Skip to content

Scenarios · building entry

Door Entry Systems — entrances, apartments, the guard desk and the lift on one SIP system

A door entry system answers one question at every entrance: who is there, and can they come in. The design documented here puts the entrance station, the indoor unit, the guard desk and the lift controller on one SIP network, without a proprietary server, and keeps the option of retrofitting a building that has nothing but two-core cable in the wall. It suits offices, apartment buildings and mixed-use properties. NEXVIA designs, manufactures, supplies and commissions the system; the entrance and indoor terminals are manufactured by NEXVIA.

  • Entrance stations are SIP and ONVIF terminals, so they register to the building PBX with no proprietary server
  • Six access methods on the face-recognition range: face, IC/ID card, PIN, QR code, DTMF and app
  • Indoor units carry 8 alarm inputs and 1 embedded relay, so a fire or gas alarm can be wired to the unit
  • Lift control over RS485 and Wiegand 26/34, with 64 outputs expandable to 128
  • Historical buildings retrofit over existing two-core cable with the PN1 converter, up to 1600 m for the network function without power
  • TLS and SRTP encryption are stated for voice and video transmission across the residential range
Building entrance with a video door station and access panel

The short answer

A building entry system is sized on entrances first: a typical apartment building runs 1 main entrance, 1 to 3 secondary doors, 1 guard or concierge position where there is one, and one indoor unit per apartment. Each entrance is an independent SIP terminal, so each needs its own extension, its own cable route and a place in the guard or resident call group — a 100-unit building with 4 entrances is 4 extensions plus 100 indoor units on the same system.

What opens the door is published per model: the face-recognition range offers six methods (face, IC/ID card, PIN, QR code, DTMF and app), the compact outdoor models take IC card, PIN, BLE and DTMF, and every range carries SIP and ONVIF. Lift control is separate and explicit — the EC20 drives 64 outputs expandable to 128 over RS485 and Wiegand 26/34, calls the lift to the first floor ahead of arrival and restricts visitors to designated floors.

The building decides the wiring, not the other way round. Where no data cable exists, the PN1 converter carries network and power over an existing two-core cable and reaches up to 1600 m for the network function without power; a floor that needs many 2-wire points uses the PN8 (up to 8 devices) or PN24 (up to 24 devices), both rated to 300 m for network plus power. Prices are not published on this site — every building is quoted per entrance count, unit count and cable survey.

Two-core topology: network and power carried over the cabling already in the wall
Two-core topology: network and power carried over the cabling already in the wall

What goes wrong on this type of site

One entrance is never enough

A building has a main gate, a garage entrance, a service door and sometimes a lift lobby. Each station is an independent SIP terminal, so each needs its own extension, its own cable route and a place in the guard or resident call group.

The old building has no network cabling

The retrofit case in the material is built around no new wiring: the PN1 2-wire converter carries network and power over an existing two-core cable, with up to 1600 m for the network function without power, and PN8 or PN24 switches carry 8 or 24 devices over the same technique at up to 300 m with power.

Access has to be more than a door

Residents and deliveries also meet the lift. The EC20 drives 64 outputs, expandable to 128, over RS485 and Wiegand 26/34, can call the lift to the first floor ahead of arrival and restricts visitors to designated floors.

The intercom must work the first time

Residents will not troubleshoot. Door phones accept face, card, PIN, QR code, DTMF and app entry, indoor stations take PoE and mount on the wall with one-touch family calling, and the face-recognition models use anti-spoofing liveness detection against images, videos and masks.

Choosing by size

Size bandSystemDevicesNotes
Single entrance — villa, small office, clinicOM20G — 24 SIP trunks; 4 analog ports if a gate line is kept1–2 entrance stations (A10W / A12V / i60K), 2–8 indoor units, 1–2 apartment or desk handsetsThe OM20G is also the only model that can dial out through a 3G/4G USB modem, which matters at a remote gate with no wired line.
Apartment building up to about 100 unitsOM50G — 62 SIP trunks; up to 12 analog ports across 3 interface cards4–8 entrance stations (i67 / A10W / A12V), 1 guard station (A308), up to 100 indoor units, 1 lift controller where smart lift access is requiredA maximum number of indoor stations per system is not stated, so the unit count is confirmed on the quotation. Ring groups hold up to 40 extensions on this model.
Community of several buildingsOM200G — 496 SIP trunks; up to 96 analog portsPer-building station counts, community broadcasting zones, one guard station or intercom panel per gate4 hot-swap slots, gigabit Ethernet and single or dual AC/DC power for a site that cannot go offline; PT2400 or PT4800 patch panels suit a communal equipment room.
Large estate or multi-phase developmentOM1000-UC — 1000 SIP trunks, up to 200 concurrent calls per trunkThe per-building counts repeated across phases, one dial plan, DID numbers for shared entrance linesSIP only, with dual hot standby (3 fixed IP addresses) and multi-site networking using unique or repeatable numbering; the residential material states the system needs no proprietary servers.
Retrofit over existing two-core cableOM50G or OM200G — 62 or 496 SIP trunksEntrance stations and indoor units at the existing points, with PN1 converters per point and PN8 or PN24 switches per riserPN1 carries network and power over 2-wire with an external AC 100–240 V supply; PN8 and PN24 carry 8 and 24 two-wire devices with a maximum connection distance of 300 m for network plus power.

Numbers behind the design

Entrance, indoor and guard terminals, as published
ModelRoleAccess methods and cameraProtection and connection
i67Face-recognition entrance stationFace, IC/ID card, PIN, QR code, DTMF, app; two 2 MP wide-angle cameras with fill light; 7-inch touchscreen; 3W speaker with AECIP66 and IK07, −20 °C to 60 °C; SIP and ONVIF; Wiegand; anti-spoofing liveness detection
i68Face-recognition entrance station, larger screenSame six methods; two 2 MP cameras; 8-inch screenIP66 and IK07, −20 °C to 55 °C; SIP and ONVIF; Wiegand
i66Face-recognition entrance station, cold-ratedTwo 2 MP cameras; numeric keypad with light effectIP66 and IK07, −40 °C to 60 °C; SIP and ONVIF
i64 / i63 / i62 / i61Video entrance stations with card and code entryPassword, IC/ID card, indoor switch, DTMF, scheduled opening; one 2 MP camera with IR night vision; 2.5W speaker with AEC; TF card up to 128 GBIP66 and IK07, −40 °C to 70 °C; SIP and ONVIF
i60 / i60KCompact entrance station with rain coverIC card, PIN (i60K), BLE unlocking, DTMF, app; one 2 MP camera with IR night vision; 1W speaker with AEC; 1 relay, 1 short-circuit in and 1 outIP65 with rain cover; SIP and ONVIF; 12 V DC or PoE
A11 / A11VAudio / video intercom for entrances and service doorsA11V: 4 MP camera with IR night vision; 5W speaker with AEC; 1 access-control relay; 2 short-circuit inputs and 1 outputIP66 and IK10, −40 °C to 70 °C; anti-tamper alarm to the control centre
A12 / A12VOutdoor emergency intercom and gate stationA12V: 4 MP camera with IR night vision; 10W speaker with AEC; 1 access-control relay; 2 short-circuit inputs and 2 outputsIP66 and IK10, −40 °C to 70 °C; ONVIF and RTSP on the video model; TF card
i16S / i16SVIntercom and access position, indoor or shelteredi16SV: HD camera with IR night vision, 1080p; 3W speaker with AEC; 2 inputs and 2 outputs; 2 relaysIP65 and IK10, −30 °C to 60 °C; anti-tamper alarm
A10WDoor-side panel in a standard boxThree function keys, 2W speaker with echo cancellation, 1 relay, 1 short-circuit in and 1 out; KT10/KT20/KT30 buttonsStandard 86 box; PoE or 12 V DC; IP54; −10 °C to 50 °C
i501 / i506WIndoor unit in the apartmenti501: three DSS keys, one-touch unlock or call, 1W speaker with AEC. i506W: 10.1-inch 1280×800 screen, 2W speaker with AEC, 8 alarm inputs and 1 embedded relayWall mounted with PoE integrated; both publish built-in 2.4G/5G Wi-Fi
A308 / A320Guard or concierge stationA308: 7-inch 1024×600 screen, 5 MP adjustable camera, gigabit port, desktop or wall bracket. A320: 10.1-inch 1280×800, 8 MP camera with privacy coverSIP; integrates IP cameras for monitoring and pushes notifications to the indoor unit or app
EC20IP elevator access controller64 outputs expandable to 128; RS485 and Wiegand 26/34; calls the lift ahead of arrival; restricts visitors to designated floors10/100 Mbps Ethernet; configured over web software; works with the door terminals
This design against a conventional door entry system
RequirementConventional door entry systemThis IP designWhat changes operationally
Wiring to the entranceMulti-core cable from the panel to a handset in each apartmentOne network run to the entrance station, and the indoor unit is a network terminal; where only two-core cable exists, PN1 carries network and power over itOld cable can be reused rather than replaced; new buildings run data cable
Adding an entranceA new panel, a new cable to every handsetA new SIP extension and a place in the call groupA second gate or goods door becomes an extension, not a system
Who answersThe apartment handset, and if nobody answers the visitor is stuckIndoor unit, guard station or app; the call is a normal SIP call, so it can also go to a call groupA missed call is not a lost visitor
Identity checkVoice onlyVideo on the entrance station and on the indoor unit screen; face recognition and liveness detection on the i67/i68 rangeResidents see who is at the door before releasing it
Lift and shared areasA separate lift controller and a separate intercomEC20 on the same system: 64 to 128 outputs over RS485 and Wiegand, rights decided per card or residentVisitor access is restricted to designated floors from the same system
RecordsNoneDoor logs, temporary keys and push notifications where the cloud platform is used; TF card image storage up to 128 GB on the door phonesAccess can be reviewed after an incident
Alarms in the apartmentNot connected8 alarm inputs and 1 embedded relay on the indoor unit support an external fire or gas alarmThe intercom point doubles as an alarm input

Deployment by area

AreaDeviceNote
Main building entrancei67 face-recognition door phone7-inch touchscreen in an all-aluminium IP66 and IK07 body, two 2 MP wide-angle cameras with automatic fill light, six access methods, SIP and ONVIF, a Wiegand interface and anti-spoofing liveness detection.
Second gate or vehicle entranceA12V outdoor video intercomIP66 and IK10 with a 4 MP camera and infrared night vision, a 10W speaker with echo cancellation, 2 short-circuit inputs and 2 outputs, −40 °C to 70 °C, and an anti-tamper alarm reported to the control centre.
Service door, goods entrance or in-suite doorA10W SIP mini intercomFits a standard 86 box with three function keys, a 2W speaker with echo cancellation, one relay and one short-circuit in/out; supports KT10/KT20/KT30 buttons and runs on PoE or 12 V DC.
Inside the apartment or office suitei506W or i501 indoor stationi506W: 10.1-inch 1280×800 screen, 8 alarm inputs and 1 embedded relay, wall-mounted with PoE and 2.4G/5G Wi-Fi. i501: three DSS keys, one-touch unlocking or calling, a 1W speaker with echo cancellation and PoE support.
Concierge or guard roomA308 guard station (A320 for a larger desk)A308: 7-inch Android touchscreen with a 5 MP adjustable camera, a gigabit port and a bracket for desk or wall. A320: 10.1-inch 1280×800 with an 8 MP camera and privacy cover. Both answer entrance calls, open doors and integrate IP cameras for monitoring.
Lift machine room or garageEC20 elevator access controllerRS485 and Wiegand 26/34, 64 outputs expandable to 128, configured over web software; calls the lift ahead of arrival and restricts visitors to designated floors.
Riser or floor distribution (retrofit)PN1 converter, PN8 or PN24 2-wire switchPN1 carries network and power over an existing two-core cable (up to 1600 m for network without power). PN8 carries up to 8 devices and PN24 up to 24 devices, with a maximum connection distance of 300 m for network plus power.

Questions buyers ask

How does a door entry system work?

A visitor presses the call button or, on the face-recognition range, is recognised; the entrance station places a SIP call to the apartment indoor unit, the guard station or a call group; the person who answers sees and speaks to the visitor and releases the door remotely.

  • The entrance station is a SIP terminal with its own extension, so the call is routed by the PBX exactly like any other extension call.
  • Door release is a relay action on the panel or from the answering device — one relay on the A10W and i60 series, two short-circuit outputs on the A12V.
  • Video is published over the SIP connection, with ONVIF available where the call has to be linked to a VMS.
  • Where the cloud platform is used, an app adds temporary keys, remote unlocking and push notifications for residents.

Can a door entry system be retrofitted without new wiring?

Yes, and that is the labelled retrofit case in the residential material. The PN1 2-wire converter carries network and power over an existing two-core cable, with up to 1600 m for the network function without power, supplied at AC 100–240 V.

  • A riser with several points uses the PN8 (up to 8 two-wire devices) or PN24 (up to 24 devices), both rated to a maximum connection distance of 300 m for network plus power.
  • The retrofit is described in the material as needing no new wiring, which is what makes it usable in stone-walled or heritage buildings.
  • Wireless accessories help where even two-core cable is absent: KT10/KT20/KT30 buttons link over 433 MHz to supported indoor units, and BLE unlocking is published on the i60 and i60K.

How many entrances can one building system take?

As many as the PBX has capacity for, because each entrance station is one SIP terminal: 24 trunks on the OM20G, 62 on the OM50G, 216 on the OM80E, 496 on the OM200G and 1000 on the OM1000-UC. In practice the design limit is cabling and call groups, not extension count.

  • Typical apartment building: 1 main entrance, 1–3 secondary doors (garage, service, lift lobby), each with its own extension.
  • Each entrance needs a cable route, a power decision (PoE or 12 V DC on the compact models) and a place in the guard or resident call group.
  • A station that is not answered rings on: the call can be sent to a group rather than one unit, so a second entrance does not need a second concierge.

How is lift access handled?

With the EC20 IP elevator access controller: 64 outputs expandable to 128, RS485 and Wiegand 26/34, configured over web software. It can call the lift to the first floor ahead of arrival and restrict visitors to designated floors.

  • Access rights are assigned per card, code or resident, so a visitor can be given one floor and a resident all of them.
  • It works with the door terminals over HTTP commands and is compatible with the indoor stations and door phones in the range.
  • Allow a route from the lift machine room to the controller and a network drop for the EC20 — the configuration is done over web software, not from the lift car.

How does a visitor reach the right apartment?

Three published ways. The entrance station can carry a numeric keypad with a directory or a code per apartment; the face-recognition and card ranges let a regular visitor be recognised or carry a card; and the guard station or app lets a concierge or resident route the call.

  • Face, IC/ID card, PIN, QR code, DTMF and app entry are all published on the i67 and i68 range, with anti-spoofing liveness detection for images, videos and masks.
  • Compact models (i60, i60K) cover IC card, PIN, BLE unlocking, DTMF and app entry where a lower-cost station is enough.
  • The guard station can push a notification to the resident's indoor unit or app, so an attended lobby and an unattended one work the same way.

What happens if nobody answers the door call?

The call follows the same rules as any other call on the PBX: it can ring a group rather than one device, and if it is not answered it can be routed on — to the guard station, to another family member's extension, or to voicemail where that extension has it.

  • With a guard station in the building, the panel is normally in the guard call group as well as the apartment group.
  • Where the cloud platform is used, the resident can answer on the app rather than the wall unit.
  • Decide the order at design stage: apartment first, then guard, then app, or apartment and guard simultaneously — the choice is a ring-group setting.

Do residents need an internet connection for the intercom?

No for the call itself: the system is SIP based and the residential material states it is compatible with standard IP PBX hardware and softswitches, with no proprietary servers needed, so the call runs over the building network. Anything that leaves the building — an app notification, a remote unlock or cloud device management — is a separate design decision.

  • TLS and SRTP encryption are stated for voice and video transmission across the range.
  • The app layer (temporary passwords, door logs, push notifications) is a cloud service; treat it as an optional layer with its own connectivity requirement.
  • Where internet access is provided for the cloud layer, review it against the building's own privacy policy before enabling resident notifications.

Can we keep our existing analog door phones?

Where the wiring can be reused, yes — the PN1 converter puts network and power onto an existing two-core cable, and the indoor units and entrance stations then replace the old handsets. The old panel itself is not reused: the entrance station is the SIP terminal in the new design.

  • Pairs that still reach the frame can also be terminated on the PBX as analog extensions, up to 12 ports on the OM50G and 96 on the OM200G, which suits a phased conversion.
  • A phased plan normally converts the main entrance first, because that is the door that matters most.
  • Confirm the cable condition at survey: the reuse decision depends on continuity and pair count, not on the age of the installation.

Cabling, power and network notes

  • Indoor stations mount on the wall with PoE integrated; for the door-phone family the materials state SIP and ONVIF rather than a power method, so power is confirmed per model on the quotation — the compact i60 series and the A10W accept PoE or 12 V DC.
  • Two-core retrofit: PN1 extends PoE wiring over 2-wire with an external AC 100–240 V supply, and the related 2-wire switches carry up to 8 devices (PN8) or 24 devices (PN24) with a maximum connection distance of 300 m for network plus power.
  • Access-control wiring uses RS485 and Wiegand 26/34 (the EC20 carries both; the face-recognition door phones carry a Wiegand interface) and should be kept separate from mains and from the network run where local rules require it.
  • Indoor units accept alarm wiring: 8 alarm input interfaces and 1 embedded relay support connecting an external fire or gas alarm.
  • Encryption is stated for the residential range: TLS and SRTP for voice and video transmission. Where remote access is enabled, plan the RTP port range the same way as for any SIP extension — the published PBX default is 10010–10266.
  • Where a lift is served, allow a route from the machine room to the controller and a network drop for the EC20 — its configuration is done over web software.
  • Leave spare capacity at every entrance: a second panel, a KT10/KT20/KT30 button or a camera linkage is an extension and a cable, and having the route planned saves opening the floor again later.

How the entrance call works

  • A visitor calls from the entrance station, or is recognised by face or card; the station places a SIP call to the indoor unit and, where the building has one, the guard station.
  • The resident answers, verifies the visitor and unlocks the door remotely from the indoor unit, the guard station or the app.
  • Door phones support face recognition, IC/ID card, PIN, QR code, DTMF and app entry, so regular visitors and staff do not have to ring every time.
  • The i67 and i68 use anti-spoofing liveness detection against images, videos and masks.
  • The guard station can integrate IP cameras for monitoring and push notifications to the resident unit or app.

Retrofit, lifts and shared areas

  • Historical-building retrofit is the labelled use case for the 2-wire converter: network and power travel over the cable already in the wall.
  • The EC20 calls the lift to the first floor ahead of arrival and restricts visitors to designated floors.
  • Shared-area call points fit a standard 86 box; the H501 mini intercom installs with a 1 cm wall profile and is powered by PoE.
  • Community broadcasting and office IP phones can run on the same platform as the building intercom, per the residential material.
  • Indoor stations and outdoor stations can be combined on one dial plan, with entrance extensions in the guard call group.

Choosing the entrance station by the facts on site

Which range fits which entrance

Site conditionRangeWhyPublished limit to check
Sheltered lobby, high traffic, mixed residents and visitorsi67 / i68Face recognition with liveness detection plus card, PIN, QR, DTMF and app entryIP66 and IK07; −20 °C to 60 °C (i67) and −20 °C to 55 °C (i68)
Cold climate or direct weatheri66, i64 to i61Published from −40 °C, IP66 and IK07 with IR night visionCamera is 2 MP; speaker 2.5W to 3W
Compact gate or second doori60 / i60KSmall body with rain cover, BLE and IC card entryIP65; 1W speaker; 1 relay
Service door inside a safe areaA10WStandard 86 box, relay for the strike, button supportIP54; PoE or 12 V DC
Gate with vehicles and weatherA12V10W speaker, 4 MP camera, IK10 die-cast body, anti-tamper alarmIP66; 2 SIP lines; PoE not stated — power confirmed on the quotation

Match the range to the entrance before matching the price list: the rating, the speaker power and the access methods are what decide whether residents trust the door.

The apartment side: what the indoor unit does

  • Answer and release: one-touch unlocking or calling on the i501, and visual call with remote door opening on the screened models.
  • See the visitor: a 10.1-inch 1280×800 screen on the i506W, H.264 and H.265 (optional) video, 1080p.
  • Alarms in the home: 8 alarm inputs and 1 embedded relay accept an external fire or gas alarm.
  • Wireless buttons: the i506W and i507W take KT10/KT20/KT30 wireless buttons for a bedside or bathroom call point.
  • Family calls: one-touch family call and multi-party full-duplex voice are published across the indoor range, including the H501 series mini intercom that fits a standard 86 box with a 1 cm profile.

Compliance, standards and local requirements

Door release and fire/egress rules

A door entry system releases a lock, and a lock release has to be legal. Whether a strike fails open or closed, whether a release button is required on the inside, and how the entry system coexists with a fire panel and an escape route are code matters decided locally and often by more than one authority. The published material records no certification for these products. Confirm the release arrangement with the site's fire and access-control adviser before the lock is specified, and keep the entry system separate from the life-safety circuit.

Wiring practice for access control interfaces

The access-control side of the system uses named interfaces: RS485 and Wiegand 26/34 on the EC20, a Wiegand interface on the face-recognition door phones, and short-circuit inputs and relay outputs on the intercom stations (A12V 2 in / 2 out, A11V 2 in / 1 out, i16S/i16SV 2 in / 2 out, A10W 1 in / 1 out with a built-in relay). Keep signal cabling separate from power where the local rules require it, earth the equipment room as the installation diagram shows, and label both ends of every control pair.

PoE, power and outdoor ratings

PoE is the default supply for the network side, but it is not universal in this range: the compact door phones accept PoE or 12 V DC, the A10W accepts PoE or 12 V DC, and the indoor units are wall mounted with PoE integrated. Outdoor positions must match the site: IP66 and IK10 with a −40 °C to 70 °C range on the A12V, IP65 with a rain cover on the i60 series, and IP66 with IK07 on the face-recognition range. Check the mounting position against the published rating rather than assuming a porch is indoors.

Accessibility and privacy

Two accessibility facts are published and worth designing in: several door phones have a line-out interface that can be integrated with an induction loop antenna, which serves residents with hearing impairment, and the indoor units carry 8 alarm inputs and 1 embedded relay for an external fire or gas alarm. On the privacy side, face recognition and door logs are personal data in most jurisdictions — the site must confirm what may be recorded, how long images may be kept, and what notice residents and visitors are given. None of that is answered by the equipment; it is answered by the building's own policy and local law.

Standards referenced

Frequently asked questions

Can an old building avoid re-cabling?

Yes. The PN1 2-wire converter carries network and power over an existing two-core cable, with up to 1600 m for the network function without power, supplied at AC 100–240 V.

How is the lift handled?

With the EC20 IP elevator access controller: 64 outputs expandable to 128, RS485 and Wiegand 26/34, configured over web software. It can call the lift ahead of arrival and restrict visitors to selected floors.

How are the apartment units powered?

Indoor stations are wall-mounted with PoE integrated, and the A10W panel can run on PoE or 12 V DC. Door-phone power is confirmed per model on the quotation, because that is where the materials state it.

Can the door station be linked to our cameras?

Entrance terminals are compatible with SIP and ONVIF, and the guard stations integrate IP cameras for monitoring. Where the site runs a VMS, the call and its camera can be viewed and reviewed together, and the A513W puts a speaker and a 4 MP IR camera in one IP66 enclosure for positions that need both.

What happens to the door during a power failure?

That is decided by the lock and the local code, not by the intercom. The published models provide the relay and the control interfaces — one relay on the A10W, two short-circuit outputs on the A12V, 64 outputs on the EC20 — and the fail-open or fail-closed behaviour is a matter for the access-control contractor and the fire authority. Decide it before the strike is ordered.

Can we start with one entrance and add more later?

Yes. Each station is a SIP extension, so a second gate is an extension and a cable route rather than a new system. The main entrance is normally converted first, with the dial plan and the guard call group built so the added entrances slot in without renumbering.

Project evidence

We have not published a named reference project on this page. The site does not carry customer names or installation records until the client confirms in writing which projects may be made public.

Page author: NEXVIA EngineeringPublished:Last updated:

Covers: door entry system · telephone entry system · building entry systems · door entry systems for business · door intercom system

All IP telephony, intercom and paging equipment in this design is supplied and integrated by NEXVIA.

Already decided on a platform, or replacing a system?

Explore Products

Related products

Planning an IP telephony project?

Send us the site type, the number of extensions or rooms and the areas to cover — we will come back with a configuration and quotation.

Send the site details

Six facts build a configuration: site type, extensions or rooms, simultaneous calls, areas to cover, existing lines and the documents you already hold. Send as many as you know — nothing has to be final before the first reply.

  • Reply within one working day
  • Configuration + quotation for your site
  • Your details are used only to answer this inquiry

* required