NeOLllo
intelligent security solutions
AAN-100 Hardware
Manual
Revision Date: 26 APR 2008
This manual contains confidential information and
may only be reproduced or distributed with the
written consent of Apollo Security, Inc.
T
Per
© 2008 Apollo Security Inc.AAN-100 Hardware Manual
Advanced Electronic Controller For Apollo Access Control Systems
by Apollo Security Inc.
© 2008 Apollo Security Inc.
All rights reserved. No parts of this work may be reproduced in any form or by any means - graphic, electronic, or
mechanical, including photocopying, recording, taping, or information storage and retrieval systems - without the written
peimission of Apollo Security, inc.
While every precaution has been taken in the preparation of this document, Apollo Security assumes no responsiblity
{or errors or omissions, or for damages resulting from the use of information contained inthis Gocument or from the use
Cf programs and source code that may accompany it. In no event shall the publisher and the author be liable for any
loss of profit or any other commercial damage caused or alleged to have been caused directly or indirectly by this
document,IMPORTANT INFORMATION
WARNING
HIGH VOLTAGE, AC MAIN POWER SHOULD ONLY BE CONNECTED BY QUALIFIED,
LICENSED ELECTRICIANS. ALL APPLICABLE LAWS AND CODES MUST BE FOLLOWED. IF
‘THIS PRECAUTION IS NOT OBSERVED, PERSONAL INJURY OR DEATH COULD OCCUR
Power should not be applied to the system until after the installation has been completed. If this
precaution is not observed, personal injury or death could occur, and the equipment could be
‘damaged beyond repair.
Verify that the external circuit breaker which supplies power to the device power supply is turned off
prior to installation,
“Verify that the output voltage of the power supply is within specifications prior to connection to the
device.
CAUTION
Several Important procedures should be followed to prevent electro-statle discharge (ESD) damage
to sensltive CMOS integrated circults and modules.
All transport of electronic components, including completed reader assembles, should be in static
Shield packaging and containers.
Handle all ESD sensitive components at an approved static controlled work station. These work
stations consist of a desk mat, floor mat and a ESD wrist strap. Work stations are available from
various vendors including the 3M company.
FCC Compliance Statement
This device complies with Part 16 of FOC Rules. Operation is subject to the following two conditions:
1This device may not cause harmful interference, and
2 This device must accept any interference received, including interference that may cause
Undesired operation.
‘This equipment has been tested and found to comply with the limits for a Class A digital device
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
‘equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instruction manual, may cause harmful interference to radio communications.
Operation ofthis device in a residential area is likely to cause harmful interference in which case the
User will be required to correct the interference at his/her own expense. The user is advised that any
‘equipment changes or madifications not expressly approved by the party responsible for compliance
‘would void the compliance to FCC regulations and therefore, the user's authority to operate the
‘equipment.' AAN-100 Hardware Manual
Table of Contents
Part! Introduction 2
1 Overview
2 General Features uns
3. Programming Host
Part Il Hardware Layout 6
1 Terminal Connectors ..
2 DIP Switches
DIP Switeh Tables 10
DIP Switch Function 10
3. Connectors "1
Device Port Communication Sockets... stn 2
Memory Backup Connection 8
SIMM Memory Sockets... . 8
Host Interface Module Connector . ro
4 LEDs 3
Start Up Mode 1“
Normal Operation 18
Test Mode 8
5 Firmware 15
6 Additional Installation Information jn.m.m.nmsnssssennnnsnnnmnnnnnnnnnnnnne 1D
‘Mounting Holes 6
Part Ill System Wiring 17
AT POWEE assesses sunnnnemnnnnnnnnnnnnnnnnnnnnennamnnnnnnenns VT
2 Grounding . 7
De Ground 7
RS-485 Signal Ground ($6). 7
Safety (Earth) Ground ... sen ssn 8
Grounding System 8
Grounding Potential Diference Checks Before Connecting nnn msnimnnnnonsensnsnnnne 18
3. Host Communication Connection wmn.ssnnnnnmnnnnnnnnennnnnnnnnnennnnnnns 1B
Serial sent nnn 1”
ASL a
Introduetion 2
Heraware Layout. 2
DIP Switches 2
DIP Switch Table 23
DIP Switch Functions. 3
Connectors 25
Device Port Communication Diver Sockets 2%
Host Intorface Connector. 3
Network 28
(© 2008 Apolo Security heContents
ANI 28
Introduction 28
Herdware Layout 26
Jumpers 26
U.A5 Jack 2
Host ineface Connector a
LEDs a
ANI-100 ar
Inetueton 2
Hardware Layout n
DIP Swatches 2B
Connectors 28
Device Pert Communication Onvar Sockets 8
u.Ad Jack 28
Hos Interface Connector 2B
4 Field Devices Communication Connection sinnnnmmnnnnnmnnnnininnnnsrsnnnnrnn 28
8-485 Communications Line ey
5 General Alarm Inputs
Power Fault 2
Cabinet Tamper 2
6 Local Printout .
Part IV Software Configuration Uti
1 ANI-1/100 IP Programming
InitAaN
Web Page
Telnet
2 ANI-100 Communi
3 Firmware Upgrading .
Part V Self Test Mode
1 Switch Settings
2 Error Codes
3 Test Descriptions ...
Configuration
Part VI Memory Expansion & Capacity
1 Standard Memory...
2 Memory Expansion sn
3 Memory Capacity
Part VIl Specifications
Part Vill Supplemental Figures
Part IX Table of Figures
Part X Revision History
57
soo ST
soo ST
60
62
71
73
5 2008 Apollo Security ncAAN-100 Hardware Manual
Index
(© 2008 Apolo Security he
74Part
Introduction
APOLLO
intelligent security solutions2 _AAN-100 Hardware Manual
a,
1 Introduction
‘An access control system provides a means to replace traditional key and lock systems, which are easy to
defeat because of the ease of copying of keys and use by unauthorized personnel. With electronic access
contol, the exact areas a person is able fo access as well as during what time is configurable through a
central control system. In addition to the power of greater control, a historical record is maintained which is
useful in the case of a system security breach or for other purposes including caloulating work time and
facility use costing
1.1 Overview
‘The AAN-100 Access and Alarm Network Controller forms the basis of a modular system for the
complete control and monitoring of a distributed processing access control system, integrated alarm
monitoring and remote device control and reaction. Typical use of the system is the control of site access
by control of door locking devices associated with card readers and PIN keypads and maintaining logs of
this access for later reporting,
The framework of the device network is all accomplished through connection to a host programming device
(PC computer with a database interface application), and to field devices that provide the actual functions of
the system (door control, alarm inputs, relay outputs, etc). The connections between the components of the
system can be made via a combination of RS-232, RS-485 and Ethemet TCP-UDP/IP connections,
depending on the function and the site considerations.
By supporting both centralized and distributed database operation, once the AAN-100 controller has
been programmed from the host device the controller and the connected field devices work independently
and only require connection to the host for live event monitoring and reporting of events to the database. All
the necessary information to carry out access decisions and other response functions of the system is
stored within the AAN-100's internal memory and does not rely on a constant connection to the host
‘computer. Downloadable field devices are available as well that do not require constant connection to the
contfoller to maintain functionality (e.g. Apollo AIM-4SL Downloadable Reader Interface). In this way,
possible to achieve three levels of database redundancy with Apollo Access Control Systems,
‘© 2008 Apolo Secunty ineIntroduction
* Supports up to 96 card readers (either directly to intelligent card readers, or via Apollo AIM/API reader
interfaces)
‘Supports four additional devices for status monitoring or alarm input/output for a total of 100 devices
Up to 1,300,000 Cardholders or 65,535 Events with 8 MB of RAM
‘Supports Input to Relay linking across field devices
Anti-Passback (Hard & Soft)
256 Access Levels / 128 Time Zones
2-Card Aocess and Zone occupaney restriction
2-Man Rule (Minimum occupancy)
‘Automatic Alarm masking/unmasking, Reader mode change, Output activation according to time zones
and/or inputs
Elevator Control w/ floor selection feedback
Field Device Connection: (4) RS-485/232 ports, max 9600 baud
+ Host Device Connection:
ASI+f Serial interface with (2) RS-485/232 ports, max 57.6K Baud
op * UP! 16 unique addresses possible on one comm. ine
© ANI-1/100 Network Interface device (TCP/IP via RU-45 jack)
* Available addresses limited by network addresses available
1.2. General Features
Diagnostic LED's (for normal operation and self-test mode)
8 Card formats per reader (depending on reader support)
Fiold-Replaceable plug-in communication drivers
32-Bit CMOS processor
Surface-mount manufacturing technology
(© 2008 Apolo Secu Ie:4 AAN-100 Hardware Manual
1.3 Programming Host
To establish operating configuration and to report events, the AAN-100 controller requires connection to a
software database interface program. Configuration options including cardholders are stored in a central
database and then transmitted via a proprietary encrypted protocol to the AAN-100. Once programmed, the
‘AAN-100 will continue to function without connection to the host. A record of all actions that happen while
there is no connection is stored in the memory of the AAN (limited by the capacity of the memory) for
reporting at a later time when connection with the host has been re-established
Apollo has designed the APACS software system to provide the closest integration possible to take full
advantage of the features of the AAN-100 controller. Full documentation on configuring the options of the
‘AAN-100 with APACS is contained in the documentation provided with the software.
Po.
Programming HOst
ait
=
AMASL, 10-168
Resoer ners Alem Panet Asa2 agneie Sipe
status Pane! Cad Reader
Figure 1.3 Programming Host Logical Diagram Typical System Layout with RS-485 Connections.
‘Several AAN-100 panels can be connected to one host on an RS-485 line using different device addresses.
Field devices on the same line must also have unique addresses.
{© 2008 ApOHo Secunty tePart
Hardware Layout
APOLLO
intelligent security solutions6 —_AAN-100 Hardware Manual
2 Hardware Layout
Mamary Boctup Baty Connection
°
SMM Merncr
radealahiay A ce scorn ae
Power Temper nd
Pot cc
it Oo}
fe)
Pot ° °
fe)
rot} oF swegyren
°e
8 be Sten
| ‘we
Removable Device
Pot bree Mesules
Figure 2.1.1 AAN-100 Diagram Terminal Connector, DIP Switch, SIMM Memory sockets, device port
driver connections, and other component locations are shown.
2.1 Terminal Connectors
The AAN-100 has one terminal block for connecting power, alarm inputs, and connection to field device
lines. The connection terminals are factory equipped with removable screw-down quick connectors which
are easily removed from the board by firmly grasping the connector and pulling away from the board. If
pliers are used to remove the connectors, they should be of the rubber-tippad type. Take care in using any
tools near the board not to damage on-board components. The proper location of the quick connectors is
outlined in white on the board
‘© 2008 Apolo Secunty ineHardware Layout 7
AAN-100 Terminal Connections
Position Type
Voltage In
Voltage Return
Label
Fun
DC Power Connection
Power Fault Input
Power Fault Input
Return
(ground)
3S piemnealonuy pos Cabinet Tamper Input
4 Tamper Input Return GND (Normally Closed)
Power Fault/Tamper Input
(Normally Closed)
Receive Data (+) R+
Receive Data (-) R
Transmit Data (+) T+ eee Tn
10 Transmit Data (-) T-
i Signal Ground SG
12 Receive Data (+) Rt
13 Receive Data (-) R.
14 Transmit Data (+) T+ Device roe eeton
15 ‘Transmit Data (-) T-
16 Signal Ground SG
17 Receive Data (+) Rt
18 Receive Data (-) R-
19 Transmit Data Device ie a
20 ‘Transmit Data (-) T-
21 Signal Ground SG
2 Receive Data (+) R+
23 Receive Data (-) R
4 Transmit Data (+) T+ Device bat
25 Transmit Data (-) T-
26 Signal Ground SG
Table 2.1 AAN-100 Terminal Connections.
2008 Apoto Secury Ie8 _AAN-100 Hardware Manual
DC Power Input
Cabinet Tamper Input
(Normally Closed)
Power Tamper input
(Nomatty Closed)
Device Port 3
Device Port 4
Device Port §
Device Port 6
oe tt hh
Figure 2.1.2 Location and Layout of Terminal Connectors.
{© 2008 ApOHo Secunty teHardware Layout 9
2.2 DIP Switches
The AAN-100 has two blocks of DIP switches, with 8 switches in each block. These switches are used to
‘sot various configuration options for the panel. The switches of SW/1 are used for configuring the baud rate
of device ports 3-6, and remain constant. The switches of SW2 set additional configuration options. Note
that the function of switches 4-8 on SW2 have a different function depending on the type of host connection
(Serial via ASI-1 or TCP/IP via ANI-1/100—see below for more information on host connection). It is
recommended to power the board down before making any changes in the DIP switch settings as any
changes will not take effect unless the power is cycled
SW1
Device Port
Baud Rates
(Refer to Table 2.2)
SW2
Panel Configuation
(Refer to Table 2.2)
Figure 2.2 Location of DIP Switches. S17 controls setlings for device port communication speed.
SW2 controls internal settings for the panel including host communication and operation mode.
(© 2008 Apoto Security Te2.2.2
10 | AAN-100 Hardware Manual
2.2.1 DIP Switch Tables
Port 4 Baud Rate
Port 3 Baud Rate
Switch # [4 5 6 8
1200 | OFF OFF
2400 | OFF
9600 ON.
ON.
ON’
(reserved)
sw2
COMMON (With ASI-1, ANI-1 or ANI-100) With - ASI-1 or
ANI-100
8-Controller Address
4Watchdog Timer 2-Cold Start 3-Self Test Range
Normal Normal
orF | Enabled | oFF ‘orm OFF | cheion| OFF | Range o-7
ON Disabled ON od Start ON | Test Mode ON Range 8-15
SW2 - With ANI-1 Installed
4-Dial Enable 5-Dial Mode 7-Broadcasts
8-Configure With
Broadcast
Disable Port 3 Ignore Broadcast Dont Send
OFF | ForDial | OFF While Online [OF | Broadcast
on | Enable Ports Dial Inifalize ‘Accept All
For Dial+ Mode
Broadcasts
ON | Send Broadcast
Note: With ASI-1 or ANI-100 installed SW2 positions 4-7 are not used
With ANI-1 installed SW2 position 6 is not used
Table 2.2. : DIP Switch Settings for SW1 and SW2
DIP Switch Function
connected to this port (See Part 3.4)
Baud Rate—Specifies the baud rate for the serial line of the specified device port
This setting must be the same for all devices on the communication line
©2008
78 AON Seu TeHardware Layout) 14
Watchdog Timer—ls a special circuit, which constantly monitors the processor
and automatically re-starts it should it stop.
OFF -- WOT Enabled. (default setting)
ON _-- WDT Disabled (used only at factory for testing/debugging purposes)
Cold Start—Specifies if AAN-100 will clear all memory during power-on
OFF —- Normal Start-previous configuration and events retained (requires
backup-battery to be installed (See Part 2.3.2) (default setting)
ON -- Cold Start--Alll information in memory is cleared during power-on
Self Test—Specifies whether to enter the AAN-100s special test mode
OFF -- Normal operation (default setting)
ON -- Enable Self-Test Mode (See Part 5 for test procedures)
Configure With Broadeast—The AAN-100, when equipped with ANI-1 Ethernet
Communication Interface, can obtain configuration using BOOTP requests. (See
Part 4.1)
OFF — Don't send broadcast (default setting)
ON -- Send configuration request broadcasts
Broadcasts—The AAN-100, when equipped with ANI-1 Ethernet Communication
Interface will accept broadcasts for obtaining configuration information during
operation. (See Part 4.1)
OFF -- Ignore all broadcasts while online (default setting)
ON — Accept all broadcasts
Dial Mode—Specifies whether the panel, equipped with ASI-1 Serial
Communication Interface, will initialize a dial sequence on Port 3 to obtain
configuration information. After initialization, the panel will operate normally when
set to run mode. This can only be used when "Dial Enable” is set to ON.
OFF - Dial Run mode (default setting)
ON -- Dial Initialize--panel will attempt to dial out to set configuration
Dial Enable—When enabled, Port 3 is set as a dial port for host communication
and not for field device use. (With ANI-1 Installed Only)
OFF -- Disable Port 3 for dial (default setting)
ON -- Enable Port 3 for dial
Controller Address Range—Configures the address ranges of the installed
ASI-1. See Part 3.3.1.1 for more information. (With ASI-1 Installed Only)
OFF -- Controller will use address range 0-7 (default setting)
ON - Controller will use address range 8-15
Table 2.2.1 : DIP Switch Function
2.3. Connectors
‘The AAN-100 has several connectors for interfacing with removable components. Take care when installing
land removing components in order not to damage pins or sockets. Do not use force greater than gentle
pressure when installing any components. Refer to the figure for the exact location of these connectors.
‘The connectors are also labeled on the AAN-100 in white lettering on the circuit board,
(© 2008 Apoto Security Te12 |_AAN-100 Hardware Manual
JW
Figure 2.3 Panel Connectors.
2.3.1 Device Port Communication Sockets
Device Port Communication Driver Sockets: J10, J12, J15, J17
For the functioning of Device Ports, 3-6, proper communication drivers must be connected to the
corresponding 12-pin sockets. The communication driver modules can be either ASM-48 (RS-485, part
number 430-131) or ASM-23 (RS-232, part number 430-132) depending on the type of communication
required on the port. The module should be installed so the long end extends towards the middle of the
circuit board and the mounting holes provided on the AAN-100 and ASM align so a plastic stand-off can be
attached to connect the holes.
{© 2008 ApOHo Secunty teHardware Layout) 43,
2.3.2 Memory Backup Connection
Memory Backup Battery Connection: J1
In the case of total power failure, the memory of the AAN-100 will be stored for up to 6 months (in basic
configuration) by power supplied by 3 AA (LR6) size batteries. A battery holder with connector is supplied
with the AAN. Install fresh batteries into the holder and connect the attached connector to the AAN,
‘observing the polarity. Connect the red wire to the bottom pin of J1 (denoted by a ‘+ stenciled on the board)
and the black wire to the top most pin. Batteries should be replaced every year.
Warning: Change batteries only with power connected to the AAN-100 or memory will be lost!
2.3.3 SIMMMemory Sockets
‘SIMM Memory Module Sockets: J2, J4, J7, J9
‘The AAN-100 has four 72-pin sockets which can contain any combination of AME-10 (IMB, part number
430-150) or AME-20 (2MB, part number 430-160) modules, for a maximum 8 MB of storage of card codes
and events. The sockets should be filed from bottom to top (J9, J7, J4, J2), with higher capacity modules
‘on the bottom. For details on memory usage and calculating the correct amount of memory for your
configuration, see Part 6: Memory Expansion & Capacity. Do not attempt to use standard PC SIMM
modules, only Apollo memory modules will function.
2.3.4 Host Interface Module Connector
Host Interface Module Connector: J18
‘The AAN-100 supports two types of interface modules for connection to a host:
AS1-1 Serial Interface (part number 430-130, requires 1 or 2 ASM modules) or ANI-1/100 Network
Interface. The required module is connected to the 64-pin J18 connector. The installation/removal of these
modules should be done with great care to avoid damaging the pins. Use a gentle side to side rocking
movernent to ease the module on/off the pins. When properly seated, the pins should protrude
approximately % (5 mm) from the surface of the module. The plastic stand-offs included with the module
should be installed in the corresponding holes to provide a guide for proper mounting,
2.4 LEDs
‘The AAN-100 has 7 LEDs for use in monitoring functioning of panel and for diagnosis of problems. The
LEDs function in three modes: startup, normal operation and test mode. Refer to the figure for exact
location of the LEDs. The LEDs are also labeled an the circuit board with white lettering,
(© 2008 Apolo Secu Ie:14 |_AAN-100 Hardware Manual
7, a,
—
D8 Power /"Heartbeat” ————
—,
2
D9 © Port 4 Status L_o
= ° °
p11 | Ports status “PE y Bi
D12 © Port4 Status
D13 © Port Status
D14 } Port 6 Status
Figure 2.4 AAN-100 LED Indicators. LEDs operate in either start-up, normal operation or test mode.
244 Start Up Mode
Immediately after powering on the panel, the start-up test wil initiate and the results will be displayed on the
LEDs. Ifthere are no failures, the test will progress ata very high speed which will not make it possible for a
person to observe all the tests. Ifthe panel encounters an error, it wll stop with the failed test and display
the LED sequence corresponding to that tast. The test sequence and the LED error codes are:
Port LED
7
Power Up/LED Test
Star/Host Port Detect
‘System RAM Test
ROM Test
Config RAM Init (Cold)
‘Config RAM Test (Warm)
(OS & APL Init ofr fore [orF
In the event of a failure in the system RAM test, Port LEDs 1-3 are used to show where the failure was
located:
{© 2008 ApOHo Secunty teHardware Layout) 45
Port LED
RAM Bank 1 2 3
Bank 1 (9) OFF OFF OFF,
Bank 2 (7) ON OFF OFF
Bank 3 (J4) OFF ON. OFF
Bank 4 (2) ON ON. OFF
Bank 4 (J9) OFF OFF ‘ON.
Bank 2 (7) ON OFF ‘ON.
Bank 3 (4) OFF ON. ‘ON.
Bank 4 (J2) ON ON ‘ON
Table 2.4. : AAN-100 Startup Mode LEDs
2.4.2 Normal Operation
After initialization and self tests, the LEDs will switch to normal operation and wil display information about
the panel operation,
Heartbeat (D8)—Shows a constant ‘heartbeat’ (0.2 sec ON, 0.8 sec OFF) to indicate proper operation
of the panel and firmware,
Port Status—Shows activity on the corresponding serial port. Ports 1 & 2 (D9, D10) represent the two
ports of the ASI-tor ANI-100; ifthe ANI-1 is installed, Port 1 LED will represent the host communication,
Ports 3-6 (D11-D14) represent the device ports. Normal activity on the ports will be observed as the
LED blinks many times a second or solid, depending on the amount of activity
2.4.3 TestMode
By placing SW2-3 in the ON position, the AAN-100 is placed in test mode. For a full description of running
tests and the LED responses, refer to Part 5: Self Test Mode.
2.5 Firmware
The operating program for the AAN-100 is stored in re-programmable flash memory._In the event that the
firmware must be re-installed or updated, no chips need to be replaced on the panel. The new program can
be loaded from the host via special software. For normal operation it is not necessary to update the
firmware. If this becomes necessary, refer to Part 4: Software Configuration Utilities. Firmware updating
should only be done under the recommendation and guidance of your Apollo technical support
representative.
2.6 Ad
ional Installation Information
2.6.1 Mounting Holes
Four holes are provided for mounting the AAN-100 (see Part 8: Supplemental Drawings for scale drawings
showing the exact location of the holes).
(© 2008 Apoto Security TePart
System Wiring
APOLLO
intelligent security solutionsSystemWiring 17
3 System Wiring
SPECIAL NOTI To guard personal safety and avoid damaging
equipment it is important to have a full understanding of electrical
wiring practices and safety. The following sections provide general
guidelines relating to the AAN-100, but are not a substitute for complete
training in dealing with electrical systems!
3.1. Power
Power is supplied to the AAN-100 by the voltage connection in the main terminal block (see Part 2.4 for
exact locations of terminals). The power connection should be 12-28 VDC. Power consumption is 300 mA
with ASI-tor ANI-100 and 400 mA with ANI. The AAN-100 is protected from over-current and
over-voltage by on-board circuitry.
Take care when selecting a power supply for use with the AAN-100. Most power supplies in the market
today provide good inpuvoutput isolation, however those which do not provide isolation (or have high
leakage capacitance), coupied with accidental AC power lines interchange, present serious ground fault
problems for installers. With ground fault, the signal reference between subsystems may be 145 VAc (230,
\VAc) apart. If these subsystems are interconnected, the large potential difference will cause equipment
damage or personal injury. Apollo recommends the use of isolated continuous power supplies only. All
Apollo supplied power supply assemblies are transformer isolated for safety and to minimize ground loop
problems.
In the case of over-current, solid-state fuses integrated on the AAN-100 panel will ‘trip’ to protact the
‘components of the panel. In many cases, the solid-state fuses will reset automatically when normal current
resumes, however it may be necessary to interrupt the supply of power to allow the fuses to resot.
3.2. Grounding
Special care should be taken when grounding the AAN-100 controller and other devices connected to it via
the direct communication lines. Each device must be grounded to provide ESD protection, personnel
safely, and signal reference for devices which communicate with each other. Grounding the reader provides
28 good shield against external transients. There are three types of circuit grounds in systems using Apollo
products: DC ground, RS-485 signal ground, and Safety (Earth) ground:
3.21 DC Ground
This is typically the minus (-) side of the DC output of the power supply. It is to be connected to the DC
{ground input of all devices being powered by one supply. It must not be connected in any way to any of the
5 RS-485 signals or the AC side of the line including Safety (Earth) ground (one connection to Safety (Earth)
round is acceptable, but this connection is usually internal in the host computer and should not be
inlroduced extemally if direct connection is used (RS-232/485)),
3.2.2 RS-485 Signal Ground (SG)
This is the Sth wire used for the RS-485 communications. It is used to provide a common reference
between all devices on the line and should only be connected to each of the devices’ SG input. The SG
wire must not be allowed to touch any other potential, especially earth ground. The shield drain wire of the
RS-485 communications cable is commonly used to connect the SG leads together. Usually this wire doos
rnot have an electrical insulator. Itis important that the SG wire is thoroughly insulated by the installer at all
connection points. Improper insulation of this conductor may allow accidental shorting to earth ground
through conduit or other metallic components, causing intermittent communications or equipment damage.
(© 2008 Apoto Security Te48 |_AAN-100 Hardware Manual
L“
3.2.3 Safety (Earth) Ground
Safety ground is part of the AC power system. To avoid ground loop current, there must be only ONE point
‘at which the safety ground connects to the DC ground.
‘The RS-485 signal ground must be isolated from the safety ground. This means that the RS-485 cable
shield drain wire must be insulated at connection points so that it will NOT accidentally short circuit to the
conduit in instances where the conduit is connected to the safety ground. (See Figure 117)
Please check the applicable regulations and legislation in your country prior to installing the AAN-100
controller and other Apollo products. In the US, the National Electrical Code, as well as other safety
regulations, require that all equipment chassis and/or enclosures be grounded in order to prevent electrical
shock hazards. Each device must have a green wire safety ground. The function of the green wire safety
ground is to provide a redundant path for fault currents and to insure that the circuit breaker will open in the
event of a fault. In addition, grounding the enclosure provides a path for ESD dissipation, thus protecting
sensitive electronic devices. (See Figures 115 and 116)
3.2.4 Grounding System
A grounding system can be viewed as two subsystems: the DC system and the Ground System. The DC
system consists of all interconnected power supply returns, DC distribution wiring, and load devices. The
principal function of the DC system is to provide signal reference for communication. The Ground System
‘consists of all chassis grounds for power supplies and other devices, safety grounds, and AC grounds.
Ground connection should be made to avoid ground loop problems. (See Figure 115)
Ideally, there should be ONLY ONE ground return point in a power supply system. In a system with a PC
(personal computer), it is likely that the PC already provides the DC Ground connection to the Ground
‘System (earth ground). Care must be taken NOT to create more ground connections. In systems with
multiple PCs communicating to Apollo Hardware via direct connection, the ground potential must be the
‘same for inter-connection, or some form of isolation must be provided
3.2.5 Grounding Potential Difference Checks Before Connecting
Before a device is connected to an RS-485 subsystem, it must be checked for ground fault. Uncorrected
ground fault can damage all devices connected to the RS-485 communication line.
To check if there is ground fault for a new unit, follow the steps below (See Figures 105, 113, 115, 116 and
120):
1. Apply power to all devices already successfully connected to the RS-
485 line
2. Power up the new unit, but DO NOT connect it to the RS-485 line.
3. Connect the signal ground (SG) of the RS-485 line through a 10k limiting resistor.
4, Measure the AC and DC voltage across the resistor. There should NOT
be more than 1 volt across the resistor. Otherwise find and clear the fault
8. Connect the new unit to the RS-485 line only ifno ground fautt is,
found
3.3. Host Communication Connection
‘The connection from the AAN-100 to the programming host (PC) is used for programming the panel and
then monitoring the status of the system. Once a connection is established, the host software
communicates with the panel and transmits the necessary configuration information. Once this is,
established, the host and panel will maintain a constant communication until itis terminated by the host.
While connected, the controller will send events in real-time after a request from the host. The controller will
not send information to the host unless a request is received. These events will be ‘buffered’ in the memory
‘© 2008 Apolo Secunty ineSystem Wiring) 19
of the controller until the host is ready to receive. Thus, all system events are protected and will not be sent
to a host that is not ‘listening’, therefore losing events.
‘The connection can be made either by serial connection using ASI-1 Serial Interface Module (part number
430-130-requires 1 or 2 ASM modules) or by Ethernet (using ANI-100 Network interface Module (part
number 430-110R),
noo
Host Connection Host Connection
Ethernet Serial RS-485
Via RU-45 jack
Figure 3.3 Host Communication Connection The host communication can be made either through
the ASI-1 Serial Interface or the ANI-1 Network Interface
3.3.1 Serial
Using the ASI-1 Serial Interface, the connection from the AAN-100 to the host can be made using RS-232 or
RS-485 protocols. The choice to use RS-232 or RS-485 depends on many factors for the particular
installation. The main differences are outlined below:
(© 2008 Apoto Security Te20 | AAN-100 Hardware Manual
RS-232 RS-485
Maximum Distance 50 Feet (15 Meters) 4000 Feet (1200 Meters)
Devices Per Line 1 16 (Maximum Number of
unique addresses for AAN-100
with ASI-1)
Communications Port ‘Standard on Many PCs Requires Adapter (RS-232 to
RS-485) or Add-on PC Card
Data Rate 20K bps 10Mbps
Table 3.3. : RS-485 and RS-232 Features.
After choosing the method of communication, the proper wiring must be made from the host to the
controller. Typically, the communication will be from a standard 16550 UART COM-port on a PC which will
be connected directly to the AAN-100 in the case of RS-232 or through the use of an adapter or add-on PC
card to achieve the RS-485 signal. The communications wiring must cross-over from the PC to the panel as
shown in Figure 3.4.1.2
‘The connection originating from the host PC will then be connected to the port on the ASI«1 (see Figure ).
Port 4 of the ASI is the primary communication path to the host. Ensure that the DIP switches of the ASI are
correctly set (see Appendix B) and that the proper communications driver is installed (ASM-48, part number
430-132, for RS-485, ASM-23, part number 430-131, for RS-232). When communication is initiated by the
host, activity will be seen on the respective port activity LEDs (D9 for Port 1, D10 for Port 2 ~- see fig. 2.4.
The blinking rate of the LED will vary at first as communication is established and configuration is updated,
and then should blink at a steady rate of several times per second.
{© 2008 ApOHo Secunty teSystem Wiring 24
Ease
SG Tx Rx Tk Rx SG
25.Pin COM Port Connector
‘-Pin CoM Port Connector am nartce
Figure 3.31 Host to AAN-100 Serial Wiring Pinouts. The wiring from the host to the panel must be
done according the type of host port (RS-485 or RS-232--9-pin or 25-pin) and then properly connected to
the ASI-1 port
3.3.41 ASH
3.24.1. Introduction
The ASI-1 (Part # 430-130) Serial Interface Module for the AAN-100 provides connectivity between the
‘AAN-100 and a programming host (PC) via RS-485 or RS-232 serial communication. The ASI has two
serial ports with port 1 being the primary communication path with the capability for a modemidial
connection and port 2 available as a secondary communication port or local printer connection.
334.12 Hardware Layout
(© 2008 Apoto Security Te22 |_AAN-100 Hardware Manual
FORT Comecar
jth modem connection)
2 ASI-1 Hardware Layout
j2 Connection
Fon?
Gonm
Sever
ASI-1 Terminal Connections
11 Receive Data (-
42 Transmit Data (+)
13 Transmit Data
14 Signal Ground
Positior Type Label Function
1 Receive Data (+) Re
2 Re Device Port Connection
4 Port)
5 Signal Ground SG
6 Data Terminal Read’ DTR
7 Data Signal Ready DSR Modem/Dial Connections
8 Ring Indicatior RL (Port 1)
9 Carrier Detect cD
10 Receive Data (+) RX+ Device Port Connection
(Port 4)
Table 3.3.1: ASI-1 Terminal Connections
{© 2008 ApOHo Secunty teSystem Wiring, 23
3311.21 DP Su
The ASI-1 has two DIP switch blacks. $1 controls functions for port 1 and S2 controls functions for port 2.
The functions of the DIP switches are the same for all configurations, with the exception of SW/1-2, 3 which
have different functions, depending on the setting of SW1-1 (DialDirect Connect selection).
s1 st
Port 1 Baud Rate ASE Device Address
Switch # 4 5 6 7 8 Switch Number
Standard | Nerwork or | orr | oF 0
Mode | Mode
owes orr | ofr | on 1
oxorros
1200 | 115.2K | OFF | OFF OFF | ON | OFF 2
(Network or | on | on 3
Protocal
on | om | or 4
2400
(Serial on | or | on 5
Protocob ow pow Por 3
9600 9600 on OFF
(Serial ON ON, ON 7
Protocol) Note: If address range is set to 8-15 (AAN-100 $2-8 ON)
57.6K 57.6K on ON add 8 to obtain correct address
(Serial
Protocob
Si
Port 1 Communication Mode
Switch # 1
OFF Direct Connection
ON Dial
S1-Port1
Direct Connect Dial
‘Communication Type Flow Control ‘Modulation Type Dial Mode
2 Switeh # 3 Switeh # 2 Switeh # 3 Switch #
TS not Dial Roa.
OFF Rewuied oFF | FullDuplex | OFF cent OFF Moke
cts Dial
On | required for] ON | Half Duplex | ON Bell on Initialize
1X Mode
(© 2008 Apoto Security Te24 | AAN-100 Hardware Manual
Note: S2- Switch 1 is not used
Table 3.3.1.1 : ASI-1 DIP Switch Table
s2 2
Port 2 Baud Rate ROME MGAIey
— 677] 8] Switch
Switch # 4 5 Number
Standard Mode | Newerk Mode or lorlorl Disable
(ON OFF ON) Host
1200 152K ofr | oFF orr | orr | ow |Communicati
(Nevwork on
Protocol) Tocal
2400 2400 ofr | oN orF | ow | or | Printer-LOC
Gerial Protocot) AL
9600 9600 on | oFF Local
Gerial Protocol) ore | on | on | Printer-FUL
57.6K 57.6K on | oN L
Gerial Protocot) oN | orr | orF | (reserved)
Network
s2 |Communicati
on Mode
Port 2
on Jorr| on | Porttor
Handshake Mode Port2)
Switch Switch N00
OFF | CiSact Required | _OFF_| _ Full Doplex Firmware RZ and
on | CTSrsawired fr Tox | rat Duplex on [on [ore] (reserved)
; ‘oN [oN | on | (reserved)
{© 2008 ApOHo Secunty teSystem Wiring) 25
Baud Rate—Specifies the baud rate for the serial line of the specified device port. This must
match the setting made in the programming software. If an ENI-100 network device is used on
either port, Network Communication Mode should be enabled (SW2-6-9 ON OFF ON) and the
baud rate should be set to 115.2K. When set at this speed, the port will use the network protocol.
Atall other speeds, the serial protocol will be used, even when the ASI is set for Network.
Communication Mods. Thus, the ports can be set independently with one port communication
Serial and the other communicating network.
Device Address—Specifies the address at which the AAN-100 will be found on the serial
communications line. For RS-232 operation, this setting will normally be 0 as only one device may
be attached to one RS-232 line. For RS-485 the address can be set to any unique address on the
line. if SW2-8 on the AAN-100 is OFF, the address will be from 0-7, depending on the switch
settings. If SW2-8 on the AAN-100 is ON, the ASI-1 will use the address range 8-15. If either port
of the ASI is sot for Network Communication Mode, the device address will be ignored for that
port.
‘Communication Mode (Port 1)—Sats whether port 1 will be used as a direct connect (normal
operation on RS-232 or RS-485 line directly to PC host) or dial mode (connected via modem to
PC host),
‘Communication Type—Selects either full duplex (RS-485 4-wire) or half duplex (RS-485 2-wire,
RS-232) line communication. Direct Connect mode must be set to on for this function.
Flow Control—Specifies whether CTS (Clear To Send) signal is required for communication to
begin. This is normally used only with RS-232 communication. Direct Connact mode must be set
to on for this function,
Dial Mode—When enabled, the panel will wait for an incoming call from the host, answer it after
the first ring to obtain configuration information. After initialization, the panel has to be set to Run
Mode to operate normally. Dial Mode must be set to on for this function.
Modulation — Selects the modulation type for modem connection. CCITT should be selected for
most configurations. Dial Mode must be set to on for this function.
‘Communications Mode (Port 2)—Defines the operation for port 2. Valid options are: disabled
(port has no function), host communication (port is used as a secondary port for
programming/reporting with programming host), local line printer port (see Part 3.6).
Table 3.3.1.1 : ASI-1 DIP Switch Functions
33.41.22 Connectors
For the functioning of Host _Ports, 1 and 2, the proper communication driver must connected in the
corresponding 16-pin socket. The communication driver module can be elther ASM-48 (RS-485) or ASM-23
(RS-232) depending on the type of communication required on the port. The module should be installed so
the holes provided on the ASI-1 and ASM align so a plastic stand-off can be attached to connect the holes.
The ASI-1 connects to the AAN-100 via the 68 pin socket of J1. The ASI-1 should be attached to the
‘AAN-100 with the bare side down (connectors and DIP switches visible). The installationlremoval of these
modules should be done with great care to avoid damaging the pins on the AAN-100, Use a gentle side to
side rocking movement to ease the module on/off the pins. When properly seated, the pins should protrude
approximately %" (5 mm) from the surface of the module. The plastic stand-offs included with the module
should be installed in the corresponding holes to provide a guide for proper mounting,
3.3.2 Network
For connection from the host to the AAN-100, either the ANI-or ANI-100 Network Interface Module should
be used, The ANI acts as a standard Ethernet network device and occupies one IP address (see Part 4 for
programming instructions). The connection from the ANI to the network is made by a standard RJ-45 jack.
Astandard CATS cable should be connected from the ANI to the local network via a network switch, hub or
other network connection device. The ANI-1 communicates at 10Mbps with the TCP/IP protocol. The
(© 2008 Apoto Security Te26 | AAN-100 Hardware Manual
ANI-100 communicates at 10 or 100Mbps via TCP/IP. The IP address of the ANI should be specified in the
host software and the host will initiate communications with the ANI, which will translate the messages to
the AAN-100.
Routing with ANI: If the ANI has an IP address that is not on the same subnet as the host computer, there
is no need to program a gateway in the ANI as it does not originate communication. If the proper network
path is established from the host to the ANI, (including necessary gateways) the ANI will receive the
‘communication from the last router or gateway in the path. This router or gateway will deliver the message
to the ANI with the IP address of the host computer, but with the router or gateway’s own MAC address.
The ANI will reply to the IP of the host computer, but directed to the MAC address of where the message
‘originated (the router or gateway). The reply will then be sent by the router or gateway on the correct path
back to the host
3.3.24 ANH
39.2:1.4 Introduction
The ANI-1 Network Interface Module provides connectivity between the AAN-100 and programming host via
TCPIIP interface. The ANI-1 converts the output signal from the AAN-100 to TCP/IP packets and converts
incoming packets, received from the host, into the proper signal
33212 Hardware Layout
Russ,
Etnemet
‘Jack
100 CO
7 Davios Connection
(Wo AN controfer)
Status LEDS
ure 3.3.2.2 ANI-1 Hardware Layout
3324.24 Jumpers
‘The ANI-1 has 2 factory-set jumpers which should not be modified:
4: Open (no jumper attached)
J2: Closed (jumper attached)
{© 2008 ApOHo Secunty teSystem Wiring, 27
332122 RUAS Jack
‘The AN1-1 has 1 jack (P2) for Ethemet connection via an RU-45 connector.
3.221.23 Host interlace Connector
The ANI-4 connects to the AAN-100 via the 68 pin socket of J1. The ANL1 should be attached to the
‘AAN-100 with the bare side down (connectors and LEDs visible). The installationiremoval of these
modules should be done with great care to avoid damaging the pins on the AAN-100. Use a gentle side to
side rocking movement to ease the module on/off the pins. When properly seated, the pins should protrude
approximately %" (5 mm) from the surface of the module. The plastic standoffs included with the module
should be installed in the corresponding holes to provide a quide for proper mounting
332124 LEDs
Three LEDs are provided on the ANI-1 for diagnostics
POL (yellow}—Indicates reversed polarity on the Ethernet connection when illuminated,
ACT (green}—Indicates activity on the Ethernet link
LINK (green)—Indicates a LINK on the Ethernet connection
3.3.22 ANI-100
332.24 Introduction
‘The ANI-100 Network Interface Module provides connectivity between the AAN-100 and programming host
via TCP/IP interface at 100Mbps. The ANI-100 converts the output signal from the AAN-100 to TCP/IP
packets and converts incoming packets, received from the host, into the proper signal. The ANI-100 is
similar to the ASI-1 with the difference being port 1 is replaced with an ENI Network Communication Device.
Note: To use the ANI-100 with the AAN-100, the AAN must have firmware revision R2 or later.
33222 Hardware Layout
a
°
A HE
Boyce mB «|
g
fe) he
aaa
ABN contr
Figure 3.3.2.1: ANI-100 Hardware Layout
(© 2008 Apoto Security Te28 | AAN-100 Hardware Manual
ANI-100 Terminal Connections
Type Label Function
1 Receive Data (+ RXt
2 Receive Data () RX
3 Transmit Data (+ TX# Device Port Connection
4 (Port 2)
5 Signal Ground SG
Table 3.3.2 .2: ANI-100 Terminal Connections
33.2221 DIP Swiches
‘The ANI-100 DIP switches are identical to those of the ASI-1 except the following changes.
‘These switches must be set as shown to enable network mode:
sw2 SW
Port Mode Port 1 Baud Rate
6 7 8 Switch Number Switch # 4 5
Network 115.2K OFF OFF
on | oFF | oN | Communication (Network
Mode Protocol)
‘The following switches have no funetion for the ANI-100:
NOT USED
Si 1,2, 3,6, 7,8
33.2222 Connectors
‘On the ANI-100, port 1 is an ENI Network Device. Port 2, functions separate and the proper communication
driver must connected in the corresponding 16-pin socket for operation. The communication driver module
can be either ASM-48 (RS-485) or ASM23 (RS-232) depending on the type of communication required on
the port. The module should be installed so the holes provided on the ANI-100 and ASM align so a plastic
stand-off can be attached to connect the holes
‘The AN1-100 has 4 jack for Ethernet connection via an RJ-45 connector.
‘The ANI-100 connects to the AAN-100 via the 68 pin socket of J1. The ANI-100 should be attached to the
‘AAN-100 with the bare side down (connectors and DIP switches visible). The installationiremoval of these
modules should be done with great care to avoid damaging the pins on the AAN-100. Use a gentle side to
side rocking movement to ease the module on/off the pins. When properly seated. the pins should protrude
approximately ’° (5 mm) from the surface of the module. The plastic stand-offs included with the module
should be installed in the corresponding holes to provide a quide for proper mounting
{© 2008 ApOHo Secunty teSystem Wiring, 29
3.4 Field Devices Communication Connection
The connection from the AAN-100 to fiold devices is used to transmit requests and information from card
readers and alarm monitoring devices to the controller and for the controller to transmit responses to these
messages. The AAN-100 originates all communication on the device communication lines, thus the field
devices hold any messages they have to transmit until they receive a poll from the controller. The first
‘communication from the controller establishes the presence and proper functioning of the field device, and
then the configuration is subsequently sent in the following polling cycles. This polling is done many times a
second, with the exact parameters for polling (intervals, timeout, retries) being set by the host software.
3.4.1 RS-485 Communications Line
The typical connection for devices on the four device ports of the AAN-100 is through an RS-485 serial
‘communication line. First, the device port must have a communications driver installed in the corresponding
socket (see Part 2.3). For RS-485, the ASM-48 Communications Driver module is required. If it is
necessary to use RS-232 to connect a device to the AAN-100, contact your Apollo technical support
represeniative for more information.
Overview: The RS-485 standard is an electrical interface for multi-point communication on bus transmission
lines. It allows high speed data transfer over extended distance (4000 ft, 1219 m). Unlike the RS-232C or
current loop interfaces, the RS-485 interface allows multiple devices to communicate at high data rates on a
single cable, over long distance. Obviously, the RS-485 interface provides advantages in cost saving for
installation and improved system performance, but it also brings about issues which would not commonly
be seen on systems using RS-232C or current loop interfaces.
Bus Configuration: Communication cables for RS-485 should be laid out in a "Bus topology". This means
that there should only be two ends to the line and devices should be located directly along this line or (as an
exception) on short drops coming from the main line (10 feet max.). The AAN-100 can be located at any
point along the line (See Figure). Long stubs (T connection) should be avoided because they create
discontinuities and degrade signals. DO NOT connect devices in ‘star’ configuration. A star connection
creates long stubs and causes difficulty in cable termination. The maximum number of slave devices on
‘one RS-485 communications bus Is 32. Each field device must have a unique address, and all the devices.
must use the same baud rate, typically 9600bps (both set by the device's DIP switches, and should have the
‘same corresponding settings in the host software).
Signal Ground: Using long communication cable with multiple devices often necessitates powering devices
from different power sources. This can result in ground faults, which can cause communication problems
and possible equipment damage. Because the RS-485 interface communicates in the base band and
provides no DC isolation, ground fault places devioas at different electrical ground levels and causes large
{ground currents to flow. ‘The possibility of ground fault makes it necessary for careful system planning and
installation verification. The signal ground (SG) provides a common mode signal reference for the
‘communicating devices. Each device must connect its SG to the cable shield drain wire. Failure to use the
‘SG connection may cause communication error. If the environment is known to be electrically noisy, an
additional wire may be used for the signal ground, and the shield can be then grounded as an electric noise
shield
Termination: Longer communication cable can also create noise and signal reflection problems if proper
cable is not used or if the cable is not correctly terminated. Therefore, RS-485 must be terminated at both
ends. Terminating the line provides more reliable communication by minimizing signal reflection and
external noise coupling. The factory recommends AC termination to minimize DC loss. Terminator
assemblies with screw terminals (ATM-48, P/N 470-030) are recommended for installation convenience.
Device Wiring: Typical RS-485 consists of four wires: Positive Receive (R+), Negative Receive (R-),
Positive Transmit (T+), Negative Transmit (T-), and Signal Ground (SG). The AAN-100 will serve as
“Master” on the line and the other field devices as “Slaves”. There can only be one master per line. The
transmit lines of the MASTER device are connected to the receive lines of the SLAVE devices and the
receive lines of the MASTER device are connected to the transmit ines of the SLAVE devices.
(© 2008 Apolo Secu Ie:30 | AAN-100 Hardware Manual
correct
INCORRECT
Figure 3.4.1.1 RS-485 Bus Configuration. The RS-485 communication line must be laid out in a
daisy-chain wiring patton. Avoid wiring devices in a ‘star’ configuration to avoid reflections and termination
problems.
{© 2008 ApOHo Secunty teSystem Wiring) 34
AAN-100
Field Devi Field Device
Figure 3.4.1.2 RS-485 Device Connections. The AAN-100 serves as the master on the line and the
field devices are slaves. The receive lines of the master are wired to the transmit lines of the slaves, and
the receive lines of the slaves are wired to the transmit of the master.
(© 2008 Apoto Security Te32 |_AAN-100 Hardware Manual
3.5 General Alarm Inputs
‘The AAN-100 provides two alarm inputs. The wiring to both inputs should be made with twisted pair 24
AWG wire. If these inputs are not used, they should be ‘jumpered’ using a 1” (25 mm) long piece of wire
Cconnacting the two terminals to form a closed circuit. This will prevent an alarm condition being reported to
the host
Cabinet Tamer Inout
{normally closed)
Power FaultTamer Input ("Op
(normally close) =f
Figure 3.5 AAN-100 Alarm Input Connections The inputs on the AAN-100 are both normally closed
contacts and must be ‘jumpered’ to prevent an alarm condition if not used,
3.5.1. Power Fault
Power Fault
This input is designed to be connected to an output on a suitable power supply that will open the circuit
when a problem is detected with the AC power supply and the power supply switches to battery backup.
This is a normally-closed contact (must be a full circuit to avoid alarm condition).
3.5.2 Cabinet Tamper
Cabinot Tamper
This input is for connection to a switch located on the cabinet in which the AAN-100 is installed to detect
unauthorized access to the panel. This is a normally.closed contact.
{© 2008 ApOHo Secunty teSystem Wiring, 33
3.6 Local Printout
Port 2 of the ASI-1 may be configured as the Local Line Printer port for real-time print-outs of messages
processed by the AAN-100, An ASM-23 module must be installed in the corresponding socket on the ASI-1.
The DIP switches on SW2 located on the ASI-1 provide baud rate selection and handshake options, as
well as a choice of printout format (full or local). See Part 3.3.1 for DIP settings for the ASI-1
‘The FULL description is defined within the host software. The use of FULL requires a download from the
host, thereby reducing available memory space for event and cardholder storage. The LOCAL event point
description is its physical address, e.g. READER number, or ALARM PANEL number and ZONE number.
For wiring details see Supplemental Figures
(© 2008 Apolo Secu Ie:Part
Software
Configuration
Utilities
fia intelligent security solutionsSoftware Configuration U
4 Software Configuration Utilities
The software utilities described in the following section can be downloaded from the Downloads page of the
‘Technical Support section of the Apollo Security website,
Apallo's website can be found at http:/iwww.apollo-security.com
For further questions regarding obtaining these utilities, contact your Apollo support representative,
4.1 ANI-1/100 IP Programming
‘The ANI-1 and ANI-100 each occupy one IP address in order to connect to the network and to the
programming host.
ANIA
‘The address of the ANI+1 can be set using the InitAAN software utility
ANI-1 Default Settings
IP Address: 192.168.10.206
ANI-100
‘The address of the ANI-100 can be set in three ways: The InitAAN software utility, the intemal web pages,
or the intemal Telnet server. For ease of setup, using InitAAN is recommended,
In addition to IP address programming, additional security features can be enabled on the ANI-100 to
protect from unauthorized use. The default password is blank and should be changed on first use to
Prevent unauthorized configuration of the device. This can be done through the Web Page or Telnet
‘setup. Additional security seltings can be performed via the Web and Telnet setup only. These include
isabling Web Page setup, disabling Telnet setup and enhanced password. For more information see the
following sections on Web and Telnet configuration.
ANI-100 Default Settings
IP Address: 192.168.10.177
www username:
www password:
telnet password:
telnet port: 9999
(© 2008 Apoto Security Te36 | AAN-100 Hardware Manual
4.1.1 InitAAN
NOTE: In order to use the InitAAN utility for programming the ANI, ensure that you have the latest
version which is available on Apollo's website at http://www.apollo-security.com. Older versions of
InitAAN may not support programming the device.
This method can be used to program the ANI-1 and ANI-100.
1. If programming an ANI-1, the DIP switches of the AN controller where the itis installed must be set
SW2-8 and SWV2-7 to the ON position and then connect power to the AAN controller. If programming the
ANI-100, skip this step.
2. Run the INITAAN.EXE program. A dialog box will display instructions for programming various devices.
Clicking will continue to the main screen,
3. There are two methods for programming the ANI using InitAAN. In most cases, MAC Address Selection
will produce the best results.
MAC ADDRESS SELECTION (Preferred Method)
It is not necessary to use the "Search” function for this method. Depending on the network, devices that can
be programmed may or may not be accessible using search.
4) First, enter the desired parameters. For the ANI-100, only the IP Address can be configured using
this utility (all other parameters must be configured using the web page or Telnet). For the ANI-1 Host IP
Address, Host Address Mask and Alternate Host IP address can be specified to restrict addresses that
will be able to communicate with the ANI-1
b) Click "Enter MAC" which will prompt for the MAC address of the device to be programmed. The MAC
address can be found on a sticker attached to the ANI device.
) Click "OK" and then confirm the device to be programmed. InitAAN will program the device.
4) Confirm programming by accessing the device at the new address using a web browser or Telnet
(ANI-100) or using the Ping utility (ANI-100 or ANI).
{© 2008 ApOHo Secunty teSoftware Configuration Utilities
on
EI
3. Chek "OK"
37
15 2008 Apolo Security ine38 | AAN-100 Hardware Manual
DEVICE SEARCH SELECTION
a) Click "Search" to display devices on the local network. If the desired device does not display in the
list, it may be possible to program the device using the MAC Address Selection method described
previously.
b) Select the device that should be programmed by clicking on it in the list. Devices can be identified by
their existing IP address and/or MAC address. To positively identify a unit, compare the MAC address in
the list with the address printed on the identification sticker on the device.
©) Enter the desired parameters. For the ANI-100, only the IP Address can be configured using this
utility (all other parameters must be configured using the web page or Telnet). For the ANI-1 Host IP_
Address, Host Address Mask and Alternate Host IP address can be specified to restrict addresses that
willbe able to communicate with the ANI.
¢) Confirm programming by accessing the device at the new address using a web browser or Telnet
(ANI-100) or using the Ping utility (ANI-100 or ANI-1).
‘© 2008 Apolo Secuniy ineSoftware Configuration U
=
4, Additional devices can be programmed by repeating the above steps. To exit the program, click “Cancel”
(NOTE: The PC which is running InitAAN and the network hardware (switch, router, etc) must be configured
to allow network broadcasts in order to be able to communicate with the ANI and other programs to allow
programming. if one or more parts ofthe network does not allow broadcasting it may not be possible to
‘configure devices using InitAAN.
41.2 Web Page
This method can be used for programming the ANI-100 only.
In most cases, the IP address will need to be set using the configuration software as explained in the
previous section. In some cases, it may be possible to use the web page for configuration, for example to
make a modification to a previously configured ANI-100. if you are unable to connect to the web page. it wil
not be possible to set the IP address in this manner.
To use the web page to configure to the IP address, the IP address of your computer must be on the same
network as the IP address of the ANI. For the defaults in the ANI-100 (IP Address =192.168.10.177) the
‘computer's IP address would have to have the first 2 octets the same (192, 168.x.x) for class B addresses.
and the first 3 octets (192.168. 10.x) for class C addresses,
To change the IP address, first type the default address: “http:/192.168.10.177" into the address field of.
your browser and press to display the login screen (see the Defaults section for default addrass for
all devices)
(© 2008 Apolo Secu Ie:40 | AAN-100 Hardware Manual
Lt
‘The default user name and password are blank, so unless a username/password was previously specified,
simply click on "ENI Configuration” to prooged to the main configuration screen.
ENI-100 Configuration
‘Apollo Technical Support
Telophone: (908) €52 @178
Username a PeenGun) 082 bare
[email protected]
Shi corioweton ‘oops Hesttet |
{© 2008 ApOHo Secunty teSoftware Configuration Utilities, 44
‘The main configuration screen shows a variety of options for the ANI-100. To change the IP address of the
devices, type the desired address into the appropriate boxes. Remember that the new IP address should be
available from your network in able to be abie to access this web page configuration screen again. NOTE It
is highly recommended that the default user name/password should be changed on first use to
‘secure the device from unauthorized use!
eG Yow Hy Enis Ts
SD BQ AB [Crwinevercommmt YO [Cr cermsierrarn |
iP Adress: fie fee fo eo
"ht Eat * evo [——]
‘wn nal: Name cio Pasovor
Bau Rae: soon @ 1s © sremo C em ©
Enron: fo vor at [aT
Host P Ades: fe fee fo) fe Hest Poa: [OT
e
atoway Adios: a
Esp aS
(© 2008 Apoto Security Te42 |_AAN-100 Hardware Manual
In order to complete the programming with new settings, itis necessary to reboot the ANI. A screen will
display to allow reset by clicking the "Reset ENI" button. A status screen will be displayed while the ANI
resets and when compiated, the ANI will use the new settings. Note that if the IP address was changed it
will be necessary to enter the new address in the browser address bar in order to access the web page
configuration again.
ENI-100 Configuration
Reset the ENT-100 for the new settings to take effect ba
Time zon)
Reset_ENI zz
‘F008 2007 Apote Seaury
‘© 2008 Apolo Secunty ineSoftware Configuration U
BD BO @ [bi weostse106.10.20 0 f
‘Please wait while the configuration is saved...
The ENI-100 will reboot in order for the changes to take effect.
st
qd
{If you changed the IP address or WEB Server Port, ?
please point the browser to the new IP address with the correct, pl
WEB Server Port to continue using the web based configuration manager. ¥
41.3 Telnet
(is method can be used for programming the ANI-100 only.
To configure the ANI using Telnet, connect to the internal Telnet server of the ANI-100 using a Telnet client
Using port 9999. Using the configuration menus (Menu 0 for Server Settings), change the network setup
values to the desired settings.
‘The correct syntax for command line telnet to access the ANI-100 with default configuration
is:
telnet 192.168.10.177 9999
This specifies to connect to address 192.168.10.177 on port 9999. Make sure to use the
correct default address for your device and use a computer on the same network as the
ANI
NOTE: Once a password has been specified for Telnet access the correct password must be entered within
5 seconds of opening the telnet session or the connection will be closed. Passwords are case-sensitivel!
Upon successful connection to the ANI, the current configuration will be displayed:
ENI-100/110
MAC address 00204A92AB82
software version VL.02 (070416)
‘AES Encryption
(6101_XPTEX
15 2008 Apolo Security ine44 | AAN-100 Hardware Manual
Passvo
Press Enter for SetupMede
*+shasicparanaters
Hardaze! Ethernet TET
qPadir 192.168.10.215, nogateway set natmask255.255.255.0
Telnet configpasswrd set
sscouity
sup is enabled
SNMP Community Name: public
Telnet Setup is enabled
TFTPDowmlcad is enabled
Port 77HEhia enabled
WebServer is enabled
WebSetupis enabled
ECHis disabled
Eraypticnis disabled
Enhanced Fasgwordis disabled
seanbesnnsnnnees harpal | teettnateatnasaet
Baudrate 9600, I/FMode 4C, Flow 00
Port 03001
UDP is used.
Remote IPade? 192.168.10.202, Port 03001
CeUperformance : Standard
Change Setup:
OServer oonfigaration
‘Lchamel 1 configuration
éseourity
Teactorydetalts
Bexitwithast save
Seaveandexit Yourchoioe?
‘The configuration can be changed by using the menu items 0, 1 and 6. After configuration has been
changed, menu item 9 will exit he configuration and save changes. Selection 8 exits the configuration
without saving any changes keeping the previous settings.
SECURITY SETTINGS
‘The following security settings can be changed only using the Telnet menu (option 6-Security). These
options should be used to increase security of the ANI-100 by restricting changes to the configuration. For
options, (N)=No and (V)=Yes, pressing sets the default value as noted in parentheses.
Disable SNMP (N) ? - Enable/Disable Simple Network Management Protocol
configuration.
‘SNMP Communit
Name (publi
+ Restricts the SNMP community to the specified name.
Disable Telnet Setup (N) ? - Enable/Disable Telnet setup (takes effect after saving
changes and exiting the current telnet setup session),
Disable TFTP Firmware Update (N) ? - Enablo(Disablo firmware update by TTP.
‘© 2008 Apolo Secunty ineSoftware Configuration U
Disable Port 77FEh (N) ? Enable/Disable detection port for the configuration software. If
disabled, the software will not be able to auto-detect the device.
Disable Web Server (N) ? - Enable/Disable web configuration pages.
Disable Web Setup (N) ? - Enable/Disable configuration by web pages.
Disable ECHO ports (Y) ? - Enable/Disable echo of characters received on the serial port.
Enable Encryption (Y) ? - See Encryption Configuration
Key length in bits (128): - See Encryption Configuration
Enable Enhanced Password (N) ? - Enable/Disable 16 character password support. If
disabled, the password length will only be 4 characters.
Disable Port 77F0h (N) ? - Enable/Disable advanced configuration port.
NOTE: If Telnet Setup, Web Server/Setup and Port 77FEh are all disabled, remote
configuration will be completely disabled and no changes can be made to the device
ssettings!! Configuration will only be able to be changed by resetting the device.
(© 2008 Apoto Security Te46 |_AAN-100 Hardware Manual
L“_}
4.2 ANI-100 Communication Configuration
‘Ones the IP address of the ANI-100 is setup, communication configuration can be done with a web browser
via the ENI's internal web server. For setting additional security parameters, the ENI-100 software manual.
To open the web page configuration, type the IP address of the ENI in the address bar of your web browser.
Do not preface the address with "www". You should see the following soreen where the username and
password must be entered. The default username/password is blank, thus if it was not previously mocified,
simply click on “ENI Configuration” for basic configuration.
fe Eat view History Bookmarks Too Heb
> BOQ wiewnsmem SSS
Sveti
‘Apollo Technical Support
‘elaphone: (949) 002 0178
ne | pent
cm
Sion Coe Hest ;
{© 2008 ApOHo Secunty teSoftware Configuration U