IPAS Axesso System User guide

A x e s s o S y s t e m
A c c e s s c o n t r o l a n d
t i m e m a n a g e m e n t
b a s e d o n t h e K N X
i n s t a l l a t i o n b u s
V e r s i o n 3 . 1
I n s t a l l a t i o n a n d s y s t e m
m a n u a l
Revision: 2015-01-30

I P A S Axesso – Access control and time management
P a g e 2 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
C o y r i g h t N o t i c e
The Axesso software and this documentation material are property of IPAS GmbH,
Germany. Windows 7, Windows XP, Windows Explorer are registered trademarks of
Microsoft Corporation in the United States and other countries. Other brand and product
names are also registered trademarks or trademarks of their respective organization.
Attention: There may be country-specific data protection requirements for
storing user data. IPAS does not guarantee the conformity of the Axesso software
with these requirements. It is up to the software operator to check the respective
data protection legislation.
This user manual illustrates the installation and commissioning of the Axesso system. It
contains detailed technical information, which requires an understanding of KNX and IP.
Basic knowledge of the IPAS ComBridge Studio System is also recommended.
Due to future technical developments, the content of the software and manual are subject
to change without further notice.
2015, IPAS GmbH

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 3
Subject to change without further notice Revision: 2015-03-04
C o n t e n t
1. Overview and system structure ........................................................................................5
1.1. Structure and composition of the Axesso system......................................................5
1.2. Functioning of the Axesso system.............................................................................6
1.3. Card reader functions and versions...........................................................................7
2. Installation and commissioning of the Axesso Server....................................................10
2.1. Scope of delivery and additional components required...........................................10
2.2. Connecting the Axesso Server ................................................................................10
2.3. Setting up the network connection of the server......................................................11
2.4. Configuring the IP connections of the gateways......................................................11
2.5. Commissioning the readers in the ETS ...................................................................16
2.6. Setting the communication parameters in the Axesso Software .............................19
2.7. Setting up rooms in the Axesso Software................................................................21
2.8. Setting up readers in the Axesso Software..............................................................22
2.9. Anti-passback function of the Axesso System.........................................................24
2.10. Using IP card programming devices......................................................................26
2.11. Using the Axesso Software from additional operator stations...............................30
3. Operation and function of the Axesso Director software................................................31
3.1. Setting up new card holders and generating access cards.....................................32
3.2. Search functions for users and cards ......................................................................34
3.3. Changing card holder details ...................................................................................36
3.4. Cancelling access cards ..........................................................................................37
3.5. Generating identical card copies for a user.............................................................37
3.6. Axesso Software protocol function...........................................................................37
3.7. Semi-automatic deletion of card holder details (“Reminder function“).....................40
4. Additional Axesso Software functions for the system administrator...............................42
4.1. Setting up additional operators and creating passwords.........................................42
4.2. Removing operators, card holders and activities from the database.......................43
4.3. Data storage and backups.......................................................................................44
4.4. Complete clearance of the database.......................................................................45
4.5. Setting the expiry time for semi-automatic deletion.................................................45
5.Using Axesso in hotel applications..................................................................................47
5.1 Special card reader versions................................................................................47
5.2 Connection and use of inputs and outputs in a hotel room..................................48
5.3 Function of the application program for hotel card readers and card holders .....49
5.4 Communication objects in the application program for hotel card readers..........51

I P A S Axesso – Access control and time management
P a g e 4 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
5.5
Communication objects in the application program for hotel card holders...........54
5.6 Assigning group addresses for hotel card reader and card holder.......................57
6. Appendix ........................................................................................................................ 58
6.1. Diagram for the connection of card readers.............................................................58
6.2. Technical Support.....................................................................................................58

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 5
Subject to change without further notice Revision: 2015-03-04
1 . O v e r v i e w a n d s y s t e m
s t r u c t u r e
Thank you very much for choosing IPAS hard and software.
The IPAS Axesso System offers a powerful hard and software for access control and
time management based on a standardised KNX bus installation. With the rising use of the
KNX system, more and more projects integrating all aspects of technical building
equipment are possible. Extending the use of this universal infrastructure to the area of
access control therefore lies at hand. Ease of installation, manufacturer independence,
simple wiring, and widespread programming and commissioning knowledge that have
made this system so successful apply to these tasks in the same manner.
1 . 1 . S t r u c t u r e a n d c o m o s i t i o n o f t h e
A x e s s o s y s t e m
The Axesso system principally consists of the Axesso server with the Axesso Director
Software and the card readers that are connected to a KNXnet/IP gateway via a KNX
installation bus system.
The KNXnet/IP gateway (e.g. IPAS ComBridge NCI) connects the KNX system and the IP
(Ethernet) network of the server. The communication between the server software and the
readers is hence based on the existing network structures KNX and Ethernet. To program

I P A S Axesso – Access control and time management
P a g e 6 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
the cards at least one card programming device is required which is connected to the
server and possibly also to the IP network.
1 . 2 . F u n c t i o n i n g o f t h e A x e s s o s y s t e m
The Axesso readers work autonomously within the KNX system. Once the access cards
have been programmed, no server is required for the system’s access function. If a card is
inserted into the reader, the device compares the access code on the card and the code
saved on the reader. If these are the same, the reader will permit access. An additional
code (CardID-Code) is sent in encrypted format via the KNX bus for each attempted
access. If the Axesso server is connected and active, the Axesso Software generates
access reports, alarms and time recording data via this code. Special scenes may also be
carried out for individual card holders.
Apart from the card readers, the other central system component is the Axesso Director
Software that is pre-installed on the Axessor server. The software offers user
administration, the storage of card holder and access data and the generation of alarms
and scenes. For the system administrator the Axesso Software provides all the important
setting and programming options to commission the system.
However, the software’s main task is the generation and programming of access cards via
the connected programming device and the sending of access information to the reader
that is connected to the KNX.
The first thing to do when programming the cards, is to choose the rooms that are to be
accessible to the card holder and if applicable also enter the personal details of the card

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 7
Subject to change without further notice Revision: 2015-03-04
holder in the Axesso database. An empty (new or deleted) card is placed upon the
connected programming device. After an internal plausibility check, the Axesso Director
Software then generates two new codes (Card-ID-Code, Access Code). The access code
is sent via the KNXnet/IP gateway to the readers that are connected to the KNX. To avoid
misuse, the data transfer is encrypted. At the same time, the programming device
programs the Card-ID-Code onto the user’s card.
If a card is no longer needed or if a card holder is to be removed from the database, the
removal is also done via the Axesso software. Codes are deleted from the connected
readers via the KNX bus just as they are when a card is created.
1 . 3 . C a r d r e a d e r f u n c t i o n s a n d v e r s i o n s
Readers and cards communicate contactless using transponder technology which is
based on standards set in the ISO/IEC 14443 A/B. The transmission frequency is
13,56MHz. To enable the card reader to detect and read the card, please hold it less than
2cm away from the front of the reader.
Three device models are available for the card readers: without pushbuttons, with one
pushbutton or with two pushbuttons.

I P A S Axesso – Access control and time management
P a g e 8 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
The pushbuttons on the device make it possible to perform other KNX functions apart from
the access function (e.g. bell button or light control). The functions are determined through
the application in the ETS (see below).
Apart from the devices shown above, there are further transponder reader devices with
three additional LEDs for hotel applications (Do Not Disturb, Make Up Room, Room
Alarm).
All Axesso card readers have an integrated binary output to activate DC low voltage door
openers. When choosing a door opener, please make sure not to exceed the integrated
switch contact’s maximum current of 1A. In addition to the binary output, all card readers
have two binary inputs that can be connected to any potential-free contact (e.g. door
contact or card holder in a hotel environment). The function of the contact input can also
be set via the parameters in the ETS application.
In addition to the KNX bus power supply, the Axesso card readers also require a low
voltage of 8-26VDC. This auxiliary supply is used to supply the device’s electronics and to
activate the door openers.
The following illustrations show typical connection scenarios:

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 9
Subject to change without further notice Revision: 2015-03-04
A standard bus connector (KNX) and a screw clamp with 8 terminals are used to connect
the devices. For an exact terminal lay-out, please see the appendix in chapter 5.
All Axesso card readers have an integrated magnet sensor. If a device is removed from its
installation box, which is equipped with a security magnet, it will be de-activated
immediately. An alarm telegram can also be sent via KNX.

I P A S Axesso – Access control and time management
P a g e 1 0 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
2 . I n s t a l l a t i o n a n d
c o m m i s s i o n i n g o f t h e A x e s s o
S e r v e r
2 . 1 . S c o e o f d e l i v e r y a n d a d d i t i o n a l
c o m o n e n t s r e q u i r e d
The Axesso Server is a powerful autarkic PC with a Windows operating system. To make
the installation and configuration as easy as possible, we deliver the server largely pre-
configured. All software components and drivers that are required to operate the system
are installed ex works. The delivery package also includes the mains adapter and power
lead. Please make sure that you use the device only with the intended mains
adapter.
To commission and operate the system, you also need a computer keyboard, mouse and
monitor. These components are not part of the delivery package. Both keyboard and
mouse need to be equipped with a USB connector. The monitor is connected via a DVI-I
cable (VGA via adapter).
2 . 2 . C o n n e c t i n g t h e A x e s s o S e r v e r
The Axesso Server is connected via the sockets and plugs on the front ends of the device.
On the left front end there are 3 USB ports, the power switch, a RS232 port (not required)
and the connector for the power supply of the mains adapter.

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 1 1
Subject to change without further notice Revision: 2015-03-04
The keyboard and mouse should each be connected to a USB socket. The socket for the
power supply needs to be connected to the adapter provided.
On the right front end there are connectors for the network, loud speakers, microphone
(not required) as well as a further USB connector and the connector for the monitor.
Please connect the monitor via an appropriate monitor cable (you may need to use a VGA
adapter) and connect the network to the switch via a suitable patch cable. The actual card
programming device should be connected to the USB connector.
When all the connections are in place, switch on the Axesso Server via the power switch.
2 . 3 . S e t t i n g u t h e n e t w o r k c o n n e c t i o n
o f t h e s e r v e r
After booting is complete, the server starts with the familiar Windows start-up screen. To
operate the Axesso system the server needs to be correctly integrated into the IP network.
The default setting of the server is such that an IP address is automatically obtained from
an existing DHCP server. Many networks, however, do not provide an DHCP service or an
organisation’s IT department may proscribe the use of only specific IP addresses. In this
case, please set the IP address of the server manually in accordance with the usual
Windows procedure. Please discuss the IP configuration with your network administrator
or ask your administrator to carry out the configuration.
2 . 4 . C o n f i g u r i n g t h e I P c o n n e c t i o n s o f
t h e g a t e w a y s
The Axesso software communicates with the readers on the KNX bus via a KNXnet/IP
gateway. At the IP end, the gateway is connected to the same IP network as the Axesso
server (Hub, Switch). At the KNX end, the accessibility of all connected card readers
needs to be ensured (possibly via line or area couplers).

I P A S Axesso – Access control and time management
P a g e 1 2 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
Before the Axesso Software is commissioned further, the IP gateway needs to be
registered in the Configuration Manager. In relation to the Axesso system, we generally
recommend you assign a fixed IP address to the gateway in the ETS. Whilst it is possible
and permissible to assign an IP address via a connected DHCP server, this might mean
that in case of an interrupted network connection a new and different DHCP address will
be assigned, making it necessary to repeat the registration all over again.
If, as recommended, a fixed IP address is used, the gateway needs to be set first to
manual IP assignment. In the example of the IPAS ComBridge NCI gateway the settings
are performed in the device’s ETS parameters:
In the example the chosen name Device Name axesso has been assigned in the ETS.
Attention: Please do not use spaces as part of the device name!
When assigning a fixed IP address please make sure that the chosen address is within the
permitted range. Please do coordinate the address assignment with the responsible
network administrator. The following example shows the address setting 192.168.10.54 for
the IPAS gateway in the ETS:
If the gateway settings have been configured in the ETS and loaded onto the device, the
gateway can be registered in the Configuration Manager via the CBS Control Center. Start
the Control Center via the corresponding ICON on the Axesso Server. Please remember
to start the program with administrator rights.

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 1 3
Subject to change without further notice Revision: 2015-03-04
Now open the ComBridge Configuration Manager (CBCM) by clicking on the CBCM
symbol in the Control Center.
The field on the right hand side of the Configuration Manager shows the services
connected to the system (Standard: Client Manager). On the left hand side the connected
gateways are displayed. To add the Axesso IP gateway, please click on the Devices
button in the top left hand corner. The Device Administration window appears.

I P A S Axesso – Access control and time management
P a g e 1 4 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
A further click on the Add-Device button at the top left opens the Device Editor window.
This window is used to either manually set the details of the IP gateway that is used for the
connection (see ComBridge Studio Manual) or to search for the IP gateways that are
connected to the network via the Browse button. The search brings up all IP devices that
are connected to the network with their set IP address and the device name that has been
configured in the ETS.
If an IPAS gateway is used for the IP connection, please note that every IPAS gateway
allows several connection types, which will be displayed simultaneously in the browse
window (e.g. NCI 4 connection types, WCI 2 connection types). For the Axesso

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 1 5
Subject to change without further notice Revision: 2015-03-04
application, please use the UDP connection via the Object Server Service. Once the
appropriate connection has been selected and confirmed via the Select button, the device
details are automatically inserted into the Device Editor.
Before you confirm your entries in the window with OK, you must tick the NAT
Router box.
The connected gateway is then displayed in the gateway list in the Device
Administration window.
The flag in front of the gateway name in the list symbolises a successful connection. The
windows for the Configuration Manager can now be closed one by one.

I P A S Axesso – Access control and time management
P a g e 1 6 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
2 . 5 . C o m m i s s i o n i n g t h e r e a d e r s i n t h e
E T S
In order to commission and configure the Axesso readers, application programs are
available for the ETS (from version ETS-3 upwards).
To commission the transponder readers, please use application:
3707-ProxReader-01-0101
The Axesso Server software and the readers communicate via two 14Byte long
communication objects of type EIS 16. Within the application programs, object numbers 0
and 1 are reserved for the communication.
When a room is accessed, object number 0 called “Data“ is used to transmit the CardID to
the server software for identification purposes (reports, time management). Object number
1 “Control“ is used for the bi-directional data and command exchange (including
programming of the AccessCode) between readers and software. In order to ensure that
the system functions properly, both objects need to be linked with group addresses. To
transmit data within the communication object types, an encryption algorithm is available
in the Axesso System.
When linking the group addresses, it is important to ensure that the data object of all
readers used in the system is linked to the same group address whilst the control objects
of the individual readers should be linked with different group addresses. For example:

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 1 7
Subject to change without further notice Revision: 2015-03-04
Additional parameters and objects are available in the application program for
configuration and additional functions. Apart from the objects for data exchange with the
software that were described above, the following communication objects are available:
Obj. 4: Door Access – Open/Close
The card reader sends a 1 Bit open telegram via this object when a valid card is placed in
front of/ into the reader. After a configurable time period the object is changed to closed
and re-sent. The object reacts in response to the internal binary output on the card reader.
It can be connected directly if a switch actor (instead of the internal contact) is used to
control the door opener.
Obj. 5: External Opening – Open/Close
This object is used to initiate the opening of the binary contact in the card reader via a 1-
telegam to the KNX bus. The duration of the opening can be configured just as the
opening with a valid card.
Obj. 6: Disable Reader – Disabled/Enabled
This object can be used to disable the reader via the KNX bus. A disabled reader remains
inactive even if a card is valid. A permanently red LED on the reader indicates that it has
been disabled. The reader is only active again once it has been enabled via a 0 telegram.
Obj. 7: Alarm – On/Off
An alarm telegram (1-telegram) is sent via this object if an unauthorised removal of the
reader from its mounting box is attempted (magnet switch). The alarm can be used, for
example, to activate an alarm bell or switch on the main lights.

I P A S Axesso – Access control and time management
P a g e 1 8 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
Obj. 8: Switching – On/Off
A switch telegram (depending on the chosen function) is sent via this object when the
right-hand (or central) pushbutton is pressed.
Obj. 9: Switching – On/Off
A switch telegram (depending on the chosen function) is sent via this object when the left-
hand pushbutton is pressed.
Obj. 10: External Contact 1 – On/Off
A switch telegram is sent via this object if a connected external contact is activated.
Obj. 11: External Contact 2 – On/Off
A switch telegram is sent via this object if a connected external contact is activated.
Obj. 12: Auxiliary Power – On/Off
A 1-telegram is sent via this object when the required auxiliary power (12V / 24V) is
missing from the card reader. Once the power is connected again, the object is re-sent
with value 0.

I P A S Axesso – Access control and time management
I P A S m b H © 2 0 1 5 P a g e 1 9
Subject to change without further notice Revision: 2015-03-04
2 . 6 . S e t t i n g t h e c o m m u n i c a t i o n
a r a m e t e r s i n t h e A x e s s o S o f t w a r e
Once the readers have been configured and commissioned with ETS, the communication
parameters as well as the rooms and card readers need to be set up in the Axesso Server
Software.
To do this, please start the Axesso Director Software that is pre-installed on the server by
double-clicking on the corresponding ICON
The program automatically responds with the log-in-screen:
The first time, please log in as administrator with the default user name “admin” and the
password “12345”. (User name and password can be subsequently changed and new
users with new passwords can be created.)
If the log-in was successful, the Axesso Director starts with the following screen at Access
Control level:

I P A S Axesso – Access control and time management
P a g e 2 0 I P A S m b H © 2 0 1 5
Revision: 2015-03-04 Subject to change without further notice
To set the communication parameters, please change to the Configuration level by
pressing the corresponding button in the bottom left-hand corner and select KNX:
Please set the gateway and the corresponding group address that are to be used for the
communication in the field “Axesso Data Address“. The group address has to be in the
following format: <Device Name Gateway>:<Group Address>.
For the chosen example this would be:
The device name of the gateway arises from the setting in the parameters of the
KNXnet/IP gateway. The group address arises from the common group address for all