IEI Technology SEG-1 User manual

Page 32 of 32 Document Number: 6 66 5, Rev 2.4
International Electronics, Inc.
427 Turnpike St.
Canton, MA 2 21 U.S.A.
Phone: [phone]
Fax: [phone]
Website: www.ieib.com
Secure Ethernet Gateway
SEG-1 and SEG-M
for IEI Access Systems
Installation Manual
Section 1: Introduction
The SEG is a LAN/WAN (TCP/IP to serial) interface that enables existing or new IEI access s stems to use the end user's network
infrastructure and to be programmed and managed at an network PC running Hub Manager™ Professional software, which operates
on Windows XP Professional , Windows 98 and 2000 operating s stems. The SEG requires Hub Manager™ Professional software
version 5.0 or higher for static IP addressing and version 7.1 or higher for d namic addressing. The access s stem data sent over the
corporate network is 128-Bit so that user and door information cannot be "sniffed" and securit compromised.
The IP address assigned to the SEG, ma be either a static address assigned b authorized network administrator,or it ma be a
d namic address assigned b a DHCP Server.
IMPORTANT NOTE:
To set up the SEG, installation technicians must have a technical knowledge of networks and networking in a PC environment. It is
important to consult the end user's s stem administrator in order to resolve an networking issues that ma occur.
Ordering Information
Model p/n Description
SEG-1 0296005
IEI Secured Ethernet Gateway. Converts TCP/IP to serial data enabling IEI access
s stems to use a network to securel send and recieve data; and to be programmed and
managed from an network PC running Hub Manager Professional. Requires network
connection. Wall mounts using separatel provided hardware; requires separate 12VDC
power [150 mA max], provided with modular cord for communication with access
panel.
SEG-M 0296006
IEI Secured Ethernet Gateway [P ug-in] Modu e. Converts TCP/IP to serial data
enabling IEI access s stems to use a network to securel send and recieve data; and to
be programmed and managed from an network PC running Hub Manager Professional.
Requires network connection. Easil plugs into backplane which provides module
power and communication with access panel.
Document Number: 6 66 5, Rev 2.4 Page 1 of 32
Installer/Service Company Contact Information:
Company Name: ___________________________________
Company Telephone: _______________________________
Technical Support - End User:
Please contact your Installer/Service company.
Technical Support - Service Company
To contact IEI's Technical Support Department, call -800-343-9502 between 8AM and 7PM (EST)
Mon. through Fri. Questions can also be submitted through our website, www.ieib.com.

Table of Contents
Section : Introduction.............................................................................................................................
Section 2: Product Overview...................................................................................................................3
2. Product Specifications...................................................................................................................3
2.2 LED Status....................................................................................................................................3
Section 3: Hardware Installation..............................................................................................................4
3. SEG- Diagrams...........................................................................................................................4
3.2 Connection the SEG- to a HubMax or Hub MiniMax (RS-232)...................................................5
3.2. SEG- to HubMax/Hub MiniMax Connection Method ........................................................5
3.2.2 SEG- to HubMax/Hub MiniMax Connection Method 2........................................................5
3.3 Connecting the SEG- to HC500P (RS-232)................................................................................6
3.3. SEG- to HC500P Connection Method ..............................................................................6
3.3.2 SEG- to HC500P Connection Method 2..............................................................................6
3.4 Connecting Multiple HubMax/Hub MiniMax Networks..................................................................7
3.5 Connecting the SEG- to a prox.pad plus (RS-485).....................................................................8
3.5. SEG- to prox.pad Plus Connection Method ......................................................................8
3.5.2 SEG- to prox.pad Plus Connection Method 2......................................................................8
3.6 Connecting Multiple prox.pad plus Networks................................................................................9
3.7 Connecting the SEG- to a Max 3 System (RS-485)................................................................. 0
3.8 Connecting the SEG- to a MiniMax 3 System (RS-485)...........................................................
3.9 SEG-M Installation (Plug On Module)......................................................................................... 2
3.9. SEG-M Diagram................................................................................................................... 2
3.9.2 SEG-M RS-485 Connector.................................................................................................. 2
3.9.3 Connecting the SEG-M to a HubMax System (RS-232)...................................................... 3
3.9.4 Connecting the SEG-M to a Hub MiniMax System (RS-232).............................................. 3
3.9.5 Connecting the SEG-M to a Max 3 System (RS-485)......................................................... 4
3.9.6 Connecting the SEG-M to a MiniMax 3 System (RS-485).................................................. 5
Section 4: SEG Configuration................................................................................................................ 6
4. Dynamic IP Address via DHCP server, IP Address in SEG can change.................................... 6
4.2 Dynamic IP Address, non-expiring lease.................................................................................... 9
4.3 Static IP Address.........................................................................................................................20
4.3. Setting a Static IP Address of a SEG through a serial connection (via PC com port)........ 20
4.3.2 Configuring the IP Address in Hub Manager Professional..................................................23
4.4 SEG Parameters.........................................................................................................................24
4.4. IP Address............................................................................................................................24
4.4.2 IP Port..................................................................................................................................24
4.4.3 SEG Serial Net Number.......................................................................................................24
4.4.4 Security Key.........................................................................................................................24
4.4.5 Generate Random Security Key..........................................................................................24
4.4.6 Generate Default Security Key............................................................................................24
4.4.7 Set This Security Key into the SEG.....................................................................................24
4.5 Defaulting the SEG Settings.......................................................................................................25
4.5. Reset the Security Key in the SEG to all 0's .......................................................................25
4.5.2 Reset the Security Key in the SEG to all 0's .......................................................................25
4.5.3 Reset the Security Key in the PC to all 0's..........................................................................26
Section 5: Trouble Shooting..................................................................................................................26
Section 6: FCC Compliance Statement.................................................................................................30
Page 2 of 32 Document Number: 6 66 5, Rev 2.4
Document Number: 6 66 5, Rev 2.4 Page 31 of 32
PAGE LEFT BLANK INTENTIONALLY

Section 6: FCC Compliance Statement
This equipment has been tested and found to compl with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequenc energ and, if not installed and used in
accordance with the instruction manual, ma cause harmful interference to radio communications.
Operation of this equipment in a residential area is likel to cause harmful interference in which case the user will be required to
correct the interference at his own expense.
Page 3 of 32 Document Number: 6 66 5, Rev 2.4
Section 2: Product Overview
2.1 Product Specifications
The chart below contains the environmental and electrical specifications.
E ectrica
Voltage 12VDC (9V Min; 20V Max)
Current 150mA @ 9V; 100mA @ 20V
Environmenta
Temperature 0° to 70 ° C (32° to 158° F)
Humidit 0-95% RH Non-condensing
Environment Indoor Onl
2.2 LED Status
The following diagram and chart describes the SEG LED operations.
Data Send/Recieve (Top Left) Network Link (Top Right)
Solid Idle
Flashing
Receiving data from
Hub Manager Pro and it is
being properl decr pted
Solid Good Network Link
Off No Network Link
Status (Bottom Left) Diagnostics (Bottom Right)
Solid (with top left blinking)
1x EEPROM Checksum Error
2x RAM Error
3x Network Controller Error
4x EEPROM Checksum Error
5x Duplicate IP Address on
the Network
Flashing (with top left blinking)
4x Fault Network
Connection
5x No DHCP Response
Received
6x Software does not Match
Hardware
Flashing Alternatel with
Bottom Left
Module is in Setup Mode
Document Number: 6 66 5, Rev 2.4 Page 3 of 32

Section 3: Hardware Installation
The following section contains information about installing the SEG-1 and SEG-M hardware.
3.1 SEG-1 Diagrams
Page 4 of 32 Document Number: 6 66 5, Rev 2.4
Document Number: 6 66 5, Rev 2.4 Page 29 of 32

Page 28 of 32 Document Number: 6 66 5, Rev 2.4
3.2 Connection the SEG-1 to a HubMax or Hub MiniMax (RS-232)
Two different methods can be used to connect Port A of the HubMax or HubMiniMax to the SEG-1:
1. Connect to the RS232 modular jack (front of SEG-1)
2. Connect to the RS232 terminals (rear of SEG-1)
NOTE: If connection to SEG-1 is NOT located at the HubMax or HubMiniMax then the connection must be made via
stranded/shielded cable.
3.2.1 SEG-1 to HubMax/Hub MiniMax Connection Method 1
The diagram below illustrates the method to connect the HubMax or HubMinimax to the RS232 port of the SEG-1 via its RS232
modular jack on the front of the unit.
3.2.2 SEG-1 to HubMax/Hub MiniMax Connection Method 2
The diagram below illustrates the method to connect the HubMax or HubMinimax to the RS232 port of the SEG-1via the terminal
block at the rear of the unit.
NOTE: The stranded shielded cable used in the diagram shows the connection to the SEG-1 across a distance.
*THIS CHART PERTAINS TO THE CABLE RUN BETWEEN THE SEG-1 AND IEI ACCESS SYSTEMS
Document Number: 6 66 5, Rev 2.4 Page 5 of 32

3.3 Connecting the SEG-1 to HC5 P (RS-232)
Two different methods to can be used to connect Port A of the HC500P to the SEG-1
1. Connect to the RS232 modular jack (front of SEG-1)
2. Connect to the RS232 terminals (rear of SEG-1)
NOTE: If connection to SEG-1 is NOT located at the HC500P then the connection must be made via stranded/shielded cable.
3.3.1 SEG-1 to HC5 P Connection Method 1
The diagram below illustrates the method to connect the HC500P to the RS232 port of the SEG-1 via its RS232
modular jack on the front of the unit.
3.3.2 SEG-1 to HC5 P Connection Method 2
The diagram below illustrates the connections between the HC500P and the RS232 port of the SEG-1
via the terminal block at the rear of the SEG-1.
NOTE: The use of stranded shielded cable used in this diagram below is necessar when connecting
the SEG-1 at a distance from the controller.
Page 6 of 32 Document Number: 6 66 5, Rev 2.4
Document Number: 6 66 5, Rev 2.4 Page 27 of 32

4.5.3 Reset the Security Key in the PC to all 's
This feature is t picall used if ou have replaced an existing SEG with a new SEG or a SEG that has a Securit of all 0's.
NOTE: If ou use this feature and the SEG does not have a Securit Ke of all 0's then ou will have to set the Securit Ke back to
all 0's also.
Section 5: Trouble Shooting
Page 26 of 32 Document Number: 6 66 5, Rev 2.4
3.4 Connecting Multiple HubMax/Hub MiniMax Networks
Document Number: 6 66 5, Rev 2.4 Page 7 of 32

3.5 Connecting the SEG-1 to a prox.pad plus (RS-485)
Two different methods can be used to connect P5 Connector of the prox.pad plus to the SEG-1:
1. Connect to the RS485 modular jack (front of SEG-1)
2. Connect to the RS485 terminals (rear of SEG-1)
NOTE: If connection to SEG-1 is NOT located at the prox.pad plus then the connection must be made via
stranded/shielded cable.
3.5.1 SEG-1 to prox.pad Plus Connection Method 1
The diagram below illustrates the method to connect the prox.pad plus to the RS485 port of the SEG-1 via its RS485 modular jack on
the front of the unit.
3.5.2 SEG-1 to prox.pad Plus Connection Method 2
The diagram below illustrates the method to connect the prox.pad plus to the RS485 port of the SEG-1 via the TS1 terminal block at
the rear of the unit.
NOTE: The use of stranded/shielded cable in the diagram shows the connection to the SEG-1 across a distance.
Page 8 of 32 Document Number: 6 66 5, Rev 2.4
4.5 Defaulting the SEG Settings
The following section describes how to reset the default settings in the SEG.
4.5.1 Reset the Security Key in the SEG to all 's
NOTE: this method must be followed if the firmware version of the SEG is less than 1.3.
The SEG must be removed from the LAN and brought back to the PC (or bring a laptop with a serial com port to the SEG) . You will
then enter the configuration menu through the serial connection. The configuration utilit cannot be entered into though the Ethernet
port. This is done so that not just an one on the LAN could change the settings of the SEG without having ph sical access to the SEG
itself.
NOTE: This process ma also be necessar if ou have used the Restore Database function of Hub Manager Pro and the Securit Ke
stored in the database that ou just restored does not match the securit ke currentl stored in the SEG.
To default the encr ption securit ke in the SEG, ou must perform the following in order:
1. Connect the supplied DB9 adapter labeled 'Gatewa Config' to our PC's com port.
2. Remove the Gatewa from the LAN (and power suppl ) and bring it back to the PC.
3. Use the 6' modular cord (supplied with the SEG) and plug it into the port on the SEG labeled 'RS232'.
4. Select the button labeled Launch SEG Seria Port Setup Uti ity and set the Com Port the SEG is connected to when asked.
5. Disconnect power to the SEG.
6. Press and hold down the x ke (lowercase) on the PC ke board, while the H perTerminal program is running.
7. Power up the SEG.
8. In a few seconds ou should get a response from the SEG and a menu will be displa ed.
9. Choose the option labeled 'factory defau ts'. The SEG will then be set back to Out-Of-Box factor defaults. You can now
configure the SEG as if ou are installing it for the first time.
10. In order to speak to this SEG again , ou will now need follow the directions above to Default the Securit Ke in Hub
Manager Pro. Be sure to set a new securit ke into the SEG before ou attempt to send sensitive user data to the door
controllers.
4.5.2 Reset the Security Key in the SEG to all 's
NOTE: This requires SEG firmware v1.3 or higher.
This feature is provided that will allow ou to reset the Securit Ke in the SEG back to all 0's, which is the default out-of-box state.
Resetting the Securit Ke in the SEG would be required if ou are replacing a SEG with a previousl used SEG that alread has a
Securit Ke set into it and ou don't know what the Securit Ke is, or if ou are setting up a new site and want to communicate with
an existing SEG that is alread installed and alread has a Securit Ke set.
NOTE: This feature can onl be used with SEG devices with v1.3 or greater firmware.
1. Go to the SEG and either c cle power to it or press the little black reset button on the SEG.
2. Within 10 minutes, go back to the PC and select the button in the Site Edit screen that is labeled 'Reset the Securit Ke in
the SEG to all 0's'.
3. You will see a warning message specif ing the requirements of using this feature. If ou have met all the requirements then
press the OK button.
4. If the Ke was reset properl then ou will see a confirmation message (Fig. 8).
5. As a securit measure, ou must now go back to the SEG and once again c cle power or press the reset button on the SEG.
This will set the new Securit Ke into non-volatile memor . Failure to reset the SEG after the Securit Ke is reset using
this method will result in not being able to communicate with the SEG.
6. Reset Complete. The Securit Ke has now been reset to all 0's in both the SEG and PC. Communications with this SEG
should now be possible.
Document Number: 6 66 5, Rev 2.4 Page 25 of 32

4.4 SEG Parameters
The following section describes the various parameters in the SEG.
4.4.1 IP Address
The IP address ou have received from our IT administrator is assigning to the SEG.
4.4.2 IP Port
The IP Port is a 'channel' that the SEG configured to listen on for communications from Hub Manager Pro. This is set to 9997 b
default, but can be changed both in Hub Manager Pro and in the SEG, if necessar . But unless the IT Administrator requests the IP
Port be changed, this parameter can be disregarded.
4.4.3 SEG Serial Net Number
This corresponds to the serial port located on the SEG device itself. The SEG is capable of connecting to both RS232 and RS485
products, which are Serial Net Numbers 1 and 2 respectivel . This parameter should never be changed.
4.4.4 Security Key
All communication and data exchanged between the PC and the SEG are sent using 128 bit AES encr ption. The encr ption ke that
is used to encr pt the data can be changed an time b the operator of Hub Manager Professional as long as Hub Manager Professional
currentl has same Securit Ke that is currentl stored in the SEG.
WARNING:It is highl recommended that ou change the encr ption securit ke during the initial SEG setup. All new SEG are
shipped with the same initial securit ke , and Hub Manager Professional 5 (or later) is also shipped with this same securit ke . B
not changing the securit ke , an one running Hub Manager Pro on their PC somewhere else on our LAN would be able to
communicate with our door controllers. But once this securit ke is changed to a new 128 bit number, then all the data that is passed
out the Ethernet port of our PC is then encr pted with that ke and decr pted b the SEG using that same ke .
4.4.5 Generate Random Security Key
This button will generate a new 128 bit securit ke and will then displa the hexadecimal representation in the 'Current Securit Ke '
field (see below)
4.4.6 Generate Default Security Key
After selecting this option, ou will receive a warning message explaining that setting the securit ke back to defaults should onl be
done if ou are installing a new SEG or if ou have defaulted an existing SEG. Once ou agree to this, ou must then choose the
button labeled 'Set This Security Key into the Gateway'. You will then receive a confirmation message that explains that this option
will just save the defaulted securit ke into the Hub Manager Pro database. You can now install our new or defaulted SEG onto the
LAN and attempt to communicate with it. Don't forget to change the securit ke once ou have established communications with the
new (or defaulted) SEG.
4.4.7 Set This Security Key into the SEG
Use this option if ou wish to set a new random securit ke into the SEG. The encr ption ke displa ed in the 'Current Security
Key' field is what is sent during this procedure.
NOTE: In order to change a securit ke in a SEG, Hub Manager Pro must alread know the existing securit ke that is stored in the
SEG. If ou think there has been a mix up, and ou think Hub Manager Pro ma not know the SEG's securit ke , then ou should
perform the steps to 'Defau t the Gateway to Factory Settings' noted below, and when that process is complete, ou can then
attempt to change the securit ke .
Page 24 of 32 Document Number: 6 66 5, Rev 2.4
3.6 Connecting Multiple prox.pad plus Networks
Document Number: 6 66 5, Rev 2.4 Page 9 of 32

3.7 Connecting the SEG-1 to a Max 3 System (RS-485)
You can also use the SEG-1 to connect our Max 3 or MiniMax 3 s stem to our LAN/WAN. Follow the instructions below and refer
to the diagram.
Run our RS-485 cable between terminal strip TS1 on the SEG-1 to TS3 on the backplane as shown in the diagram. You must also
connect each module to the backplane b connecting the 3-conductor wire harness supplied with the Max 3 from P5 to the RS-485
connector underneath each module on the backplane (J1 through J4).
To connect additional backplanes to the s stem, simpl connect TS3 on the first backplane to TS3 on the next backplane as shown
below. The SEG-1 is onl required on the first backplane of the s stem (up to 64 doors Max; if ou require more doors an additional
SEG-1 is required).
Page 1 of 32 Document Number: 6 66 5, Rev 2.4
Note: The maximum
distance between an
backplane and the SEG-1 is
4000 feet using 24AWG,
shielded, two twisted-pair
telephone cable with a shunt
capacitance of 16 pF/Ft.
6 – Security
Here ou can change the Encr ption ke manuall to match the encr ption ke Hub Manager Professional is using. This is
normall not necessar because Hub Manager Professional normall performs this function. After going through this menu
item completel , the encr ption settings will automaticall be saved and the session will be closed.
Disable Telnet Setup (Y)
Disable TFTP Firmware
Upgrade (Y)
Disable Port 77FE (Y)
Disable Web Setup (Y)
Enable Encr ption Ke (Y) Encr ption must alwa s be enabled, because all data sent to the SEG is encr pted. Do
not disable or communications with Hub Manager Professional will fail.
XXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXX
Change ke
(N) This 128 bit securit ke is changed via the Hub Manager Professional software. If
this securit ke does not match the ke stored in the site settings in Hub Manager
Professional, then an communication attempts to our controller hardware will fail.
7 – Factory Defau ts
Sets all options back to out-of-box factor defaults. After performing this function, an securit ke ou had in this device
will be deleted and set back to default. In order to speak to this SEG again, ou will now need follow the directions above to
Default the Securit Ke in Hub Manager Professional. Be sure to set a new securit ke into the SEG, using Hub Manager
Professional before ou attempt to send sensitive user data to the door controllers. This will also set the IP address back to a
default value of 0.0.0.0.
8 – Exit Without Save
Cancels an changes ou have made in setup.
9 – Save and Exit
Saves an changes ou have made in setup and exits
4.3.2 Configuring the IP Address in Hub Manager Professional
Now it is time to open Hub Manager Professional, create a new site, and configure this site to communicate to the SEG with the IP
address ou have received from the IT administrator. This example shows how to set up a SEG connected Hub controller network,
but the SEG can also be used to communicate to a new t pe of controller called the "prox.pad plus". The steps are exactl the same,
just the 'Device Group' will be different.
1. Run Hub Manager Professional and login.
2. Select Database > Sites and then select the Add button.
3. Enter a descriptive Name for this grouping of controllers that will be communicated with via the SEG.
4. Select the Device Group drop down list and select the controller famil ou are connecting to the SEG. For this example, we
are going to choose the device group named 'HC500, Hub+, HubMax, MaxII'.
5. Select the Connection Type named TCP/IP.
6. Select the tab named TCP/IP Parameters.
7. In the edit box labeled IP Address, enter the IP Address that the IT Administrator gave ou.
NOTE: The MAC Address does NOT need to be defined if ou are setting up a SEG with a Static IP Address. The MAC
Address is onl used if ou are assigning a SEG a d namic IP address via a DHCP server, but that feature also requires that the
version of SEG firmware be v1.3 or greater. See the chapter named D namic IP Address for more information on D namic IP
Address assignments. The IP Port and Serial Net Number do not need to be modified in an wa .
8. Select Save.
9. Setup of the Static IP Address into the SEG site is complete.
Document Number: 6 66 5, Rev 2.4 Page 23 of 32

14. To change the IP address ou should select option 0 server Configuration. A 3 digit number will be displa ed in brackets.
This is the first 'octet' of the current IP address of this SEG device. You will either enter a new 3 digit number and then press
enter to accept it, or ou can accept this number b pressing enter. You will do this for all 4 octets.
15. You must now press <ENTER> for the rest of the options to accept the default settings.
16. There is no need to change an other settings within this setup menu.
17. From the main menu, select 9 save and exit.
18. When ou receive the Parameters stored ... message ou can exit this utilit b selecting Fi e > Exit. You will select Yes if
ou are asked if ou want to disconnect.
NOTE: Default values in all other menu s stems should. The default value is kept b pressing the <ENTER> ke when that
setting is displa ed.
Here is a brief description of each menu and sub option, and what the default values should be. The SEG device is factor set to have
the highest securit possible. Changing an options, especiall in the 'Securit ' menu could result in not having a completel secure
environment.
0 – Sever Configuration
IP Address
(XXX).(XXX).(XXX).(XXX) Allows ou to set the IP address of the SEG directl . You
can set it to 0.0.0.0 to allow it to be served a d namic IP address each time it boots up.
The IP address should onl be set to 0.0.0.0 if the DHCP server is assigning the same IP
address to this SEG device ever time, b wa of using a non-expiring IP address lease
that is assigned to the MAC address of the device.
Set Gatewa IP Address N (Do Not Change); The term 'Gatewa ' here refers to a network router on the LAN not
the device ou are configuring here.
Netmask 0 (Do Not Change)
Change Telnet Config Password N (Do Not Change)
1 – Channe 1 Configuration: Settings of the RS-232 Port
Baud Rate 1200 (Do Not Change)
I/F Mode 4C (Do Not Change)
Flow 00 (Do Not Change)
Use UDP Y (Do Not Change)
Source Port 09997 (If there is a need to change this then make sure to change the site settings within
Hub Manager Professional to match)
Destination Port 00000 (Do Not Change)
Destination IP 0.0.0.0 (Do Not Change)
2 - Channe 2 Configuration: Settings of the RS-485 Port
Baud Rate 19200 (Do Not Change)
I/F Mode 4C (Do Not Change)
Flow 00 (Do Not Change)
Page 22 of 32 Document Number: 6 66 5, Rev 2.4
3.8 Connecting the SEG-1 to a MiniMax 3 System (RS-485)
You can also use the SEG-1 to connect our MiniMax 3 s stem to our LAN/WAN. Follow the instructions below and refer to the
diagram.
Run our RS-485 cable between terminal strip TS1 on the SEG-1 to TS3 on the backplane as shown in the diagram. You must also
connect the module to the backplane b connecting the 3-conductor wire harness supplied with the MiniMax 3 from P5 to the RS-485
connector underneath the module on the backplane (P1).
To connect additional backplanes to the s stem, simpl connect TS3 on the first backplane to TS3 on the next backplane as shown
below. The SEG-1 is onl required on the first backplane of the s stem (up to 64 doors Max; if ou require more doors an additional
SEG-1 is required).
Document Number: 6 66 5, Rev 2.4 Page 11 of 32
Note: The maximum
distance between an
backplane and the SEG-1 is
4000 feet using 24AWG,
shielded, two twisted-pair
telephone cable with a shunt
capacitance of 16 pF/Ft.

3.9 SEG-M Installation (Plug On Module)
The SEG-M plug on module was created to allow HubMax and MiniMax panels an easier wa to use the SEG-M functionalit . When
used with HubMax or Hub MiniMax panels, no power or communication wiring is required between the SEG-M and the backplane.
All connections are made through the connector used to connect the SEG-M module to the backplane. To connect to a Max 3 or
MiniMax 3 ou must use the supplied cable to make the connections to the module and the backplane.
3.9.1 SEG-M Diagram
3.9.2 SEG-M RS-485 Connector
Connector J1 is used to connect to a Max 3 or MiniMax 3 using the supplied wire harness. See the following sections for details.
RS-485 Wiring: Wire Harnesses J1
1 Data A
2 Data B
3 Data GND
4 Data A
5 Data B
6 Data GND
Page 12 of 32 Document Number: 6 66 5, Rev 2.4
8. Disconnect power to the SEG (if it was powered up).
9. Press and hold down the x ke (lowercase) on the PC ke board while the H perTerminal program is running.
10. Power up the SEG.
11. In a few seconds ou should get a response from the SEG asking ou to press enter to go into Setup Mode.
NOTE: You must press enter within 5 seconds to enter Setup mode. Failure to press enter within this window of opportunit
will cause the SEG unit to stop the abilit to enter setup mode, and ou will see '?!?' displa ed on the screen. If this happens go
back to step 7 and start from there again.
12. Release the x ke .
13. After pressing ENTER to go into setup mode, ou will be given a menu s stem displa ing the current settings and also some
menu items to choose from (see image below).
Document Number: 6 66 5, Rev 2.4 Page 21 of 32

4.3 Static IP Address
The static IP address is set through the serial port of the SEG using the PC's serial communications port (or through the USB port
using a USB to RS232 adapter). This method allows ou to configure the IP address of the SEG without an network devices such as
a router or a network switch interfering. Refer to the section in this chapter named Static IP Address
4.3.1 Setting a Static IP Address of a SEG through a serial connection (via PC com port)
This is the method for configuring the IP address of the SEG if it is going to be assigned a static IP address.
To enter the configuration menu of the SEG, ou must perform the following in order:
1. Connect the DB9-RJ11 adapter labeled Gateway Config (supplied with the SEG) to our PC's com port.
2. Plug the 6' phone cord (supplied with the SEG) into the adapter labeled Gateway Config.
3. When using a SEG-1, disconnect the SEG-1 from the LAN and controller and bring it back to the PC, along with its power
suppl . Plug the other end of the 6' phone cord into the port on the SEG-1 labeled RS232.
4. When using the SEG-M ou must leave it installed on the backplane. In this case the PC (a laptop is recommended) must be
close to the backplane so ou can plug the 6' phone cord into the RJ-11 jack labeled Port C. Remember that module 1 must be
in place and turned on.
5. Run Hub Manager Professional and go to Database > Sites and open that site for editing.
6. Select the tab named TCP/IP Parameters
7. Select the button labeled Launch SEG Seria Port Setup Uti ity and set the Com Port the SEG is connected to when asked.
Page 2 of 32 Document Number: 6 66 5, Rev 2.4
3.9.3 Connecting the SEG-M to a HubMax System (RS-232)
Connect the SEG-M to the eight-position pin rail S1 above the first module on the backplane. Make sure the components on the SEG-
M are facing awa from the module. Use the the two-card guides to secure the SEG-M in place b snapping them into the holes on
either side and sliding the SEG-M into them.
3.9.4 Connecting the SEG-M to a Hub MiniMax System (RS-232)
Connect the SEG-M to the eight-position pin rail S1 on the left hand side of on the backplane. Make sure the components on the SEG-
M are facing awa from the module. Use the the two-card guides to secure the SEG-M in place b snapping them into the holes on
either side and sliding the SEG-M into them.
Document Number: 6 66 5, Rev 2.4 Page 13 of 32
Note: No additional connections
are required between the
HubMax and the SEG-M.
Note: No additional connections are required between the Hub MiniMax and the SEG-M.

3.9.5 Connecting the SEG-M to a Max 3 System (RS-485)
You can connect our Max 3 to our LAN/WAN b using the SEG-M, Secured Ethernet Gatewa . Follow the instructions below and
refer to the diagram.
The connection from the SEG-M to the Max 3 requires ou to plug the module onto the backplane connector S1 to power the unit.
You must also use the six-conductor wire harness from J1 on the SEG-M to P5 on the module and J1 on the backplane. If ou have
more than one module on the backplane, ou must connect each module to the corresponding RS-485 connector (J2, J3 or J4)
underneath the module as described in the Max 3 Installation Manual.
To connect additional backplanes to the s stem, simpl connect TS3 on the first backplane to TS3 on the next backplane as shown
below. The SEG-M is onl required on the first backplane of the s stem (up to 64 doors Max; if ou require more doors an additional
SEG-M is required).
Page 14 of 32 Document Number: 6 66 5, Rev 2.4
Note: The maximum
distance between the first
backplane with the SEG-M
and the next backplane is
4000 feet using 24AWG,
shielded, two twisted-pair
telephone cable with a shunt
capacitance of 16 pF/Ft.
4.2 Dynamic IP Address, non-expiring lease
No setup of the SEG via it's serial port is required. Just suppl the SEG's MAC address to the IT department and ask them to assign
this particular piece of Ethernet equipment to be assigned an IP Address with a 'non-expiring lease', and get back from the the IP
Address that will be assigned the SEG. The MAC address ou will suppl to IT is the 12 digit number located on the label of the SEG.
Once ou have the IP address that will be assigned to this SEG, ou can then simpl enter that IP address into the Site Settings screen,
and change the IP address if necessar , and Save the site.
NOTE: Each SEG is shipped from the factor with an IP Address of 0.0.0.0. When the SEG is initiall powered up (or rebooted) and
it has an IP address of all 0's, it will look for a DHCP server on the network and if one is found the SEG will be assigned an IP
Address.
Document Number: 6 66 5, Rev 2.4 Page 19 of 32
Figure 5: Generate Security Key
Figure 6: Generate Security Key

Page 18 of 32 Document Number: 6 66 5, Rev 2.4
Figure 3: Found SEG's are disp ayed in grid
Figure 4: Se ect a SEG
3.9.6 Connecting the SEG-M to a MiniMax 3 System (RS-485)
You can connect our MiniMax 3 to our LAN/WAN b using the SEG-M, Secured Ethernet Gatewa . Follow the instructions below
and refer to the diagram.
The connection from the SEG-M to the MiniMax 3 requires ou to plug the module onto the backplane connector J2 to power the unit.
You must also use the six-conductor wire harness from J1 on the SEG-M to P5 on the module and P1 on the backplane.
To connect additional backplanes to the s stem, simpl connect TS3 on the first backplane to TS3 on the next backplane as shown
below. The SEG-M is onl required on the first backplane of the s stem (up to 64 doors Max; if ou require more doors an additional
SEG-M is required).
Document Number: 6 66 5, Rev 2.4 Page 15 of 32
Note: The maximum
distance between the first
backplane with the SEG-M
and the next backplane is
4000 feet using 24AWG,
shielded, two twisted-pair
telephone cable with a shunt
capacitance of 16 pF/Ft.

Section 4: SEG Configuration
The SEG is a device created for the purpose of allowing data to be exported from our PC over a LAN/WAN to either Secured Series
Controllers or the prox.pad Plus. A minimal amount of setup must be performed on the SEG in order for it to be properl addressed on
the LAN.
There are 3 methods that can be used to configure the IP Address of the SEG:
1. D namic IP Addressing via DHCP server with an IP that can change (this is the recommended method but it requires SEG
firmware v1.3 or greater)
2. D namic IP Addressing via DHCP server with non-expiring lease (can be performed on an version of SEG)
3. Static IP Address (can be performed on an version of SEG)
NOTE: If our SEG has a firmware version of 1.3 or higher and there is a DHCP server on the network, which is t pical, then it is
recommended that ou refer to the section of this manual named Setting up a SEG that is assigned an IP Address by DHCP server.
4.1 Dynamic IP Address via DHCP server, IP Address in SEG can change
This is the recommended method but it requires SEG v1.3 or greater firmware. The firmware label is located on top of the SEG.
NOTE: The SEG units that shipped prior to v1.3 did not have a version label on them. If the SEG ou are setting up does not have a
version label, then the firmware is prior to v1.3 and ou cannot use this method and ou MUST use one of the other 2 methods to
assign an IP Address to that particular SEG.
Using this method, no manual setup of the SEG IP Address via the SEG serial port is required.
If ou are installing more than one SEG on our LAN ou just need to write down the 12 digit MAC Address located on the label of
the SEG and write down which controller group that SEG is connected to for reference. For example:
MAC Address Description
00-20-4A-52-F2-84 Building 1, Floor 2, HubMaxII
00-20-4A-52-8B-89 Building 1, Floor 7, HubMaxII
00-20-4A-52-F4-12 Building 2, Floor 1, prox.pad plus
1. Press the button on the SEG setup screen (Fig. 1) labeled Search for SEG Devices to start the process.
2. A warning will be displa ed (Fig. 2) reminding ou what the firmware requirements are. Select Yes to continue the search.
3. In approximatel 5-10 seconds a grid will be filled with an SEG devices that were found (Fig. 3) and a message will be
displa ed asking ou to select a SEG in the grid (Fig. 4).
4. If ou are onl installing one SEG and it was found during the search simpl select the item in the grid. If ou have installed
more than one SEG then select the SEG that has the same MAC Address as the SEG ou are setting up for this site.
5. Now a message will be displa ed asking ou to generate a new Securit Ke (Fig. 5)
6. If ou don't want to set the Securit Ke at this time then setup is complete, select save to Save and Close the Site Settings
screen.
7. If ou want to change the Securit Ke , then select the button labeled 'Generate Random Securit Ke .
8. A message will then tell ou to select the button labeled 'Set the Above Securit Ke into the SEG. (Fig. 6). Select that button
to send the new Securit Ke to the selected SEG.
9. Setup Complete
Now that the MAC address is known b Hub Manager Professional, if the DHCP server were to assign a new IP Address to this
particular SEG, then the next time ou attempt to communicate with an of the controllers connected to this SEG, Hub Manager
Professional will retrieve the new IP Address from the SEG and will automaticall save this new IP address into the Site Settings. This
saves ou the time needed to reconfigure the IP Address in the Site settings screen.
Page 16 of 32 Document Number: 6 66 5, Rev 2.4
Document Number: 6 66 5, Rev 2.4 Page 17 of 32
Figure 1: No SEG parameters defined
Figure 2: SEG firmware requirements