Physical Security Hardware Guide — Cameras, Access Control & Controllers
This guide covers the standard hardware JP Technical deploys for managed physical security engagements. All equipment is selected for on-premises operation — no cloud dependency required.
Camera Hardware
Recommended IP Cameras
JP Technical deploys PoE (Power over Ethernet) IP cameras that are compatible with Frigate NVR via ONVIF/RTSP. All cameras run on your network via PoE switch — no separate power run required.
| Use Case | Recommended Model | Notes |
|---|---|---|
| Indoor general coverage | Amcrest IP8M-2496EW or similar H.265 PoE | Wide-angle, 4K, low-light |
| Outdoor entry points | Amcrest IP8M-2578EW or similar weatherproof PoE | IP67, IR night vision |
| Parking/wide area | Dahua IPC-HFW2849S-S-IL or similar | Smart dual-light, 8MP |
| Server room / narrow hallway | Amcrest IP5M-T1179EW (fisheye variant) | 180° coverage |
Key requirements for Frigate compatibility:
- H.264 or H.265 encoding (H.265 preferred for storage efficiency)
- RTSP stream support (sub-stream for detection, main stream for recording)
- Static IP or reserved DHCP recommended
PoE Switches for Camera Networks
Cameras must be isolated on a dedicated VLAN. JP Technical provisions a separate camera VLAN on your managed network.
| Location Scale | Recommended Switch |
|---|---|
| Up to 8 cameras | Ubiquiti UniFi USW-Lite-8-PoE or similar |
| 9–24 cameras | Ubiquiti UniFi USW-24-PoE |
| 25+ cameras | Ubiquiti UniFi USW-48-PoE |
NVR Server Hardware
Frigate NVR runs on a dedicated mini PC or on an existing Proxmox server (for clients already on Proxmox).
| Deployment Type | Hardware |
|---|---|
| Dedicated appliance (≤8 cameras) | Intel NUC i5/i7 or Beelink mini PC, 16–32 GB RAM, 4–8 TB storage |
| Proxmox VM (existing server) | Allocate 4–8 vCPU, 16 GB RAM, dedicated GPU passthrough recommended |
| AI acceleration (4+ cameras with detection) | Google Coral USB TPU (~$60) — dramatically reduces CPU load |
Storage sizing: Plan approximately 50–100 GB per camera per day at 1080p H.264. For 30-day retention on 4 cameras: ~6–12 TB.
Access Control Hardware
JP Technical’s standard access control platform is Suprema BioStar 2, an enterprise PACS (Physical Access Control System) used in hospitals, clinics, and government facilities worldwide.
Door Controllers
| Model | Doors Supported | Notes |
|---|---|---|
| Suprema CoreStation CS-40 | 4 doors | TCP/IP, offline operation, OSDP v2, ~$500 |
| Suprema CoreStation CS-20 | 2 doors | Compact, TCP/IP, OSDP v2, ~$300 |
OSDP v2 is required for all new installations. Legacy Wiegand readers are not recommended — Wiegand signals are trivially cloneable with inexpensive hardware.
Readers by Credential Type
| Credential | Model | Approximate Cost |
|---|---|---|
| RFID card/fob only | Suprema BioEntry W2 (card) | ~$150–200 |
| RFID + fingerprint | Suprema BioEntry W2 (fingerprint) | ~$300 |
| RFID + fingerprint + face | Suprema FaceStation F2 | ~$800–1,000 |
| Mobile (NFC/BLE) + RFID | Suprema BioEntry W2 with mobile credential | ~$200 |
| Outdoor + face recognition | Suprema FaceStation 2 outdoor | ~$1,000 |
Door Hardware (Electric Strikes & Mag-Locks)
| Type | When to Use | Notes |
|---|---|---|
| Electric strike (fail-secure) | Interior offices, server rooms | Locks on power loss — preferred for security |
| Magnetic lock (fail-safe) | Emergency egress doors | Unlocks on power loss — required by code for fire egress |
| Door position sensor | All controlled doors | Monitors if door is propped open |
| Request-to-Exit (REX) sensor | All outgoing sides | Passive IR or push button for egress |
UPS backup is mandatory for all door controllers and power supplies. A failed door due to power loss is a security incident.
BioStar 2 Server Requirements
BioStar 2 runs on Windows (physical or VM). JP Technical typically deploys as a VM on existing Proxmox infrastructure.
- OS: Windows Server 2019/2022 or Windows 10/11 Pro
- RAM: 4 GB minimum, 8 GB recommended
- Storage: 50 GB minimum for software + 3 years of logs
- Network: Static IP, reachable from door controllers
- Free license: up to 5 doors at no charge
- Paid license: ~$300 for 20 doors, ~$800 for 50 doors
Credential Cards
| Type | Security Level | Notes |
|---|---|---|
| MIFARE DESFire EV2/EV3 | ✅ High | Encrypted, mutual authentication — recommended |
| MIFARE Classic 1K | ⚠️ Low | Clonable — avoid for new installs |
| HID iCLASS SE | ✅ High | Compatible with Suprema readers |
| Standard 125 kHz EM4100 | ❌ Very low | Do not use — trivially cloneable |
Typical Per-Door Installation Cost
| Component | Low Estimate | High Estimate |
|---|---|---|
| RFID card reader | $150 | $200 |
| Fingerprint reader | $300 | $400 |
| Face recognition reader | $800 | $1,000 |
| Door controller (shared, 4-door) | $125 | $150 (per door share) |
| Electric strike + hardware | $150 | $250 |
| Cable (Cat6 + 18/2 power) | $50 | $150 |
| Installation labor | $200 | $400 |
| Total per door (RFID only) | ~$700 | ~$1,150 |
| Total per door (fingerprint) | ~$850 | ~$1,350 |
| Total per door (face recognition) | ~$1,500 | ~$1,950 |
These are typical ranges. Final pricing is quoted per project based on site walk and scope.
Where to Source Hardware
JP Technical sources Suprema hardware through ADI Global Distribution (Anchorage location), which stocks the full Suprema line including BioEntry W2, FaceStation, and CoreStation controllers. Cameras are sourced through authorized distributors.