Napco Security Technologies ALNET1 NETWORX GATEWAY IS A HARDWIRED GATEWAY INTERFACE MODULE User Manual Networx DL Win OI352B 05 INST pub

Napco Security Systems Inc NETWORX GATEWAY IS A HARDWIRED GATEWAY INTERFACE MODULE Networx DL Win OI352B 05 INST pub

UserManual.wiki >

Napco Security Technologies >

ALNET1 User Manual

Users Manual

Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions 1 OVERVIEW Used with the Trilogy Networx™ 6100, 6500, ETDLN and ETPDLN series door locks, DL-Windows version 4.0.0 software (or later) allows you to upload and download programming features wirelessly using a computer net-work. With "wireless" communication, the various ca-bles and/or an AL-DTM Data Transfer Module are NOT required to transfer data between DL-Windows and the wireless locks. With a few clicks of the mouse, you can use your computer to retrieve logs, download User Codes and program features into and out of each wire-less lock in the system. DL-Windows software is installed on a computer that is connected to a network (either a small Ethernet network or large corporate LAN). Connected to this network is an intermediate device called a Gateway that communi-cates via a private wireless signal to a radio located in-side each door lock. In this way, the software allows full programming and control of each lock in the system. To ensure each physical lock is identified correctly by DL-Windows, the factory assigns each lock a unique Se-rial Number; after locks are installed on the doors and the Gateways are mounted, the Gateways search for new locks, allowing them to be enrolled into the system. FLEXIBLE SETUP In addition to wireless communication, these wireless door locks can also be programmed at the keypad (see WI1790). This means that locks can be installed on the doors and immediately be put into use via keypad pro-gramming--even before a wireless network is set up. Therefore, you can install the locks on the doors before configuring the wireless network, or you can set up the wireless network first and add locks later. If you wish, you can even start by designing a "virtual" system within DL-Windows (creating new Accounts, adding Users and configuring lock features, etc.), then set up the network and install the lock hardware later. But in the end, after your lock hardware is physically installed and the net-work is up and running, you can run DL-Windows to link the "virtual" system saved on your computer with the "real" lock hardware on the doors. Note: Keypad programming of User Codes, Features, Time Zones, and Schedules is available as a temporary convenience to allow the lock to be put into use before installing and configuring a wireless network. Therefore, all lock programming added via the keypad cannot be retrieved into DL-Windows. If you decide to start programming your wireless lock via the keypad, we recommend you keep hardcopy records (in a secure location) of all Users, their User Codes, and any proximity cards that may have been programmed. Keeping complete and accurate records saves time be-cause after the wireless network is set up, any program-ming added via the keypad must be re-added to DL-Windows and downloaded back to the lock(s). CAPACITY Each installed system can contain from 1 to 32 Gate-ways--and each Gateway can control up to 63 locks--for a maximum of 2000 locks allowed per Account; and the DL-Windows software can support, in theory, an unlim-ited number of Accounts. In addition, each Networx™ lock can contain up to 5000 Users! Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions 345 Bayview Avenue Amityville, New York 11701 For Sales and Repairs 1-800-ALA-LOCK For Technical Service 1-800-645-9440 Publicly traded on NASDAQ Symbol: NSSC © ALARM LOCK 2010 OI352B.05 07/10 Up to 63 locks for each Gateway... PC Running DL-Windows Software EXPANDABLE Wired (RJ-45) or Wireless Wired (RJ-45) or Wireless 802.11 Router Small Network Support Wired (RJ-45) or Wireless 802.11 ...Up to 32 Gateways for each system GATEWAY #1 GATEWAY #32 Radio ) ) ) ) ) Radio ) ) ) ) ) Radio ) ) ) ) Lock #1... Lock #63 ...Lock #2000 Existing Corporate Ethernet Network Up to 63 locks for each Gateway... PC Running DL-Windows Software EXPANDABLE Wired (RJ-45) or Wireless Wired (RJ-45) or Wireless 802.11 Large Network Support Wired (RJ-45) or Wireless 802.11 ...Up to 32 Gateways for each system GATEWAY #1 GATEWAY #32 Radio ) ) ) ) ) Radio ) ) ) ) ) Radio ) ) ) ) Lock #1... Lock #63 ...Lock #2000 Preliminary -- This draft created 7/29/2010 9:33 AM

Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions 3 able online at www.alarmlock.com. ●OI362 - Wireless Quick Start Guide. ●OI352 - Wireless Network Setup & DL-Windows Con-figuration Instructions (this manual). ●WI1790 - PDL6100 Keypad Programming Instructions. ●WI1820 - DL6100 Keypad Programming Instructions. ●WI1835 - PDL6500 & ETPDLN Keypad Programming Instructions. ●WI1836 - DL6500 & ETDLN Keypad Programming In-structions. ●WI1843 - PL6100 Programming Instructions. ●WI1844 - PL6500 & ETPLN Programming Instructions. ●WI1674 - PDL6100 and DL6100 Installation Instruc-tions. ●WI1676 - PDL6100 and DL6100 Door Installation Tem-plate. DL-WINDOWS SYSTEM REQUIREMENTS The DL-Windows application has been tested and ap-proved for an IBM-compatible P4 1.6GHz computer with 256MB RAM and a minimum of 100MB of hard drive space running Microsoft Windows 98, 2000 or XP with one unused RS-232 Serial Communications port (COM 1-4) required. If a COM port is unavailable, please con-tact customer support for one of our USB adapters (MX1130 or ALPCI2-U). Depending on your system de-mands, a slower PC may function properly but with sig-nificant user interface problems, including long intervals for the system to respond. Important: DL-Windows is not a client-server applica-tion (i.e. is not multi-user). The program and its data-base must be installed and maintained on a single PC. GATEWAY SPECIFICATIONS Note: For all Gateway modules, network activity or bandwidth usage does NOT occur until the user oper-ates DL-Windows software to send programming to (or receive log data from) locks. Exception: During the Emergency Lockdown command, Gateways communi-cate through the network. Gateways will send less than 1000 bytes during these Emergency commands. Model AL-IM80211 ("Wireless/Wired" Gateway) Wireless Specifications Wireless Standards: IEEE 802.11b; 802.11g Frequency Range: 2.412 – 2.484 GHz Output Power: 14dBm +1.5 dBm/-1.0 dBm Maximum Receive Level: -10dBm (with PER < 8%) Data Rates with Automatic Fallback: 54Mbps – 1Mbps Range: Up to 328 feet indoors Modulation Techniques: OFDM, DSSS, CCK, DQPSK, DBPSK, 64 QAM, 16 QAM Network Interface Interface: Wireless 802.11b, 802.11g and 10/100 Ethernet Protocols: TCP/IP, UDP/IP, DHCP Security IEEE 802.11 - PSK with AES Encryption 128-bit Power Consumption Average Power Consumption: ●1300mW (WLAN mode; maximum data rate) ●300mW (WLAN mode; idle) ●750mW (Ethernet mode) Peak Supply Current: 650mA Input voltage: 5 - 6 volts AC/DC Environmental Operating Temp: -20° to 60°C (-4° to 140°F) Storage range: -40° to 85°C (-40° to 185°F) Model AL-IME ("Wired" Gateway) Network Interface Interface: Ethernet 10Base-T or 100Base-TX (using RJ-45 jack) Protocols: TCP/IP, UDP/IP, DHCP Encryption 128-bit AES Rijndael encryption AL Radio Link 900MHz GFSK 50 Channels 10mW power output Input Power Voltage: 5 - 6 volts AC/DC Environmental Operating Temp: -20° to 60°C (-4° to 140°F) Storage: -40° to 85°C (-40° to 185°F) Model AL-IMEPOE ("Power Over Ethernet" Gateway) Model AL-IMEPOEP ("Plenum Rated POE" Gateway) Network Interface Interface: Ethernet 10Base-T or 100Base-TX (using RJ-45 jack) Protocols: TCP/IP, UDP/IP, DHCP Encryption 128-bit AES Rijndael encryption AL Radio Link 900MHz GFSK 50 Channels 10mW power output Input Power POE Voltage: 48 volts DC nominal Class 2 Environmental Operating Temp: -20° to 60°C (-4° to 140°F) Storage: -40° to 85°C (-40° to 185°F) Compliance 802.3af POE Standard (AL-IMEPOEP only) UL 2043: UL Standard for Safety Fire Test for Heat and Visible Smoke Release for Discrete Products and Their Accessories Installed in Air-Handling Spaces

4 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions START HERE This section will help you define the steps required to suit the specific needs of your installation. Let's start with the big questions first, because the installation steps that follow de-pend on your answers. Note: The underlined words are de-fined in the Terminology section on page 6. PRELIMINARY QUESTIONS You may not have answers to the following questions now, but understand that they are intended to encourage thought and help evaluate your needs. Are you planning to use a large Corporate Network or a smaller network provided by single router? Smaller networks permit the dynamic assignment of IP addresses by DHCP; larger networks may require static (fixed) IP addresses be reserved by your net-work administrator. Will you use "Emergency Commands"? Three Emergency Commands are available in your wireless system: "Global Lock Down" locks all doors in the system; "Global Passage" unlocks all doors in the system; "Return to normal" exits these Emer-gency Commands. Emergency Commands will NOT work if you use DHCP (static IP addresses are re-quired). Will your Gateways need to communicate across multiple Subnets? To improve security and processing performance, net-work administrators often divide their corporate Intra-nets into interconnected but separate segments called "subnets". If the answer to ANY ONE of the above questions is "yes", we recommend static IP addresses be re-served for exclusive use by your Gateways. If the answers are "no" for all of the questions, and you want to use a smaller network provided by a router, you can as-sign static IP addresses yourself using the instructions that came with your router; if you want to use a corporate network, you must contact your network administrator to have static IP addresses reserved for your use. SUBNETS Use the following information when installing multiple wire-less Networx Gateways within a corporate Intranet that contains multiple "subnets". To improve security and processing performance, corpo-rate Intranets are often divided into interconnected but separate segments called "subnets". The IP (Internet Pro-tocol) address is a unique address of a device (such as a computer or a Gateway) connected to a TCP/IP corporate Intranet. DL-Windows can only Discover Gateways when the Gate-ways are connected to the same subnet to which DL-Windows is also connected. IP addresses are written as four groups of numbers sepa-rated by periods; these groups are called "octets". IP ad-dresses can be permanent ("static") or dynamically as-signed (by DHCP) when a device, such as a Gateway, is powered. Class B Subnets Some corporate Intranets contain multiple "Class B" sub-nets; the "Class B" refers to the octet that does not change, if naming each octet from left to right. An exam-ple of two "Class B" subnets where the first two octets of each network IP address remain the same are: A B C D ●Subnet 173.16.100.xxx ●Subnet 173.16.200.xxx In this example, the "A" and "B" octets "173" and "16" are the same within the network. (Note: The "xxx" is a way of showing a variable number). As shown in the image above, if the computer running DL-Windows is connected to the first subnet (173.16.100.xxx), and several Gateways are connected to the second subnet (173.16.200.xxx), DL-Windows will ONLY be able to communicate with the Gateways on the second subnet when: ●ALL Gateways use only static IP addresses, and ●The network administrator allows for open addressing between the two subnets in the network The network administrator may decide to use routing ta-bles or may specify blocks of addresses through which the two subnets can freely communicate in both directions. Regardless of the method selected, your network administrator must determine the range of network addresses to assign to the Gateways and to the DL-Windows computer. As shown below, three address fields must be obtained from your network administrator: IP Address, Subnet Mask, and Default Gateway. We recommend using static IP addresses We recommend using static IP addresses for each Gate-way you install because they have the following advan-tages: ●DL-Windows software performs more smoothly be- Subnet 173.16.100.xxx Subnet 173.16.200.xxx GATEWAYS ON DIFFERENT SUBNETS WITHIN A NETWORK PC Running DL-Windows Software GATEWAY ROUTER or SWITCH or SERVER GATEWAY GATEWAY GATEWAY GATEWAY GATEWAY GATEWAY GATEWAY GATEWAY

8 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions HARDWARE INSTALLATION For a minimum wireless system, you need: •A laptop or desktop computer (to run DL-Windows) •A wired or wireless home router (to allow connec-tion to a computer network) •An Alarm Lock Gateway module (the intermediary device between the network and the locks) Note: Before proceeding, you should have a working knowledge of DL-Windows. See the DL-Windows User Guide (OI237) for basic information such as how to install and open DL-Windows, how to create Accounts, how to add Profiles to Accounts, etc. 1. Install the DL-Windows software into your com-puter as described in the DL-Windows User Guide (OI237). 2. Connect your computer to a network If you want to set up a "small network" with a router, follow the instructions "Small Network" that follow. If you want to use a "large network" such as an existing corporate Ethernet (such as a LAN), skip down to the "Large Network" section, below. SMALL NETWORK You can create your own "small network" by using a wired or wireless router. For the connection between your computer and the router, most laptops and some desktop com-puters contain a wireless network card (also called a "wireless network interface controller") to allow for wireless communication between your computer and a wireless router; if your computer does not have a wireless network card, you can usually connect the "non-wireless" network card in your computer to the router using an double-ended RJ-45 to RJ-45 (8P8C) Ethernet cable. LARGE NETWORK If you have access to a "large network" such as an existing corporate Ethernet network (such as a LAN), connecting to a network may be as simple as plug-ging your computer into an RJ-45 wall jack. In this case, you may wish to contact the Ethernet network administrator and inform them as to your plans. For the connection between your computer and a large Ethernet network, most laptops and some desktop computers contain a wireless network card (also called a "wireless network interface controller") to allow for wireless communication between your computer and a this large network. Contact the net-work administrator for this kind of wireless connec-tion. For computers without a wireless network card, con-nect the "non-wireless" network card in your com-puter to the network as follows: Connect one end of the Ethernet cable to the computer network card RJ-45 socket (usually located at the back of your com-puter); connect the other end of the cable to the RJ-45 socket at a wall jack or a modem that is part of the corporate Ethernet network / LAN. Note that wall jack or modem access points usually need to be con-figured first by the network administrator before the network will allow a connection. 3. The Network Connection to the Gateway The connection between the network (the router or the existing corporate Ethernet network) and the Gateway device may be either directly wired using an Ethernet cable --or--wirelessly via 802.11x trans-missions, as shown in the illustrations below: Remember, the Gateway device will eventually be mounted on a wall or in a ceiling; therefore a wired network connection to the Gateway device is rela-tively straightforward because once you plan the final location of the Gateway and you plan the physical location of the network connection, the only remain-ing task is to run a wire between these locations. The instructions for the wired connection are in the next section; for wireless connection instructions, skip to the "Wireless Network Connection to the Gateway" section below. Wired Network Connection to the Gateway The double-ended Ethernet cable is used to connect the network to any of the 3 Gateway models. Sim-ply plug one end of the Ethernet cable into the net-work Router or a network wall socket (at any location within the premises) or network modem. Then con-nect the other end of the Ethernet cable into the Hardware Installation PC Running DL-Windows Software Router Wired (RJ-45) or Wireless 802.11 Existing Corporate Ethernet Network PC Running DL-Windows Software Wired (RJ-45) or Wireless 802.11 GATEWAY #1 Wired (RJ-45) or Wireless 802.11 Router Existing Corporate Ethernet Network Wired (RJ-45) or Wireless 802.11 GATEWAY #1

10 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions Click Yes and DL-Windows searches the network; since the Gateway has this direct (albeit temporary) wired connection to the network, DL-Windows will find this Gateway, and will add the Gateway to the current Account. The Gateway will then be listed in the Gate-way Configuration Screen grid. The following image is an example of what will appear: 3d. Click on this "New Gateway 1" to select this Gateway. Write down the IP Address and MAC Address shown. IP Address _______________________________ MAC Address ____________________________ 3e. Click Tools, Configure Network Settings, and the Network Configuration screen appears: If using DHCP: ●From the Wireless Mode pull-down, click Wireless Only. ●Type the network name in the Network Name (SSID) field. For more information, refer to the setup guide for the router being used. ●From the pull-down, select the appropriate Network Type being used, in most cases it will be Infrastruc-ture. ●Select the appropriate Channel Number for which the router is set. - For more information, refer to the setup guide for the router being used. ●By default, Wireless Network Security is disabled. We recommend to use "MAC Address Filtering" for se-curity if your router supports this feature. If Wireless Network Security is desired, refer to the router setup for wireless security. If NOT using DHCP: ●If you are using Static IP Addresses, refer to the router setup guide for static IP address setup information. 3f. Disconnect the Ethernet cable from the network Router (or network wall socket) and also from the Gateway module. Gateway ID Card We recommend that when installing the Gateway, a blue-colored "Gateway ID Card" be completed. Since Gateways are often installed in ceilings or other hidden locations, their physical locations may be easily forgot-ten. This ID card may prove very useful when replacing Gateways, or when selecting a Gateway to use to dis-cover locks, or whenever an installed Gateway needs to be physically located. 4. Mounting the Gateway module A Gateway module acts as an interface between a com-puter network and the Networx™ wireless locks. Gateway Mounting Location Give careful consideration to the location of the Gateway when planning the layout of the system. Gateways should be mounted in elevated areas (such as drop ceil-ings), and should be centrally located within the sepa-rate lock installations. Select a convenient location that allows access to an AC outlet (to plug in the Gateway supply transformer for models AL-IM80211 and AL-IME) and allows access to the RJ-45 Ethernet cable running from the Gateway to the router/network. You can plan for a single Gateway to cover a circle several hundred feet in diameter, greater within open areas without walls. Choose a location as high above ground level as practi-cal (home attic installations are not recommended), keeping in mind that metal objects may adversely affect reception. It may be helpful to draw a layout of the sys-tem, identifying all proposed Gateway locations and the anticipated door locations. Also include notations indi-cating construction materials in use. Although wood and wallboard construction will have little effect upon signal strength at the lock, concrete or brick can reduce signal strength by up to 35%, while steel-reinforced concrete or metal lath and plaster can reduce Gateway transmitter strength as much as 90%. All Gateway models should be mounted vertically on either a wall or ceiling. Horizontal "flat" mounting of the Gateway enclosure should be specifically avoided. Note: In difficult installations wherein distant Gateways pose reception problems, the use of multiple gateways throughout the premises is recommended. Signal Strength After the Gateway is mounted, a special test tool will be available to test the signal strength received at a given Hardware Installation (cont'd) Click the row to highlight and select the Gateway.

Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions 11 Hardware Installation (cont'd) door before installing the lock. We supply a "Class 2" 6V power supply (never substitute power supplies; use only the supplied unit) that is wired to the terminal strip located on the Gateway PC board. Wiring is non-polarized, so connect either wire to either of the two ter-minals. First Time Gateway Power Up When the Gateway is first powered, the red light flashes slowly (about once every 2 seconds), indicating the unit is looking for a valid IP address (unit may take up to 90 seconds to find a valid address). If the unit finds a valid IP address prior to 90 seconds, the red light flickers. If the unit does not obtain a valid IP address after 90 seconds, the flashing rate increases to one flash per second, and will attempt to find an IP address later. The one flash per second flash rate indicates the Gate-way is "configured". At this point you can reset the GW: Reset the Gateway At this point, the Gateway is mounted and connected to the router (or the network) with the RJ-45 cable. Apply power to the Gateway and the red light flashes slowly, about once every 2 seconds. Before securing the Gate-way housing cover, reset the Gateway memory--even if the Gateway has never been used. Press and hold the "RESET" button and the red light turns on continuously; continue to hold the button and the red light will start to flicker. Release the button and the red light will continue to flicker. "Resetting" the Gateway clears all memory and ensures that any residual voltage or test data existing from the factory is cleared from the unit. Always reset the Gate-way for new installations; you can also reset the Gate-way anytime after the Gateway is powered. Secure the Gateway housing cover with the screws provided.

22 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions Normal Tasks (cont'd) "discovering the Gateway(s)" action, and the "adding the Gateway(s) to the current Account" action. Now that the new Gateway is added to the Account in DL-Windows, you can use this new Gateway to discover locks that have been (or will be) physically installed on doors. Resetting the Gateway "Resetting" the Gateway clears all memory and ensures that any residual voltage or test data existing from the factory is cleared from the unit. Always reset the Gate-way for new installations; you can also reset the Gate-way anytime after the Gateway is powered. Two levels of reset exist, a "Partial" reset and "Full" reset, as fol-lows: "Partial Reset" clears the Gateway's "Lock Config Ta-ble"; but if the Gateway was previously programmed for wireless network communication, this reset leaves the Gateway in this "wireless" condition. With power applied to the Gateway, press and hold the "RESET" button and the red light turns on continuously; continue to hold the button and the red light will start to flicker. Release the button and the red light will continue to flicker. The Gateway is now "Partially Reset". "Full Reset" returns the Gateway to its factory condition, clearing the Gateway's "Lock Config Table" and resets the network selections to its factory default "wired" con-dition. Continuing from the "Partial Reset" instructions above, with the red light flickering without any buttons being pressed... ...With the red light flickering, press and hold the "RESET" button again and the red light turns on continu-ously...continue to hold the button and the red light will start to flicker...continue to hold the button until the red light turns on continuously...then release the button and the red light turns off...after a few seconds the red light will then start to flicker. The Gateway is now "Fully Re-set".

26 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions Tools > View Gateway Status Text name of the Gateway, as specified when the Gateway was added to DL-Windows using the Add Gateway to Account screen (click Actions, Add Gateway to Account). Gateway Description The Gateway Status screen displays the operational status of the selected Gateway as of the last update. Specifies the static IP Address on the TCP/IP network currently assigned to the Gateway. Required for communication. Gateway IP Address Indicates the firmware source code edition currently residing in the Gateway. Gateway Firmware Ver Indicates the result of the last Gateway firmware upgrade process. "Good" signifies that the last firmware upgrade was completed without errors. If "Bad", upgrade the firmware as follows: Click the GW Confg button to open the Gateway Configuration screen; click to highlight a Gateway in the list, then click Tools, Update Selected Gateway Firmware. The system checked the integrity of the firmware, burned it into the Gateway memory, rebooted the Gateway and verified the Gateway is functioning properly. Firmware Update The Account Security Code is first specified when the Account is created in DL-Windows; this Security Code is then copied to the Gateway firmware when the Gateway is first added to the Account. This field indicates the status of the Security Code by comparing the Security Code in the Gateway with the Security Code in DL-Windows; if Codes are not identical, the field indicates "Mismatch", thus disabling DL-Windows-to-Gateway communications. Security Code Indicates if locks associated with the selected Gateway fail to communicate with that Gateway. If an error is indicated, open the Gateway Configuration screen, click Tools, View Gateway's Lock Table to determine which lock generated the error. Lock Communication Error An overall state or condition of the Gateway. Displays either "Ready" to indicate a normal condition; "Lock Down" if an Emergency Lock Down command was sent; and "Passage" if an Emergency Passage command was sent. Gateway Status Indicates the date and time the current Gateway Status screen was changed with new elements of data. Last Updated Click to delete all existing data elements appearing in this screen and request new data be generated based on the current condition of the Gateway. Update Status To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click Tools, View Gateway Status.

30 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions Use DHCP (Dynamic Host Configuration Protocol) is enabled by default. When checked and Save Configuration is clicked, DL-Windows allows the selected Gateway to accept the dynamic assignment of an IP address by the TCP/IP network. Checking Use DHCP eliminates the need to manually assign a static (fixed) IP address to the Gateway. Uncheck Use DHCP to manually assign a static IP address to the selected Gateway. See your network administrator for additional information. Note: Do not enable when Accounts contain more than one Gateway (see page 34, "Tools > Send IP Table to Selected Gateway"). Use DHCP Tools > Configure Network Settings The Network Configuration screen displays the various networking attributes required for the selected Gateway to work correctly within the current wireless network. See your network administrator for more information if needed. Note: For wireless security, because the communications between the network/router and the Gateway conform to the AES (Advanced Encryption Standard), we recommend leaving the system unsecure, but to use MAC address filtering within the router software (if your router supports MAC Address filtering). Using this kind of security is easier to setup and more secure than us-ing the security protocols (encryption methods) shown within this screen. To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click Tools, Configure Network Settings. Wireless Mode IP Address Subnet Mask Network Type Network Name (SSID) The Gateway module acts as an interface between a computer network and the Networx™ wireless locks. Of the two Gateway models available ("Wired" or "Wireless/Wired"), the "Wireless/Wired" Gateway model supports connection to a network using the 802.11 standard. This field allows you to specify the SSID (Service Set IDentifier) name assigned to the wireless Wi-Fi (802.11) network. All "Wireless/Wired" Gateway models in a system must use this name to allow for network communication. Note: This field is case-sensitive and can be up to 32 bytes in length. In addition, the Wireless Mode pull-down menu in this screen must be set to Wireless Only for this field to become active. DHCP Name Configures the selected Gateway for either wireless or wired communication with the computer network. Select either Wired Only or Wireless Only from this pull-down menu. If Wireless Only is selected, the Wireless Network fields located in this screen become active and available for selection. To aid in locating the Gateway on the network, specify a name to describe the domain name (host name) of the corresponding IP Address assigned to the selected Gateway. The DHCP name entered here will be used for the DNS configuration. If the Use DHCP (see above) is unchecked, this field allows the IP address to be manually assigned to the selected Gateway. To improve performance, network administrators determine how best to divide their network. Create more hosts and fewer subnets or more subnets and fewer hosts? The IP protocol makes use of a Subnet Mask to more efficiently route packets to their correct network destinations. When a Gateway receives a data packet, the Subnet Mask indicates how many bits of the packet's destination address are to be used for routing and which bits are to be "masked" (ignored). Use DHCP (see above) must be unchecked before data can be entered into this field. This information must be obtained from your network administrator. Default Gateway This field is the IP address of the physical device, such as a router, for the current subnet to which you want to be connected. This field is not to be confused with the IP address of the Alarm Lock Gateway device installed in the system. Use DHCP (see above) must be unchecked before typing the IP address. This information must be obtained from your network administrator. Click this pull-down menu to select the network communication mode. With "Infrastructure" selected, the Gateways communicate to a wired LAN via access points. With "Ad Hoc" selected, the Gateways can communicate directly in a peer-to-peer fashion. Contact your network administrator for more information. (continued)

Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions 31 Channel Number Click this pull-down menu to manually specify the number (1-11) of the carrier frequency (subchannel pathway) between the selected Gateway and the wireless Wi-Fi (802.11) network. Contact your network administrator for more information. Security Type Authentication Encryption Key Type Get Network Configuration from Gateway Save Configuration For the selected Gateway, click the pull-down menu to specify the 802.11 security protocol (encryption method) to be used when the selected Gateway is connected to the wireless network. The selections are as follows: WEP (Wired Equivalent Privacy) The WEP encryption method was designed to provide wireless networks with the "equivalent" security available in traditional wired "landline" networks. WPA (Wi-Fi Protected Access) A security protocol from the Wi-Fi alliance for 802.11 wireless networks. It uses the Temporal Key Integrity Protocol (TKIP) to provide stronger encryption than the earlier WEP (Wired Equivalent Privacy) method. Derived from, and a subset of, the IEEE 802.11i security standard, WPA includes 802.1x authentication. WPA2 Supports additional security features of the IEEE 802.11i standard that are not already included in the WPA security protocol. Note: For each Security Type selected, different choices appear for the other fields in the Wireless Network Security area of this screen. Verifies the origin of transmitted data. For the selected Gateway, click the pull-down menu to specify the 802.11 authentication protocol to be used when the selected Gateway is connected to the wireless network. When WEP Security Type is selected, the options for the selected Gateway are: ●Open/None: Requires no Authentication for the data transmissions between the selected Gateway and DL-Windows. ●Shared: Requires a shared symmetric numeric code (encryption "key") for all data transmissions between DL-Windows and the Gateway. When WPA or WPA2 Security Type is selected, the option is: ●Pre-Shared Key (PSK): Requires a numeric code (encryption "key") previously shared between DL-Windows and the Gateway using a secure channel for all data transmissions. A "key" is a numeric code used to encrypt data, and is used to secure the data traffic between the DL-Windows, the Gateways and the locks. The key "type" can be a pass-word, a passphrase, or a hexadecimal string like '45D3 E454 3523 EDC2'. To ease encryption key entry, a pass-word or passphrase can be entered instead of the cryptic hexadecimal characters. The reversible transformation of data from its original for-mat into a concealed format as a process for securing its accessibility, authenticity and integrity. Encryption uses an encryption algorithm (sequence) and one or more encryp-tion keys (numeric codes). When WEP Security Type is selected, the options for the selected Gateway are: ●64 bits: Although the 64-bit WEP data encryption method uses a five-character key size (forty bits or five bytes) for symmetric encryption, plus an additional 24 factory-set bits, this method represents a relatively low level of security. ●128 bits: Stronger than 64-bit WEP, 128-bit WEP uses a string of 26 hexadecimal characters (0-9 and A-F), each representing four bits of the key. When WPA Security Type is selected, the option for the selected Gateway is: ●TKIP: (Temporal Key Integrity Protocol), a security pro-tocol algorithm that compliments WEP encryption with increased security measures such as extended key lengths and data integrity checks. When WPA2 Security Type is selected, the options for the selected Gateway are: ●CCMP: (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) improves upon both WEP and TKIP. CCMP is a required option for Ro-bust Security Network (RSN) compliant networks. ●TKIP: See above. Key Retype Key Type your key in the Key field, and re-type in the Retype Key field to confirm it. Retrieves the current settings of the Gateway and displays these settings in this screen. Click Save Configuration to save your settings and close the screen, or click Close to exit without saving.

32 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions Tools > Ping Selected Gateway The Ping (Packet INternet Groper) network utility is used to test whether the IP address of the Gateway is available on the network for immediate use. Ping sends a packet out on the network and waits for a response; the result of the ping is indi-cated in the status bar located at the bottom of the Gateway Configuration screen. A successful test displays the IP ad-dress of the Gateway with the word "Found"; an unsuccessful test displays "Not Found". To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click Tools, Ping Selected Gateway. Tools > Update Selected Gateway Firmware Allows the updating of the Gateway firmware. The standard Windows Open dialog box appears (shown at right), allowing you to browse for the binary ".bin" file con-taining the firmware update. Once the file is selected (highlighted), click Open to initiate the update process. Note: The image shown at right displays both lock firm-ware and Gateway firmware ".bin" files in the same direc-tory. Be sure the file selected in the File name field is of the correct type before initiating the update process. To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click Tools, Update Selected Gateway Firmware.

Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions 33 Tools > Manually Add a Lock to the Selected Gateway Use the Add Lock Serial Number screen to manually add a specific lock serial number to a selected Gateway. This screen is typically used when removing a broken lock from a door (and adding a new lock), or when moving a lock from one Gateway to another Gateway. Type all characters of the serial number, do not include dashes or spaces. To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click Tools, Manually Add a Lock to the Selected Gate-way. Carefully type the lock's unique factory serial number located on the lock housing. We recommend that when installing the lock on the door a yellow-colored "Lock ID Card" (see the "SAVE THIS LOCK ID CARD" image) be completed. These Lock ID Cards are a useful way to organize lock information, including lock serial numbers. Lock Serial Number Click the Lock Model Type pull-down and highlight the wireless lock model ("DL6100", "PDL6100", etc.). Lock Model Type ~ LOCK ID CARD ~ LOCK MODEL _________________________________ FACTORY SERIAL NUMBER _______________________ INSTALLED LOCATION ___________________________ __________________________________________ When installing lock, please fill in all information on this card. This information will be used when add-ing network locks to DL Windows. Keep this card in a safe place. Do not discard! OI353 10/08 ALARM LOCK SAVE THIS LOCK ID CARD Add Lock Click Add Lock to assign ("add") the specified lock serial number to the selected Gateway and close the screen, or click Close to exit without adding. Close

34 Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions Tools > Send Lock Config Table to Selected Gateway To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click Tools, Send Lock Config Table to Selected Gateway. In DL-Windows, the word "Configure" has a specific meaning--to "Configure" is to "assign" discovered physical locks to a Gateway, thus ensuring a fixed wireless communication channel exists between selected physical locks and a selected Gateway. How does the system "Configure"? The Gateway sends "configuration data" in the form of a "Lock Configuration Table" to the selected locks. This "configuration data" contains items--an internal lock designation, a specific radio channel and security data--that are all embedded in the "Lock Configuration Table". This "configuration data" instructs the physical lock(s) to communicate ONLY with that Gateway and prevents other Gateways from communicating with the physical lock(s). In short, the Gateway tries to "configure" the selected physical locks, assigning the selected physical locks to the Gateway. Tools > Send IP Table to Selected Gateway To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click Tools, Send IP Table to Selected Gateway. You can also click Send IP Table to all Gateways to send the IP Table to ALL Gateways without the need to high-light a specific Gateway. Tools > Send IP Table to all Gateways The use of the Emergency Commands (see pages 48-50) requires that all Gateways in the system can communicate with each other. Therefore, for the Emergency Commands to work, these menu items are used to allow the manual distribution of the static IP addresses of each Gateway (listed within the DL-Windows "IP Table") to all Gateways in the system. Note: These menu items are only used when more than one Gateway exists in a system. ●For systems with only one Gateway, that Gateway can operate with either a static IP address or the dynamic assignment of an IP address by the TCP/IP network (if you wish, "Use DHCP" can be checked in the Network Configuration screen; see "Tools > Configure Network Settings" on page 30). Since only one Gateway exists in the system, that Gateway obviously does not need to maintain the IP addresses of other non-existent Gateways. Therefore, systems with only one Gateway do not require the use of these menu items. ●For systems with more than one Gateway, static IP addresses (listed within the DL-Windows "IP Table") MUST be distributed and assigned to all Gateways within the system. After all locks are installed and working, and static IP addresses are assigned to each of the Gateways, click Tools > Send IP Table to Selected Gateway (or click Tools > Send IP Table to all Gateways) to distribute these Gateway IP addresses to each Gateway in the system.

$Trilogy Networx™ Wireless Setup & DL-Windows Configuration Instructions 35 Tools > Import Assigned Lock From Gateway To open this screen, click the GW Confg button to open the Gateway Configuration screen. Click to highlight a specific Gateway in the list, then click: ●Tools, Import Assigned Lock From Gateway ●Tools, Import Gateway and Assigned Locks Tools > Import Gateway and Assigned Locks When the Account information stored in DL-Windows is lost (such as with a stolen laptop)--AND--the DL-Windows backup files are either non-existent, inadequate or lost, the above "Import" options can be used to rebuild an existing wireless system using the data stored inside the onboard memory of the installed Gateway device(s). Although these two options might never be used, their exis-tence highlights the vital importance of maintaining safe, secure and up-to-date DL-Windows backup files. The short period of time it takes to back up your files may save HOURS of time trying to re-create and re-build your sys-tem. Backup your Accounts On the DL-Windows main screen, click Tools, Backup Ac-counts, and DL-Windows will copy all Account database files into a new or existing "Backup" folder. If you accepted all default selections when installing the DL-Windows soft-ware, this "Backup" folder will be located in C:\DL-Windows\Backup. To restore your data, simply copy and paste the backup files into C:\DL-Windows. Restoring Data without Backups If no backups were made for an existing wireless system and the Account information stored in DL-Windows is lost, the basic procedure is as follows: 1. Re-install the DL-Windows software. 2. Re-create the Account and all assigned lock Profiles. In addition, the Global Users screen will need to be re-populated with all Users. 3. Click the GW Confg button, and a popup appears: Click OK to close the popup, then on the DL-Windows main screen, click Tools, Set Security Password, and the Set Security Password dialog appears: In the Set Security Password dialog, enter the original "Security Password" used in the original Account, then click OK to save. Important: "Security Passwords" are used to differen-tiate between separate wireless Accounts. Do NOT share passwords between Accounts, otherwise the radio signals of separate Accounts can become intermixed. Be sure you record--in writing--all Account passwords in a safe location; once set, passwords are NOT retrievable from DL-Windows! 4. Click the GW Confg button to open the Gateway Configuration screen. 5. Click Actions, Discover New Gateways. The Gate-way(s) appear in the Gateway Configuration screen in green colored text. 6. Click to highlight a specific green-colored Gateway in the list. 7. Click Tools, Import Gateway and Assigned Locks to bring in the Gateway settings and all lock serial number data assigned to that Gateway. 8. In the Gateway Configuration screen, click Tools, Link / Unlink Lock Profiles. 9. In the Link / Unlink Lock Profiles screen, the lock serial numbers will be listed in the Available Lock(s) By Serial Number field, available to be re-linked. Af-ter linking, a Send Profile to Lock Now popup automati-cally appears requesting if you wish to send the lock Pro-files to the physical lock(s). SET SECURITY PASSWORD DIALOG$