bolid S2000-2 User manual

Orion ISS
Access Controller
S2000-2
User’s Manual
ISO 9001

Orion ISS
www.bolid.com 2
This User’s Manual is intended to help for studying operability principles and maintenance of S2000-2
or S2000-2 rev.01 Access Controller of version 1.11.
The S2000-2 rev.01 access controller is equipped with twofold increased memory capacity for access
keys (8192 keys), as well as event buffer capacity (4095 events) against the S2000-2 controller. All
information presented in this Manual is applicable for both controllers taking this difference into ac-
count.
Please read the instructions completely before connecting, operating, adjusting or maintaining
this product.
The following terms are used throughout the Manual
Zone: a minimal part of the security and safety installation that can be monitored and controlled inde-
pendently. Depending on the context, the term ‘zone’ can imply an alarm loop, an addressable
detector, a hardware component and so on.
Partition: A set of zones that can be user controlled as a whole. As a rule, zones fall into partitions
depending on their location (e.g., one partition can involve all zones at one individual area)
Arm/Disarm means starting/cancellation monitoring of loop (zone, partition, system) conditions and
signaling alarms in controlled zones
Network Address (Address): – a unique number of the device (from 1 to 127) within the ISS Orion
local RS-485 network

S2000-2 Features and Design
3 www.bolid.com
Table of Contents
Features and Design.............................................................................................................. 5
Specifications ........................................................................................................................ 9
Operating.............................................................................................................................. 13
Access Keys ............................................................................................................................... 14
Operation Modes ........................................................................................................................ 16
Two Entrance Doors Mode................................................................................................ 16
One Entrance/Exit Door Mode .......................................................................................... 17
Turnstile Mode................................................................................................................... 18
Swing-beam Barrier Mode................................................................................................. 19
Two Sluice Doors Mode .................................................................................................... 20
Access Modes ............................................................................................................................ 22
Access Locked Mode ........................................................................................................ 22
Access Locked by a Locking Key or Network Controller Command 22
Access Locked by Arming of Access Locking Alarm Loops 23
Free Pass Mode ................................................................................................................ 23
Controlled Access Mode ................................................................................................... 24
Operating Principles ................................................................................................................... 25
Access Granting ................................................................................................................ 25
Alarm Loop Arming/Disarming........................................................................................... 27
Alarm Loops................................................................................................................................ 28
Two Factor Authentication .......................................................................................................... 31
Access Rights............................................................................................................................. 32
Passage Modes and Two or More Person Rule Access Control....................................... 32
Time Schedules................................................................................................................. 34
Anti-passback Rules.......................................................................................................... 35
Centralized Access Control and Alarm Loop Arming/Disarming ................................................ 38
Key Pattern Based Access Control............................................................................................. 40
Light and Sound Alarms ............................................................................................................. 42
Data Communications Via RS-485 Interface .............................................................................. 45
Condition Message Transmission ..................................................................................... 45
Remote Control via RS-485 interface................................................................................ 46
Installation............................................................................................................................ 47
Standard Delivery ....................................................................................................................... 48
S2000-2 Mounting ...................................................................................................................... 48
S2000-2 PCB Layout.................................................................................................................. 49
Wiring the S2000-2 for Two Entrance Doors Mode .................................................................... 50
Wiring the S2000-2 for One Entrance/Exit Door Mode............................................................... 52

Orion ISS
www.bolid.com 4
Wiring the S2000-2 for Turnstile Mode........................................................................................54
Wiring the S2000-2 for Swing-beam Barrier Mode......................................................................56
Wiring the S2000-2 for Two Sluice Doors Mode .........................................................................59
Connecting Readers....................................................................................................................61
Connecting Dallas IButton Readers...................................................................................62
Connecting Readers with Touch Memory Output Interface ...............................................62
Connecting Readers with Wiegand Output Interface.........................................................63
Connecting Readers with ABA TRACK II Output Interface................................................63
Connecting an Arming Request Button..............................................................................63
Connecting Door or Passage Sensors ........................................................................................64
Connecting Alarm Loops .............................................................................................................66
S2000-2 Programming .........................................................................................................67
System Configuration Parameters ..............................................................................................68
Reader Configuration Parameters...............................................................................................70
Alarm Loop Configuration Parameters ........................................................................................75
Relay Configuration Parameters .................................................................................................75
Access Group Parameters ..........................................................................................................77
Access Key Configuration Parameters........................................................................................80
Access Key Pattern Configuration Parameters ...........................................................................81
Key Programming........................................................................................................................83
Programming the Controller Depending on Its Operation Mode .................................................85
Two Entrance Doors Mode Programming..........................................................................85
One Entrance/Exit Door Mode Programming.....................................................................86
Turnstile Mode Programming.............................................................................................86
Swing-Beam Barrier Mode Programming ..........................................................................87
Two Sluice Doors Mode Programming ..............................................................................87
Maintenance .........................................................................................................................89
Technical Inspections..................................................................................................................90
S2000-2 Operability Inspection..........................................................................................90
Self-Diagnostic Test...........................................................................................................92
Condition Inspection of Readers’ Connection Circuits.......................................................92
Condition Inspection of LOOP, DOOR and EXIT Circuits..................................................93
Appendix Connecting Some Models of Readers to the S2000-2 Controller..................... 95
Bolid S2000-Proxy / S2000-Proxy N Reader Connection ...........................................................96
Bolid Proxy-2A / Proxy-3A Reader Connection...........................................................................96
PR-A03 / PR-A05 / PR-P09 Reader Connection.........................................................................97
PR-H03 / PR-H05 / PR-M03 Reader Connection........................................................................97
Bolid Schityvatel-2 / Schityvatel-3 Reader Connection ...............................................................98

S2000-2 Features and Design
5 www.bolid.com
FEATURES AND DESIGN

Orion ISS
www.bolid.com 6
The S2000-2 access controller (hereinafter referred to as the controller) is designed to control access
through one or two access points by means of reading presented access keys (Proximity cards, iBut-
tons, PIN-codes and so on), verification of access rights and closing (opening) relay contacts that
operate locking units (electromagnetic locks and strikes, turnstiles, swing-beam drives and so on). To
read access keys one or two readers with Touch memory, Wiegand or ABA TRACK II output interface
are to be connected to the S2000-2 controller.
The controller is designed to operate either as a part of a PC-based Orion integrated security system
under the Orion 1.0 KD (version 7 or higher) or the Orion Pro (version 1.8 or higher) Workstation
software, or as a part of an Orion integrated security system based on S2000 or S2000Мcontrol con-
sole, or standalone.
The controller can be used for operating in one of the following operation modes:
¾Two Entrance Doors
¾One Entrance/Exit Door
¾Turnstile
¾Swing-beam Barrier
¾Two Sluice Doors
Moreover, access via any access point (controlled by a reader) can be switched to locked or free ac-
cess mode.
In order to verify access rights of the presented key, the controller takes into account the following
access restriction factors:
¾The key is not locked
¾Access rights of the key to the restricted access zone
¾Duration of the key validity
¾The key time schedule is active
¾Anti-passback rules violation (preventing a key from being passed back for re-use)
¾Access lockout by means of alarm loops of the controller
Two-factor authentication mode can be applied to a reader of the controller if the reader is physically
designed to read not one but two different identifiers of a person, for example a combination of Prox-
imity card and PIN code. For such a case memory capacity of the controller is twice decreased.
Both local and centralized strategies of access control can be implemented by an S2000-2 access
controller, connected via RS-485 interface to a network controller a PC under ARM Orion Work-
station software. Local control means that access is granted or denied depending on access rights of
the identifier (key), stored in the controller database, the current access mode and access violations
previously made by this key. Centralized access control means that the presented key code is read

S2000-2 Features and Design
7 www.bolid.com
and transferred to the network controller (the Orion Workstation), which grants or denies access (only
for operation as a part of the PC-based Orion system).
To increase the level of authentication two- or three-person access rules can be assign to be applied
for a group of access keys.
Besides the access control functions the S2000-2 access controller (except being in Swing-beam op-
eration mode) can monitor for conditions of two alarm loops connected to its relevant inputs signaling
loop alarms locally and transmitting loop event information via the RS-485 interface to a network con-
troller (S2000/S2000M or ARM Orion). The controller provides arming and disarming of the alarm
loops by presenting pre-programmed keys designed for arming/disarming to a reader of the controller,
or by a relevant command of the network controller.
The S2000-2 controller provides light and sound indication of access conditions and violations as well
as loop alarms by means of built-in LEDs and sounder, and by means of LEDs and sounder of the
reader.
The controller view is shown in Figure 1. The green READY LED is designed to indicate S2000-2 op-
eration conditions while the two red LEDs 1 and 2 are intended to provide access and arm-
ing/disarming indication.
The controller enclosure is equipped with a tamper switch which provides generating tamper alarms
and transmitting them to a network controller.
The controller is intended for indoor installation and round the clock operation. The controller is not
suitable for operation in corrosive and dusty environments, as well as in fire-hazardous and explosive
areas.
Figure 1

Orion ISS
www.bolid.com 8

S2000-2 Specifications
9 www.bolid.com
SPECIFICATIONS

Orion ISS
www.bolid.com 10
¾Doors Per Controller Up to 2
¾Access Keys iButtons, Proximity cards, PIN-codes, etc.
¾Readers Per Controller
Output Interface
LEDs
Sounder
2
Touch Memory (1-Wire, µ-LAN), Wiegand, ABA TRACK II
One or two single color LED, or one double color LED,
controlled by logical +5 V CMOS levels
Controlled by logical +5 V CMOS levels
¾Memory Capacity 4096 (S2000-2) or 8192 (S2000-2 rev.01) key codes
¾Event Log 2047 (S2000-2) or 4095 (S2000-2 rev.01) events
¾Time Schedules 16 separate time schedules each including 10 time zones
active for entry and/or for exit (loop 1 and/or 2 arm-
ing/disarming). Each key can be assigned to one time
zone for access and one time zone for arming/disarming
¾Anti-Passback (APB) Modes 5 (Hard, Soft, Timed, Zonal, Global)
¾Indicators (LEDs) 3 (READY, 1, 2)
¾Built-in Sounder Yes
¾RS-485 Communication Port Yes
¾Power Input
Input Voltage
Current Consumption
Input Power
Bolid uninterrupted power suppliers of RIP-12 series are
recommended
10.2 ÷ 15V DC,
120mA max
2W max
¾Door Inputs
Detector Included
Passage Signal Time
2
NC/NO dry contact, open collector, digit output (0 or 1
active with 5 V CMOS levels)
50ms min

S2000-2 Specifications
11 www.bolid.com
¾Request-to-Exit Inputs 2
¾Alarm Inputs
Wire Resistance
2 inputs to monitor intruder detectors’ conditions
(except for Swing-beam Barrier operation mode)
1 kOhm excluding termination resistance 8.2 kOhm
¾Relay Outputs
Commuting Voltage
Commuting Current
Commuting Power
2 outputs to operate locking units or power relays
30VDC
7A
100W
¾Tamper Switch Yes
¾Enclosure Protection IP 20
¾Operating Temperatures −30 to +50°С
¾Overall Dimensions 157 ×107 ×36 mm
¾Weight about 0.3 kg
¾Average Lifetime 8 years
¾Readiness Period 5 s max

Orion ISS
www.bolid.com 12

S2000-2 Operating
13 www.bolid.com
OPERATING

Orion ISS
www.bolid.com 14
ACCESS KEYS
To identify keys used to implement different functions of the access controller a variety of electronic
keys can be suitable (Dallas iButtons, Proximity cards, PIN-codes) provided that this electronic keys
can be read by readers with such output interfaces as Touch Memory, Wiegand, or ABA TRACK II.
To do this up to two said readers are to be wired to the S2000-2 controller.
The controller operates two LEDs (one double-colored LED) of a reader to provide condition and
alarm indication. Control levels correspond to logical +5 V CMOS levels. The controller keeps the cur-
rent passing through the directly connected LEDs within 10mA.
The controller operates the sounder of a reader. Control levels correspond to logical +5 V CMOS lev-
els.
The keys which are used to operate with the controller must be pre-programmed and stored either in
the S2000-2 controller memory or in the ARM Orion database. All controller keys fall into four different
classes (types):
¾User keys used for access and arming/disarming
¾Locking keys used to lock access via an access point (see Access Modes Section below)
¾Unlocking keys used to open access via an access point (see Access Modes Section below)
¾Master keys used to switch the computer to the mode of hardware programming of User keys
User keys can be mono-functional used only to gain access or to arm/disarm alarm loops, or com-
bined used both for access and arming/disarming. To cause the controller to select arming/disarming
functions some hardware or software methods are to be used (see Alarm Loops Section below).
Access rights of each key are defined by a set of pre-programmed parameters which can be divided
on two parts, the first part being common for a group of keys and the rest being set individually for
each access key. This provides optimal combination of programming flexibility and usability (see
Access Rights Section below).
The following access rights and restrictions are set as a whole for a group of access keys called ‘the
access group’:
¾The right to gain access to zones controlled by the S2000-2
¾The time periods when entry and/or exit via the access point controlled by the S2000-2 are al-
lowed (see Time Schedules Section below)
¾The anti-passback rules applied (see Anti-passback Rules Section below)
¾Additional restriction related to two- or three-person access rules (see Passage Modes and
Two or More Person Rule Access Control Section below)
¾The right to arm and/or disarm the first and/or the second alarm loops of the controller

S2000-2 Operating
15 www.bolid.com
¾The time periods when arming/disarming alarm loops of the S2000-2 are allowed (see Time
Schedules Section below)
The following access rights and restrictions are set individually for each access key involved in an
access group:
¾The type of the key (is this key intended to be used as User, Locking, Unlocking or Master)
¾The key lockout (a key be locked if necessary, e.g. if the key is lost or stolen)
¾The additional code for the key or permission to use only main code in case of two-factor au-
thentication (see Two Factor Authentication Section below)
¾The validity period of the key
The access key can be preprogrammed either by hardware or software ways see Key Program-
ming Section of this Manual.
Moreover, access control based on five different key patterns can be implemented through the access
point. In such a case the codes of presented keys are stored neither in the S2000-2 memory nor in
ARM Orion database, but instead to gain access they must meet on of the controller key pattern (see
Key Pattern Based Access Control Section below).

Orion ISS
www.bolid.com 16
OPERATION MODES
The controller can operate in one of the following modes:
−Two Entrance Doors
−One Entrance/Exit Door
−Turnstile
−Swing-beam Barrier
−Two Sluice Doors
Two Entrance Doors Mode
In this mode the controller provides access via two independent access points (doors), with passing
being controlled via key presenting for one direction (entry) and being free by EXIT button pressing for
another (backward) direction.
Standard time to pass after access being granted is 10 seconds.
In this mode alarm loops are not involved in the access control strategy. Its can be used within the
integrated security systems for intruder alarm purposes.
If door sensors are connected to the relevant terminals of the controller and the controller is pro-
grammed to use these ones, some extended features are available for the S2000-2 controller, among
them:
−PASSAGE messages are generated and transmitted (when the S2000-2 operates on-line) to a
network controller
−While access is granted, the relay can be activated not only for a time defined by its Relay Acti-
vation Time parameter (a constant), but also can be adjusted to cancel executive program just
after door opening or closing (see ‘Switch Off After…’ parameters, Relay Configuration Parame-
ters Section of this Manual)
−Door Held or Forced Open events are monitored for
−While access is granted, the reader green LED lights for a time relevant to actual passage time.
If door sensors are not in use, the reader green LED lights for a time defined by the Relay Acti-
vation Time parameter, but at least for two seconds, regardless of the time the passing actually
takes
In order to pass in forward direction, a User key with the Access attribute set is to be presented to the
reader mounted near the door.

S2000-2 Operating
17 www.bolid.com
If identification is completed successfully, the reader sounder generates two beeps, the green LED
turns on, the door is opened (unlocked), and the ACCESS GRANTED message with the code of the
presented key specified is generated.
If the reader is programmed to implement two-factor authentication its green LED starts flashing 5
times per second and access is granted only after the valid additional code having been presented.
If two or three person access rule is applied, while identifying the key access is granted after all par-
ticipants of the access procedure having been identified.
After opening the door the reader LED enters its normal mode (is off or lit with red) and the PASSAGE
message is generated with the code of the presented key specified.
In order to open the door passing in backward direction, it is necessary to press the EXIT button that
is mounted near the door inside the premises. The reader sounder generates two beeps, the green
LED turns on, the door is opened (unlocked) and the ACCESS GRANTED message is generated
without specifying a key (impersonal). The door opening causes the impersonal PASSAGE message
to be generated. Passing through the second door is implemented similarly.
One Entrance/Exit Door Mode
In this mode the controller provides access via one access point (door) with one common locking de-
vice control circuit, with access in both passage directions being controlled via key presenting to the
readers installed both at entrance and exit.
EXIT buttons can also be used to provide access, e.g. for remote door opening from a guard post.
Standard passage time after access being granted is 10 seconds.
In such the operation mode the anti-passback rules can be applied because the identification is im-
plemented for passages in both directions. However a regular door does not protect against tailgating.
If door sensors are connected to the relevant terminals of the controller and the controller is pro-
grammed to use these ones, some extended features are available for the S2000-2 controller, among
them:
−PASSAGE messages are generated and anti-passback rules can be applied
−While access is granted, the relay can be activated not only for a time defined by its Relay Acti-
vation Time parameter (a constant), but also can be adjusted to cancel executive program just
after door opening or closing (see ‘Switch Off After…’ parameters, Relay Configuration Parame-
ters Section of this Manual)
−Door Held or Forced Open events are monitored for
−While access is granted, the reader green LED lights for a time relevant to actual passage time.
If door sensors are not in use, the reader green LED lights for a time defined by the Relay Acti-

Orion ISS
www.bolid.com 18
vation Time parameter, but at least for two seconds, regardless of the time the passing actually
takes
In order to pass in both directions, a User identifier with the Access attribute is to be presented to a
reader mounted near the entrance/exit.
If the identification process is completed successfully, the reader sounder generates two beeps, the
green LED lights, the door is opened (unlocked) and the ACCESS GRANTED message is generated
with the code of key presented included.
If this reader uses two factor authentications, the reader green LED starts flashing 5 times per second
and access is granted only after an additional code having been identified (see Two Factor Authenti-
cation Section of this Manual).
If two or three person access rule is applied, while identifying the key access is granted after all par-
ticipants of the access procedure having been identified (see Passage Modes and Two or More Per-
son Rule Access Control Section of this Manual).
After opening the door the reader LED enters its normal mode (is off or lit with red) and the PASSAGE
message is generated with the code of the presented key involved.
The procedure of passing backward is similarly, except two factor authentication (which is adjusted for
each reader separately) and two (three) person access rule applying (which is specified for each ac-
cess group).
Turnstile Mode
In this mode the controller provides access via one access point (electromechanical turnstile)
equipped with two control circuits for each passing direction separately, with granting access in each
direction requiring presenting keys to the readers installed from the both sides of the turnstile.
EXIT buttons can also be used to grant access remotely, e.g. from a guard post.
Standard time to pass after access being granted is 10 seconds.
Anti-passback rules can be checked for such an operation mode, as identification is required for pass-
ing in both directions and only one person can pass when access is granted.
No passage detector (rotation sensor) can be used. But in this case no passage event is generated,
so it is impossible to use anti-passback and time&attendance utilities of Orion workstation. Besides, in
this case the minimal passage time is equal to two seconds (only after expiration of this time the next
key can be taken into account by the controller). If passage sensors are in use, the turnstile capacity
(pedestrian throughput) can be increased as the next key will be read and identified by the controller
immediately after passing having been detected.

S2000-2 Operating
19 www.bolid.com
In order to pass in any direction, a User key with the Access attribute set is to be presented to a
reader installed before the turnstile.
If identification is completed successfully, the reader sounder generates two beeps, the green LED
lights, the turnstile is unlocked to provide one passage in specified direction, and the ACCESS
GRANTED message is generated with the code of the presented key included.
If the reader uses two factor authentications, the reader green LED starts flashing 5 times per second
and access is granted only after an additional code having been identified (see Two Factor Authenti-
cation Section of this Manual).
After opening the door the reader LED enters its normal mode (is off or lit with red) and the PASSAGE
message is generated with the code of the presented key involved.
The procedure of passing backward is similarly, except two factor authentication which is adjusted for
each reader separately.
Swing-beam Barrier Mode
In this mode the controller provides a bi-directional access via a single access point which is a swing-
beam barrier with the same bar facility for both access directions. The relay 1 is used to lift the bar
while the relay 2 is used to lower it down. To grant access in each direction requires presenting the
relevant key to one of the controller’s reader.
The standard time to pass after access being granted is 30 seconds.
In this mode anti-passback rules can be used as far as identification is required for passing (to be
more precise, for driving) in both directions.
To increase the authentication level of a system, car presence detectors are to be connected to the
alarm loop contacts of the controller. In such a case key presenting causes the controller to make
access decisions only if there is a car near the reader actually.
Passage sensors in this operation mode are used not only to detect car passing but also to prevent
swing-beam lowering down on a car located under the beam. While at least one of the sensors is ac-
tivated, the swing-beam will not be lowered.
EXIT buttons can also be used to gain access remotely, e.g. from a guard post. In the Access Locked
mode the swing-beam can be lifted only by means of the EXIT buttons. Pressing the buttons in the
Free Pass mode is ignored.
If the access is granted after the ENTRY button, the green LED of the first reader and/or green light
on the traffic control unit directed to the first reader is switched on. If the access is granted after the
EXIT button, the green LED of the second reader and/or green light on the traffic control unit directed
to the second reader is switched on.

Orion ISS
www.bolid.com 20
When driving to the swing-beam barrier, a car is slowing down near the reader, the driver presenting
its User key with Access attribute set on. If access is granted the green LED of the reader (green light
on the traffic control unit) is switched on and the ACCESS GRANTED message is generated with the
code of the presented key included.
If two factor authentication is used for this reader, the reader green LED starts flashing 5 times per
second, and access is granted only after a valid additional code presenting (see Two Factor Authenti-
cation Section of this Manual).
After a car passage (after actuation of the first and then the second passage sensors) the green LED
of the reader (green light of the traffic control unit) is switched off and the red LED of the reader starts
flashing twice per second warning about swing-beam closing, and the PASSAGE message is gener-
ated with the code of the presented key included. In 5 seconds the red LED of the reader (red light of
the traffic control unit) is switched on steady and the swing-beam is lowered down. If the car is staying
under the swing-beam (none of the two passage sensors is recovered), the swing-beam is not low-
ered down and the red LED of the reader (red light of the traffic control unit) keeps flashing until the
car drives off. The swing-beam is lowered in 5 second after the car has moved out.
The next access procedure (next identification) can be initiated starting from the moment, when the
second passage detector has been activated, i.e. when the reader LED (traffic light) is switched from
green to flashing red.
The procedure of driving in backward direction is similar keeping in mind that using two factor authen-
tication is configured separately for each access direction (each reader).
When the controller is waiting for car driving out of the swing-beam barrier, the second (closing) relay
can not be activated, and if the first relay activation time has not yet been expired, the first relay is
kept active until the car driving off. Due to this, a swing-beam barrier is kept open without regard to it
has one or two control circuits.
Two Sluice Doors Mode
In this mode the controller provides access via an access point, which is represented by two inter-
locked doors with a space between them (a sluice). Two readers are installed from each side of the
sluice (outside the sluice). Two EXIT buttons are mounted inside the sluice near each door or at the
guard post. In order to pass through the first door (enter the sluice), it is required to present an author-
ized key, while in order to exit the sluice it is sufficient to press the EXIT button. Access through a
door can granted (the door is opened) only if the opposite door is closed.
The EXIT buttons can be located inside the sluice, which makes it possible to exit the sluice without
security guard participation. Otherwise its can be located at the guard post, and then after a person
have entered the sluice through a first door security guard can visually verify the key presented (for