Professional Documents
Culture Documents
Guide
Lenel® OnGuard® 8.0 ACU Series Hardware Installation Guide
This guide is item number DOC-609, revision 11.007, September 2020.
© 2020 Carrier. All Rights Reserved. All trademarks are the property of their respective owners.
LenelS2 is a part of Carrier.
Information in this document is subject to change without notice. No part of this document may be reproduced
or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the prior
express written permission of UTC Fire & Security Americas Corporation, Inc., which such permission may
have been granted in a separate agreement (i.e., end user license agreement or software license agreement for
the particular application).
Non-English versions of LenelS2 documents are offered as a service to our global audiences. We have
attempted to provide an accurate translation of the text, but the official text is the English text, and any
differences in the translation are not binding and have no legal effect.
The software described in this document is furnished under a license agreement and may only be used in
accordance with the terms of that agreement.
SAP® Crystal Reports® is the registered trademark of SAP SE or its affiliates in Germany and in several
other countries.
Integral and FlashPoint are trademarks of Integral Technologies, Inc.
Portions of this product were created using LEADTOOLS ©1991-2011, LEAD Technologies, Inc. ALL
RIGHTS RESERVED.
Active Directory, Microsoft, SQL Server, Windows, and Windows Server are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries.
Oracle is a registered trademark of Oracle International Corporation.
Amazon Web Services and the "Powered by AWS" logo are trademarks of Amazon.com, Inc. or its affiliates
in the United States and/or other countries.
Other product names mentioned may be trademarks or registered trademarks of their respective companies
and are hereby acknowledged.
Warranty
UTC Fire & Security Americas Corporation, Inc. (“LenelS2”) warrants that the product is free from defects in
material and workmanship under normal use and service with proper maintenance for one year from the date
of factory shipment. LenelS2 assumes no responsibility for products damaged by improper handling, misuse,
neglect, improper installation, over-voltages, repair, alteration, or accident. This warranty is limited to the
repair or replacement of the defective unit. In no event shall LenelS2 be liable for loss of use or consequential
damages of any kind, however occasioned. There are no expressed warranties other than those set forth herein.
Warranty expressly excludes third party additions, deletions and/or upgrades to this product, including those
contained herein. LenelS2 does not make, nor intends, nor does it authorize any agent or representative to
make any other warranties or implied warranties, and expressly excludes and disclaims all implied warranties
of merchantability or fitness for a particular purpose.
Returned units are repaired or replaced from a stock of reconditioned units. All returns must be accompanied
by a return authorization number (RMA) obtained from the LenelS2 customer service department prior to
returning or exchanging any product. The RMA number must appear on the outside of the shipping box and
on the packing slip. Any items returned without an RMA number will not be accepted and will be returned at
the customer's expense. All returns must have transportation, insurance, and custom brokers’ fees prepaid.
Liability
It is expressly understood and agreed that the interface should only be used to control exits from areas where
an alternative method for exit is available. This product is not intended for, nor is rated for operation in life-
critical control applications. LenelS2 is not liable under any circumstances for loss or damage caused by or
partially caused by the misapplication or malfunction of the product. LenelS2’s liability does not extend
beyond the purchase price of the product.
Product Disclaimers and Warnings
THESE PRODUCTS ARE INTENDED FOR SALE TO, AND INSTALLATION BY, AN EXPERIENCED
SECURITY PROFESSIONAL. LENELS2 CANNOT PROVIDE ANY ASSURANCE THAT ANY PERSON
OR ENTITY BUYING ITS PRODUCTS, INCLUDING ANY "AUTHORIZED DEALER", IS PROPERLY
TRAINED OR EXPERIENCED TO CORRECTLY INSTALL SECURITY RELATED PRODUCTS.
LENELS2 DOES NOT REPRESENT THAT SOFTWARE, HARDWARE OR RELATED SERVICES MAY
NOT BE HACKED, COMPROMISED AND/OR CIRCUMVENTED. LENELS2 DOES NOT WARRANT
THAT SOFTWARE, HARDWARE OR RELATED SERVICES WILL WORK PROPERLY IN ALL
ENVIRONMENTS AND APPLICATIONS AND DOES NOT WARRANT ANY SOFTWARE,
HARDWARE OR RELATED SERVICES AGAINST HARMFUL ELECTROMAGNETIC
INTERFERENCE INDUCTION OR RADIATION (EMI, RFI, ETC.) EMITTED FROM EXTERNAL
SOURCES. THE ABILITY OF SOFTWARE, HARDWARE AND RELATED SERVICES TO WORK
PROPERLY DEPENDS ON A NUMBER OF PRODUCTS AND SERVICES MADE AVAILABLE BY
THIRD PARTIES OVER WHICH LENELS2 HAS NO CONTROL INCLUDING, BUT NOT LIMITED TO,
INTERNET, CELLULAR AND LANDLINE CONNECTIVITY; MOBILE DEVICE AND RELATED
OPERATING SYSTEM COMPATABILITY; OR PROPER INSTALLATION, CONFIGURATION AND
MAINTENANCE OF AUTHORIZED HARDWARE AND OTHER SOFTWARE.
LENELS2 MAY MAKE CERTAIN BIOMETRIC CAPABILITIES (E.G., FINGERPRINT, VOICE PRINT,
FACIAL RECOGNITION, ETC.), DATA RECORDING CAPABILITIES (E.G., VOICE RECORDING),
AND/OR DATA/INFORMATION RECOGNITION AND TRANSLATION CAPABILITIES AVAILABLE
IN PRODUCTS LENELS2 MANUFACTURES AND/OR RESELLS. LENELS2 DOES NOT CONTROL
THE CONDITIONS AND METHODS OF USE OF PRODUCTS IT MANUFACTURES AND/OR
RESELLS. THE END-USER AND/OR INSTALLER AND/OR RESELLER/DISTRIBUTOR ACT AS
CONTROLLER OF THE DATA RESULTING FROM USE OF THESE PRODUCTS, INCLUDING ANY
RESULTING PERSONALLY IDENTIFIABLE INFORMATION OR PRIVATE DATA, AND ARE SOLELY
RESPONSIBLE TO ENSURE THAT ANY PARTICULAR INSTALLATION AND USE OF PRODUCTS
COMPLY WITH ALL APPLICABLE PRIVACY AND OTHER LAWS, INCLUDING ANY
REQUIREMENT TO OBTAIN CONSENT. THE CAPABILITY OR USE OF ANY PRODUCTS
MANUFACTURED OR SOLD BY LENELS2 TO RECORD CONSENT SHALL NOT BE SUBSTITUTED
FOR THE CONTROLLER'S OBLIGATION TO INDEPENDENTLY DETERMINE WHETHER CONSENT
IS REQUIRED, NOR SHALL SUCH CAPABILITY OR USE SHIFT ANY OBLIGATION TO OBTAIN
ANY REQUIRED CONSENT TO LENELS2.
For more information on warranty disclaimers and product safety information, please check https://
firesecurityproducts.com/en/policy/product-warning or scan the following code:
Table of Contents
2. Installation ............................................................................................ 13
2.1 Installation Outline .............................................................................................. 13
2.2 General Installation Rules .................................................................................. 14
2.3 Signal Transmission ........................................................................................... 14
6. Installation ............................................................................................ 41
7. Wiring and Setup ................................................................................. 41
7.1 Communication Wiring ....................................................................................... 44
7.2 Input Power, Cabinet Tamper and UPS Fault Input Wiring ................................ 45
7.3 Input Circuit Wiring ............................................................................................. 46
7.4 Relay Circuit Wiring ............................................................................................ 47
9. Configuration ....................................................................................... 50
9.1 Web Configuration .............................................................................................. 50
9.2 Configuring ACU Controllers in the Host Application .......................................... 50
Index .................................................................................................................. 77
1 Introduction
Important: In order to use the LNL-3300-ACUXL Intelligent System Controller (ISC) and
the LNL-2240-RS4 ISC, the Migration Controllers (CASI) license bit must be
enabled.
The Lenel ACU Series controllers (LNL-3300-ACUXL and LNL-2240-RS4) are replacements for the
legacy ACUXL, ACURS2, ACURS4, ACURT2, and ACURT4 circuit boards for use in the Lenel hardware
platform. The ACU Series controllers are intended to be installed in existing ACU enclosures.
ACU controllers provide distributed processing for the interface of access control readers, keypads, alarm
inputs, and outputs back to the OnGuard system computer. Distributed processing from the CPU board
within the ACU enclosure allows the controllers to operate independently of the OnGuard system computer
with the majority of access control and alarm monitoring decisions made locally at the controller. (For more
information, refer to the Hardware Installation Guide.)
The Lenel ACU Series provides instant response for door control and alarm sensing in the field, while
leaving the OnGuard system computer with more processing power for quickly executing daily operations
such as alarm response, database updates and reporting.
In addition, the Lenel ACU Series incorporates flash memory technology that provides the ability to receive
its operating system and application remotely from the host system over the already established
communications path. Both the modular design and the flash memory technology of the Lenel ACU Series
provide a simple migration path when considering future host system upgrades.
The ACU replacement controllers provide connections to all of the legacy downstream devices, as follows:
• Legacy reader processing boards:
- RRE Surface Mount Remote Reader Electronics Module
- RRE-U Remote Reader Electronics Module
- RRE2 Surface Mount Remote Reader Electronics 2 Module
- RRE4 Surface Mount Remote Reader Electronics 4 Module
- RRE2/4-U Remote Reader Electronics Module
- IKE Keypad Reader
• Legacy alarm modules:
- RIM Surface Mount Remote Input Module
- RIM-U Remote Input Module
- RRM Surface Mount Remote Relay Module
- RRM-U Remote Relay Module
Alternatively, the ACU controllers allow you to replace the legacy downstream devices with standard Lenel
downstream devices.
Note: ACU legacy downstream devices cannot be mixed with Lenel downstream devices on the
same port.
For legacy ACU reader, input, and relay module installation instructions, refer to the documents provided at
the Partner Center web site at https://partner.lenel.com. (Sign in there using your Username and Password.
Click [Downloads], and then choose Legacy Casi/Infographics Hardware > User Guides.)
RRE 4 2 2 1 1
RRE2 8 2 4 1 2
RRE4 16 2 8 1 4
IKE 4 2 2 1 1
For more information, refer to "ACU Series Hardware Notes" in the System Administration User Guide.
2 Installation
The following is a basic outline for installing and setting up the Lenel ACU Series system. Some steps may
have been done depending on what was ordered. Some steps are optional, depending on the additional
equipment to be used. These steps are noted.
Important: Do not apply power to any component until the installation is complete. Damage
to the components may occur if power is incorrectly applied.
Note: The LNL-3300-ACUXL Intelligent System Controller is a replacement for the ACUXL circuit
board. The LNL-2240-RS4 Intelligent Controller is a replacement for the ACURS2, ACURS4,
ACURT2, and ACURT4 circuit boards.
1. Determine the cable clamps needed and obtain them before starting the installation.
During the installation, remember to:
• Label all connections/cables for ease of maintenance.
• Leave enough slack in the wiring so the cables can be “dressed”. This minimizes interference
during board removal or replacement.
2. Wire up the ACU controller. Be sure to configure and verify the switch settings. For more information,
refer to the following sections:
- LNL-3300-ACUXL: Configuration on page 50
- LNL-2240-RS4: RS-485 Communication Wiring - TB8 on page 65
3. If using networked controllers, verify that your network is up and running.
4. Install the reader board(s) into the enclosure and wire the readers to the controller. Be sure to configure
and verify the switch settings, jumpers, and/or resistor packs. Refer to the reader (RRE, RRE2, RRE4,
IKE and the RRE-U, RRE2-U and RRE4-U) user guides and Quick Reference sheets provided at the
Partner Center web site. For more information, refer to Install Legacy Downstream Devices on page 12.
5. If using digital inputs, insert the RIM into the enclosure and wire the inputs to the controller. Be sure to
configure and verify the switch settings. Refer to the Surface Mount Remote Input Module (RIM) user
guide or the Remote Input Module RIM-U Quick Reference provided at the Partner Center web site. For
more information, refer to Install Legacy Downstream Devices on page 12.
6. If using digital outputs, insert either the RRM into the enclosure and wire the outputs to the controller.
Be sure to configure and verify the switch settings. Refer to Surface Mount Remote Relay Module
(RRM) user guide and the Remote Relay Module RRM-U Quick Reference provided at the Partner
Center web site. For more information, refer to Install Legacy Downstream Devices on page 12.
7. Configure the controller using the Integrated Configuration Tool (ICT). For more information, refer to
the following sections:
- LNL-3300-ACUXL: Web Configuration on page 50
- LNL-2240-RS4: Web Configuration on page 71
8. If connecting standard Lenel downstream devices, port 2 & 3 of the LNL-3300-ACUXL and port 2 of
the LNL-2240-RS4 will be used. Please refer to the Hardware Installation Guide for the wiring details.
The authorized installation contractor should comply with the following rules:
• Neatly label cables at both ends.
(For example, labels should include: controller address number/device or reader number)
• Use individually shielded pairs of cables only. All wiring must comply with local, state, and federal
electrical codes and fire codes.
• Obey all national, state, and local electrical and safety codes.
• Obtain any required permits and/or inspections. Contact the local fire marshal for assistance if
necessary.
• Safety of customer personnel is the primary consideration of the installation.
• Neatly dress and tie or lace all wiring in a professional manner.
• Gather together and tape all unused conductors in multiple conductor cables.
• Shield all cabling and terminate properly.
Notes: This is an FCC Class A product. In a domestic environment, this product may cause radio
interference in which case the user may be required to take adequate measures.
Circuit board components are vulnerable to damage by electrostatic discharge (ESD). ESD can
cause immediate or subtle damage to sensitive electronic parts. An electrostatic charge can
build up on the human body and then discharge when you touch a board. A discharge can be
produced when walking across a carpet and touching a board, for example. Before handling
any board, make sure you dissipate your body’s charge by touching ground. This discharges
any static electricity build-up.
• Where practical, keep cables well separated from each other. Separate power cables from signal cables.
• Keep the break-out at the ends of signal cables as short as possible.
• Ground all shield drain wire(s) at the ACU controller using the grounding studs provided outside the
cabinet enclosure.
• For communication cables between controllers, ground shield to the upstream controller only.
3 UL Certified Installations
Note: LNL-3300-ACUXL and LNL-2240-RS4 have not been evaluated by UL for UL 1076
Proprietary Burglar Alarm Units & Systems.
The system is to be installed within a protected premise. In a subassembly, the operating temperature range
must be 0° to 49°C (32° to 120°F); the humidity range must be 0 to 85% RH.
This system must be installed in accordance with the National Electrical Code (NFPA 70), and the local
authority having jurisdiction.
For UL Installations, the central supervisory station equipment must be UL Listed to:
• Information Technology Equipment, UL 60950
For UL Installations, use UL Listed information technology equipment. The computer minimum platform
requirements are as follows:\
• CPU: Intel Core i3 @ 2.5 GHz
• RAM: 16 GB
• Hard Drive: 10 GB available disk space (excluding the operating system). If hosting the database
locally, take database growth into account when projecting future disk space.
• Monitor: 1920 x 1080
• Media: USB 2.0 or higher
• Network: 100/1000 Mbps Ethernet card
• Operating systems:
- Windows 8.1
- Windows 10
- Windows Server 2016 (64 bit)
- Windows Server 2019 (64 bit)
• Database systems:
- Microsoft SQL Server 2014 (32 and 64-bit) *
- Microsoft SQL Server 2016 (64-bit) *
- Microsoft SQL Server 2017 (64-bit) *
- Microsoft SQL Server 2019 (64-bit) *
- Oracle 12c
- Oracle 19c (64-bit)
* For each version of Microsoft SQL Server, the Standard, Enterprise, and Express versions are
supported.
• Environment
- Cloud installations (not evaluated by UL)
- Mobile installations (not evaluated by UL)
• Access control systems:
- OnGuard 7.x (7.x.xxx) using DOC-609-EN-US ACU Series Hardware Installation Guide
• Firmware versions:
- The LNL-3300-ACUXL ISC must have firmware version 1.2xx or later installed
- The LNL-2240-RS4 ISC must have firmware version 1.2xx or later installed
- The LNL-2240-ACURS4-OBRDR (on-board serial I/O) must have firmware version 1.2xx or later
installed
Refer to the Compatibility Charts located at https://partner.lenel.com/downloads/onguard/software for
the supported firmware versions. The release notes are located on the root directory of the OnGuard
installation media.
• NEC ExpressCluster X R3 Fault Tolerant software (not evaluated by UL)
NEC ExpressCluster X 4.1/4.2 Fault Tolerant software (not evaluated by UL)
Equipment must be installed in a temperature controlled environment, maintained between 0° and 49°C (32°
and 120°F) by the HVAC system. 24 hours of standby must be provided for the HVAC system.
In addition to the main power supply and secondary power supply that are required to be provided at the
central supervisory station, the system must be provided with an uninterruptable power supply (UPS) with
sufficient capacity to operate the computer equipment for a minimum of 15 minutes. If more than 15 minutes
is required for the secondary power supply to supply the UPS input power, the UPS must be capable of
providing input power for at least that amount of time. A means for disconnecting the input to the UPS while
maintaining continuity of power to the automation system must be provided, in order to perform
maintenance and repair service.
The UPS must comply with the Standard for Uninterruptable Power Supply Equipment, UL 1778 or the
Standard for Fire Protective Signaling Devices, UL 1481.
Be sure to use the recommended cabling, which is the shielded wiring required for use on all modules.
Communication circuits and network components connected to the telecommunications network shall be
protected by secondary protectors for communication circuits. These protectors shall comply with the
Standard for Secondary Protectors or Communications Circuits, UL 497A. These protectors shall be used
only in the protected side of the telecommunications network.
A metal conduit must be used when connecting all UL enclosures. This is required for all UL installations.
Do not exceed 1000 receiver accounts for UL.
All receiving equipment shall be completely duplicated with provision for switchover to the backup system
within 30 seconds. The backup system shall be fully operational within 6 minutes of the loss of the primary
system. This allows 30 seconds for the backup system to be fully energized and connected to the necessary
communication lines and other devices, followed by 5-1/2 minutes for the system to boot up, conduct
memory tests, file system check, security verifications, and prepare for full system operation. The backup
computer must have the capabilities of the primary, such as memory, speed, and the like.
Failure of the main computer system, hard disk, and alarm monitor must be programmed to switchover to
the backup system, and indicate an audible, or obvious visual indication.
A fault tolerant system may be used in lieu of complete duplication of the system if every component in the
fault tolerant system, including the software and power supply, is duplicated.
Priority features (alarm, loss of line voltage, opens, shorts, etc.) must be programmed for an audio and a
visual indication at the central supervisory station equipment, and to create a printout. The condition must be
recorded. This indication shall not be silenced without acknowledgment.
Bypass of protective features, such as auto-bypass for forced arm, must not be programmed for UL. The
Ethernet connection must be maintained continuously.
Note: If the central supervisory station receives a "Communication Loss" message, a compromise
attempt on the communication line may have occurred.
Network addressing of devices shall not make use of public domain name servers.
Panic hardware must be UL 305 Listed.
3.1 Power
The standby power system for the HVAC system may be supplied by an engine driven generator alone. Use
of a standby battery is not required.
All external interconnecting power sources must be UL/ULC Listed access control power supplies. AC
supply lines shall not be routed in the same conduit or harness as low voltage lines.
Note: For power requirements using standard Lenel downstream devices, refer to the Power section
in the Hardware Installation Guide for more details.
Note: For power requirements using ACU legacy downstream devices, refer to "Wiring power to the
ACU controllers" in the ACU Networked Intelligent Controllers Hardware Installation Manual
for more details. This document is provided at the Partner Center web site: https://
partner.lenel.com. (Sign in there using your Username and Password. Click [Downloads], and
then choose Legacy Casi/Infographics Hardware > User Guides.)
Note: For UL installations, the power supply that must be used for the LNL-3300-ACUXL ISC is the
ESD SPS-20. The power supply that must be used for an LNL-2240-RS4 ISC connected to the
DC battery terminals is the UTC ACU-5APWR.
Note: For battery backup UL 294 operation with 14 Ah (4 each 12V, 7 Ah) batteries, the maximum
load current is 2.4 A.
Before applying 240 VAC the PCB, the trace marked "CUT 240" on the bottom side of the power supply
PCB must be cut. Failure to do so will cause damage to the power supply.
Use a basic 5 Amp power supply with an attached Altronix Power Distribution Module if the LNL-2240-RS4 controller
is connected to legacy downstream devices. For more information, refer to "Wiring power to the ACU-5APWR
power supply/charger" in the ACU Networked Intelligent Controllers Hardware Installation Manual at the
Partner Center web site: https://partner.lenel.com. (Sign in there using your Username and Password. Click
[Downloads], and then choose Legacy Casi/Infographics Hardware > User Guides.)
Note: The ACU-5APWR power supply can also be used in the LNL-2240-RS4 without the power
distribution module.
Service switch disables DC power and battery from output Yes (Service switch has been removed on
European models with CE mark)
LNL- 12 VDC/ Stand-by = 4.0 amps Stand-by = 1.0 amp Stand-by = 300 mA
AL400ULX 40 AH Battery Alarm = 4.0 amps Alarm = 4.0 amps Alarm = 4.0 amps
LNL- 12 VDC/ Stand-by = 6.0 amps Stand-by = 1.0 amp Stand-by = 300 mA
AL600ULX- 40 AH Battery Alarm = 6.0 amps Alarm = 6.0 amps Alarm = 6.0 amps
4CB6
The following devices have been evaluated by UL for use with the OnGuard system.
• LNL-3300-ACUXL controllers
• LNL-2240-RS4 controllers
• LNL-R11330-05TB: BlueDiamond Mobile mini-mullion reader for Lenel BlueDiamond Mobile
smartphone credential
• LNL-R11320-05TB: BlueDiamond Mobile US single gang reader for Lenel BlueDiamond Mobile
smartphone credential
• LNL-R11325-05TB: BlueDiamond Mobile US single gang reader for Lenel BlueDiamond Mobile
smartphone credential
• LNL-R11030-85TB: BlueDiamond Mobile Bluetooth in-line add-on reader adds BlueDiamond Mobile
smartphone credential support to an existing reader, Wiegand
• ACU Remote Reader Electronics and RRE HP configuration RRE0, 1, 2. 2A, and 4 (Part Numbers
RRE01-E00, RRE01-E1L, RRE02-E00, RRE02-E1L, RRE04-E00 AND RRE04-E1L)
• Integrated Keypad Electronics (Part Number IKE-00RDIGW)
• Remote Input Modules (RIM) (Part Numbers RIM16-E00 and RIM16-E1L)
• Remote Relay Modules (RRM16-E00) (Part Numbers RRM16-E00 and RRM16-E1L)
Universal circuit board devices with ACU firmware:
• Remote Reader Electronics RRE-U
• Remote Reader Electronics RRE-2/4-U
• Remote Input Module RIM-U
• Remote Relay Module RRM-U
For remote arming (or switching the protection mode at the protected area), the system must be programmed
to provide a visual and/or audible signal at the keypad to indicate to the attendant at the protected area that
the confirmation closing signal has been received by the central supervising station.
In System Administration, configure (program) the system to verify the host connection during arming and
disarming operations at the remote keypads.
4. On the Mask Groups form, create an Alarm Mask Group using the input created in step 2.
5. From the Access Control menu, select Local I/O.
6. On the Local I/O Function Lists form, create a Local I/O function for the Alarm Mask Group Mask/
Unmask group created in step 4.
7. From the Access Control menu, select Groups.
8. On the Mask Groups form, create an Intrusion Mask group for the desired alarm points.
9. Link the Local I/O function for the Alarm Mask Group Mask/Unmask created in step 6 to the Intrusion
Mask group created in step 8 via the Configure Actions option on the Intrusion Mask group form.
a. For the Disarmed selection, set the Local Function created in step 6 to "Set True for Enter" and "Do
Nothing for Exit".
b. For Arming selections, set the local function created in step 6 to "Set False for Enter" and "Do
Nothing for Exit".
10. From the Access Control menu, select Readers and Doors.
11. On the Aux Outputs form, add one (1) Auxiliary Output that will be wired to the local notification
chosen.
12. From the Access Control menu, select Global I/O. Create two (2) Global I/Os.
a. Configure the first Global I/O with Timezone set to "Always" and the Input Event device for the
input added in step 2 with an event of "Input Masked". The Output Action will be "Device Output",
selected for the relay added in step 11, and then set the Operation drop-down to "Activate".
b. The second Global I/O will have Timezone of "Always" and the Input Event device for the input
added in step 2 with an event of "Input Unmasked". The Output Action will be "Device Output",
selected for the relay added in step 11, and then set the Operation drop-down to "Deactivate".
Note: The LS Linkage Server Service is required to verify the host connection as configured above.
This allows you to route a configuration through the host to change the state of the chosen local
notification each time the Intrusion Mask group is armed or disarmed.
Note: The reader aux inputs and outputs can also be added (as detailed in steps 1, 2, 10, and 11) from
the Alarm Panels configuration based on what the type of hardware is available. (From the
Access Control menu, select Alarm Panels.)
• Front and rear tampers must be used. If the enclosure is tampered, a visual and/or audible alarm must
annunciate.
• The ACU controller must be used with a compatible UL Listed power supply. For more information,
refer to UL Certified Power Supplies on page 17. Refer to the instructions provided with the power
supply for installation requirements. The power supply's AC power fail contacts must be connected to
the ISC as shown in the following sections:
- LNL-3300-ACUXL: Input Power, Cabinet Tamper and UPS Fault Input Wiring on page 45
- LNL-2240-RS4: Input Power, 24 Volt Battery, Cabinet Tamper and Power Fault Wiring on page 61
Grounding must be done in accordance with Article 250 of the National Electrical Code.
• The ACU controller must be mounted inside the secured area.
• The enclosure tamper switch must be connected to the ISC as show in the following sections:
- LNL-3300-ACUXL: Input Power, Cabinet Tamper and UPS Fault Input Wiring on page 45
- LNL-2240-RS4: Input Power, 24 Volt Battery, Cabinet Tamper and Power Fault Wiring on page 61
• The exit request input circuit and initiating device must be contained within the secured area. The exit
device circuit must be connected to listed switches or exit devices.
• The door strike power must be provided from a listed power supply. If the door strike circuit is arranged
as fail secure (door remains locked upon loss of power), listed emergency panic hardware must be
provided to allow exit from the secured area. A fail-safe configuration results in the door strike circuit
unlocking in case of a power loss.
• Ground all external mounted enclosures/housings (such as used for readers, gate controls, etc.) to
reduce the risk of damage to the equipment.
• The entire alarm and/or access system should be tested, at least once a year, to ensure that lightning
damage has not gone undetected.
• Grounding must be in accordance with the National Electrical Code (NEC), Article 250, as well as state
and local codes.
Instead of using DIP switches or jumpers to define communication and addressing, the following controllers
can be configured through the web interface:
• LNL-3300-ACUXL, LNL-2240-RS4
The web browser interface is a secure connection that is used to configure the Lenel intelligent controllers
by providing the ability to:
• Select the connection method of the Host computer to the controller
• Configure the IP address (Host Communication address or DHCP name)
• Create and manage user logins
• Configure Auto-save settings
• Reload or Reset settings back to default
• Load Certificates
• Configure Central Station
• View Status
• View device information
• Restore settings to factory default.
Upon installation, the user accounts to the web configuration page should be created with secure passwords
and the DIP switches set in the off position for the normal operating mode. The intelligent controllers are
shipped from the factory with a default login account, which is enabled when DIP 1 is moved from OFF to
ON. The default login user name and password will be available for five minutes once enabled. Therefore, it
is important that at least one user account is defined, and the DIP switches are set to OFF before an
intelligent controller is commissioned. It is also highly recommended not to configure the controller with an
IP address that is accessible from the public Internet.
To further enhance network security, options are available to disable SNMP, Zeroconf discovery, as well as
the web configuration module itself. For more information, refer to Configure Other Settings on page 34.
Additionally, data encryption can be enabled over the host communication port. For more information, refer
to Configure the Host Communication Settings on page 29.
There is one pre-defined user always available by turning DIP switch SW1 ON after power up. When
logging in for the first time, since no other users are defined yet, the default user name and password are
required for configuring this board.
If the user name and password for the controller are unknown, configure the DIP switches as follows:
1 2 3 4 Definition
OFF OFF OFF OFF Normal operating mode.
ON X X X After initialization, enable default User Name (admin) and Password
(password). The switch is read on the fly, no need to re-boot. This
switch is also used to re-enable the Web Server. For more information,
refer to Configure Other Settings on page 34.
OFF ON X OFF Use factory default communication parameters.
(Address: 192.168.0.251 Port: 3001)
ON ON X OFF Use Lenel default communication parameters. Refer to the Bulk Erase
section in an Intelligent Controller chapter.
ON ON X OFF Bulk Erase prompt mode at power up. Refer to the Bulk Erase section
in an Intelligent Controller chapter.
X X ON X Disables the TLS secure link. The switch is read when logging on only.
The DIP switches configure the operating mode of the processor. DIP switches are read on power-up except
where noted. Press switch S2 to reset the board.
Notes: The default username (admin) & password (password) will work for 5 minutes after switch 1 is
set to ON. Before disabling the default username & password, ensure at least one user has been
created and then set Switch 1 to off.
After configuring ports and users, be sure to turn SW1 off to enable the updated settings.
The Configuration Web Page can be launched from within System Administration (if an IP address or host
name is specified) or by using a browser to access the programmed IP address. Depending on your proxy
settings, you may have to allow this web page. (For more information, consult your browser’s online help or
system administrator for assistance.)
1. In System Administration in the Access Panels folder, click the Configuration Web Page button or
open a browser and navigate to the device using the IP address.
Note: All boards have a static certificate that reflects a static IP address. This causes a warning to
appear initially when trying to log in that states a problem with this website's security
certificate. Although it is not recommended, proceed to the website.
Note: The factory default does not have a security certificate. Depending on the browser and security
settings, a certificate error may be displayed. Continue anyway.
Notes: Only 3 users may be logged in at the same time and only 1 level 1 user may be logged in at any
time.
If a third user closes the browser without logging out, another user attempting to log in will see
a Server Busy error and need to wait until someone logs out or the inactivity timer is reached
for the one who closed the browser without logging out.
The Home page is displayed. It indicates the type of device, provides links to other setup pages, and has
a Notes field for identifying information within the controller or indicating contact information.
4. (Optional) Type up to 250 characters in the Notes field and click Save Notes.
The Network Settings page specifies the addressing mode and address for the intelligent controllers.
1. Select Network from the left-hand menu. The Network Settings page is displayed.
2. If using DHCP, specify the host name. The default DHCP name uses the MAC address of the controller.
3. Select the appropriate option to connect to the controller on the network:
• Use DHCP
With DHCP, IP settings will be configured automatically.
• Use Static IP
Specify the IP address, subnet mask, default gateway, and an optional DNS suffix for the controller.
4. Select a DNS server address option and specify a DNS server if applicable.
5. Click Accept.
6. When all changes are complete, select Apply Settings from the left-hand menu and click Apply
Settings, Reboot to permanently save all changes.
The Host Communication page configures parameters for communication from the host system to the
intelligent controllers. Parameters vary by controller.
Some controllers have two physical port connectors: an Ethernet port and a serial port. Some also support
two Ethernet connections.
The LNL-3300 controller offers the additional communication options of RS-485 and a serial adapter option
to utilize adapters such as the Lantronix Micro 100 Cobox.
1. Select Host Comm from the left-hand menu. The Host Communication page is displayed.
Note: If Data Security is set to TLS Required (available for LAN connections only), then the TLS
encryption option must be selected on the Options sub-tab in System Administration > Access
Control > Access Panels > LNL-nnnn tab, and a TLS certificate matching the one on the
panel must be installed on the Communication Server. When adding new X-Series access
panels in System Administration, the TLS encryption option is enabled by default. For more
information on TLS certificates, including replacing the default certificate on the panel, refer
to the Encryption for Controllers User Guide.
3. Click Accept.
4. When all changes are complete, select Apply Settings from the left-hand menu and click Apply
Settings, Reboot to permanently save all changes.
The Device Info page displays hardware and configuration settings on the controller. This page is refreshed
every minute.
Select Device Info from the left-hand menu. The Device Info page is displayed.
User accounts for the Web Configuration Manager may be created, edited or deleted. Up to 10 users may be
defined.
1. Select User from the left-hand menu. The users page is displayed.
2. To edit a user account, select a user from the list and then select Edit.
To create a new user account, select New User.
The User Account page is displayed.
1. Select User from the left-hand menu. The users page is displayed.
2. Select a user from the listing and then Delete.
3. Select Save.
1. Select User from the left-hand menu. The users page is displayed.
2. Select Enable for the Time Server and set options. The current time is requested from the external
server at power up.
• Server
Select the appropriate server from the drop-down menu. Options include User-Specified
(Hostname), User-Specified (IP), pool.ntp.org - port 123, time.nist.gov - port 123.
• Port
Enter a port number. NIST servers listen for NTP requests of port 123.
• Update Interval
Select the how often to update the time from the server. Options include Every: Hour, 3 Hours,
6 Hours, 12 Hours, Day.
• User Specified Time Server
If User Specified (Hostname) was selected for Server, enter the hostname of the time server to use.
3. Select Save Time Server.
1. Select User from the left-hand menu. The users page is displayed.
2. Select the check boxes at the bottom of the page to enable or disable the following options (options vary
by controller type):
Note: Some options are only available for selection when DIP switch 1 is set to ON.
3. (Optional) Select one of the following SNMP Options: Disabled, v2c/v3 Support, or v3 Support or v2c
Support.
4. Select Submit.
5. When all changes are complete, select Apply Settings from the left-hand menu and click Apply
Settings, Reboot to permanently save all changes.
The Auto Save page configures the Auto-save behavior and determines how the controller reacts on startup
if host configuration changes have been lost.
1. Select Auto-Save from the left-hand menu. The Auto-Save page is displayed.
2. Select the desired behavior if the startup routine detects that the host configuration changes made prior
to reset have been lost: Restore from the last saved settings or Clear all settings. Force a full
download.
3. Select Enable Auto Save.
If Auto Save is Disabled, configuration changes are not automatically saved. Configuration can be
manually saved.
4. Select a value for the Delay before save option from the drop-down menu. Options include: 30, 60, or
90 seconds and 2, 5, 10, 20, or 30 minutes.
5. Select Enable network diagnostic log to write diagnostic information to the debug file every 15
minutes when debug is enabled.
6. Select Save Settings.
7. When all changes are complete, select Apply Settings from the left-hand menu and click Apply
Settings, Reboot to permanently save all changes.
The Load Certificate page allows the certificates loaded at the factory to be replaced by unique, custom
certificates.
1. Select Load Certificate from the left-hand menu. The Load Certificate page is displayed. Certificates
that are already loaded are identified in the Certificate Information section of the page.
2. Use the Choose File buttons to browse for a custom certificate (.crt) and a private key file (.pem).
3. Select Load certificate files.
4. When all changes are complete, select Apply Settings from the left-hand menu and click Apply
Settings, Reboot to permanently save all changes.
The Security Options page configures security for the Ethernet interface (disabled by default).
Authentication EAP configuration options include TLS, MD5, and PEAP/MSCHAPv2.
1. Select Security Options from the left-hand menu. The Security Options page is displayed.
2. Select Enable 802.1x Authentication.
3. Select the Authenticated EAP Configuration from the drop-down menu.
4. Enter the EAP Identity. This is a required field.
5. Enter a Password for the EAP identity.
6. Enter the password again to Confirm Password.
7. Select Enable Encrypted Partition, if desired. (Must align with 802.1x configuration.)
8. Click Save Configuration.
9. When all changes are complete, select Apply Settings from the left-hand menu and click Apply
Settings, Reboot to permanently save all changes.
4.10 Diagnostic
Only use this page under guidance of LenelS2 OnGuard Technical Support.
The Restore Settings page restores the settings to either the factory default or the current operating settings
(before the start of this session). These settings apply only to the Network and Host Comm settings.
1. Select Restore Settings from the left-hand menu. The Restore Settings page is displayed.
Note: If the IP address has changed, log in with the new IP address to continue.
2. Select one of the following options to restore Network and Host Communication settings:
• To reload the factory settings, select Restore Default.
• To reload the current operating settings, select Restore Current.
The Apply Settings page is used to save the changes made to the network, certificate, and host
communication settings. These settings are not applied and saved to the controller until Apply Settings,
Reboot is selected.
1. Select Apply Settings from the left-hand menu. The Apply Settings page is displayed.
2. Select Apply Settings, Reboot.
Note: Remember to select Apply Settings from the left-hand menu and click Apply Settings,
Reboot to permanently save all changes.
Additional applications may be added in the future with their own setup and configuration.
This installation guide is intended for use by technicians who will be installing and maintaining the
Intelligent System Controller.
The LNL-3300-ACUXL is a replacement for the ACUXL circuit board when converting to the Lenel
hardware platform. This board is intended to be installed in existing ACU enclosures. This Intelligent
System Controller provides the real time processing for the I/O interfaces connected to it. The database for
the subsystem configuration and card holders are stored in flash memory. The event log buffer is stored in
battery-backed memory. Configuration data and event/status reports are communicated to the host via on-
board 10BaseT/100BaseTX Ethernet port or port 1.
The on-board 10Base-T/100Base-TX Ethernet port is the primary communication connection to the host. An
alternate host connection is possible via an optional 10Base-T/100Base-TX daughter board (Lantronix
Micro125 interface, p/n MO11AA003-01R or equivalent).
Two (2) RS-485 (4-wire) ports are provided for communication to the downstream I/O devices. Twelve
Form-C relay outputs may be used for strike control or alarm signaling. The relay contacts are rated at 2 A
@ 30 VDC, dry contact configuration. Twelve general purpose zone inputs are provided to monitor
unsupervised or supervised circuits.
The LNL-3300-ACUXL requires 18.5 to 28 VDC for input power.
LNL-3300-ACUXL Board
8 7
9
Ø.156 [3.96] 6
5
TB1-1
J1
TB2-1
TB5
+24V
J14
0V
+5V
+12V
J4
-9V
0V
J8
4
4.800 [121.92] J3
J5
1
3
S1
2
1
3
2
3
TB1-24
4 4
TB2-24
ON
5
6
TB3-1
TB4-1
BR/CR2330
10.400 [264.16] 2
BT1
3V
4.800 [121.92] S2
1
TB3-24
TB4-24
0.400 [10.16]
7.850 [199.39]
LNL-3300-ACUXL BoardCallouts
Callout Description
1 Reset switch
3 Status LEDs
4 DIP switches
5 Chassis ground
9 6 Places
6 Installation
To install the ISC, perform the installation procedures described in the following sections, in the order in
which they are presented.
Refer to the following tables for wiring and setup of the LNL-3300-ACUXL.
1 +27 VDC +27 VDC Input Power 1 +24 VDC Serial I/O Port 3: 24 VDC
Output (1.25 A max.)
4 +12 VDC +12V Output Power 4 R2T- Serial I/O Port 3: TX-
(.25 A max.)
TB5 connections
2 0V Ground
5 -9V No Connection
6 0V Ground
The LNL-3300-ACUXL controller communicates to the host via: on-board 10-BaseT/100Base-TX Ethernet
interface (port 0) and/or the optional Lantronix Ethernet 10Base-T/100Base-TX Micro125 interface.
With legacy I/O device communication ports: TB2 pins 8-12 (Port 2) and pins 2-6 (Port 3) are a 4-wire
RS-485 interface which is used to connect to the downstream I/O panels. This interface is a multi-drop
communication bus with a length of up to 4,000 feet (1,219 m). Use shielded twisted pair (minimum 24
AWG) cable with 120 ohm impedance.
R1R- 12 R2R- 6
R1R+ 11 R2R+ 5
R1T- 10 R2T- 4
R1T+ 9 R2T+ 3
0V 8 0V 2
+24V 7 +24V 1
TB2
TB2
Port 2 Port 3
WARNING Install the termination jumpers ONLY on the panel at each end of the RS-485
bus. Failure to do so will compromise the proper operation of the communication
channel!
For LNL-3300-ACUXL communication to I/O bus devices: LenelS2 OnGuard Technical Support
recommends not to use RS-485 termination in most installations. End-of-Line resistor termination is only
required for those installations with extremely long wiring runs (nearly 4000 feet).
With standard Lenel I/O device communication: The LNL-3300-ACUXL can communicate to remote
serial I/O modules using 2-wire RS-485. An additional 32 downstream serial I/O modules are supported on
this communication port.
1 1
WARNING
For LNL-3300-ACUXL communication to I/O bus devices: LenelS2 OnGuard Technical Support
recommends not to use RS-485 termination in most installations. End-of-Line resistor termination is only
required for those installations with extremely long wiring runs (nearly 4000 feet).
However, when using 2-wire RS-485, DO NOT install both termination jumpers. Only install Port 2 (J3 and
J5) or Port 3 (J4 and J8) if the LNL-3300-ACUXL is at the end of the communication line, otherwise do not
install these jumpers.
7.2 Input Power, Cabinet Tamper and UPS Fault Input Wiring
The LNL-3300-ACUXL requires 24 VDC power. Locate the power source as close to the unit as possible.
Connect power with a minimum of 18 AWG wire.
WARNING
Connect the GND signal to earth ground in ONE LOCATION within the system! Multiple earth ground
connections may cause ground loop problems and is not advised.
Observe POLARITY on 24 VDC input!
There are two (2) dedicated inputs for cabinet tamper and power fault monitoring. Normal (safe) condition is
a closed contact. If these inputs are not used, install a jumper wire.
CTSW 1
0V
ACPF 2
0V
+12V
0V
0V -
+
3
+27V
1
TB1
Input Power, Cabinet Tamper and UPS Fault Input Wiring Callouts
Callouts Description
1 Cabinet tamper
2 Power fault
3 24 VDC nominal
Zone input circuits can be configured as unsupervised or supervised. When unsupervised, reporting consists
of only the open or closed states. When configured as supervised, the zone input circuit will report not only
open and closed, but also open line fault, shorted line fault, grounded*, and foreign voltage*. A supervised
input circuit requires two resistors be added to the circuit to facilitate proper reporting. The standard
supervised circuit requires 1k Ohm, 1% resistors and should be located as close to the sensor as possible.
Custom end of line (EOL) resistances may be configured via the host software.
* Grounded and foreign voltage states are not a requirement of UL 294 and therefore not verified by UL.
The input circuit wiring configurations shown are supported but may not be typical:
1 K ,1 %
1 K ,1 %
2
1 K ,1 %
1 K ,1 %
3
Twelve relays with Form-C contacts are provided for controlling door lock mechanisms or alarm signaling.
The relay contacts are rated at 2 A @ 30 VDC, dry contact configuration. Each relay has a Common pole
(C), a Normally Open pole (NO) and a Normally Closed pole (NC). When you are controlling the delivery
of power to the door strike, the Normally Open and Common poles are used. When momentarily removing
power to unlock the door, as with a mag lock, the Normally Closed and Common poles are used. Check with
local building codes for proper egress door installation.
Door lock mechanisms can generate feedback to the relay circuit that can cause damage and premature
failure of the relay. For this reason, it is recommended that either a diode or MOV (metal oxide varistor) be
used to protect the relay. Wire should be of sufficient gauge to avoid voltage loss.
1
2
- + 3
TB10 or TB11
NO
C
NC
NO
C
NC
4
Diode Selection:
Diode current rating: 1x strike current
Diode breakdown voltage: 4x strike voltage
For 12 VDC or 24 VDC strike, diode 1N4002 (100V/1A) typical.
1 DC strike
2 To DC power source
3 Fuse
4 Diode
The LNL-3300-ACUXL processor hardware interface is configured using jumpers to setup EOL (end-of-
line) termination.
The following chart describes each jumper:
Use the four S1 DIP switches to configure the operating mode of the LNL-3300-ACUXL processor. DIP
switches are read on power-up (except where noted).
1 2 3 4 Definition
X X ON X Disable TLS secure link. Switch is read only when logging on.
ON ON off off Bulk Erase prompt mode at power up. For more information, refer to
Bulk Erase Function on page 51.
All other switch settings for unassigned and are reserved for future use. X = Not applicable/not used.
Notes: In factory or OEM modes, the downloaded configuration/database is not saved to flash
memory.
Factory default communication parameters:
Network: static IP Address: 192.168.0.251
Gateway mask: 255.255.255.0
Communication address: 0
Primary Host port: IP server, no encryption, Port 3001
Alternate host port: Disabled
9 Configuration
To configure the ACU controller, use the embedded web configuration page to complete basic configuration,
such as:
• Communication address
• Connection type
• Data security
• Port number
• User accounts
For more advanced configuration options, use the host application, such as the OnGuard software.
For information about the Configuration Web Page, refer to Controller Web Page Configuration on page 25.
Set up this controller as you would any other controller by using the ACU Form in the Access Panels
folder. The Access Panels folder is located in System Administration.
Complete the settings on this form and its tabs as applicable for your installation site.
10 Other Functions
The static RAM and the real time clock are backed up by a lithium battery when input power is removed.
This battery should be replaced annually. If data in the static RAM is determined to be corrupt after power
up, all data, including flash memory, is considered invalid and is erased All configuration data must be re-
downloaded. Remove the insulator from the battery holder after installation. Battery type: BR2325,
BR2330, or CR2330.
11 Status LEDs
Note: Do not cycle power while data is written to, or read from, the flash memory.
The following table describes the purpose of each LED on the ISC board.
Run time
LED Description
Run time
4 External communication activity (Port 2)
12 IT Security
When installing the LNL-3300-ACUXL, it is important to ensure that the installation is performed in a
secure manner.
Upon installation, the user accounts to the Web Configuration Page should be created with secure
passwords, and all DIP switches are in the off position for the normal operating mode.
The LNL-3300-ACUXL is shipped from the factory with a default login account, which is enabled when
DIP switch 1 is moved from off to ON. The default login user name and password will be available for five
(5) minutes once enabled. Therefore, it is important that at least one (1) user account is defined, and the DIP
switches are set to off before the LNL-3300-ACUXL is commissioned. It is also highly recommended not to
configure the LNL-3300-ACUXL with an IP address that is accessible from the public Internet.
To further enhance network security, options are available to disable SNMP, Zeroconf discovery, as well as
the Web Configuration module, itself. Additionally, data encryption can also be enabled over the host
communication port.
13 CE Compliance Requirements
In order to comply with CE EN-50130-4 and EN 61000-6-4 specifications a ferrite choke must be added to
the Ethernet cable. Install the ferrite chock as close to the MI-XL16 Ethernet jack, J1. Ferrite choke: Fair-
Rite part number 0446164181.
J1 - Ethernet Cable
1
2 4
2 To Ethernet network
3 Ferrite choke
14 UL 294 Installations
For UL 294 installations, the LNL-3300-ACUXL has been evaluated to the following performance levels:
LNL-3300-ACUXL 1 2 4 4
15 UL Listed Installations
AC Fail Relay on
Power Supply
TB1
LNL-3300-ACUXL
NC
C Pin# 5 - GND
NO Pin# 6 - ACPF
LED
TB5
LNL-3300-ACUXL
640
Pin# 3
+5 VDC
- Backup power is provided by installing two (2) customer-supplied 12 VDC 7aH batteries
connected to the ESD-20 power supply.
ESD-20
Power Supply
Battery 1 Battery 2
- -
16 Specifications
• Memory and Clock Backup: 3 Volt Lithium, type BR2325, BR2330 or CR2330
• Host communication: Ethernet: 10Base-T/100Base-TX
• Downstream communication: Two each, 4-wire RS-485, 2400-115200 bps, asynchronous,
half-duplex, 1 start bit, 8 data bits, and 1 stop bit.
• Inputs:
- 2 unsupervised, dedicated for tamper and UPS fault monitoring
- 12 for door position monitoring, request to exit or alarm contacts
• Relays: Twelve each: Form-C, 2A @ 30 VDC, resistive
• Cable requirements:
- Power:1 stranded, twisted pair, 18-16 AWG
- Ethernet: CAT-5, minimum
- RS-485 (Serial I/O device ports): 24 AWG stranded twisted pairs with an overall shield of 4000 ft
(1219 m) maximum
- Alarm input: 1 stranded twisted pair, 30 ohms maximum, typically 22 AWG @ 1000 ft (304.8 m)
• Environmental:
- Temperature:
Storage -55 to +85 °C
Operating 0 to +50 °C
- Humidity: 5 to 95% RHNC
• Mechanical:
- Dimension: W 10.4 x L 7.85 x H 1.75 in. (264.2 x 199.4 x 27.3 mm)
- Weight: 12.0 oz. (343 g) nominal, without terminal blocks
• Certifications:
- UL 294 Listed
- FCC Part 15
- CE marking
- RoHS compliant
- Environmental class: Indoor dry, protected area
These specifications are subject to change without notice.
This installation guide is intended for use by technicians who will be installing and maintaining the
Intelligent System Controller with Four Reader Interfaces.
The LNL-2240-RS4 is a replacement for the ACURS2, ACURS4, ACURT2, and ACURT4 circuit boards
when converting to the Lenel hardware platform. This board is intended to be installed in existing ACU
enclosures. The LNL-2240-RS4 is comprised of two sections; intelligent controller and hardware interface
(readers, door hardware, etc.). This intelligent controller provides decision making, event reporting, and
database storage. The on-board 10Base-T/100Base-TX Ethernet port is the communication connection to the
host. The alternate host communication connection is an optional 10-BaseT/100Base-TX Ethernet port using
a Lantronix Micro125 interface daughter board, p/n MO11AA003-01R, or equivalent. This alternate host
port communication connection has not been evaluated by UL. The LNL-2240-RS4 does not support any
other communication options to the host.
The LNL-2240-RS4’s field hardware interface consists of four (4) reader ports, eight (8) relays and twelve
inputs. The reader interface supports D1/D0 or Clock/Data signaling.
The relays have Form-C contacts rated at 2 A @ 30 VDC, dry contact configuration for switching external
devices. Twelve general purpose inputs monitor unsupervised or supervised circuits. Open collector outputs
are provided to control each reader’s red and green LED and the buzzer. One 4-wire RS-485 port is provided
for communication to the downstream I/O devices.
The LNL-2240-RS4 requires 24 VAC for input power. Supports the charging of 24 Volt, 7 Ah rechargeable
sealed lead-acid battery for UPS operation.
1
8 9 10
2
1 5
RX+
T B 10
TX+
RX-
TX-
J1
0V
TB8 1
2 4V AC
2 4V AC
3 FRA M E
GND TB10
0V
J 12 0V
J4 J7
BA T T+
2 4V
BA T T-
J8
4 J1 1 T B 11
TB11
1
P FLT
0V
TMPR
T B2 1 2 3 4 5 6 3
T B 12
1 1
TB2
+ 12V + 12 V
+5 V + 5V
TB12
0V 0V
D0 J2 D0
D1 D1
RL ED
S1 RL ED
1 ON
G L ED 2 G L ED
3
B ZR
8
4 J1 0
8
B ZR
TB3
T B3 TB1 3
J9
1 1
IN0
S2 IN0 TB13
5 IN1
J15
IN1
1 1.00 [ 279.40]
IN2 IN2
6 6
TB1 4
TB4 T B4 1
TB14
BT1
1 NC
NC
K1
C
C
K5
NO
NO 3
3
6
T B5 J17 T B 15
1 1
TB5
+ 12V + 12 V
+5 V + 5V
TB15
0V 0V
J1 3 J 14
D0 J6 D0
D1 D1
RL ED RL ED
G L ED
ON
1 2 3 45 6 7 8 G L ED
3.55 [ 90.17]
B ZR B ZR
8 S3 8
TB6 T B6
1
TB1 6
1
IN0
IN0 TB16
7 IN1
K3 K4 K7 K8
IN1
IN2
IN2
6
6
TB7 T B7
1 K2 TB1 7
1
NC
K6 NC
TB17
C C
TB1 8
7 8 9 10 11 12
1
1
TB9
NC
NC
6
6
NO
NO
NO
NO
NC
NC
NO
NO
3 3
TB9 TB18
Ø.156
4.55 [1 15.57] 4.55 [1 15.57] 0 .950 [ 24.13]
10PL
4 Reset switch
10 Chassis ground
Note: Except for TB1 through TB18, J4, J7 and J8, all test points, jumper, etc. are for factory use
only.
18 Installation
To install the ISC, perform the installation procedures described in the following sections, in the order in
which they are presented.
19.1 Input Power, 24 Volt Battery, Cabinet Tamper and Power Fault
Wiring
Input power for the LNL-2240-RS4 board is 24 VAC connected to TB10 pins 1 and 2. The LNL-2240-RS4
supplies charging current for a 24 volt rechargeable battery. Typically, two 12 volt @ 7 Ah rechargeable
batteries are used (wired in series). The UPS 24 volt battery is connected to TB10 pin 6 (+) and TB10 pin 7
(-).
Pin Description
TB10-1 24 VAC
TB10-2 24 VAC
Pin Description
TB10-4 0V
TB10-5 0V
+
TB10
1 12V 7 Ah
-
+ +
- 24 VDC 12V 7 Ah
7
There are two (2) dedicated inputs for cabinet tamper and UPS AC power fault. Normal (safe) condition is a
closed contact. If these inputs are not used, install a jumper wire.
2 0V 0V 3
It is to ground the board to frame ground. If metal standoffs are used, the mounting hole next to TB10 is
plated for the frame ground connection. If plastic standoffs are used, the frame ground connection is pin 3 of
TB10.
1 +12 VDC +12 VDC Power Output 1 +12 VDC +12 VDC Power Output
3 0V Ground 3 0V Ground
2 C Common 2 C Common
2 C Common 5 C Common
1 +12 VDC +12 VDC Power Output 1 +12 VDC +12 VDC Power Output
3 0V Ground 3 0V Ground
2 C Common 2 C Common
2 C Common 5 C Common
The LNL-2240-RS4 can communicate to remote serial I/O modules using 2-wire or 4-wire RS-485. An
additional 32 downstream serial I/O modules are supported on this communication port.
1 1
GND
RX+
TX+
RX+
RX-
TX+
TX-
RX-
TX-
0V
1 5
TB8
J4 J7 2
Typically, these inputs, IN0, IN1 & IN2 for each of the four reader ports, are used to monitor door position,
request to exit, or alarm contacts. Input circuits can be configured as unsupervised or supervised. When
unsupervised, reporting consists of only the open or closed states. When configured as supervised, the input
circuit will report not only open and closed, but also open line fault, shorted line fault, grounded*, and
foreign voltage*. A supervised input circuit requires two resistors be added to the circuit to facilitate proper
reporting. The standard supervised circuit requires 1k ohm, 1% resistors and should be located as close to
the sensor as possible. Custom end of line (EOL) resistances may be configured via the host software.
* Grounded and foreign voltage states are not a requirement of UL 294 and therefore not verified by UL.
The input circuit wiring configurations shown are supported but may not be typical.
1K, 1%
1
1K, 1%
1K, 1%
5
2
1K, 1%
Eight relays, two for each of four reader ports, with Form-C contacts are provided for controlling door lock
mechanisms or alarm signaling. The relay contacts are rated at 2 A @ 30 VDC, dry contact configuration.
Each relay has a Common pole (C), a Normally Open pole (NO) and a Normally Closed pole (NC). When
controlling the delivery of power to the door strike, the Normally Open and Common poles are used. When
momentarily removing power to unlock the door, as with a mag lock, the Normally Closed and Common
poles are used. Check with local building codes for proper egress door installation.
Door lock mechanisms can generate feedback to the relay circuit that can cause damage and premature
failure of the relay. For this reason, it is recommended that a diode be used to protect the relay. Wire should
be of sufficient gauge to avoid voltage loss.
1 2
Diode Selection:
Diode current rating: 1x strike current
Diode breakdown voltage: 4x strike voltage
FUSE
For 12 VDC or 24 VDC strike, diode
1
NC 1N4002 (100V/1A) typical
C
NO
3
4
3
1 DC strike
2 To DC power source
3 Suppression diode
Use the four S1 DIP switches to configure the operating mode of the LNL-2240-RS4 processor. DIP
switches are read on power-up (except where noted).
1 2 3 4 Definition
X X ON X Disable TLS secure link. Switch is read only when logging on.
ON ON off off Bulk Erase prompt mode at power up. For more information, refer to
Bulk Erase Function on page 72.
All other switch settings for unassigned and are reserved for future use. X = Not applicable/not used.
Notes: In factory or OEM modes, the downloaded configuration/database is not saved to flash
memory.
Factory default communication parameters:
Network: static IP Address: 192.168.0.251
Gateway mask: 255.255.255.0
Communication address: 0
Primary Host port: IP server, no encryption, Port 3001
Alternate host port: Disabled
Note: Do not cycle power while data is written to, or read from, the flash memory.
• Running: The following table describes the LED status in the Running mode.
LED DESCRIPTION
23 Configuration
To configure the ACU controller, use the embedded web configuration page to complete basic configuration,
such as:
• Communication address
• Connection type
• Data security
• Port number
• User accounts
For more advanced configuration options, use a host application, such as the OnGuard software.
For information about the Configuration Web Page, refer to Controller Web Page Configuration on page 25.
Set up this controller as you would any other controller by using the ACU Form in the Access Panels
folder. The Access Panels folder is located in System Administration.
Complete the settings on this form and its tabs as applicable for your installation site.
24 Other Functions
The static RAM and the real time clock are backed up by a lithium battery when input power is removed.
This battery should be replaced annually. If data in the static RAM is determined to be corrupt after power
up, all data, including flash memory, is considered invalid and is erased All configuration data must be re-
downloaded. Remove the insulator from the battery holder after installation. Battery type: BR2325,
BR2330, or CR2330.
Note: If clearing the memory does not correct the initialization problem, contact LenelS2 OnGuard
Technical Support.
Note: Install the termination jumpers ONLY on the panel at each end of the RS-485 bus. Failure to do
so will compromise the proper operation of the communication channel!
25 IT Security
When installing the LNL-2240-RS4, it is important to ensure that it is done in a secure manner.
Upon installation, the user accounts to the web configuration page should be created with secure passwords,
and that all DIP switches are in the off position for the normal operating mode. The LNL-2240-RS4 is
shipped from the factory with a default login account, which is enabled when DIP 1 is moved from OFF to
ON. The default login user name and password will be available for five minutes once enabled. Therefore, it
is important that at least one user account is defined, and the DIP switches are set to OFF before the LNL-
2240-RS4 is commissioned. It is also highly recommended not to configure the LNL-2240-RS4 with an IP
address that is accessible from the public Internet.
To further enhance network security, options are available to disable SNMP, Zeroconf discovery, as well as
the web configuration module itself. Additionally, data encryption can also be enabled over the host
communication port.
26 CE Compliance Requirements
In order to comply with CE EN-50130-4 and EN 61000-6-4 specifications ferrite chokes must be added to
all data cables exiting the enclosure. Install ferrite choke as close to the LNL-2240-RS4 circuit board as
possible. Chose the appropriate ferrite choke to accommodate the cable diameter used:
• Fair-Rite # 0461164281: 0.25 inch diameter hole for cable
• Fair-Rite # 0461164181: 0.50 inch diameter hole for cable
• Fair-Rite # 0461176451: 0.70 inch diameter hole for cable
Ethernet Cables
2 3
1 Cable-1/2 turns
4 Ferrite Choke
27 UL 294 Installations
For UL 294 installations, the LNL-2240-RS4 has been evaluated to the following performance levels:
LNL-2240-RS4 1 2 4 4
28 UL Listed Installations
NC Pin# 1 - ACPF
C Pin# 2 - GND
NO
LED
TB15
640 LNL-2240-RS4
Pin# 2
+5 VDC
- Back-up power is provided by installing two (2) customer-supplied 12VDC 7aH batteries
connected to the ACU-5APWR power supply.
Battery
-
+
29 Specifications
A L
ACU controllers LNL-2240-RS4
LNL-2240-RS4.................................... 59 24 volt battery wiring .......................... 61
LNL-3300-ACUXL............................. 39 bulk erase function .............................. 72
ACU legacy reader support.......................... 12 cabinet tamper wiring.......................... 61
CE compliance requirements .............. 73
D DIP switches........................................ 68
frame grounding .................................. 62
DIP switches installation ........................................... 61
LNL-2240-RS4.................................... 68 IT security ........................................... 73
LNL-3300-ACUXL............................. 49 memory and real time clock
setting for controller configuration backup battery ............................... 72
web page login............................... 25 relay circuit wiring .............................. 66
Disable RS-485 communication wiring
default user .......................................... 34 (TB8) ............................................. 65
SD card interface................................. 34 Serial I/O status LEDs......................... 70
SNMP .................................................. 34 specifications....................................... 76
USB interface ...................................... 34 status LEDs ......................................... 69
web server ........................................... 34 UL listed installations ......................... 74
zeroconf device discovery................... 34 verification .......................................... 70
LNL-3300-ACUXL
E bulk erase function .............................. 51
Electrostatic Discharge (ESD) ..................... 14 cabinet tamper wiring.......................... 45
Embedded web server configuration ........... 25 CE compliance requirements .............. 54
Enable communication wiring ........................ 44
diagnostic logging ............................... 34 DIP switches........................................ 49
door forced open filter......................... 34 installation ........................................... 41
IT security ........................................... 53
H memory and real time clock
backup battery ............................... 51
Hardware installation guidelines ................... 9 relay circuit wiring .............................. 47
Hardware interface connections Serial I/O status LEDs......................... 52
LNL-2240-RS4.................................... 63 specifications....................................... 56
LNL-3300-ACUXL............................. 42 TB1 and TB2 connections................... 42
TB3 and TB4 connections................... 43
I TB5 connections.................................. 44
Input circuit wiring UL listed installations ......................... 55
LNL-2240-RS4.................................... 66 UPS fault input wiring ........................ 45
LNL-3300-ACUXL............................. 46 verification .......................................... 52
Input power wiring
LNL-2240-RS4.................................... 61 P
LNL-3300-ACUXL............................. 45 Power fault wiring
Installation LNL-2240-RS4 ................................... 61
general rules ........................................ 14 LNL-3300-ACUXL............................. 45
legacy downstream devices................. 12
noise prevention .................................. 14 R
outline.................................................. 13
overview .............................................. 13 Radio interference........................................ 14
signal transmission .............................. 14 Relay circuit wiring
IT security LNL-2240-RS4 ................................... 66
LNL-2240-RS4.................................... 73 LNL-3300-ACUXL............................. 47
LNL-3300-ACUXL............................. 53
S
Safety installation ........................................ 14
Specifications
LNL-2240-RS4.................................... 76
LNL-3300-ACUXL............................. 56
Status LEDs
LNL-2240-RS4.................................... 69
LNL-3300-ACUXL............................. 52
T
Transmission signal ..................................... 14
U
UL
additional requirements ....................... 21
minimum computer requirements ....... 15
operating temperature range................ 15
power requirements ............................. 17
requirements for certified
installations.................................... 15
UL certified power supplies......................... 17
with ACU legacy configurations......... 18
with ACU standard configurations...... 19
UL listed wiring
AC power fail
LNL-2240-RS4.............................. 75
LNL-3300-ACUXL....................... 55
backup power supply battery
LNL-2240-RS4.............................. 75
LNL-3300-ACUXL....................... 56
V
Verification
LNL-2240-RS4.................................... 70
LNL-3300-ACUXL............................. 52
W
Web page configuration for intelligent
controllers............................................... 25
apply and save settings........................ 37
auto save settings................................. 35
display device information .................. 30
host communication settings ............... 29
load security certificates...................... 36
log out.................................................. 37
network settings................................... 28
restore settings..................................... 36
security settings ................................... 36
server busy error.................................. 27
Time server, external........................... 34
user accounts ....................................... 31
create or edit .................................. 32
delete.............................................. 33
user limit.............................................. 27