Installation Manual | IM-20210309-TP-48

Access Control | Controllers | Controllers |

This manual represents the knowledge at the above-mentioned time. TKH security works non-stop to improve her products. For the most recent technical information please contact your consultant or dealer.

1 Introduction

1.3 About the manual and help

To be used with IPU-8, version 1.00.
IPU-8 is the abbreviation for iProtect Processing Unit - 8. It's the successor of the Stellar.

2 What is new?

2.2 General

IPU-8 (iProtect Processing Unit - 8) is the successor of Stellar. Both processor and operating system are renewed. The Processor is renewed (66MHz, 32bit) and the new IPU-8 is supplied with an Operating system (MicroLinux). This means that the software of the original Stellar will not operate with the IPU-8. There are
special software versions available for the IPU-8. Just like the iProtect system the IPU-8 vcan be supplied with (new) software by means of a simple 'post' with the aid of a browser.

Differences concerning hardware are:

Use of a 10/100 Mb Ethernet interface.
There is 1 serial port less. The RS422 output is removed. This connector output is now available for two tamper inputs (cabinet and cover).
The diagnostic port and the RS232 port are reversed. The diagnostic port has changed into a console port. Moreover, this way a distinction can be made between the IPU-8 and the Stellar.
There are two adc converters. These are used to measure the voltage of both the power supply and the battery.
There is no battery jumper. There are no longer jumpers on the IPU-8. The battery will be charged continuously (except during the battery voltage measurement).
There are extra LEDs. Behind all connectors are diagnostic LEDs, so that one can see visually what is going on on the connector.

Differences concerning software are:

FTP is switched off for security reasons.
Post of new firmware is executed over port 80.

At the same time telnet is switched off for security reasons.

2.2.1 Certification

The IPU-8 meets all requirements of CE and the rules set by part 15 B of the FCC ID. IPU-8 is an unintentional radiator and complies with part 15 B of the FCC, to which computer devices are subject as well.

Operation is subject to the following two conditions:

The device may not cause harmful interference;
The device must accept any interference received, including interference that may cause undesired operation.

3 Installation instructions for IPU-8 and Orbit

3.1 IPU-8

IPU-8 is the new substation of TKH Security. A maximum of 8 terminals can be connected to IPU-8. In most cases the terminal will be a 1-Reader Orbit, a 2-Reader Orbit or a I/O Orbit. The cabling, with IPU-8 as its centre, creates a star-network. A maximum cable distance of 1,200 metres can exist between IPU-8
and an Orbit.

Communication between IPU-8 and the terminal takes place via 4-ply RS422, using the Profibus protocol. This IPU-8 version is fully adapted to the cabling (UTP or STP) in a modern building with RJ45 connectors. Of course, other cables can also be used, if a proper changeover to the RJ45-connector is realised at IPU-8 and at the terminal. For this purpose, TKH Security has a special 'clickable' (on 35 mm rail) module (to RJ45-module). In this module there are also gas-discharge tubes, so that the RJ422 communication is better protected against external influences.

In addition to the 8 Reader terminal connections, IPU-8 has 3 ports to enable its own control, via ethernet, via diagnostic RS232 or via standard RS232. The standard RS232 is used in case of short distance PC-connections (5 meters, or 15 ft). The fourth connector is for connection of the two tamper inputs (cabinet and cover).

Even though IPU-8 is only a modulus within an expanded system, it has been tested thoroughly by an independent institute and it meets all CE- and FCC-requirements. From 2006 onwards IPU-8 replaces the Stellar step by step. First it will be used within the iProtect system. In these configurations existent cabling systems like UTP can be used. IPU-8 is "plug" compatible with Stellar except for the fact that the console is
located next to the Ethernet connection and the fourth port contains two tamper contacts. The third port of the left is now meant for the connection of the converter to the bus-based systems like the KP1675, entry/exit terminals and the ticket machine.

IPU-8 is mounted in an aluminium profile that can be clicked directly onto a standard 35 mm installation rail. The IPU-8 board is moulded into moulding resin.

3.2 1-Reader Orbit

This forms the reader interface for all digital readers. 1-Reader Orbit processes bits and bytes coming from the reader into a recognisable code. (For example, for the magstripe protocol this card data is STX ssss kkkk ETX IRC). In addition, 1-Reader Orbit facilitates communication with IPU-8 according to the Profibus standard over a maximum of 1,200 metres. 1-Reader Orbit also has two outputs and four digital inputs, to be used for loop, button, closed-door-sensing or other applications. The distance to the reader can be a maximum of 20 metres.

The 1-Reader Orbit is mounted in an aluminium profile that can be clicked directly onto a standard 35 mm installation rail. The Orbit board is moulded in a moulding resin. Like IPU-8, 1-Reader Orbit has been tested thoroughly and meets all CE-requirements.

3.3 2-Reader Orbit

In addition to the 1-Reader Orbit for connection of one reader there is the 2-Reader Orbit for connection of two readers. This 2-Reader Orbit has two-time four inputs and two-time two outputs. The profile in which the electronics are mounted is 240 mm in length.

3.4 I/O Orbit

The I/O Orbit is an interface for digital in and outputs. The Orbit is equipped with 12 inputs / outputs which can be configured using the appropriate software. It is possible to connect cables with pull relief and shield to the aluminium profile of the I/O Orbit. Examples of applications of the I/O Orbit are loop, button and
door-closed sensing, calling in emergency centres or other applications.

Communication between IPU-8 and the I/O Orbit takes place via RS422 using the Profibus protocol over a maximum of 1200 meters. The I/O Orbit is mounted on an aluminium profile which can be directly clicked onto a standard 35 mm assembly rail. The Orbit board is moulded in PUR resin. The I/O Orbit meets all CE-requirements.

3.5 Power supply for IPU-8

For IPU-8 to function properly, it is of utmost importance that IPU-8 has its own power supply and that the earth of the power supply is connected to an actual earth. TKH Security has a standard solution for this: a small, simple loose power supply (18V DC / 1,6A for 100-240V). In this power supply the earth of the input
(230 V) is through-connected with the earth at the output. It is strongly advised not to use the IPU-8 power supply at the same time for other equipment like latches and Orbits.

IPU-8 is also equipped with a supply circuit for the correct power supply of a rechargeable battery of 2 Ampere-hours. The battery back-up jumper on IPU-8 on the right back should always be present. The power plug of IPU-8 is removable, so that this can easily be disconnected from the supply during the installation phase.

Please note:

Use a 12 volt lead battery.
The connection of the power supply (more than +15 volt) to the battery input
of IPU-8 can seriously disrupt the supply circuit.

3.6 Power supply for Orbit

For the proper functioning of the Orbit it is of equally great importance that the earth of the supply be connected to an actual earth. TKH Security has two standard solutions for this: the small, simple, loose power supply (18V DC / 1,6A for 100-240V) or a heavier, protected power supply with a built-in battery (24 Volt / 1,8 A for 100-240V). In both supplies the earth of the input (230 V) is through-connected with the earth of the output.

The supply connection of the different Orbits is not removable. Unlike the IPU-8 power supply, the Orbit power supply can also be used to supply latches at the same time as the Orbit.

3.7 Orbit and I/O connection

Digital in and outputs that can perform various functions are installed in many systems. The magnetic contact is widely known. An intact contact indicates that a door is closed, while a broken contact indicates an open door. Based on this data the entry control software can establish whether the door was opened unauthorised, but also whether the door is open for too long. Loop detectors are also applied often. Installed at a barrier, these indicate whether a car is present. In the software it can be a condition for the printing of a parking ticket or for the opening of the barrier. This type of equipment can be connected directly to Orbit.
Four entrances are available for this purpose. Only limited cabling is required, as Orbit is installed such a short distance from a door or barrier.

Orbit has two outputs to link direct voltage (DC). One is used to control a door lock, while the second could, for example, be used to control a light or siren. In this way, the whole area around the door can be controlled with Orbit. The outputs are solid-state relais which are always open in their resting state. When using closed-circuit current in High Security applications, we advise you to apply a mechanical relay to control and open the door locks. When this kind of relay has been used, the doors will not be opened automatically in case the Reader Orbit is somehow sabotaged.

3.8 Tamper inputs

The tamper inputs are located on the fourth connector on the left side. On the two
leds behind this input one can see whether the inputs are open/closed.

3.9 The user interface

A user interface is required to ensure that a specific card gains access to a specified reader. With conventional products, it was always necessary after installation to grant access to a card via the standard user interface to check whether the installation had been completed correctly. If a card did not receive access, this did not necessarily mean that something had been set incorrectly or that, for example, a cabling error had been made.

3.10 VT100-terminal emulation

Using a simple installation menu, IPU-8 diagnostics, it is possible to determine whether everything is technically in order with IPU-8, without having to download all settings via a user interface. Firstly all hardware (IPU-8, terminals, readers, locks and digital entrances) are connected. Then, without an exchange being present, it can be checked, locally via a simple terminal in VT100 mode, whether all hardware is operational.

There are many different programs, including Procomm, which can emulate a VT100 terminal on a PC. Using a simple laptop, diagnostics can be logged in via the serial port in IPU-8. The VT100 terminal is connected to the IPU-8 diagnostic RS232 port, whereby the serial communication of the terminal is set at 9600 baud, 8 databits, no parity and 1 stopbit.

3.11 IPU-8 diagnostics

When after starting up ucLinux the line ‘Hit any key within 5s to run IPU-8 diagnostics...’ appears and a key is pressed within five seconds, then the diagnostics programme is started.

The main menu has the following appearance:

Only options 1, 3, 4, 5, 6, q and r are applicable for the installer.

3.11.1 Environment settings

If option 1 is selected from the main menu of the IPU-8 Diagnostics programme, it is possible to see and alter the environment options. The following options are relevant:

IP_ADDRESS - the IP-address of the IPU-8;
GATEWAY_ADDRESS - the gateway address if the communication passes via a router
NETMASK - for a distinction between the local Ethernet traffic and Ethernet traffic via a router.

Note: to activate these settings reboot the system. Use option (r) and do not
restart IPU-8 by discharging the voltage.

3.11.2 Test profi device communications and functionality

If in the main menu of the IPU-8 Diagnostics programme option 3, Test profi device communications, is chosen, the user is taken to the Profibus DP communication test screen (screen 4).This allows the user to set per port whether a Profibus appliance is connected and if so, which slave that is. Whether there is communication (connected/disconnected) can be found under Communication Status. The identification number of the appliance in question, as well as the hardware and software version numbers, are also displayed on this screen.

If in the main menu of the IPU-8 Diagnostics programme option 4, Test profi-device functionality, is chosen, the user can test whether the connected equipment itself is functioning properly. The user is first asked to enter the port to which the appliance to be tested is connected. Next, the various types of equipment which can be connected are displayed.

In this screen the user is first asked to enter the slave number. In case of the appliance being a Parking Connection Board, a value between 1 and 4 can be entered. In all other cases, the slave number is 1.
Then the user is asked to enter the interface type (MT or Wiegand). Finally, if it is confirmed that all input is correct, and the user wants to continue, the next screen will display the options and status of the selected appliance:

In the screen above the in and outputs can be tested. Via keys 1 through 4 the outputs can be turned on and off. It is possible to test the readerleds via key 5 or 6 (five times turned on or off quickly).
When a card is presented to one of the readers, the card data will be displayed in the field Reader. R1 indicates that Reader 1 has been reading a card; R2 indicates that Reader 2 has read the card.
The number against the card number that has been read (here 08) records the number of digits the card number is composed of.

Important: The inputs and outputs on the 1-Reader Orbit and 2-Reader Orbit hardware are numbered from 0. This numeration is taken up in IPU-8 Diagnostics. However, in the descriptions in the manuals that go with the diverse appliances the numbering might start from 1.

When carrying out an I/O test, it is important the I/O direction, i.e. input or output, is set correctly. Next, press S, Start, to enter the selection and view the status.

Via opton 5, Show board revision and test diag leds & inputs, in the main menu of the IPU-8 Diagnostics programme, the user reaches the Onboard Led Test menu (screen 8).
The 2 inputs on the UTP connector (dig I/O) can be tested. When an input is made the Board line will go from 1 to 0. When the input is disconnected it returns to 1.

Connections:
7=GND
8=GND
5=Left LED; line 1; wall contact
4=Right LED; line 0; cover contact

Via option 6, Test Power, in the main menu of the IPU-8 Diagnostics programme, the user reaches the Power test screen (screen 9).

Via option q, Start application, one can stop this IPU-8 Diagnostics programme.
Via option r, Restart system, one can restart the IPU-8 so that for example the new environment settings can become active.

3.12 IPU-8 login

The IPU-8 is provided with ucLinux operating system. A login prompt is given at the end of the restart stage. It is advised to alter the default passwords when unauthorised persons can get access to the serial port/cable. The default logins and the password are:

Login: root
Passwd: iekp47

The root password can be altered with the password command. The command is passwd <loginname>. Down below is an example session of modifying the root password.

The login procedure is available to restart the IPU-8 in a proper way. This can be done by the command reboot. It prevails over restarting the IPU-8 by means of removing the voltage of the IPU-8. First log on as root.

3.13 Technical specifications for IPU-8

Knowledge Base

*IPU-8 and Orbit