired (PoE) version only.8. Supported by Mercury EP2500 only, using Lantronix Micro 125 Embedded Serial to Ethernet Module.9. For panels with no reader modules.10. For HID Edge EVO.11. Supported by CK721-A Version 3.1.12. Mercury panels support the N-Man rule through the Two Badge Access feature defined at the terminal (for a maximum of two people).13. CK721-A panels display default messages on OSDP readers with displays.14. Provided via Mercury Triggers and Procedures.15. Uses Access Group Details to associate Readers with Time Zones, on an access group basis, not on a badge basis.8P2000 Third-Party Reader/Controller Integration Product Bulletin
Badge and Time Zone Maximum Value Comparison According to ControllerThe following table compares the maximum values of badge and time zone elements between controllers.Table 2: Controller Comparison Chart: Badge and Time -AS321-IP1Mercury64 bit63 bitN/A32Stanley247 bit3HIDASSA ABLOY64 bit19 Digits4832Max Badge Number64 bitNumber of AccessGroups32Max Issue Level255N/A25599N/A255Max Security Level9999 (2.6 and later)N/AN/AN/AN/ANumber of time pairsper day1041020610Number of uniquetime pairs perTimezone404012N/A60325N/A64 bit for manual entry or CK721-A V3.1 or earlier. 128 bit for entry via pivCLASS integration and CK721-A V3.2 or later.Max Badge Number for Mercury panels is 9,223,372,036,854,775,807Max Badge Number for Stanley panels is 140,737,488,355,32719 digits for Mag Stripe, 48 bits for othersEach ASSA ABLOY lock can only store a maximum of 32 different time periodsOrdering InformationTable 3: Ordering InformationPart NumberDescriptionP2K-P-ASSA314P2000 Integration of up to 8 ASSA ABLOY Readers1P2K-P-EDGE314P2000 Integration of up to 8 HID Edge Readers1P2K-P-STN314P2000 Integration of up to 8 Stanley Omnilock or Wi-Q Readers11.Orderable in increments of 8 integrated readers.ASSA ABLOY Aperio, Schlage AD-Series, and Schlage ENGAGE devices do not require additional option keys.Related DocumentationTable 4: Related DocumentationDocument TitleDocument NumberP2000 Software User ManualPart No. 24-10832-194P2000 Software Installation ManualPart No. 24-10832-151Installing Stanley Wi-Q System Software for OSI Integrations TechnicalBulletinLIT-12011909P2000 Third-Party IP Reader/Controller Integration Catalog PageLIT-1900975Connecting Schlage ENGAGE Gateways to Mercury ControllersLIT-12012359Building Efficiency507 E. Michigan Street, Milwaukee, WI 53202Metasys and Johnson Controls are registered trademarks of Johnson Controls, Inc.All other marks herein are the marks of their respective owners. 2017 Johnson Controls, Inc.P2000 Third-Party Reader/Controller Integration Product BulletinPublished in U.S.A.9www.johnsoncontrols.com
on a virtual server residing on the same machine as the P2000 server. The DSR software is located on the . S321-IP require an integrated reader terminal, or a controller and reader terminal combination (for example, a CK721-A controller and an . is very similar to the AD-Series integration to Merc
