Johnson Controls P2000 Manuale utente

VPN/DSL Security Option

Installation Manual

P2000

Security Management System

April, 2012

24-10618-155 Revision A

P2000

Security Management System

VPN/DSL Security Option

Installation Manual

April, 2012

24-10618-155 Revision A

Security Solutions

(805) 522-5555

www.johnsoncontrols.com

Johnson Controls, Inc.

No part of this document may be reproduced without the prior permission of Johnson Controls, Inc.

Acknowledgment

Cardkey P2000, BadgeMaster, and Metasys are trademarks of Johnson Controls, Inc.

All other company and product names are trademarks or registered trademarks of their

respective owners.

If this document is translated from the original English version by Johnson Controls, Inc., all

reasonable endeavors will be used to ensure the accuracy of translation. Johnson Controls, Inc.

shall not be liable for any translation errors contained herein or for incidental or consequential

damages in connection with the furnishing or use of this translated material.

Due to continuous development of our products, the information in this document is subject to

change without notice. Johnson Controls, Inc. shall not be liable for errors contained herein or

for incidental or consequential damages in connection with furnishing or use of this material.

Contents of this publication may be preliminary and/or may be changed at any time without any

obligation to notify anyone of such revision or change, and shall not be regarded as a warranty.

Declaration of Conformity

This product complies with the requirements of the European Council Electromagnetic

Compatibility Directive 2004/108/EEC and the Low Voltage Directive 2006/95/EEC.

This equipment must not be modified for any reason and it must be installed as stated in the

Manufacturer’s instruction.

If this shipment (or any part thereof) is supplied as second-hand equipment, equipment for sale

outside the European Economic Area or as spare parts for either a single unit or system, it is not

covered by the Directives.

UNDERWRITERS LABORATORIES® COMPLIANCE VERIFICATION SHEET

P2000 or P2K SYSTEM

Page 1 of 3

This product is listed under Underwriters Laboratories UL™ 1076 for Proprietary Burglar Alarm Units and Systems.

When installed at the site the following requirements must be met to comply with this standard.

1. Transient protection devices that are installed must not be removed or defeated.

2. The computers audible alarm indicator must not be disabled.

3. All system components must be connected to a UL Listed Uninterruptible Power Supply that provides a

minimum of 24 hours of AC emergency power.

4. The maximum number of Panels that may be connected to the P2000 or P2K system is 1000.

5. The P2000 or P2K shall give priority to signals in the order given below and shall annunciate subsequent

signals at a rate no less than one every 10 seconds

Priority 0 Highest Priority Hold-up or Panic Alarm

Priority 1 Second Highest Burglar Alarm

Priority 2 Third Highest Burglar Alarm Supervision

Priority 3 Fourth Highest Other Supervisory Alarms

Priority 4 Fifth Highest Guard Tour

6. The “Pop-up” feature for input points must be enabled.

7. At the host computer (Central Station), alarms must not be filtered away from the host using the feature

“Message Filtering”.

8. Alarms must not be forwarded away from the host computer (Central Station) using the feature “Message

Forwarding”.

9. The “Panel Poll Interval” must not exceed 90 seconds.

10. The “Host Poll Delay” must not exceed 200 seconds.

11. P2000 or P2K server must use transient suppression devices on the LAN interfaces at the computers. The

table below specifies the devices that must be used for the various types of LAN interfaces.

LAN Interface Manufacturer of Device Device Part Number

10Base-2 Black Box® SP350A-R2 (In-line connector)

10Base-2 Black Box SP501A (“T” connector)

10Base-5 (AUI) Black Box SP362

10/100Base-T Black Box SP512A-R3

12. Systems requiring the use of a network hub, router, and/or serial port server shall have that equipment

installed in a temperature controlled environment. The temperature controlled environment must be

maintained between 13 - 35C (55 - 95F) by the HVAC system. Twenty-four hour standby power shall be

provided for the HVAC system.

13. The installer shall incorporate a supply line transient suppression device complying with the Standard for

Transient Voltage Surge Suppressors, UL 1449, with a maximum rating of 330 V. Supply line transient

suppression device is to be used with the power supply to the network hub, router, serial port server, serial-

to-ethernet converter and RS232-to-RS485 converter.

14. The 240 Vac configurations have not been tested by Underwriters Laboratories.

15. The workstation defined as “Server” must have the alarm monitor parameter set to “always active”.

UNDERWRITERS LABORATORIES COMPLIANCE VERIFICATION SHEET

P2000 or P2K SYSTEM

Page 2 of 3

16. For P2000 or P2K software version 2.5 or later, when configuring “Service Startup” parameters the

following services shall not be disabled.

P2000 RTL Route Service

P2000 CK720 Download Service

P2000 CK720 Priority Service v1.0

P2000 CK720 Priority Service v2.1

P2000 CK720 Upload Service

P2000 Periodic Service

P2000 S321 SIO Handler Service, where S321-DIN controller is used

P2000 S321-IP Interface Service, where S321-IP controller is used

P2000 SIO Handler Service, where D620 or D6AP controller is used

P2000 Smart Download Service

17. For Line Security over the Internet, between the P2000 or P2K server and the controllers CK721-A version

3.1 or higher shall be configured to use an encryption method including an Authentication Header (AH) and

an algorithm capable of Triple-DES (3DES) or better that is NIST™ certified.

18. For Line Security over the Internet, between the P2000 or P2K server and the controllers CK705, CK720,

CK721, CK721-A version 3.0 or lower, and S321-IP the following equipment shall be used.

NetScreen®, Model NS-5XT-X0X (where X is any number 0 to 9), 4-Port VPN router

The P2000 or P2K server and router shall be configured to use an encryption method including an

Authentication Header (AH) and an algorithm capable of Triple-DES (3DES) or better that is NIST

certified.

19. For Line Security over the Internet, between the P2000 or P2K server and the controllers D620, D6AP, and

S320, the following equipment shall be used.

NetScreen, Model NS-5XT-X0X (where X is any number 0 to 9), 4-Port VPN router and

Digi® International, Model EtherLite2 serial port server

The P2000 or P2K server and router shall be configured to use an encryption method including an

Authentication Header (AH) and an algorithm capable of Triple-DES (3DES) or better that is NIST

certified.

20. For Line Security over the Internet, between the P2000 or P2K server and the controller S321-DIN, the

following equipment shall be used.

NetScreen, Model NS-5XT-X0X (where X is any number 0 to 9), 4-Port VPN router and

Digi International, Model Digi One SP serial-to-Ethernet converter or

B&B Electronics Mfg Co., Model 485OT9L RS232-to-RS485 converter

The P2000 or P2K server and router shall be configured to use an encryption method including an

Authentication Header (AH) and an algorithm capable of Triple-DES (3DES) or better that is NIST

certified.

21. The router and serial port server shall be installed within the same room as the controllers S320, D620 and/

or D6AP and within 20 feet of the controller when employed for encrypted line security.

22. P2000 or P2K systems use the Digi International Model Digi One SP converter or B&B Electronics Model

485OT9L converter to communicate to S321-DIN controllers.

23. The B&B Electronics Model 485OT9L converter shall be installed within the same room as the P2000 or

P2K server and within 20 feet of the server under all conditions of use.

UNDERWRITERS LABORATORIES COMPLIANCE VERIFICATION SHEET

P2000 or P2K SYSTEM

Page 3 of 3

24. The Digi International Model Digi One SP may be mounted at the central supervising station or the

protected premise. When used at the central supervising station, a Cylix™ Model TSP-4B-E transient

suppression device shall be used on the RS485 communication line. When used at the protected premise, a

Black Box Model RS512A-R3 transient suppression device shall be used on the LAN communication line.

25. A spare router, serial port server, serial-to-Ethernet converter and RS232-to-RS485 converter shall be

available and put in to service within 6 minutes when they are employed for encrypted line security with the

controllers CK705, CK720, CK721, CK721-A version 3.0 or lower, S320, S321-DIN, S321-IP, D620 and/or

D6AP.

26. P2000 workstations, network hubs, routers, serial port servers, serial-to-Ethernet converters, and RS232-to-

RS485 converters must use signal line transient suppression devices complying with the Standard for

Protectors for Data Communications and Fire Alarm Circuits, UL 497B, with a maximum marked rating of

50V.

27. Alarm signals received at a remote P2000 or P2K server via the Remote Message Services from a different

P2000 or P2K server are supplementary.

28. Alarm signals received at a P2000 workstation are supplementary.

29. Alarm signals received at a personal computer or personal digital assistant, through the Web Access feature,

are supplementary.

30. P2000 or P2K systems use the PC232-S4-1 Protocol Converter to communicate to D620, D6AP and/or S320

controllers; a controller must be connected to the port defined as Loop 1 at the P2000 or P2K for Protocol

Converter’s tamper switch to report as an alarm.

31. The communication medium between the protected property and communications service provider shall be

for the exclusive use of the protected property and is not to be shared with other communications service

provider subscriber.

32. The following features have not been investigated by Underwriters Laboratories:

BACNet® interface

Dial-Up

Fire server

Intercom server

Intrusion server

Isonas interface

Kone™ IP elevator interface

Otis® elevator interface

TopGuard ANPR interface

33. The following products have not been investigated by Underwriters Laboratories and shall not be used in a

listed system:

Aritech intrusion panel

Assa Abloy® door service router (DSR) and reader

Notifier® fire alarm panel

OSI product line

P900 product line

34. The P2000 or P2K and HID® Edge access control unit may be used for access control monitoring purposes

only.

35. A Panel Down alarm message received at the central station may be an indication of a compromise attempt.

36. For the S321-IP, the “Heartbeat Transmit Interval” must not exceed 90 seconds and the “Host Reception

Timeout” must not exceed 200 seconds.

37. Alarm signals received from the Bosch® D9412GV3 are supplementary.

38. An external speaker device shall be provided for audible indication of change of status of a protective circuit

initiated at the protective premise.

TABLE OF CONTENTS

24-10618-155 Rev. A vii

This document contains confidential and proprietary information of Johnson Controls, Inc.

Chapter 1: Introduction

Chapter Summaries ................................................................................................................................. 1-1

Manual Conventions ................................................................................................................................ 1-1

Chapter 2: Configuration

IPSEC Parameters................................................................................................................................... 2-1

P2000 Server IP Address................................................................................................................. 2-1

VPN Router WAN IP Address.......................................................................................................... 2-1

VPN Router LAN IP Address ........................................................................................................... 2-2

Hardware Installation and Configuration.................................................................................................. 2-2

P2000 Server to Back End Router Connection................................................................................ 2-4

NetScreen-5XT Router Installation and Configuration..................................................................... 2-5

NetScreen-5XT Installation ......................................................................................................2-5

NetScreen-5XT Configuration .................................................................................................. 2-6

Resetting the NetScreen-5XT Router .................................................................................... 2-13

Linksys BEFVP41 Router Installation and Configuration............................................................... 2-13

Linksys BEFVP41 Installation ................................................................................................ 2-13

Linksys BEFVP41 Configuration ............................................................................................ 2-14

Linksys BEFSX41 Router Installation and Configuration............................................................... 2-15

Linksys BEFSX41 Installation ................................................................................................ 2-15

Linksys BEFSX41 Configuration ............................................................................................ 2-16

Resetting the Linksys Router ................................................................................................. 2-18

Installing the Digi EtherLite Device (S320 Connection Only)......................................................... 2-18

Installing the Digi One® SP (S321 Connection Only) .................................................................... 2-19

Appendix A: Glossary

Table of Contents VPN/DSL Security Option

viii 24-10618-155 Rev. A

This document contains confidential and proprietary information of Johnson Controls, Inc.

Altri manuali per P2000

Indice

Altri manuali Johnson Controls Sistema di sicurezza

Johnson Controls

Johnson Controls Tyco PowerSeries Pro HS3032 Manuale utente

Johnson Controls

Johnson Controls IFI-WS Manuale utente

Johnson Controls

Johnson Controls Tyco WS900 UL Manuale utente

Johnson Controls

Johnson Controls P2000 Manuale

Johnson Controls

Johnson Controls Qolsys IQ Remote PowerG Manuale utente

Johnson Controls

Johnson Controls Tyco PowerSeries Pro HS3032 Manuale utente

Johnson Controls

Johnson Controls IFC-1010 Manuale

Johnson Controls

Johnson Controls Tyco PowerSeries Pro HS3032 Manuale utente

Johnson Controls

Johnson Controls Qolsys IQ Remote PowerG Manuale utente

Johnson Controls

Johnson Controls P2000 Manuale utente

Johnson Controls

Johnson Controls tyco RAPID RESPONSE RCP-1 Manuale utente

Johnson Controls

Johnson Controls METASYS PS12ADA Series Manuale utente

Johnson Controls

Johnson Controls IQ Panel 4 Manuale utente

Johnson Controls

Johnson Controls Tyco PowerSeries Pro Manuale utente

Johnson Controls

Johnson Controls Intelligent Fire Integrator NION-16C48M Manuale utente

Johnson Controls

Johnson Controls PENN Connected PC10 Manuale utente

Manuali Sistema di sicurezza popolari di altre marche

Inner Range

Inner Range Concept 2000 Manuale utente

Climax

Climax Mobile Lite R32 Istruzioni per il montaggio

CADDX

CADDX NX-6 Manuale utente

FBII

FBII XL-31 Series Manuale utente

Aeotec

Aeotec Siren Gen5 Manuale utente

Blaupunkt

Blaupunkt SA 2700 Manuale utente

IDEAL

IDEAL Accenta Manuale del proprietario

AJAX

AJAX DoubleButton Manuale utente

Swann

Swann SW-P-MC2 Manuale utente

Ecolink

Ecolink Siren+Chime Manuale utente

Digital Monitoring Products

Digital Monitoring Products XR150 Manuale utente

EDM

EDM Solution 6+6 Wireless-AE Manuale utente

Highway Safety Group

Highway Safety Group EA401 Manuale utente

Siren

Siren LED GSM Manuale utente

Detection Systems

Detection Systems 7090i Istruzioni per il montaggio

Se-Kure Controls

Se-Kure Controls MicroMini SK-4841 Manuale utente

Siemens

Siemens FDM273 Manuale utente

DSC

DSC PC 4010 Manuale del proprietario