@ladanyiszabolcsI get the same results as you. The following comments are for a EVO192 panel:The encrypted IP150 password is contained in the first message sent to the panel, as part of bytes 10h to 1fh and is not influenced/complicated by the following values:1) the IP150 MAC address2) the IP150 IP address3) the WinLoad / BabyWare options set up in the actual panel ie: 'Panel ID' (default: 0000) or the 'PC password' (default: 0000)4) Babyware allow the user to select different encryption strengths. Changing these does not influence/complicate this first message.The second message sent to the panel almost certainly contains an encoded session key as part of bytes 10h to 1fh.

• Paradox Winload Software
• Winload Paradox Download

Every time a login is performed, they change.In this code, at line 238, one of the bytes in the initial command is set to 08h, instead of the normal 09h. Allowing the use of plain text for the first command.I tried this in a quick Lua hack and I could send the IP150 password as plain text and get a logged in response from the IP150. It appears the response contains a session key in bytes 11h to 20h but how to use it?

The key is 8 bytes long hex, eg '580D0E70E01E3B2', just like the session key hidden in the html code, as used by the web page access method.So for encrypted results, two things need to happen:1) the session key needs to be extracted/decoded - probably encrypted using the IP150 password 'somehow'.2) then the session key need to be applied to all the data 'somehow'. Hi everyone.I have found a tread on the Smarttings Forum:They seems to have find a way to connect to the IP150. They have put the code here:ALSO FUND DIRECTLY ON PARADOX WEBSITE:CMSI - SDKThe CMSI SDK (Central Monitoring Station Integration Software Development Kit) enables central monitoring stations to monitorand control registered Paradox accounts from third party applications like automation software. The CMSI SDK gives the CMSthe complete functionality of the IPRS-7 control over panels from within their automation software. The central monitoring softwareuses the IPRS-7 emulator as a bridge to perform actions directly with the connected account.Use of the CMSI SDK is reliant upon the central monitoring station integrating the IPRS-7 emulator.For more information and to request the CMSI SDK, please contact.Let me know if it help some how.Keep us update! May need to start a new thread here somewhere. There are at least five methods of connecting to these panels:1) interfacing to the panel 4 wire 'combus' like this:2) direct connection to the serial interface eg:3) interfacing with the serial interface using an APR3-PRT3 (as per Guest's Vera plugin)4) via an IP150 and the web interface it provides atPGMs are not controllable using this method, excepting the two IP150 PGMs.5) using a socket connection on port 10000 to access the IP150, as used by the Paradox programs 'Babyware' and 'Winload'My previous comments have been referring to method 5.

Re: Paradox alarm with IP150 interface integration. In this code, at line 238, one of the bytes in the initial command is set to 08h, instead of the normal 09h. Allowing the use of plain text for the first command. I tried this in a quick Lua hack and I could send the IP150 password as plain text and get a logged in response from the IP150.

Maybe someone can point me in the right direction here. I am EXTREMELY interested in being able to integrate Paradox in to my own Vera set up. However where I am different, is I work for a national Paradox distributor and have access to virtually all equipment and their Tech department.I can see that the EVO board can be connected to via the in option 3 above.Where can i find more info on what is supported, and how?Ideally I would like to find a way to control the MG-5050 board via an IP150 as per your option 4 above. Re: option 3) - check with @GuessedRe: option 4) - scraping a web page gives a very fragile result. The Paradox page implementation is also pretty crude, but I'm working on a very simple plugin. I hope to have variables for each zone and to be able to arm/disarm the alarm.

Paradox Winload Software

Winload Paradox Download

That's about it. Other than that I would have to think about it. This may all take awhile, as I have other stuff on.A few issues:a) you have to poll a complete web page, which tends to make the response time somewhat sluggish. Especially when one considers the IP150 is talking to the alarm systems using a low speed serial connection.b) any passwords or keypad codes may have to be coded in; making them quite vulnerable plus they probably end up on the mios servers. I'll work on that one.c) I'm not inclined to have child devices. Having to mess around with 192 of them eg the Paradox EVO, seems like too much work.d) I'm wondering if Vera is up to the job.Re: option 5) the IP150 password encoding in the first command needs to be determined.