Page 1
CK721-A Network Controller Installation and Operation Manual April, 2012 24-10349-8 Revision B...
Page 3
CK721-A Network Controller Installation and Operation Manual April, 2012 24-10349-8 Revision B Security Solutions (805) 522-5555 www.johnsoncontrols.com...
Page 4
Copyright 2012 Johnson Controls, Inc. All Rights Reserved No part of this document may be reproduced without the prior permission of Johnson Controls, Inc.
Page 5
Federal Communications Commissions Notice This equipment, CK721-A, has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Page 6
13. The Kone IP elevator interface has not been investigated by Underwriters Laboratories. 14. Do not connect equipment to an AC power source that is controlled by a switch. 15. For CK721-A, provided as part of an SPA, SPB, and SPC security control panel assembly, items 1 and 4 through 13 apply.
Page 13
Large Enclosure With Installed Components ....................2-10 One CK721-A Module Mounted in a Large Enclosure ..................2-10 One CK721-A Module and Two RDR2S Modules Mounted in a Large Enclosure .......... 2-10 Daisy Chain Module Wiring for S300-DIN-L ....................2-12 Small Enclosure With Installed Components ....................2-13 One CK721-A Module Mounted in a Small Enclosure ..................
Chapter I N T R O D U C T I O N This chapter provides a general description of the CK721-A panel and related equipment. The conventions used throughout this manual are also described. The manual is divided into the following chapters: Chapter 1: Introduction, defines the key terms and conventions used throughout the ...
Advanced Encryption Standard (AES) – Encryption standard adopted by the U.S. government in 2002; it supersedes DES. AES uses a symmetrical key algorithm. CK721-A System – This is a general term that refers to a combination of CK721-A terminals and expansion enclosures that communicate with the P2000 system.
The indicator can be seen when the cabinet door is closed. External Device – This general term applies to any device that is wired to the CK721-A system, such as a reader or input device. A motion sensor is one type of input device.
All CK721-A panels are connected via a 10/100Base-T Ethernet network to the P2000 system. The CK721-A is intended to be mounted in an S300-DIN enclosure (large or small). Each model has a total capacity 200,000 cards and a 8000 off-line transaction base memory.
S300-DIN-RDR2S, or S300-DIN-RDR2SA) and for a battery back-up unit. S300-DIN-L A large enclosure containing DIN rails, a tamper switch and a power supply. It has room for up to three modules (CK721-A, RDR2S, RDR2S-A, or a combination thereof), and for a bat- tery back-up unit. S300-XL A large expansion enclosure containing a tamper switch, a power indicator light, and a power supply.
S300 modules as possible, and all S300 modules should be operating in physical addressing mode. The typical response time to an access request in an idle CK721-A with 64 terminals on 8 RDR8S modules is less than 500 ms. The typical response time to an access request in an idle CK721-A with 64 terminals on 32 RDR2SA modules is less than 1s.
10/100Base-T Networking Guidelines (specific to the CK721-A) As a network device, the CK721-A can be installed in a variety of configurations based on the needs of your sites. The CK721-A communicates with the P2000 server through one or more 10/100Base-T hubs.
two hubs, or the distance between a hub and a network device such as the CK721-A. Wiring from a CK721-A to a hub is straight through. Specifically: CAT-5, 8 conductor cable, RJ45 connectors. The following diagram illustrates the 4x5 rule.
IP address. Each networked device on a TCP/IP, 10/100Base-T Ethernet, must be assigned a unique IP address. The CK721-A is no exception. In basic terms, network communication is accomplished through the transmission and receipt of packets. Packets contain a variable length of data, along with the IP address of the device to which the packet is addressed.
This feature provides encrypted network communications between the CK721-A controller and the P2000 Server, using the Advanced Encryption Standard (AES256). The CK721-A Encryption is implemented using the Federal Information Processing Standards (FIPS) 140-2, validated (Certificate #1051), cryptographic module (version 1.2.3) from the Open Source Software Institute (http://www.oss-institute.org).
controller reboot. All controller functions are disabled during that time. For the CK721-A controller to come on-line with the P2000 Server, the encryption key values at the CK721-A controller and at the P2000 server must match, and the encryption must be enabled at both sides.
Page 31
CK721-A Installation and Operation Introduction When encryption is enabled, the following methods are supported for CK721-A controller login connections: Secure Shell Telnet Client (SSH) Secure FTP Client (SFTP). Serial Port (RS-232C, Port A). Serial communications between the CK721-A ...
C K 7 2 1 - A A N D S 3 0 0 - D I N E N C L O S U R E S This chapter describes the equipment used with the CK721-A. CK721-A This section describes components of the CK721-A. Picture of the module is followed by a detailed description of the components. The major functional components of the CK721-A are: Embedded 32-bit processor ...
End-of-Line connector connector binary inputs switches RJ45 LEDs on the CK721-A There are nine LEDs on the CK721-A board. Their functions are shown in Table 2-1. Table 2-1: CK721-A LED Functions Function POWER ON steady when power is applied. FAULT OFF to indicate normal operation.ON indicates a general fault.
CK721-A and S300-DIN Enclosures Binary Output The CK721-A provides a relay output for connecting to an external alarm at Binary Out1. If the alarm relay is programmed for enabled, and the individual inputs are programmed to activate the relay, the relay can be activated when any input point in the system goes into alarm.
CK721-A Lithium Battery The CK721-A contains a lithium battery that is used for realtime clock backup. The lithium battery is shipped from the factory charged and operational. Lithium battery If there are no power outages, the battery should be changed every five years. If a power outage occurs, the battery life is approximately 30 days.
Hub to CK721-A Wiring All network devices designed for 10/100Base-T networking use standard RJ45, 8 pin ports. Like other 10/100Base-T devices, the CK721-A RJ45 port is designed to connect to a hub using pins 1, 2, 3, and 6, wired straight through.
Ring Indicator (In) RS232 Serial Null Modem Cable Wiring The null modem cable provides an RS232 serial connection from the CK721-A RS232C A port to the computer’s COM port. 24-10349-8 Rev. B This document contains confidential and proprietary information of Johnson Controls, Inc.
The figure below depicts the CK721-A module mounted alone. Figure 2-6: One CK721-A Module Mounted in a Large Enclosure The figure below depicts the CK721-A module mounted with the RDR2S modules. Figure 2-7: One CK721-A Module and Two RDR2S Modules Mounted in a Large Enclosure 2-10 24-10349-8 Rev.
The backplate contains a power supply and a DIN rail for mounting of one CK721-A or a S300-DIN module (RDR8S, I32O16, RDR2S-A, or RDR2S). The enclosure can also hold a backup battery unit composed of two 12V lead-acid batteries in one battery bracket.
The CK721-A modules should be mounted on a DIN rail. DIN Rail Mounting To mount an CK721-A module on a DIN rail, align it with the rail and snap on. To remove a module, pull down the white clip located on the bottom of the module, then pull the bottom of the module out and lift it up.
For power wiring with either the large or small enclosure, use the cable assembly shown in Figure 2-12. To construct the power wiring, use 18AWG wires. When connecting multiple CK721-A controllers or S300-DIN modules, wire the modules in parallel following the “daisy chain” pattern as shown in Figure 2-13. For details on wiring multiple modules, refer to the documentation provided with the S300-DIN module.
0.11" holes located at the bottom of the plate with a #6 self-tapping screw. When connecting CK721-A to multiple S300-DIN modules, wire them in parallel following the “daisy chain” pattern as shown in Figure 2-13. For wiring details refer to the documentation provided with the S300-DIN module.
NCLOSURES The S300 expansion enclosures are used to host additional modules in the CK721-A system. They cannot, however, be used with the CK721-A controller itself, because they do not have the DIN rails necessary for its mounting. Installing the Expansion Enclosures Before beginning, take a moment to read the following important notes.
If a wrist strap is not available, touch any part of the metal CK721-A cabinet prior to handling components to discharge static electricity. It is advisable to avoid working on carpeted areas if possible.
S300-SI8 - Supervised Input module The maximum distance from a CK721-A to the last module connected to it is 4000 feet (1219 meters). To facilitate future expansion, modules should be installed sequentially as shown in Figure 3-8 through Figure 3-10.
2. Position the module over the standoffs and secure with the mounting screws. 3. Attach RS485 cable from the CK721-A to the module, or module to module. All four mounting screws must be used to ensure proper grounding. 24-10349-8 Rev. B This document contains confidential and proprietary information of Johnson Controls, Inc....
All cables must conform with National Electrical Code, NFPA 70,* and local electrical codes. Cabling should be made using good wiring practices and should be long enough to allow service loops at their terminations in the CK721-A enclosure. *For Canadian installations, refer to the Canadian Electric Code C22.1.
EGACY EADER ODULE The legacy reader module described in this section is RDR2. A single CK721-A can communicate with 24 legacy modules, but only up to 8 of them can be reader modules. Firmware Versions for Reader Modules Table 3-10: Legacy Reader Module Firmware Versions...
RS-485 cables once the stacked modules are installed. Each module is shipped with an RS-485 cable. The first module connects the cable between J5 on the CK721-A and one of the RS-485 connectors listed in Table 3-11 depending on which module is installed.
7 and 8 No two reader modules connected to the same CK721-A can have the same address. The address of the reader terminal pair is determined by SW1 switch settings on the reader module as shown in Table 3-13.
A single CK721-A panel can communicate with 24 legacy modules: 8 reader modules and up to 16 I/O legacy modules. When planning what modules to include, consider the following: The I16 module has 16 input points. The CK721-A can support sixteen of these.
RS-485 cables once the stacked modules are installed. Each module is shipped with an RS-485 cable. The first module connects the cable between J5 on the CK721-A and one of the RS-485 connectors listed in Table 3-17 depending on which module is installed.
Alarm devices are wired to both two and four-state inputs in the same way. The difference between two and four-state alarms is the use of resistors on the four-state input at the alarm device end. Resistance is monitored by the CK721-A for open, short, alarm, and secure conditions.
(SIO8 Outputs and IO8 Outputs), the contacts should be protected by an external protection circuit. This protection circuit is application- specific as configured in the field. Johnson Controls would advise, at a minimum, a Metal Oxide Varistor (MOV) at the rated voltage relative to the application across the power source and power load interrupted by the mechanical relay.
CK721-A for operation. The user interface gives you direct access to most CK721-A operating commands and parameters from a laptop or other remote PC before it is connected to the P2000 system. These are useful when commissioning or troubleshooting the system.
Do not attempt modifications to the controller database during controller database download operations. The CK721-A controllers have a C and a factory default host IP address. They allow the configuration of the CK721-A controller operational parameters via an Ethernet cross-over cable connected to the Ethernet port.
CK721-A Installation and Operation CK721-A User Interface The CK721-A user interface can be used for troubleshooting purposes during normal operation. For identification purposes, the controller’s IP address and netmask must match the IP address and netmask in the P2000. Communicating with the User Interface...
5. Type your password when prompted. (The default password is master.) Press <Enter>. You have three chances to login to the CK721-A panel. After three attempts, the CK721-A disables login for about five minutes, after which time you may try again. (Both login and password are case-sensitive.) 7.
MPORTANT Write to flash commands must be issued after: Adding or deleting non-legacy input or output point(s) to the CK721-A database configuration. Adding or deleting a non-legacy terminal to the CK721-A database configuration.
Flash Memory. You can now download information from the P2000. Router Configuration The default CK721-A Panel Routing Information Protocol (RIP) is dynamic, that is, it regularly listens for RIP from the network. If RIP is disabled, manual route information can be added using this screen.
- Verify that you can ping the gateway - Verify that you can ping the P2000 server - Check the CK721-A routing table using the command netstat -r - Use the command traceroute <host ip address> to verify route to the P2000 server 24-10349-8 Rev.
Figure 4-2: Static Route Examples Log Out After configuring or viewing system parameters, always log out, and then remove the serial cable. To log out from the CK721-A user interface, select Log Out, and press <Enter>. Rebooting the Panel Reboot the CK720 from the Main menu option Reboot System, or power cycle the panel.
ASIC ANEL ONFIGURATION Panel Menu It is necessary to perform the following steps at every CK721-A controller in your system that communicates with the following server: P2000 server (version 3.8 build 57 with SP2, or later) These steps set the IP address and netmask, the preferred primary comm path, and the network polling of the CK721-A, which are required for communication with the above servers.
41012 (default value) 7. If you are using encryption, enter an encryption key value unique to this CK721-A controller and matching the value defined at the P2000 server. The value must be other than 0. After entering the key, enable the encryption.
But for testing the installation of the field controllers and related hardware, the user interface is a valuable tool. The remainder of this chapter describes all of the features available in the CK721-A user interface. For a more in-depth description of the features, refer to the P2000 Software User Manual.
CK721-A Installation and Operation CK721-A User Interface Panel Screen Description The Panel screen is used when the CK721-A panel is configured for the P2000 server. Panel Screen - Page 1 Table 4-3: Panel Screen, Page 1 Field Type Description Panel Name User Def.
Terminal screens are used to configure the individual readers, and input/output terminals connected to the CK721-A. You can edit an existing terminal or add a new terminal to the system. When you select the Terminal option and a new terminal number, the system automatically assumes you are adding a new record.
Time when badge is presented Figure 4-3: Assisted Access Timing Diagram Panel Entry/Exit Badge Entry/Exit Options The P2000 and CK721-A controllers support the following Badge Exit/Exit Enforcement and Synchronization modes: Global Badge Entry/Exit Status Synchronization Controller Badge Local Entry/Exit Enforcement ...
Page 148
Badge entry/exit status enforcement to a specific CK721-A controller and a maximum of 64 readers (32 pairs of In/Out readers). Therefore, a cardholder badge swiped on a reader terminal connected to one CK721-A controller would not have their entry/exit privileges synchronized on a reader terminal connected to different CK721-A controller.
(you must select the Floor Tracking function). Each CK721-A panel can connect to multiple KONE IP group controllers, each controller with up to 8 elevators, each elevator serving up to 128 floors. To define a KONE IP elevator, you must first select the KONE IP protocol type in the Panel Elevator tab.
One KONE KIC Controller for All Elevator Groups In this scenario, all elevator groups use the same TCP port number and are connected to a single KONE KIC controller and a single CK721-A controller. KONE KIC Elevator Group 1...
8 elevators. It interfaces to the Building Management System (BMS) through an RS422 interface. As the current CK721-A controller supports up to 16 elevator readers, multiple CK721-A may need to be connected to control access to all elevators managed by the EMS.
Page 156
Panel Configuration Panel Name Each CK721-A that takes part in the OTIS integration must follow a certain naming pattern. Enter each character of the CK721-A panel name as described in the tables below. Only characters 2, 3, and 4 must be entered as specified. Characters 5, 6, 7, and 8 may be non numeric if default values are to be used.
Page 157
7th character 8th character: Master & Slave. This character defines the priority of the OTIS integration within a CK721-A controller. This setting should not be changed unless after consultation with Technical Support. Any invalid character uses the default priority of 19.
CK721-A then re-secures the floors after the configured elevator access time has elapsed, or when a new access request is processed that de-secures different floors. If the Timed Button flag is unchecked, the CK721-A re-secures the elevator as soon as it receives a reported landing number.
Page 159
(called a Destination Entry Computer or DEC) can be controlled by a reader connected to a CK721-A panel, if configured to do so. The OTIS system allows operation of the DECs in 4 different modes that define the availability of floors and the order in which floors and badges are presented to the system.
Inputs (low level interface only) – Each elevator cab’s floor buttons may be wired to an input to allow the CK721-A to create floor tracking messages. A pressed button needs to close the input, a button that is not pressed needs leave the input open. The CK721-A elevator interface does not support normally closed buttons.
Performance Considerations The more readers and input/output terminals are installed at a single CK721-A, the longer the system response time gets. Also, care has to be taken not to exceed the power supplies’ capabilities when all output relays are energized at once. The theoretical limit per CK721-A is set to 16 elevators with 128 elevator buttons combined.
After selecting a terminal, select an output point number. If the output you select already exists, the system places you into edit mode. If the output record does not exist, the CK721-A assumes you want to create a new record. Any output records you have defined will appear listed here.
If so, the appropriate time zone is substituted. To define holidays, select Holiday from the CK721-A Main menu. You will be prompted for a holiday number. If the record exists, it can be edited. If the holiday number does not already exist, it is considered a new record.
(s). To enable or disable particular reader terminals in an Access Group, select Access Group from the CK721-A Main menu. You can add an access group number as 1 or greater, or select a previously defined group to edit.
Control Door Door Control allows you to manually lock or unlock a door immediately or for a specified period of time. Select Control Door from the CK721-A Main menu. 24-10349-8 Rev. B 4-63 This document contains confidential and proprietary information of Johnson Controls, Inc....
CK721-A User Interface CK721-A Installation and Operation Password Change Use this option to change the login password for the CK721-A. Select Password Change from the CK721-A Main menu. Table 4-21: Password Change, 1 Page Only Field Type Description Enter New Password User Def.
CK721-A User Interface Type the system password and press <Enter>; the CK721-A will reboot. If you are connected to the CK721-A panel via the serial port, the boot up messages will be displayed. The reboot process is complete when the Login prompt appears.
Reader only terminal, you can program a soft alarm using its assigned number. All other numbers will be invalid. To begin, select Input from the CK721-A Main menu, and then select a previously defined terminal from the displayed list. 24-10349-8 Rev. B 4-71 This document contains confidential and proprietary information of Johnson Controls, Inc....
Figure 4-8. To define or edit time zones, select Time Zone from the CK721-A Main menu. If records have been previously defined, they will be displayed. If you enter a time zone number not previously created, the system will add it as a new record.
Page 185
To configure a new event or edit an existing one, select Card Event from the CK721-A Main menu. Next, select a previously saved event or type in a new event number to create a new card event record.
CK721-A User Interface System Information This screen provides information regarding the CK721-A. This includes items such as reader status, IP addresses, MAC number, and current time zone status. To access this information, select System Information from the CK721-A Main menu.
Change Date To set the CK721-A realtime clock, select Change Date from the CK721-A Main menu. The following screen is displayed. Enter the date in month/day/year format as shown above. Enter the time in 24-hour format as shown above.
Check for proper operation of the CK721-A as follows: 1. Verify POWER LED on the CK721-A. 2. Verify that the FAULT LED on the CK721-A is not on. 3. Verify the RS485B LED is flashing to show activity on the bus.
CK721-A Installation and Operation Maintenance IELD ERVICING Troubleshoot the CK721-A by substituting the suspected defective panel with a new component. All replaceable parts are available from Johnson Controls, Inc. Consult your Customer Success Center representative at (800) 482-2778 for domestic orders or for instructions on how to obtain replaceable parts.
- OTIS E.M.S. - Security / B.M.S. Protocol High Level Interface - OTIS Compass High Level Interface The Expanded Address S300 Bus allows a CK721-A version 3.0 controller to communicate with up to 32 modules on the RS485 bus. 24-10349-8 Rev. B This document contains confidential and proprietary information of Johnson Controls, Inc....
Specifically, the relays will no longer respond to output control and output control status messages from the CK721-A. The modified outputs will always be reported as reset. Inputs five and eight will only report the two trouble conditions: circuit open and ...
Page 208
GND input on the reader module. Open or short circuit conditions at the four-state inputs will be reported to the CK721-A by the SIO8 module without affecting the reader module’s inputs. As a result, the relay contacts will appear to the RDR2 module exactly as if two-state contacts were being used.
Page 211
This appendix explains the procedure for performing a Database Flash Backup. It will enable you to backup CK721-A data to the CPU’s on board flash memory. Consequently, if the panel does not have a backup battery (UPS) or the data is not backed up to the on board flash memory, all database information will be lost after a power cycle.
C O N F I G U R I N G S S H A N D S F T P C L I E N T S On the CK721-A controller, the FTP and Telnet services are disabled when encryption is turned on. You can use the PuTTY or WinSCP client software to log into the CK721-A controller.
Page 228
CK721-A Installation and Operation To log in to PuTTY: 1. Launch the PuTTY application. 2. Select the saved session configuration (in this example, “CK721-A”) and click Load. 3. To open communication to the panel, click Open. 4. The login screen appears.
Need help?
Do you have a question about the CK721-A and is the answer not in the manual?
Questions and answers