> For the complete documentation index, see [llms.txt](https://help.security.gallagher.com/smb/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.security.gallagher.com/smb/installing-gallagher-smb/bring-controller-online.md).

# Bring Controller online

The Gallagher SMB Kit installation note contains the procedures for bringing the controller online. This topic contains information to surplus the installation note, in case further help is required.

**Bringing the controller online**

The Controller should be brought online before the site is configured in the SMB Installer Portal.

1. Connect the site's LAN (Ethernet cable) to the Router's secondary Ethernet port.
2. Power on the Controller and wait for for the Controller to show as Online in the SMB Installer Portal.\
   To indicate the Controller has come online in the SMB Installer Portal, the word 'OFFLINE' will *not* display next to the Controller item on the 'HARDWARE' tab. The physical Controller also enters the single flash state when it comes online.
3. Once connected, the controller will receive any outstanding firmware updates from the Cloud server.

{% embed url="<https://youtu.be/kfn-f8kXmyY?si=QWX0T0jpxJqZOIjV>" %}

***

### If the Controller doesn't come online <a href="#controller_doesnt_come_online" id="controller_doesnt_come_online"></a>

Check the site has an internet connection - plug the laptop into the network via ethernet and test the connection.

If the site does have internet connectivity, try the following:

1. Check the controller flash state (see below table)
2. Use cellular router instead, as a last resort

**Controller Flash Modes**

The 8 In 4 Out LED is located near the centre of the board. The 8 In LED is located above IN3.

| Flash                                          | Pa                                                                               | Meaning                                                                                                                                                                                                      |
| ---------------------------------------------- | -------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| <p>Short flash<br>Long flash<br>(1s cycle)</p> | <p>100 ms on, 250 ms off<br>400 ms on, 250 ms off</p>                            | Boot code monitor running, network unplugged.                                                                                                                                                                |
| Half flash                                     | <p>450 ms on, 50 ms off<br>(2Hz flash)</p>                                       | Controller resetting.                                                                                                                                                                                        |
| Fast                                           | <p>130 ms on, 130 ms off<br>(4Hz flash)</p>                                      | Initialising.                                                                                                                                                                                                |
| 1 flash                                        | <p>500 ms on, 500 ms off<br>(1Hz flash)</p>                                      | Normal running.                                                                                                                                                                                              |
| 2 flash                                        | <p>2 flashes - pause<br>(each flash is 50 ms on,<br>400 ms off, 1.2 s pause)</p> | Controller is operating, connected to the Cloud server but has no configuration.                                                                                                                             |
| 3 flash                                        | <p>3 flashes - pause<br>(each flash is 50 ms on,<br>400 ms off, 1.2 s pause)</p> | Controller has a valid set of keys but has not connected to the Cloud server.                                                                                                                                |
| 4 flash                                        | <p>4 flashes - pause<br>(each flash is 50 ms on,<br>400 ms off, 1.2 s pause)</p> | No private keys or certificate loaded, so will be unable to authenticate with the Cloud server. Contact the Gallagher Support Team.                                                                          |
| 5 flash                                        | <p>5 flashes - pause<br>(each flash is 50 ms on,<br>400 ms off, 1.2 s pause)</p> | Controller has a connection to the Cloud server but either the server has failed to authenticate the Controller or the Controller has failed to authenticate the server. Contact the Gallagher Support Team. |
| 6 flash                                        | <p>6 flashes - pause<br>(each flash is 50 ms on,<br>400 ms off, 1.2 s pause)</p> | Controller does not have runnable firmware. Contact the Gallagher Support Team.                                                                                                                              |

#### Firewall

If the site has a firewall, this may also stop the controller from coming online.

The customer will need to open the required ports/protocols to allow the controller to communicate to the internet through their firewall.

**Destination Ports**

Detailed below are the destination ports that the SMB Controller and router will try to connect to for various services.

**SMB Controller:**

| Port Number | Protocol | Details                 |
| ----------- | -------- | ----------------------- |
| 67          | UDP      | DHCP to internal router |
| 53          | UDP      | DNS to internal router  |
| 123         | UDP      | NTP to time.google.com  |
| 443         | TCP      | SMB Cloud HTTPS         |

**Router:**

| Port Number | Protocol | Details                 |
| ----------- | -------- | ----------------------- |
| 67          | UDP      | DHCP to internal router |
| 53          | UDP      | DNS to internal router  |
| 123         | UDP      | NTP to time.google.com  |
| 514         | UDP      | RCMS Syslog             |
| 443         | TCP      | RCMS HTTPS              |
| 8883        | TCP      | RCMS HTTPS              |
|             | ICMP     | Ping time.google.com    |

***

### Clearing the Controller's configuration <a href="#clearing_the_controllers_configuration" id="clearing_the_controllers_configuration"></a>

**Basic reset**

To do a basic reset of the Controller's configuration, perform the following procedure:

1. Set DIP switch 2 to ON.
2. Power cycle the Controller.
3. Wait a few minutes until the LED is flashing in a steady state (2 flash or 5 flash).
4. Set DIP switch 2 to OFF.
5. Power cycle the Controller again.

   The Controller can now be assigned to a new site.

**More reset options**

If a basic reset is not sufficient, refer to the *"DIP switch settings"* section in your Controller's Install Note for more information about the DIP switch functionality.

***

### How the Controller works

The Controller works through the following steps:

* The Controller requests an IP address using DHCP.
* The DHCP server on the local area network assigns an IP address to the Controller, so it can send and receive TCP/IP messages from the Cloud server.
* Most networks have a DHCP server. The Router provided has a DHCP server.
* The Controller uses DNS to resolve the IP address for the Gallagher cloud services.
* The Controller uses the SNTP to obtain the time.
* The Controller establishes an HTTPS session with the Cloud server for encrypted communications.
* The Controller authenticates the Cloud server. This ensures that site-specific data is only exchanged with the authentic Cloud server.
* The Cloud server authenticates the Controller. This ensures that site-specific data is only exchanged with a Gallagher provisioned device.

The Controller connects to the site's local TCP/IP network. If required (i.e. TCP/IP network connectivity is unreliable), the Router can be used to provide connection to a mobile network provider. The router comes pre-equipped with a SIM card and an ethernet cable to connect it to the controller. Purchase of the Cellular data subscription package will automatically enable the controller to communicate over the cellular network.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.security.gallagher.com/smb/installing-gallagher-smb/bring-controller-online.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
