background image

C H A P T E R

 

2-1

Cisco Physical Access Gateway User Guide

OL-32499-01

2

Installing and Configuring the Cisco Physical 
Access Gateway

Contents

This chapter includes the following information:

Overview, page 2-2

Package Contents, page 2-3

Physical Overview and Port Description, page 2-3

Installing the Cisco Physical Access Gateway, page 2-7

Configuring and Managing the Gateway Using a Direct Connection, page 2-15

Understanding Network Time Protocol (NTP) Settings, page 2-15

Connecting a PC to the Gateway, page 2-16

Entering the Gateway Network Settings, page 2-17

Changing the User Password, page 2-19

Upgrading the Gateway Firmware Using a Direct Connection, page 2-20

Displaying Serial Numbers and Other Information, page 2-23

Configuring the Gateway Using the Cisco Physical Access Manager, page 2-24

Resetting the Cisco Physical Access Gateway, page 2-25

Summary of Contents for Physical Access CIAC-GW-K9

Page 1: ...eway page 2 7 Configuring and Managing the Gateway Using a Direct Connection page 2 15 Understanding Network Time Protocol NTP Settings page 2 15 Connecting a PC to the Gateway page 2 16 Entering the Gateway Network Settings page 2 17 Changing the User Password page 2 19 Upgrading the Gateway Firmware Using a Direct Connection page 2 20 Displaying Serial Numbers and Other Information page 2 23 Con...

Page 2: ...ocks and other input and output devices The Gateway is connected to the Cisco Physical Access Manager using an Ethernet connection to the IP network Power is supplied through a Power over Ethernet PoE connection or using a DC power source Each Gateway includes connections for up to two Wiegand door readers three input devices and three output devices Optional expansion modules are available to add...

Page 3: ...interfaces Two mounting brackets with 4 screws for each bracket Regulatory compliance and safety information Quick Start guide Connector plugs including the following Physical Overview and Port Description Figure 2 2 and Figure 2 3 show the location of each port including connections for power Ethernet door readers and other input and output devices Figure 2 2 Cisco Physical Access Gateway Ports a...

Page 4: ...M appliance 4 Fast Ethernet interfaces There are two 10 100 BASE TX RJ 45 connectors ETH 0 connects the Gateway to the network ETH 0 also supports Power over Ethernet PoE for the device optional ETH 1 connects the device to a PC to access the device configuration web page 5 Serial interface The RS 485 interface is not supported in this release 6 Wiegand interface This interface can be configured a...

Page 5: ...nd the Cisco PAM module as described in the Installing Surge Suppressors on Output Device Connections section on page 1 13 Common C is always used and either NC or NO is used to complete the connection All Generic Output devices installed in Cisco PAM systems prior to release 1 1 0 were connected to the Gateway Reader or Output modules with the wiring reversed If upgrading to Cisco PAM release 1 1...

Page 6: ...t Port LEDs OFF Input is not configured GREEN Input is configured and in normal state BLINKING GREEN Input is configured and is receiving and alarm or other data BLINKING RED Input is configured short RED Input is configured open Output Port LEDs Off Output not configured Solid Green Output configured and in default state Blinking Green Output configured and active Table 2 1 Gateway LEDs continued...

Page 7: ...at you have the necessary mounting brackets or other hardware See the Mounting a Gateway or Optional Module section on page 1 14 Procedure To install the Cisco Physical Access Gateway perform the following procedure Step 1 Mount the Gateway to a wall See the Mounting a Gateway or Optional Module section on page 1 14 for more information Step 2 Connect the Gateway to a power source If using a DC po...

Page 8: ... of the following configurations Connect a single door reader using all 10 Wiegand interface pins Connect one or two door readers using 5 pin Wiegand interface connections for installations where a 5 pin interface is sufficient 1 DC power GND ground Connects the DC ground wire to the Gateway 2 DC power Voltage In VIN Connects the DC Voltage In VIN wire to the Gateway 3 ETH0 for PoE Connects the Et...

Page 9: ...ond reader use the alternative connections shown in the column on the far right Figure 2 5 Wiegand Interface on the Gateway and Reader Modules Chassis Label Description One Reader 10 Wire Connection First Reader in a 5 Wire Connection Second Reader in a 5 Wire Connection 1 PWR 12v PWR red 1 PWR red PWR red 2 GND Ground GND black GND black GND black 3 D0 Data 0 D0 green D0 green 4 D1 CLCK Data 1 D1...

Page 10: ... Reader Modules c Connect the wires from the input devices see Figure 2 7 Note Each of the input connections can be configured as supervised or unsupervised The tamper and power fail inputs can be configured as additional unsupervised ports A supervised input supports four states normal alarm open and short An unsupervised input indicates only normal or alarm 9 HCRD Hold Control HCRD blue D1 CLCK ...

Page 11: ... circuit is closed when triggered If the relay is normally closed use the C NC connections The circuit is opened when triggered 1 Positive Input Connections Positive connection to an Input device 2 Ground Input Connections Ground connection to an Input device 3 TM Tamper input an unsupervised input that raises a tamper alarm when the circuit is open Can be configured as a general input device usin...

Page 12: ...AN1 port as shown in Figure 2 9 b Connect the CAN wires to the CAN bus as shown in Figure 2 10 c On the last device in the CAN bus set the CAN terminator switch to ON The CAN terminator switch in included on the Reader Input and Output modules only the Gateway is always the first device in the CAN bus Set the terminator switch to OFF for all other modules in the CAN bus Note Modules are connected ...

Page 13: ...AN Bus Wiring Note On the last device in the CAN bus set the CAN terminator switch to ON The CAN terminator switch in included on the Reader Input and Output modules only the Gateway is always the first device in the CAN bus 1 CAN Connects to the positive terminal of the CAN bus 2 CAN Connects to the negative terminal of the CAN bus 3 Shield Connects to GND and or Shield 271590 2 3 1 271589 Gatewa...

Page 14: ... Ethernet Connection for the Cisco Physical Access Gateway Step 8 Continue to the Configuring the Gateway Using the Cisco Physical Access Manager section on page 2 24 1 ETH0 Ethernet port for connecting the Gateway to the IP network Note The ETH0 connection can also be used for Power over Ethernet Note The ETH1 port is used to connect a PC to the Gateway for configuration and monitoring See the Co...

Page 15: ... recommends using a network time protocol NTP server to synchronize the date and time clock on each Gateway module and on the Cisco PAM appliance This ensures that events and messages between the server and the Gateway modules are in sync If the time and date are not synchronized inconsistent system behavior can occur We strongly recommend using the same NTP server setting for the Cisco PAM applia...

Page 16: ...hysical Access Gateway See the Installing the Cisco Physical Access Gateway section on page 2 7 for more information In addition gather the following information The IP Address of the Cisco PAM appliance You can use a DHCP server to assign an IP address for the Gateway If a DHCP server is not used gather the Cisco Physical Access Gateway IP address IP gateway subnet mask The domain name server DNS...

Page 17: ...isco PAM appliance that is used to manage the Gateway Tip Gateway modules can be added to the IP network before or after the full module configuration is entered in Cisco PAM For more information see the Cisco Physical Access Manager User Guide Procedure Complete the following steps for each Gateway in the system Step 1 Enter the ETH0 Configuration settings as shown in Figure 2 13 The ETH0 port is...

Page 18: ...CP option 151 of the DHCP response c Enable SSL The secure socket layer SSL is enabled for secure communication between the Gateway and Cisco PAM appliance by default If necessary SSL can be disabled by unchecking the Enable SSL check box Note SSL is enabled by default on all Gateways and Cisco PAM appliances If SSL is disabled for a Gateway but enabled for Cisco PAM the Gateway will not be able t...

Page 19: ...h the Cisco PAM appliance Delete Credentials delete the credential data stored on the Gateway The credential is automatically downloaded when the gateway establishes communication with Cisco PAM appliance Note Changes do not take effect until saved Delete Events Delete Configuration Delete Credentials includes an application reset of the gateway Step 5 Repeat Step 1 through Step 4 for each Gateway...

Page 20: ...co Physical Access Gateway Step 2 Enter the Current Password Step 3 Enter the New Password Step 4 Re enter the new password to verify the setting Step 5 Click Update to save the changes Note The username cannot be changed Tip To reset the device to the default password see the Hard Reset Restore Factory Defaults section on page 2 25 Upgrading the Gateway Firmware Using a Direct Connection Tip You ...

Page 21: ...image is the firmware currently operating the Gateway module The active image is the image that will become the running image when the Gateway module is reset The table displays the images currently loaded on the module Current Images a list of the firmware images currently loaded on the Gateway module Running the green check in the Running column indicates the image operating the Gateway Active t...

Page 22: ...ons that will occur after the image is loaded to the Gateway Note When upgrading Gateway firmware images from a release prior to release 1 1 0 choose all available options Active image checked by default make the firmware file new active image Reset gateway checked by default perform a soft reset to powercycle the module See the Soft Reset Powercycle section on page 2 25 for more information Chang...

Page 23: ...ial Numbers and Other Information Use the Show Inventory window to display the module serial number and other information such as the module serial number Step 1 Log on to the Gateway administration tool as described in the Connecting a PC to the Gateway section on page 2 16 Step 2 Click the Show Inventory tab as shown in Figure 2 16 Figure 2 16 Show Inventory Window for the Cisco Physical Access ...

Page 24: ...tial Gateway configuration is complete use the The Cisco Physical Access Manager Cisco PAM desktop software for advanced configuration of Gateways and other components For example you can use Cisco PAM to configure doors door devices and access policies enabled by the Gateway modules In addition you can use Cisco PAM to do the following Display the network and firmware settings for each Gateway Ch...

Page 25: ...g and Managing the Gateway Using a Direct Connection section on page 2 15 to connect a PC to the Gateway and click the Reset button at the bottom of the screen Cisco PAM desktop software Open the Hardware module in the Doors menu and right click on a Gateway Controller blue icon Choose Reset from the menu Hard Reset Restore Factory Defaults A hard reset deletes all information on the device includ...

Page 26: ...2 26 Cisco Physical Access Gateway User Guide OL 32499 01 Chapter 2 Installing and Configuring the Cisco Physical Access Gateway Resetting the Cisco Physical Access Gateway ...

Reviews: