FAQ

Frequently asked questions about RUBEZH STRAZH access control: networking, licensing, clusters, equipment, integrations, operation, and common limitations.

Network and architecture

What are the Ethernet network requirements?

RUBEZH STRAZH does not require a dedicated local network: controllers can operate on the existing enterprise network. The required TCP and UDP ports must be available for the web interface, API, and data exchange between controllers. The web interface and API use a secure connection, while a separate port is used for communication between cluster members.

Is an Internet connection required to combine controllers?

No. Controllers communicate with each other over the local Ethernet network. Internet access is not required for cluster operation.

Is a dedicated server required?

A dedicated server is not mandatory for RUBEZH STRAZH. Each controller operates as an independent node with embedded Linux software. An operator or administrator opens the web interface in a browser from a desktop computer, laptop, tablet, or smartphone.

What is a cluster?

A cluster is a group of controllers combined into a single system. The controllers synchronize data and jointly manage access points within a shared configuration.

Which database is used?

RUBEZH STRAZH controllers use Redis, an in-memory NoSQL database used by the controller's embedded software.

Which Linux distribution is used in the controllers?

RUBEZH STRAZH controllers use Ubuntu Core.

Licensing and scaling

What is the difference between the standard and Enterprise editions?

The standard edition is intended for smaller systems and does not support integration with external software. Enterprise increases system capacity and enables integration features. An Enterprise cluster can contain up to 32 controllers, with up to 20 readers connected to each controller.

Can standard and Enterprise controllers be used in the same cluster?

Yes. Controllers of different editions can operate in one cluster. If a cluster contains standard-edition controllers, the cluster parameters are limited by the capabilities of the standard edition.

Is any additional licensing required?

No separate paid software modules are required for reports, workstations, or the verification desk. These functions are available through the controllers' unified embedded software within the selected edition.

What if 640 readers in one cluster are not enough?

One cluster can contain up to 32 controllers and 640 readers. For larger sites, multiple clusters can be combined through upper-level software such as R-Platforma, R-Integrator, or R-Operator.

Identification and access management

Is two-factor identification supported?

Yes. Access points can use a card, card and PIN, card or PIN, biometric data, operator confirmation, or confirmation by an external system.

Which identifiers can be used?

The supported identifier types depend on the selected readers. The system can use EM-Marine, MIFARE, HID, barcodes, QR codes, biometric identifiers, BLE, and NFC.

Can existing cards from another site be used?

Yes, provided that readers supporting the same card or identifier format are selected. For Wiegand readers, verify the supported bit length and compatibility with the existing database.

How can an access point be armed from a reader?

Local control requires a reader with a keypad. The operator enters a command, confirms it with the configured confirmation key, and presents a card with sufficient permissions. These commands can change the access point mode, including duty mode, lock, unlock, and arming.

Equipment and communication lines

Why should OSDP devices be used?

OSDP improves peripheral visibility and monitoring. Unlike conventional Wiegand lines, OSDP devices can report their status, helping detect faults and reduce cabling.

What is the maximum RS-485 line length between a controller and an access module?

An access module connects to a controller over RS-485. The maximum line length is up to 1,000 m when the line is designed and installed correctly.

Can RS-485 or OSDP use a tree topology?

No. RS-485 uses a bus topology. Branches are not allowed: devices must be connected sequentially along the line.

How far can a Wiegand reader be installed from an access module?

For Wiegand, use a maximum distance of approximately 100 m. The design must also account for lock power, the request-to-exit button, door contacts, current consumption, and cable voltage drop.

Which readers can be used?

Wiegand readers with supported formats can be connected to an access module. OSDP readers connect directly to the controller over RS-485.

Which OSDP readers have confirmed compatibility?

The operation manual lists tested product lines and manufacturers, including ESMART PRO, Parsec, Suprema XPass D2, HID Signo 20K, HID iCLASS SE R10, and Biosmart Smartkey WR-10. Check the current compatibility list before purchasing equipment for a project.

Which turnstiles can be used with the system?

RUBEZH STRAZH can automate turnstiles that accept entry and exit permission signals and report the actual passage to the access control system.

Are mantrap cabins supported?

Yes. The system supports standard mantrap cabin modes, and the algorithm can be adapted for a specific site when special requirements apply.

Integrations

Is 1C integration available?

Integration with 1C is implemented through the RUBEZH STRAZH REST API. The API defines communication between the external system and the access control system and can be used by a 1C developer without separate server software for RUBEZH STRAZH.

Is time and attendance available?

Yes. The system provides reports for a selected period and a daily report containing arrival time, departure time, hours worked, and missed time.

How is a barrier with license plate recognition configured?

RUBEZH STRAZH supports integration with license plate recognition systems, including RVi-Auto server analytics and cameras with ONVIF recognition functions. In a typical design, the access control system grants vehicle access, while the barrier controller decides when to close the barrier using its own sensors.

How does photo and video verification work?

The Security Desk interface is used for photo verification: the operator sees the person's record when they pass through a controlled access point. Video verification is provided through video surveillance integration, where the access event triggers the external system.

Which biometric terminals are supported?

Integrations with BIOSMART, HIKVISION, and ZKTeco are supported when interface and compatibility requirements are met. In a typical configuration, Ethernet is used for data transfer and administration, while Wiegand transmits the identified person's code to the access module.

Controller capacity

How many people can be stored in a controller?

STR20-IP supports up to 10,000 people. STR20-IP-Ent, STR20-1AP-IP-M, and STR20-2AP-IP-M support up to 100,000 people.

How many access modules can be connected to a controller?

Up to 30 OSDP devices can be connected to one controller, including no more than 20 readers. For example, this can be 10 access modules with two readers each or 20 access modules with one reader each.

How many access points can one controller manage?

The number depends on the access point type and connected peripherals. One controller can manage up to 20 one-way access points, 10 two-way access points, 10 turnstiles, or 10 barriers or gates. Mantraps and turnstiles with card collectors usually have a lower limit because they require more readers per access point.

Add another controller when more access points are required. One cluster supports up to 32 controllers and 640 readers.

Operation and diagnostics

Which software is required to work with a controller?

All work is performed through a current web browser. No separate client application needs to be installed.

What should I do if the browser reports that the page is not secure?

The controller uses a secure connection, so the browser may display a certificate warning. Install the required certificates on the workstation for permanent operation. Before the certificates are installed, access can be opened through the browser's advanced options if permitted by the site's security policy.

Which desktop USB reader should be used?

A desktop USB reader operating as a virtual keyboard is normally used to automate card number entry. The operation manual includes Z-2 USB as an example.

Can a database be migrated from an older access control system?

Yes. RUBEZH STRAZH includes an import tool that can transfer a personnel database from an older access control system in CSV or JSON format.

Why does a reader emit a continuous audible signal?

Check the ACT-BEEP and ACT-LED jumper positions on the access module board. These jumpers invert audible and visual indication. Their normal positions must match the requirements of the operation manual and the connection diagram.

Where can I find the initial credentials for the first login?

The initial credentials are specified in the current operation manual and must only be used for initial configuration. Change the administrator password according to the site's security policy after commissioning.