Hikvision access control for gyms: let the membership open the door

Most gyms in Lebanon start the same way: a receptionist checks names against a notebook or a list on the computer, and members who expired last week still walk in because nobody wants an argument at the door. A turnstile or a face terminal fixes the argument, but only if the terminal knows who has paid. If someone has to update the device by hand after every renewal, the problem has just moved.

GymLeb connects Hikvision access terminals directly to your memberships. When a member renews, freezes or expires, the door already knows. This guide covers how it works, what you need, how to enroll members and what to check when something looks wrong.

How the door decides who gets in

Every member you give access to is written to the terminal with a validity window: the start and end dates of their current subscription, in your gym's time zone. The terminal itself checks that window every time someone scans.

That design has two practical effects:

• Expiry needs no action from anyone. The end date is already on the device, so a membership that ends tonight stops opening the door tomorrow without a command being sent at midnight.
• Changes in GymLeb are pushed automatically. Renewing, adding a subscription, freezing, unfreezing, extending, invalidating or editing a transaction re-syncs that member to the terminal. A frozen membership cuts the window at the freeze date, so the member is refused until you unfreeze. A subscription that starts in the future opens the door on its start date.

A granted scan also records a check-in, so your attendance history fills itself.

One thing to know: the door follows subscription dates, not balances. A member who still owes part of their fee gets in as long as the subscription is running, and the unpaid list is where you follow that up.

What your gym needs

You need a Hikvision access terminal and a connection between it and GymLeb, called a gateway. There are two ways to connect:

1. A small local box on your network. A Raspberry Pi sits next to your router and talks to the terminal on your local network. Wired Ethernet is preferred.
2. A direct internet connection from the terminal. On supported models and firmware, the terminal connects to a gateway hosted by GymLeb, with no box at the gym.

The terminal GymLeb has tested in depth is the Hikvision DS-K1T342 face and fingerprint terminal. If you already own a different Hikvision model, contact us with the exact model and firmware before you buy anything else.

The GymLeb team adds your machine and pairs the gateway. Once it is connected, the machine appears in your dashboard under Access Control then Machines, with an Online or Offline badge. Access control is an add-on, priced per location on the pricing page.

Enrolling members: face, fingerprint or card

Enrollment starts from the member's page, in the Access control section. There are three buttons:

• Enroll Fingerprint: pick the machine and a finger slot, and the member places their finger on the terminal. The dashboard shows the progress live, so the person at the desk knows when to stop.
• Enroll Face: choose the face source. You can capture it with the terminal's camera, upload a photo (cropped to a circle), or use the member's profile photo. Using an existing photo means a member can be enrolled before they even reach the terminal.
• Enroll Card: the member presents their card at the reader and the device links it to them.

Badges on the member's page show what is enrolled and what is not. When you create a new member, the machines to give them are preselected from your default machine, and you can change them later with Edit Access Machines.

Staff can be enrolled the same way from their Access tab, which is also how the terminal can feed staff attendance.

Already have members on the terminal?

Many gyms already have hundreds of faces and fingerprints on a terminal from an older setup. You do not have to enroll them again. On the machine card, Pull Users reads everyone stored on the device, including their fingerprints and faces. Then View Users lists them and lets you:

• Link each device user to an existing member or staff account,
• create a new member from a device user,
• or Sync all to create members for everyone not yet linked.

Once linked, the biometrics on the device belong to that member in GymLeb, and from then on their access follows their subscription.

When the internet goes down

Internet cuts and power cuts are part of running a gym here, so this was designed for them:

• The terminal keeps working. It already holds each member's validity window, so valid members still get in while the gym is offline.
• Scans are not lost. With a local gateway, every scan is stored on the box and sent when the connection returns, so the access log fills in after an outage.
• Changes made while offline are queued. If the front desk renews someone while the machine is offline, the change is stored and sent automatically when it reconnects. The Retry pending users button on the machine card is there if you want to push them yourself.

Opening the door remotely and live enrollments are the exception. They need someone standing at the terminal, so they only work while the machine is online.

Watching the door from the desk

Access Control then Events lists every scan: who it was, which machine, and whether they were let in or refused. Refusals show the reason, such as "Membership expired or not active", "Outside their access hours" or "Face not recognised". You can filter by machine, by members or staff, and by result.

Staff can also get live popups on their dashboard when a member enters or is refused at the door, with an optional sound. The owner chooses who gets which alerts. And when someone needs to be let in by hand, Open Door on the machine card opens it, asks for a reason, and records who opened it in the door log.

Tips before you switch the door on

• Check the device clock. The validity window uses your gym's time zone, and the machine card has a Sync time action. A wrong clock is the most common reason for confusing refusals.
• Enroll in a quiet hour. Fingerprint enrollment takes a few seconds per member; plan a week of enrolling regulars as they arrive.
• Use the refusal reasons. Before you assume the system is wrong, read the reason on the Events page. It usually says exactly what to fix.
• Decide who may open the door by hand. Every manual opening is logged with a reason, which keeps it honest.

If your memberships allow different hours, for example morning-only plans or ladies' hours, read our guide to access schedules. The FAQ and the Hikvision entry in the glossary cover the basics, and the access control definition explains the terms used here.