Connection methods

Connection methods

Connection	CONNECTION_TYPE	Notes
Native serial	Serial	USB serial adapter / supported panel interface
IP100 / IP150	IP	Prefer a local connection
Serial over TCP	IP + IP_CONNECTION_BARE: true	Transparent serial bridge, not an IP150
PRT3	PRT3	ASCII printer-module interface; different features and credentials

These examples use YAML. For pai.conf, use Python syntax (= and True/False); see Configuration.

Serial connection

The panel serial port must be available. Use a suitable USB serial adapter or a level-shifted interface that matches your hardware. Follow the panel/adapter manuals; pin order and voltage levels are not universal.

Do not connect the panel's AUX+ to a serial data input or directly to a Raspberry Pi/ESP32 supply. Do not connect 5 V signals directly to a 3.3 V-only GPIO. Use appropriate isolation/level conversion and a qualified installer if unsure.

CONNECTION_TYPE: Serial
SERIAL_PORT: /dev/serial/by-id/your-adapter
SERIAL_BAUD: 9600
PASSWORD: '0000'  # Replace with the PC password

Panel	Typical baud rate	Notes
Spectra / Magellan	9600	Match the actual panel setting
EVO	38400 or 57600	Both ends must match
Newer + panels	May use 115200	Check the model manual and compatibility reports
MG6250	57600	Login-only support; see below

On Home Assistant OS, inspect Settings -> System -> Hardware -> All hardware for the adapter. On standalone Linux, check serial permissions. Docker must map the device into the container.

Encrypted EVO serial

PAI 3.8.1 supports the full-AES serial protocol used by supported EVO firmware 7.50+:

SERIAL_ENCRYPTED: true
PASSWORD: '0000'  # Actual PC password; preserve leading zeroes

This also applies to bare serial-over-TCP. Leave it disabled for unencrypted serial. The compact Babyware E0 FE format is different and is not decrypted by this feature.

Do not upgrade firmware solely to enable encryption: firmware changes may be irreversible, and support is protocol/model-specific. See compatibility and the released protocol notes.

MG6250

Experimental: authentication and session decryption only. Status, labels, and panel controls are not implemented; this is not a usable full alarm integration yet.

CONNECTION_TYPE: Serial
SERIAL_PORT: /dev/ttyUSB0
SERIAL_BAUD: 57600
MG6250_USERNAME: admin
PASSWORD: 'your-PC-password'

MG6250 uses its own encrypted protocol. Do not enable SERIAL_ENCRYPTED for it; that option selects EVO framing.

IP module connection (IP100, IP150)

PAI implements the reverse-engineered PC connection protocol. IP100, IP150, IP150+, and IP150S compatibility depends on module firmware; check user reports.

IP150 firmware	Historically supported connection
Below 4.x	Local
4.x to below 4.40.004	SWAN only
4.40.004 and newer	Local and SWAN, subject to model/firmware restrictions

These are historical ranges, not a guarantee for every future firmware. Check reports before changing firmware.

Local network connection

CONNECTION_TYPE: IP
IP_CONNECTION_HOST: 192.168.1.10
IP_CONNECTION_PORT: 10000
IP_CONNECTION_PASSWORD: 'paradox'  # Actual module password
IP_CONNECTION_SITEID: null
IP_CONNECTION_EMAIL: null
PASSWORD: '0000'  # Actual panel PC password

• Clear IP_CONNECTION_SITEID and IP_CONNECTION_EMAIL to avoid selecting SWAN.
• IP modules generally allow one PC session at a time. Disconnect Babyware/other clients before starting PAI; concurrent Insite Gold access may also be affected.
• Keep the module on a trusted network. Do not expose its port to the internet.

Cloud connection (SWAN) - not recommended

Prefer local IP or serial. SWAN adds cloud dependence and reconnection problems; also see the published security concerns.

CONNECTION_TYPE: IP
IP_CONNECTION_SITEID: 'your-site-id'
IP_CONNECTION_EMAIL: 'you@example.com'
IP_CONNECTION_PANEL_SERIAL: null  # First panel; set a serial to select another
IP_CONNECTION_PASSWORD: 'paradox'  # Actual module password
PASSWORD: '0000'  # Actual PC password

The local host/port are not used for a SWAN connection. Avoid repeated login attempts with incorrect credentials.

Serial over IP (ESP32)

A transparent TCP bridge forwards the native serial byte stream, without an IP150 wrapper:

CONNECTION_TYPE: IP
IP_CONNECTION_HOST: 192.168.1.20
IP_CONNECTION_PORT: 23  # Use the bridge's configured port
IP_CONNECTION_BARE: true
IP_CONNECTION_SITEID: null
IP_CONNECTION_EMAIL: null
PASSWORD: '0000'

Set the bridge's UART baud rate to match the panel; SERIAL_BAUD does not configure a remote bridge. IP_CONNECTION_PASSWORD is not used to authenticate a bare TCP tunnel.

For full-AES EVO serial, also set SERIAL_ENCRYPTED: true. A tunnel does not bypass firmware encryption.

Restrict the bridge to a trusted network/VPN. Bare TCP has no IP150 authentication or network TLS.

Community bridge projects (separate from PAI):

• PAI-ESP32 / ESPHome examples
• ESP8266 example discussion

Review hardware-level safety and firmware instructions in those projects; PAI tests do not validate their wiring or firmware.

Ethernet-USB-Interface

The community Paradox Ethernet-USB Interface provides a serial bridge over USB or Ethernet.

Use the serial configuration for USB, or bare TCP configuration for Ethernet. This is not an IP150 module. Use the actual device path/host/port and the configuration syntax appropriate to your file.