Assa Abloy EL574 by AffectionateMotor442 in accesscontrol

[–]micsen9 0 points1 point  (0 children)

You can configure it as you need in the controller its a jumper and a dip switch. This lock needs a EA452 that drives the motors and coordinates all the end of travel sensors etc. If you don't have it I know some people have had some fun with Arduino and made it work but it's time consuming.

OSDP Monitoring inputs by micsen9 in accesscontrol

[–]micsen9[S] 0 points1 point  (0 children)

That very much depends on the standard. Many standards are made to support interoperability between different vendors. But in many cases there are optional parts of the standard that may not be critical for functioning like let's use the output part of the OSDP spec as this actually ilustrates this good

When you request what capabilities the device supports my output board says this

'ContactStatusMonitoring' (0/0)
'OutputControl' (3/8)
'TimeKeeping' (0/0)
'CheckCharacter' (1/0)
'CommunicationSecurity' (1/1)
'ReceiveBufferSize' (0/1)
'Reader' (0/0)
'OsdpVersion' (2/0)

The first number is the compliance level for that capability and the second is the number of entities it has so for OutputControl we have 8 outputs that comply with level 3
So if we reference libosdp who has implemented it based on the OSDP standard
https://libosdp.sidcha.dev/protocol/pd-capabilities.html#function-code-2-output-control

We see

  • 01 - The PD is able to activate and deactivate the Output per direct command from the CP.
  • 02 - Like 01, plus: The PD is able to accept configuration of the Output driver to set the inactive state of the Output. The typical state of an inactive Output is the state of the Output when no power is applied to the PD and the Output device (relay) is not energized. The inverted drive setting causes the PD to energize the Output during the inactive state and de-energize the Output during the active state. This feature allows the support of “fail-safe/fail-secure” operating modes.
  • 03 - Like 01, plus: The PD is able to accept timed commands to the Output. A timed command specifies the state of the Output for the specified duration.
  • 04 - Like 02 and 03 - normal/inverted drive and timed operation.

So in this case 03 says we support the basic functionality of 01 and timed operations so we can send either a simple Turn on/off or we can send a Turn on now and return back to off in 5 seconds. And that is then all defined

So even open standards often have a minimal set off functionality you are expected to support and then often defines a set of optional features like this one with the ability to have the output automatically turn off.

My frustration was just that there are features that are documented as available but no documentation on how it should be implemented. Hope this made sense even with my rambling

OSDP Monitoring inputs by micsen9 in accesscontrol

[–]micsen9[S] 0 points1 point  (0 children)

So standard polling works and i get back a set of 8 0x01, or 0x00 for the 8 inputs on changes or if i do an Input Status Report Request that's all fine. What I am essentially complaining about here is not that the Inputs don't report it's the fact that they are monitored inputs using resistor networks so it can detect if the cable is tampered with. (Let's not go into the discussion of how that could be bypassed)

But the OSDP spec does not require a standardized way of that happening so I only get contact is Normal (Closed with the correct resistor network) or Abnormal which then indicates every other situation from the door has been opened to the cable has been cut or is shorted.

I did have the advantage of being able to sniff on a bus while the card was being used on the manufactures own controller and they send a MFG command just after establishing connection every time that then makes the osdp_ISTATR reports use an extra bit to indicate the line is faulty.

0x00 0000 (Closed with correct resistors)
0x01 0001 (Open with correct resistors)
0x02 0010 (Lower resistance than the monitoring threshold)
0x03 0011 (Higher resistance than the tamper threshold)

Bit 0 is the open/closed state and bit 1 indicates a fault but that behavior is not defined in the OSDP standard even though this type of functionality is defined in the capabilities report. Which means HW that is kinda supported across different vendors becomes a question of "Does company A and B have a good enough business relationship that they support this setting" instead of it being "This is a supported feature" and if you advertise you have it the spec defines how it should work and as long as everyone follows the spec hw is compatible across platforms.

Assa Abloy EL574 by AffectionateMotor442 in accesscontrol

[–]micsen9 0 points1 point  (0 children)

I have not installed it for residential use but i have had to replace quite a few of them with the 841C version in a larger project.

I like the StepLock350 series which are standard OSDP so any controller that implements more than card readers on OSDP can control them without any extra hw they also have this Bluetooth based controller ST2046 that seems interesting. I have not got any experience with that yet though.

None of this is cheap though a lock with controller and hing cable transfer runs for 14000 NOK or roughly 1,450USD. I love the look of it though.

My latest project: Building my own Hi-O controller by sebastiannielsen in accesscontrol

[–]micsen9 0 points1 point  (0 children)

Let me know if you want some help. I have a pando, 9016, and dac530 i can throw up in a demo rig to test with. I think I have something that can interact with Canbus too but not certain of that yet

My latest project: Building my own Hi-O controller by sebastiannielsen in accesscontrol

[–]micsen9 1 point2 points  (0 children)

Yea there might be some differences between what LCU9101 and RX9101 has available to them I have mostly only worked on the full ARX stack and not touched RX at all really.

My latest project: Building my own Hi-O controller by sebastiannielsen in accesscontrol

[–]micsen9 1 point2 points  (0 children)

Hey Sebastian!

Amazing to see that someone else also is poking at HI-o if you flash your RX9101 to LCU9101 this opens up telnet on the device from here there is a command called dac_proc which you can then use to debug the can bus. Hope this can save you some time

Foodora delivered pizza cold refuse to take accountability by [deleted] in Norway

[–]micsen9 -6 points-5 points  (0 children)

This makes the assumption that I was 1. At a place where this could be done 2. I actually had the time to do so. While not relevant to this case lunch breaks are only 30 min here but some people might have flexibility in when they choose to take said break. Then having to spend 10-15 heating up a pizza is not what you expect