IEI Technology SEG-1 User manual

Page 32 of 32 Document Number: 6 66 5, Rev 2.4
International Electronics, Inc.
427 Turnpike St.
Canton, MA 2 21 U.S.A.
Phone: [phone]
Fax: [phone]
Website: www.ieib.com
Secure Ethernet Gateway
SEG-1 and SEG-M
for IEI Access Systems
Installation Manual
Section 1: Introduction
The SEG is a LAN/WAN (TCP/IP to serial) interface that enables existing or new IEI access s stems to use the end user's network
infrastructure and to be programmed and managed at an network PC running Hub Manager™ Professional software, which operates
on Windows XP Professional , Windows 98 and 2000 operating s stems. The SEG requires Hub Manager™ Professional software
version 5.0 or higher for static IP addressing and version 7.1 or higher for d namic addressing. The access s stem data sent over the
corporate network is 128-Bit so that user and door information cannot be "sniffed" and securit compromised.
The IP address assigned to the SEG, ma be either a static address assigned b authorized network administrator,or it ma be a
d namic address assigned b a DHCP Server.
IMPORTANT NOTE:
To set up the SEG, installation technicians must have a technical knowledge of networks and networking in a PC environment. It is
important to consult the end user's s stem administrator in order to resolve an networking issues that ma occur.
Ordering Information
Model p/n Description
SEG-1 0296005
IEI Secured Ethernet Gateway. Converts TCP/IP to serial data enabling IEI access
s stems to use a network to securel send and recieve data; and to be programmed and
managed from an network PC running Hub Manager Professional. Requires network
connection. Wall mounts using separatel provided hardware; requires separate 12VDC
power [150 mA max], provided with modular cord for communication with access
panel.
SEG-M 0296006
IEI Secured Ethernet Gateway [P ug-in] Modu e. Converts TCP/IP to serial data
enabling IEI access s stems to use a network to securel send and recieve data; and to
be programmed and managed from an network PC running Hub Manager Professional.
Requires network connection. Easil plugs into backplane which provides module
power and communication with access panel.
Document Number: 6 66 5, Rev 2.4 Page 1 of 32
Installer/Service Company Contact Information:
Company Name: ___________________________________
Company Telephone: _______________________________
Technical Support - End User:
Please contact your Installer/Service company.
Technical Support - Service Company
To contact IEI's Technical Support Department, call -800-343-9502 between 8AM and 7PM (EST)
Mon. through Fri. Questions can also be submitted through our website, www.ieib.com.

Table of Contents
Section : Introduction.............................................................................................................................
Section 2: Product Overview...................................................................................................................3
2. Product Specifications...................................................................................................................3
2.2 LED Status....................................................................................................................................3
Section 3: Hardware Installation..............................................................................................................4
3. SEG- Diagrams...........................................................................................................................4
3.2 Connection the SEG- to a HubMax or Hub MiniMax (RS-232)...................................................5
3.2. SEG- to HubMax/Hub MiniMax Connection Method ........................................................5
3.2.2 SEG- to HubMax/Hub MiniMax Connection Method 2........................................................5
3.3 Connecting the SEG- to HC500P (RS-232)................................................................................6
3.3. SEG- to HC500P Connection Method ..............................................................................6
3.3.2 SEG- to HC500P Connection Method 2..............................................................................6
3.4 Connecting Multiple HubMax/Hub MiniMax Networks..................................................................7
3.5 Connecting the SEG- to a prox.pad plus (RS-485).....................................................................8
3.5. SEG- to prox.pad Plus Connection Method ......................................................................8
3.5.2 SEG- to prox.pad Plus Connection Method 2......................................................................8
3.6 Connecting Multiple prox.pad plus Networks................................................................................9
3.7 Connecting the SEG- to a Max 3 System (RS-485)................................................................. 0
3.8 Connecting the SEG- to a MiniMax 3 System (RS-485)...........................................................
3.9 SEG-M Installation (Plug On Module)......................................................................................... 2
3.9. SEG-M Diagram................................................................................................................... 2
3.9.2 SEG-M RS-485 Connector.................................................................................................. 2
3.9.3 Connecting the SEG-M to a HubMax System (RS-232)...................................................... 3
3.9.4 Connecting the SEG-M to a Hub MiniMax System (RS-232).............................................. 3
3.9.5 Connecting the SEG-M to a Max 3 System (RS-485)......................................................... 4
3.9.6 Connecting the SEG-M to a MiniMax 3 System (RS-485).................................................. 5
Section 4: SEG Configuration................................................................................................................ 6
4. Dynamic IP Address via DHCP server, IP Address in SEG can change.................................... 6
4.2 Dynamic IP Address, non-expiring lease.................................................................................... 9
4.3 Static IP Address.........................................................................................................................20
4.3. Setting a Static IP Address of a SEG through a serial connection (via PC com port)........ 20
4.3.2 Configuring the IP Address in Hub Manager Professional..................................................23
4.4 SEG Parameters.........................................................................................................................24
4.4. IP Address............................................................................................................................24
4.4.2 IP Port..................................................................................................................................24
4.4.3 SEG Serial Net Number.......................................................................................................24
4.4.4 Security Key.........................................................................................................................24
4.4.5 Generate Random Security Key..........................................................................................24
4.4.6 Generate Default Security Key............................................................................................24
4.4.7 Set This Security Key into the SEG.....................................................................................24
4.5 Defaulting the SEG Settings.......................................................................................................25
4.5. Reset the Security Key in the SEG to all 0's .......................................................................25
4.5.2 Reset the Security Key in the SEG to all 0's .......................................................................25
4.5.3 Reset the Security Key in the PC to all 0's..........................................................................26
Section 5: Trouble Shooting..................................................................................................................26
Section 6: FCC Compliance Statement.................................................................................................30
Page 2 of 32 Document Number: 6 66 5, Rev 2.4
Document Number: 6 66 5, Rev 2.4 Page 31 of 32
PAGE LEFT BLANK INTENTIONALLY

Section 6: FCC Compliance Statement
This equipment has been tested and found to compl with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequenc energ and, if not installed and used in
accordance with the instruction manual, ma cause harmful interference to radio communications.
Operation of this equipment in a residential area is likel to cause harmful interference in which case the user will be required to
correct the interference at his own expense.
Page 3 of 32 Document Number: 6 66 5, Rev 2.4
Section 2: Product Overview
2.1 Product Specifications
The chart below contains the environmental and electrical specifications.
E ectrica
Voltage 12VDC (9V Min; 20V Max)
Current 150mA @ 9V; 100mA @ 20V
Environmenta
Temperature 0° to 70 ° C (32° to 158° F)
Humidit 0-95% RH Non-condensing
Environment Indoor Onl
2.2 LED Status
The following diagram and chart describes the SEG LED operations.
Data Send/Recieve (Top Left) Network Link (Top Right)
Solid Idle
Flashing
Receiving data from
Hub Manager Pro and it is
being properl decr pted
Solid Good Network Link
Off No Network Link
Status (Bottom Left) Diagnostics (Bottom Right)
Solid (with top left blinking)
1x EEPROM Checksum Error
2x RAM Error
3x Network Controller Error
4x EEPROM Checksum Error
5x Duplicate IP Address on
the Network
Flashing (with top left blinking)
4x Fault Network
Connection
5x No DHCP Response
Received
6x Software does not Match
Hardware
Flashing Alternatel with
Bottom Left
Module is in Setup Mode
Document Number: 6 66 5, Rev 2.4 Page 3 of 32

Section 3: Hardware Installation
The following section contains information about installing the SEG-1 and SEG-M hardware.
3.1 SEG-1 Diagrams
Page 4 of 32 Document Number: 6 66 5, Rev 2.4
Document Number: 6 66 5, Rev 2.4 Page 29 of 32

Page 28 of 32 Document Number: 6 66 5, Rev 2.4
3.2 Connection the SEG-1 to a HubMax or Hub MiniMax (RS-232)
Two different methods can be used to connect Port A of the HubMax or HubMiniMax to the SEG-1:
1. Connect to the RS232 modular jack (front of SEG-1)
2. Connect to the RS232 terminals (rear of SEG-1)
NOTE: If connection to SEG-1 is NOT located at the HubMax or HubMiniMax then the connection must be made via
stranded/shielded cable.
3.2.1 SEG-1 to HubMax/Hub MiniMax Connection Method 1
The diagram below illustrates the method to connect the HubMax or HubMinimax to the RS232 port of the SEG-1 via its RS232
modular jack on the front of the unit.
3.2.2 SEG-1 to HubMax/Hub MiniMax Connection Method 2
The diagram below illustrates the method to connect the HubMax or HubMinimax to the RS232 port of the SEG-1via the terminal
block at the rear of the unit.
NOTE: The stranded shielded cable used in the diagram shows the connection to the SEG-1 across a distance.
*THIS CHART PERTAINS TO THE CABLE RUN BETWEEN THE SEG-1 AND IEI ACCESS SYSTEMS
Document Number: 6 66 5, Rev 2.4 Page 5 of 32

3.3 Connecting the SEG-1 to HC5 P (RS-232)
Two different methods to can be used to connect Port A of the HC500P to the SEG-1
1. Connect to the RS232 modular jack (front of SEG-1)
2. Connect to the RS232 terminals (rear of SEG-1)
NOTE: If connection to SEG-1 is NOT located at the HC500P then the connection must be made via stranded/shielded cable.
3.3.1 SEG-1 to HC5 P Connection Method 1
The diagram below illustrates the method to connect the HC500P to the RS232 port of the SEG-1 via its RS232
modular jack on the front of the unit.
3.3.2 SEG-1 to HC5 P Connection Method 2
The diagram below illustrates the connections between the HC500P and the RS232 port of the SEG-1
via the terminal block at the rear of the SEG-1.
NOTE: The use of stranded shielded cable used in this diagram below is necessar when connecting
the SEG-1 at a distance from the controller.
Page 6 of 32 Document Number: 6 66 5, Rev 2.4
Document Number: 6 66 5, Rev 2.4 Page 27 of 32

4.5.3 Reset the Security Key in the PC to all 's
This feature is t picall used if ou have replaced an existing SEG with a new SEG or a SEG that has a Securit of all 0's.
NOTE: If ou use this feature and the SEG does not have a Securit Ke of all 0's then ou will have to set the Securit Ke back to
all 0's also.
Section 5: Trouble Shooting
Page 26 of 32 Document Number: 6 66 5, Rev 2.4
3.4 Connecting Multiple HubMax/Hub MiniMax Networks
Document Number: 6 66 5, Rev 2.4 Page 7 of 32

3.5 Connecting the SEG-1 to a prox.pad plus (RS-485)
Two different methods can be used to connect P5 Connector of the prox.pad plus to the SEG-1:
1. Connect to the RS485 modular jack (front of SEG-1)
2. Connect to the RS485 terminals (rear of SEG-1)
NOTE: If connection to SEG-1 is NOT located at the prox.pad plus then the connection must be made via
stranded/shielded cable.
3.5.1 SEG-1 to prox.pad Plus Connection Method 1
The diagram below illustrates the method to connect the prox.pad plus to the RS485 port of the SEG-1 via its RS485 modular jack on
the front of the unit.
3.5.2 SEG-1 to prox.pad Plus Connection Method 2
The diagram below illustrates the method to connect the prox.pad plus to the RS485 port of the SEG-1 via the TS1 terminal block at
the rear of the unit.
NOTE: The use of stranded/shielded cable in the diagram shows the connection to the SEG-1 across a distance.
Page 8 of 32 Document Number: 6 66 5, Rev 2.4
4.5 Defaulting the SEG Settings
The following section describes how to reset the default settings in the SEG.
4.5.1 Reset the Security Key in the SEG to all 's
NOTE: this method must be followed if the firmware version of the SEG is less than 1.3.
The SEG must be removed from the LAN and brought back to the PC (or bring a laptop with a serial com port to the SEG) . You will
then enter the configuration menu through the serial connection. The configuration utilit cannot be entered into though the Ethernet
port. This is done so that not just an one on the LAN could change the settings of the SEG without having ph sical access to the SEG
itself.
NOTE: This process ma also be necessar if ou have used the Restore Database function of Hub Manager Pro and the Securit Ke
stored in the database that ou just restored does not match the securit ke currentl stored in the SEG.
To default the encr ption securit ke in the SEG, ou must perform the following in order:
1. Connect the supplied DB9 adapter labeled 'Gatewa Config' to our PC's com port.
2. Remove the Gatewa from the LAN (and power suppl ) and bring it back to the PC.
3. Use the 6' modular cord (supplied with the SEG) and plug it into the port on the SEG labeled 'RS232'.
4. Select the button labeled Launch SEG Seria Port Setup Uti ity and set the Com Port the SEG is connected to when asked.
5. Disconnect power to the SEG.
6. Press and hold down the x ke (lowercase) on the PC ke board, while the H perTerminal program is running.
7. Power up the SEG.
8. In a few seconds ou should get a response from the SEG and a menu will be displa ed.
9. Choose the option labeled 'factory defau ts'. The SEG will then be set back to Out-Of-Box factor defaults. You can now
configure the SEG as if ou are installing it for the first time.
10. In order to speak to this SEG again , ou will now need follow the directions above to Default the Securit Ke in Hub
Manager Pro. Be sure to set a new securit ke into the SEG before ou attempt to send sensitive user data to the door
controllers.
4.5.2 Reset the Security Key in the SEG to all 's
NOTE: This requires SEG firmware v1.3 or higher.
This feature is provided that will allow ou to reset the Securit Ke in the SEG back to all 0's, which is the default out-of-box state.
Resetting the Securit Ke in the SEG would be required if ou are replacing a SEG with a previousl used SEG that alread has a
Securit Ke set into it and ou don't know what the Securit Ke is, or if ou are setting up a new site and want to communicate with
an existing SEG that is alread installed and alread has a Securit Ke set.
NOTE: This feature can onl be used with SEG devices with v1.3 or greater firmware.
1. Go to the SEG and either c cle power to it or press the little black reset button on the SEG.
2. Within 10 minutes, go back to the PC and select the button in the Site Edit screen that is labeled 'Reset the Securit Ke in
the SEG to all 0's'.
3. You will see a warning message specif ing the requirements of using this feature. If ou have met all the requirements then
press the OK button.
4. If the Ke was reset properl then ou will see a confirmation message (Fig. 8).
5. As a securit measure, ou must now go back to the SEG and once again c cle power or press the reset button on the SEG.
This will set the new Securit Ke into non-volatile memor . Failure to reset the SEG after the Securit Ke is reset using
this method will result in not being able to communicate with the SEG.
6. Reset Complete. The Securit Ke has now been reset to all 0's in both the SEG and PC. Communications with this SEG
should now be possible.
Document Number: 6 66 5, Rev 2.4 Page 25 of 32

4.4 SEG Parameters
The following section describes the various parameters in the SEG.
4.4.1 IP Address
The IP address ou have received from our IT administrator is assigning to the SEG.
4.4.2 IP Port
The IP Port is a 'channel' that the SEG configured to listen on for communications from Hub Manager Pro. This is set to 9997 b
default, but can be changed both in Hub Manager Pro and in the SEG, if necessar . But unless the IT Administrator requests the IP
Port be changed, this parameter can be disregarded.
4.4.3 SEG Serial Net Number
This corresponds to the serial port located on the SEG device itself. The SEG is capable of connecting to both RS232 and RS485
products, which are Serial Net Numbers 1 and 2 respectivel . This parameter should never be changed.
4.4.4 Security Key
All communication and data exchanged between the PC and the SEG are sent using 128 bit AES encr ption. The encr ption ke that
is used to encr pt the data can be changed an time b the operator of Hub Manager Professional as long as Hub Manager Professional
currentl has same Securit Ke that is currentl stored in the SEG.
WARNING:It is highl recommended that ou change the encr ption securit ke during the initial SEG setup. All new SEG are
shipped with the same initial securit ke , and Hub Manager Professional 5 (or later) is also shipped with this same securit ke . B
not changing the securit ke , an one running Hub Manager Pro on their PC somewhere else on our LAN would be able to
communicate with our door controllers. But once this securit ke is changed to a new 128 bit number, then all the data that is passed
out the Ethernet port of our PC is then encr pted with that ke and decr pted b the SEG using that same ke .
4.4.5 Generate Random Security Key
This button will generate a new 128 bit securit ke and will then displa the hexadecimal representation in the 'Current Securit Ke '
field (see below)
4.4.6 Generate Default Security Key
After selecting this option, ou will receive a warning message explaining that setting the securit ke back to defaults should onl be
done if ou are installing a new SEG or if ou have defaulted an existing SEG. Once ou agree to this, ou must then choose the
button labeled 'Set This Security Key into the Gateway'. You will then receive a confirmation message that explains that this option
will just save the defaulted securit ke into the Hub Manager Pro database. You can now install our new or defaulted SEG onto the
LAN and attempt to communicate with it. Don't forget to change the securit ke once ou have established communications with the
new (or defaulted) SEG.
4.4.7 Set This Security Key into the SEG
Use this option if ou wish to set a new random securit ke into the SEG. The encr ption ke displa ed in the 'Current Security
Key' field is what is sent during this procedure.
NOTE: In order to change a securit ke in a SEG, Hub Manager Pro must alread know the existing securit ke that is stored in the
SEG. If ou think there has been a mix up, and ou think Hub Manager Pro ma not know the SEG's securit ke , then ou should
perform the steps to 'Defau t the Gateway to Factory Settings' noted below, and when that process is complete, ou can then
attempt to change the securit ke .
Page 24 of 32 Document Number: 6 66 5, Rev 2.4
3.6 Connecting Multiple prox.pad plus Networks
Document Number: 6 66 5, Rev 2.4 Page 9 of 32

3.7 Connecting the SEG-1 to a Max 3 System (RS-485)
You can also use the SEG-1 to connect our Max 3 or MiniMax 3 s stem to our LAN/WAN. Follow the instructions below and refer
to the diagram.
Run our RS-485 cable between terminal strip TS1 on the SEG-1 to TS3 on the backplane as shown in the diagram. You must also
connect each module to the backplane b connecting the 3-conductor wire harness supplied with the Max 3 from P5 to the RS-485
connector underneath each module on the backplane (J1 through J4).
To connect additional backplanes to the s stem, simpl connect TS3 on the first backplane to TS3 on the next backplane as shown
below. The SEG-1 is onl required on the first backplane of the s stem (up to 64 doors Max; if ou require more doors an additional
SEG-1 is required).
Page 1 of 32 Document Number: 6 66 5, Rev 2.4
Note: The maximum
distance between an
backplane and the SEG-1 is
4000 feet using 24AWG,
shielded, two twisted-pair
telephone cable with a shunt
capacitance of 16 pF/Ft.
6 – Security
Here ou can change the Encr ption ke manuall to match the encr ption ke Hub Manager Professional is using. This is
normall not necessar because Hub Manager Professional normall performs this function. After going through this menu
item completel , the encr ption settings will automaticall be saved and the session will be closed.
Disable Telnet Setup (Y)
Disable TFTP Firmware
Upgrade (Y)
Disable Port 77FE (Y)
Disable Web Setup (Y)
Enable Encr ption Ke (Y) Encr ption must alwa s be enabled, because all data sent to the SEG is encr pted. Do
not disable or communications with Hub Manager Professional will fail.
XXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXX
Change ke
(N) This 128 bit securit ke is changed via the Hub Manager Professional software. If
this securit ke does not match the ke stored in the site settings in Hub Manager
Professional, then an communication attempts to our controller hardware will fail.
7 – Factory Defau ts
Sets all options back to out-of-box factor defaults. After performing this function, an securit ke ou had in this device
will be deleted and set back to default. In order to speak to this SEG again, ou will now need follow the directions above to
Default the Securit Ke in Hub Manager Professional. Be sure to set a new securit ke into the SEG, using Hub Manager
Professional before ou attempt to send sensitive user data to the door controllers. This will also set the IP address back to a
default value of 0.0.0.0.
8 – Exit Without Save
Cancels an changes ou have made in setup.
9 – Save and Exit
Saves an changes ou have made in setup and exits
4.3.2 Configuring the IP Address in Hub Manager Professional
Now it is time to open Hub Manager Professional, create a new site, and configure this site to communicate to the SEG with the IP
address ou have received from the IT administrator. This example shows how to set up a SEG connected Hub controller network,
but the SEG can also be used to communicate to a new t pe of controller called the "prox.pad plus". The steps are exactl the same,
just the 'Device Group' will be different.
1. Run Hub Manager Professional and login.
2. Select Database > Sites and then select the Add button.
3. Enter a descriptive Name for this grouping of controllers that will be communicated with via the SEG.
4. Select the Device Group drop down list and select the controller famil ou are connecting to the SEG. For this example, we
are going to choose the device group named 'HC500, Hub+, HubMax, MaxII'.
5. Select the Connection Type named TCP/IP.
6. Select the tab named TCP/IP Parameters.
7. In the edit box labeled IP Address, enter the IP Address that the IT Administrator gave ou.
NOTE: The MAC Address does NOT need to be defined if ou are setting up a SEG with a Static IP Address. The MAC
Address is onl used if ou are assigning a SEG a d namic IP address via a DHCP server, but that feature also requires that the
version of SEG firmware be v1.3 or greater. See the chapter named D namic IP Address for more information on D namic IP
Address assignments. The IP Port and Serial Net Number do not need to be modified in an wa .
8. Select Save.
9. Setup of the Static IP Address into the SEG site is complete.
Document Number: 6 66 5, Rev 2.4 Page 23 of 32