APPENDIX 3

ZBN-20(1)Z27FS_Version 1.3 2011.01.14

APPENDIX 3

Color CCD Zoom Camera

ZxN-20(1)Z2xF ZBN-20(1)Z27FS_Version 1.3 2011.01.14 ZxN-20(1)Z2x

Color CCD Zoom Camera

ZxN-20(1)Z2xF ZxN-20(1)Z2x

IN CHARGE

CHECKED

APPROVED

APPROVAL DATE

2011.02.20

CNB Technology Inc.

IN CHARGE

CHECKED

APPROVED

ZBN-20(1)Z27F`s Protocol Version 1.3

- INDEX Communication Format .............................................. 3~5 Command List - Command Reference .................................................. 6
- Response Packet

............................................................ 6~8

General Control Commands - 1 .................................. 9 General Control Commands - 2 ................................. 10 Digital Effect and OSD Control Commands................. 11 AE Control Command ................................................. 12 Focus Control Commands .......................................... 13 Zoom/Focus Operation Commands 1 ...................... 14 Zoom/Focus Operation Commands 2 ...................... 15 Preset Control Commands .......................................... 16 WB Control Commands .............................................. 17 Privacy Control Commands 1 .... 18 Privacy Control Commands 2 .... 19 Key Action Commands - 1 .......................................... 20 Key Action Commands - 2 .......................................... 21 Support Pelco-D compatible Protocol Commands .... 22 Support Pelco-P compatible Protocol Commands .... 23

-2-

ZBN-20(1)Z27F`s Protocol Version 1.3

Communication Format
ZBN-20(1)Z27Fs RS-232C Communication Format
Communication between camera and user is available by using RS-232C.

Packet Structure
The basic unit of communication is called PACKET. All bytes of the packet are ASCII format. The first byte of the packet is called Header. And the second and third bytes are ID of the camera. And the forth and the fifth bytes are Command Message. And from the sixth to the ninth bytes are Command Option. And the last two bytes are Check sum of the packet. The check sum is sum of 9 bytes(byte0~byte8). The header must be *. All bytes of the packet must be a Capital Letter.

Parameter of RS-232C
Baud Rate : 9.6kbps Start bit : 1 Stop bit : 1 Data bits : 8 None Parity Flow control : XON/XOFF,RTS/CTS is not supported.

Packet(11bytes) Header Camera ID Command message Command Option Check Sum

Byte

0 *

1 IDH

2 IDL

3 CMH

4 CML

5 CO1

6 CO2

7 CO3

8 CO4

9 CSH

10 CSL

0 LSB

X X X X X X X X MSB LSB

MSB

Command Packet Block

-3-

ZBN-20(1)Z27F`s Protocol Version 1.3

Bytes of a packet Byte 0 : Header It must be the ASCII code * (2A hex) Byte 1 Byte 2 : High character of camera ID : Low character of camera ID

Check Sum Method The value of check sum is calculated as follows. Check Sum = Byte0 + Byte1+ + Byte8 Ex) if ID = 43 d (2B hex), command = 75 hex, command option = 0000 command byte0~byte8 : * 2B 75 0000 ASCII format : 2A 32 42 37 35 30 30 30 30 Sum = 2A+32+42+37+35+30+30+30+30 = 1CA hex So, the Check Sum = CA So the complete command packet = * 2B 75 0000 CA

Ex) current camera ID : 43 decimal 43 decimal = 2B hex Byte 1 : ASCII code 2(32 hex) Byte 2 : ASCII code B(42 hex) Byte 3, Byte 4 : Command Byte 5 ~ Byte 8 : Option of command Byte 9 : High byte of check sum Byte 10 : Low byte of check sum

Response from the camera If the command packet is transmitted to the camera accurately, the camera will send the response packet. If the camera doesnt receive the right command packet, it will not send any response packet.

Response Time Most of the response packet will be transmitted as soon as the camera received the command packet. This time is more than 2ms.

Packet(11bytes) Header Response Data Check Sum

Byte

0 *

1 D1

2 D2

3 D3

4 D4

5 D5

6 D6

7 D7

8 D8

9 CSH

10 CSL

0 LSB

X X X X X X X X MSB LSB

MSB

Response Packet Block

-4-

ZBN-20(1)Z27F`s Protocol Version 1.3

Communication Time Delay When transmitting 1 packet(11 bytes), keep 2 milli-seconds waiting time between bytes. After transmitting the first packet, wait for 25 ms to transmit next command packet. Packet delay time > 25ms

*) Byte delay and Packet delay is a time delay for stable communication.
byte 0 byte2 byte10 Packet delay byte0

9600bps 1st command packet Delay Time Setting 25 msec 2nd command packet

Advice for communication If the command packet is transmitted only 4 bytes, then the camera will wait for remain 7 bytes continuously. At that moment, if a new packet is transmitted to the camera, the previous 4 bytes will be ignored. If the camera doesnt send any response packet, there should be some troubles in communication line or any other communication condition. If the camera response mode is Skip Command response packet mode, then the camera will not send Command response packet. Even if the response mode is Skip Command response packet mode , the Data response packet will be transmitted to PC.

-5-

ZBN-20(1)Z27F`s Protocol Version 1.3

Command List
ZBN-20(1)Z27Fs RS-232C Command Reference
All of commands must be capital letters. * : Header X : Dont Care x : Not specified NN : Camera ID YY : Check Sum Z,S,M,P,Q : Command Option R : Response Packet Data : Indicate Response packet (!!) : Caution (AV) : Allowed camera version The command was allowed at the camera micro computer version x.x. Not describe : allowed all version.

Response Packet
If the camera receives any command, it will judge the Response packet. If the command packet hasnt any error, then the camera will transmit the response packet. Command Response Packet It is a response that the camera received the command packet correctly. It has none information of camera status. It indicates only that the command is successfully received. format : * 00 00 00 00 AA Caution) This manual did Not describe Command response packet. Data Response Packet It is a response of the camera status or zoom/focus position, or any other information of the camera. format : * QQ RR SS MM YY Preset Action Finished Response Packet It is a response that the camera finish moving to the target preset position. Format : * NN 11 11 11 YY

-6-

ZBN-20(1)Z27F`s Protocol Version 1.3

Motion Detected Response Packet

If the camera detect motions, the camera will be send Motion Detected Response Packet. The motion detection area and sensitivity is set by user see the General Control command table. Format : *NNDDDDDDYY

One Shot AF Finished Response Packet

If user command the One shot AF action command, then the camera will execute one shot AF action. After the action, the camera will send the One Shot AF Finished Response Packet. Format : *NNAAAAAAYY

( Set the Response Packet ) Set the Transmission of Response Packet Set
(Enable mode) Command Response Packet

Response Packet

Format

Example of Commands
(cam id = 00) *00710000B2 (reset) *00000000AA *007C0200C6 (read camera status) *01000000AB *00C60100C4 (move to external preset 01) *00 111111 B0 If motion is detected *00DDDDDD22 *00A00000BB (one shot AF) *00AAAAAA10

Release
(Disable Mode)

*00 00 00 00 AA

*NNA800XXYY

*NNA801XXYY

Data Response Packet

*QQRRSSMMYY

Non

Non

Preset Action Finished Response Packet Motion Detected Response Packet One Shot AF Finished Response Packet

*NN 111111 YY

*NNAA01XXYY

*NNAA00XXYY

*NNDDDDDDYY

*NNA102PSYY

*NNA100XXYY

*NNAAAAAAYY

*NN9F01XXYY

*NN9F00XXYY

( General Response Packet - 1 ) Response Packet Format

*NNEE0100YY *NNEE0200YY *NNEE0300YY *NNEE0400YY *NNEE0500YY *NNEE0501YY

The State of Reponse Packet

ASCII Error Checksum Error Focus Boundary Error Zoom Lens Moving Non ZTR Error Non ZTR Ack In OSD Menu Off action, tranfers response packet to target system. After time out for new refresh 0~F YY *1) *2) *3) *4)

Example of Commands
(cam id = 00) *007G0000B2 *00EE0100YY *007C0200C0 *00EE0200YY

Error Response Packet

OSD Menu Off Response Packet

*NN222222YY

*00780100BA(Menu On) *00780000BA(Menu Off) *NN222222YY

Refresh Request Response Packet

*NNCCCCCCYY

-7-

ZBN-20(1)Z27F`s Protocol Version 1.3

( General Response Packet - 2 ) Response Packet

Non Zoom Tracking Move Status Response

Command Packet
*NNEERR00YY

Command Option
RR 00

Contents
If zoom lens is moving as tracking mode, non zoom tracking move command is ignored. When zoom lens status is no operation, this response packet is transferred to camera control device then zoom lens is non zoom tracking move to defined zoom position. After lens initial action

01

Lens Init Finished Response Packet

*NNBBBBBBYY

*1) when focus target move(48 command) actions, if focus mode is auto or manual and the moving range of focus lens is not in the focus boundary then the camera sends the packets to the target system. *2) when focus target move(48 command) actions, if zoom lens is tracking then focus lens is controlling by camera so it cant control by manual *3) At internal or external preset mode, when you try to set the non zoom tracking mode. if zoom lens is tracking or abnormal preset position, then you cant move to non zoom tracking mode. *4) At internal or external preset mode, when you try to set the non zoom tracking mode. Camera can move to non zoom tracking mode.

General Response Packet

The Error response packet transfers to target system in case of packet with ASCII error or checksum error. In case of The ASCII packet error, It is caused by using in out of range for packet in ASCII data 0~F. The response packet of OSD menu Off action transfers to OSD menu off action

(Example) One Shot AF & One shot AF finished response packet (Camera ID = 00)
Start

Start One Shot AF action

Receive One shot AF command * 00 A0 00 00 BB Finished AF? Yes

No

No End

Received Packet is Correct ? Yes

Send One Shot AF Response Packet ? No

Yes

Send *00000000AA (Command Response)

Yes

Send Command Response Packet ? No

Send *00AAAAAA10 (One Shot AF Response)

End

-8-

ZBN-20(1)Z27F`s Protocol Version 1.3

General Control Commands - 1

Command
Camera

Comman d Message
Read Version

Command Packet
*NN7DXXXXYY *RRQQ0000YY

Command Option
RR QQ x

Contents
Current Camera u-com Version RR = 10, version1.0 QQ= 27 : 27x Zoom Focus Mode R(0)[auto], R(1)[manual] ID display mode R(0)[OFF],R(1)[ON] Backlight state R(0)[OFF],R(1)[ON] Flickerless state R(0)[OFF],R(1)[ON] Reset the camera Camera will (not) check the camera ID Disable ID check Camera will (not) check the camera ID Enable ID check Toggle the camera ID. ON OFFON.. Read Current Camera ID 00 ~ FF hex(total 256 IDs) Camera ID Change Camera ID 00 ~ FF hex(total 256 IDs) New Camera ID Key Action will be activated by this command. Key Code See Key action command for detail information Check of the Zoom Model 13: Tamron 12x , 22 : 22x Zoom Model 27 : 27x Zoom Model Enable Transmission of Command Response Data Dont Transmit the Command Response Data Auto Refresh Off Auto Refresh On Auto Refresh Off Auto Refresh On 01~FE(44min ~ 1Day 18Hour 16min)

Read Status

*NN7C0PXXYY *0R000000YY

0 1 3 4

Reset ID check

*NN71XXXXYY *NNA4PPXXYY

PP

00

01 on/off read *NN72XXXXYY *NN73XXXXYY *RR000000YY *NN74PPXXYY PP Key Action Key Action *NN75PPXXYY PP x x -

RR

change

Zoom Model Confirm

read

*NN7FXXXXYY *RR000000YY

RR

The Transmission of Command Response Packet

Set

*NNA8PPXXYY

PP

00

01

Set Lens Refresh On/Off Status Read Lens Refresh On/Off Status Set Auto Refresh Time Period Read Auto Refresh Time Period

Set

*NNBDPP00YY

PP

00 01 00 01 x

Read

*NNBCXXXXYY *NNQQ0000YY *NNBFPP00YY

QQ

Set

PP

Read

*NNBE0000YY *00RR0000YY

RR

01~FE(44min ~ 1Day 18Hour 16min

-9-

ZBN-20(1)Z27F`s Protocol Version 1.3

General Control Commands - 2

Command
Motion Detection Mode

Command Message
Set

Command Packet
*NNA1QQPSYY

Command Option
QQ 00 01 02 0 1 2 3 x

Contents
Disable Motion Detection Function Display only MD in the screen Display MD and transmit MD Alarm Packet MD area : Upper side of the picture MD area : Lower/Left/Right side of the picture MD area : Center of the picture MD area : Whole Region of the picture 2(hex) ~ F(hex) : MD Sensitivity (!!) Motion Detection Response Packet : (Alarm Packet) *NNDDDDDDYY (ex) Set MD and transmission of the MD Response packet, MD area is Center, MD sensitivity 7. *NN A1 02 27 YY Disable Motion Detection Function Display only MD in the screen Display MD and transmit Alarm packet MD area : Upper side of the picture MD area : Lower/Left/Right side of the picture MD area : Center of the picture MD area : Whole region of the picture MD Sensitivity Camera Power ON/OFF OFF Camera Power ON/OFF ON Lens initial end. Execute Lens Initial action. After this action, the zoom and focus lenses will be moved to the working position. And continue the previous working. If this lens initial action is finished, then the Command Response Packet will be transmitted. Change Day&Night mode OFF AUTO ON OFF . Day Status Auto Status Night Status If day&night mode is auto, RR is effective value. Day Status Night Status D&N Auto mode D&N Day D&N Night mode

Read

*NN96XXXXYY *QQRS0000YY

QQ

00 01 02 0 1 2 3 x

S Power on/off *NN76PPXXYY PP

00

PP Lens Initial End Initial *NNBBBBBBYY *NNADXXXXYY -

01 -

Day & Night

Change mode Read Mode Status

*NN9DXXXXYY

*NN94XXXXYY *NNQQRR00YY

QQ

00 01 02

RR 00 01 Set Mode *NN95PPXXYY PP 01 00 02

- 10 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Digital Effect and OSD Control Commands

Command
Freeze

Command Message
On/Off

Command Packet
*NNAEPPXXYY

Command Option
PP 01 00 00 01 0 1 2 3 x

Contents
Freeze the picture Live (release the freeze state) Mirror OFF Mirror ON No Digital effect is activated V-Flip Mirror Rotate Current Digital Effect status 0 : No Digital effect 1 : V-Flip 2 : Mirror 3 : Rotate Read the function OSD display mode of camera ON mode : All OSD display is enable OFF mode : All OSD display is disable except for Menu OSD display. Change the Function-OSD display mode of camera F-OSD display ON mode F-OSD display OFF mode Menu Off Menu On Menu OSD Off Status Menu OSD On Status DNR Off Low Middle High DNR Off Low Middle High Off / FLD 2 / FLD4 / FLD8 / FLD12 / FLD16 / FLD 24 / FLD 32 / FLD 64 / FLD 128

Mirror

On/Off

*NN7BPPXXYY

PP

Digital Effect

Change Digital Effect

*NN7EPPXXYY *RR000000YY

PP

Read Digital Effect Status

*NNDFXXXXYY *RR000000YY

RR

Function OSD Display Mode

Read

*NN79XXXXYY *RR000000YY

RR 00 01 PP 00 01

Change

*NN7APPXXYY

Menu OSD Control Menu OSD Status 3D-DNR Control

On/Off

*NN78PP00YY

PP

00 01 00 01 00 01 02 03 00 01 02 03 0 ~ 9 0 ~ 9

Read On/Off status Change

*NN93XXXXYY *NNRR0000YY *NN8DPPXXYY *RR000000YY

RR

PP

3D-DNR Status

Read

*NN8EXXXXYY *RR000000YY

RR

Digital Slow Shutter Control Digital Slow Shutter Status

Change

*NNB3PPXXYY *RR000000YY

PP

Read

*NNB4XXXXYY *RR000000YY

RR

Off / FLD 2 / FLD4 / FLD8 / FLD12 / FLD16 / FLD 24 / FLD 32 / FLD 64 / FLD 128

- 11 -

AE Control Command
Command
Backlight Mode

ZBN-20(1)Z27F`s Protocol Version 1.3

Command Message
Set Read

Command Packet
*NN82PPXXYY *NN83XXXXYY *RR000000YY *NNB5XXXXYY *RR000000YY *NNB6PPXXYY *NN90PPXXYY

Command Option
PP RR x x

Contents
00 ~ 0A: Backlight Mode 00 ~ 0A : Backlight Mode 00 hex ~ 0F hex : Sharpness data 00 hex ~ 0F hex : Sharpness data OFF(inactive) ON(active) Slow shutter max field index(00 ~ 09) Index : 00 01 02 03 04 05 06 07 08 09 Field : 00 02 04 08 12 16 24 32 64 128 Slow shutter max field index(00 ~ 09) Index : 00 01 02 03 04 05 06 07 08 09 Field : 00 02 04 08 12 16 24 32 64 128 00(00h) ~ 27(1Bh) : Shutter counter 00(00h) ~ 27(1Bh) : Shutter counter 00 : 1/60 01 : 1/125 04 : 1/250 09 : 1/500 14 : 1/1000 21 : 1/2000 25 : 1/4000 27 : 1/10000 Slow shutter field counter Field : 00 02 04 08 12 16 24 32 64 128 00 hex ~ FF hex : AGC control level data 00 hex ~ FF hex : AGC level data 00 hex ~ 60 hex : Brightness level data Menu display : (Brightness/2)Dec 00 hex ~ 60 hex : Brightness level data 00 hex ~ FF hex : Iris control level data

Sharpness Data

Read

RR

Set Flickerless Mode Shutter Set

PP PP

x 00 01 x

Set the slow shutter max field Read the slow shutter max field Set Shutter Speed Read Shutter Speed Counter

*NN9CPPXXYY

PP

*NN98XXXXYY *QQ000000YY

QQ

*NN86PPXXYY

PP

*NN85XXXXYY *RR000000YY

RR

Read Slow Shutter Field Counter AGC Read Level

*NN84XXXXYY *RR000000YY *NN8BXXXXYY *RR000000YY *NN87PPXXYY *NN91PPXXYY

RR

RR

Set Level Brightness Set

PP PP

x x

Read Level

*NN88XXXXYY *RR000000YY *NN89XXXXYY *RR000000YY *NN8APPXXYY

RR

Iris Level

Read

RR

Set

PP

Set the Iris Open Level 00 hex ~ FF hex : Iris control level data Auto Exposure mode Shutter Manual mode Iris Manual mode AGC Manual mode Shutter/Iris/AGC all Manual mode Auto Exposure mode Shutter Manual mode Iris Manual mode AGC Manual mode Shutter/Iris/AGC all Manual mode

Exposure Mode

Read

*NN80XXXXYY *0R000000YY

0 1 2 3 4 0 1 2 3 4

Set

*NN810PXXYY

- 12 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Focus Control Commands

Command
Set Focus

Command Message
Auto Mode Manual Mode

Command Packet
*NN4EXXXXYY

Command Option
-

Contents
Set Focus Mode as Auto Focusing Mode (Basic focus mode) Set Focus Mode as Manual Focusing Mode (Basic focus mode) Set Focus Mode as Special Focusing Mode Disable Focus Special Mode, set Basic focus mode only Set Focus Special Mode Execute Auto Focusing only one time (!!) See Key Action Commands-2 Toggle command Protect All Auto Focusing function. Protectreleaseprotectrelease (!!)Power on : default status is release mode Protect focusing at a certain distance. RM0 : 1cm Focal Range RM1 : 10cm Focal Range RM2 : 50cm Focal Range RM3 : 1m Focal Range RM4 : 150cm Focal Range RM5: 2m Focal Range RM6: 3m Focal Range (ex) protect focusing in the distance 50cm *NN A3 02 00 YY

*NN4FXXXXYY

Special Mode

*NNABPPXXYY PP 00 01

One Shot Auto Focus Protect Auto Focusing

Execute only one time Toggle

*NNA0XXXXYY

*NNA2XXXXYY

Rain Focus Mode

Set

*NNA3PPXXYY PP 00 01 02 03 04 05 06

The One Shot AF Finished Response Packet

Set

*NN9FPPXXYY

PP

00 01

(Dont) Transmit One Shot AF finish Response Packet when the camera finished the One Shot AF action. Dont Transmit One Shot AF finish Response Packet Enable Transmission of One Shot AF finish Response Packet (!!) One Shot AF finish Response Packet *NNAAAAAAYY

- 13 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Zoom/Focus Operation Commands - 1

Command
Read Position

Command Message
Zoom

Command Packet
*NNC0XXXXY *0ZZZRR00YY

Command Option
ZZZ RR x x x

Contents
Current Zoom Lens Position ( 000~4E0 hex ) Digital Zoom Position ( 00 ~ E7 hex ) Current Focus Lens Position ( 2B0hex~offsetMax (720hex)) * will be changed by Lens Offset Adjustment. Target Zoom Lens Position ( 000~4E0 hex ) (!!) Moving Method : Non Zoom Tracking Mode Target Zoom Lens Position (000~4E0 hex ) (!!) Moving Method : Slow Zoom Tracking Mode Zoom Ratio ( 00 ~ 27) Digital Zoom Position ( 00 ~ E7 hex ) (!!) Moving Method : Slow Zoom Tracking Mode <Digital position for zoom ratio> Zoom ratio PP(Digital position(hex)) 27 00 40 54 54 80 81 AB 108 C0 157 D4 270 E7 (ex) Move to zoom ratio x10 * NN AC 10 00 YY (ex) Move to zoom ratio x108 (Digital position = C0h) * NN AC 27 C0 YY

Focus

*NNC1XXXXYY *0ZZZ0000YY *NN470ZZZYY

ZZZ

Move to Zoom Position

Non Zoom Tracking

ZZZ

Slow Optical Zoom Tracking Slow Optical And Digital Zoom Tracking

*NNA90ZZZYY

ZZZ

*NNACZZPPYY

ZZ

PP

Move to Focus Position

Set

*NN480ZZZYY

ZZZ

Target Focus Lens Position ( 2B0hex~offsetMax (720hex)) * will be changed by Lens Offset Adjustment. (!!) The range of ZZZ Focus Special Mode : ( 2B0hex~offsetMax (720hex)) Focus Auto/Manual Mode : The range of ZZZ is decided by camera.

- 14 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Zoom/Focus Operation Commands - 2

Command
Step Tele/Wide

Command Message
Tele

Command Packet
*NNA5ZZXXYY

Command Option

Contents
Move Zoom Lens as received steps from current position. 00 ~ FF hex : zoom step to move(Tele) (!!) Moving Method : Non Zoom Tracking Mode (!!) See Key Action Commands-2 (ex) move 4 steps to tele * NN A5 04 00 YY Move Zoom Lens as received steps from current position. 00 ~ FF hex : zoom step to move(Wide) (!!) Moving Method : Non Zoom Tracking Mode Set Zoom steps to use in S-Tele,S-Wide command of Key Action Command. 00 ~ FF hex : zoom step of S-Tele,S-Wide Set zoom start ratio and zoom stop ratio. Zoom Start Ratio (!!) S 0: Set Zoom start Ratio 1: Set Zoom stop Ratio Zoom Start Ratio (1 ~ 1B hex) 1B hex = 27 dec Zoom Stop Ratio (1 ~ 10E hex) 10E hex =270 dec (!!) RRR 1 ~ 10E hex Zoom Stop Ratio > Zoom Start Ratio Read zoom start ratio and zoom stop ratio Zoom Start Ratio (Optical Zoom Ratio) (00 hex ~ 1B hex) Zoom Stop Ratio (Digital Zoom Ratio) (00 hex ~ 10E hex) Reference to the Set Zoom Start ratio/Stop ratio command.

ZZ

Wide

*NNA6ZZXXYY ZZ x

Step Number of Tele/Wide

Set

*NNA7ZZXXYY ZZ x

Zoom Start / Stop Position

Set

*NN9ESRRRYY S x

RRR

Read

*NN99XXXXYY *SS0RRR00YY

SS RRR

x x

- 15 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Preset Control Commands

Command
Current Position as IPP* Move to Selected IPP*

Command Message
Save

Command Packet
*NNC7PPXXYY

Command Option
PP x

Contents
00 ~ 9F hex : Index of Internal Preset Position (total 160 preset position)

Non Zoom Tracking

*NNC8PPXXYY

PP

00 ~ 9F hex : Index of Internal Preset Position (total 160 preset position) (!!) Moving Method : Non Zoom Tracking Mode 00 ~ 9F hex : Index of Internal Preset Position (total 160 preset position) (!!) Moving Method : Slow Zoom Tracking Mode 00 ~ 9F hex : Index of Internal Preset Position (total 160 preset position) (!!) Moving Method : Quick Zoom Tracking Mode 0 ~ 7 hex : Index of External Preset Position (total 8 preset position)

Slow Zoom Tracking

*NNCFPPXXYY

PP

Quick Zoom Tracking

*NND0PPXXYY

PP

Save Received position as EPP*

Zoom position

*NNC3PZZZYY

ZZZ Focus position *NNC4PZZZYY P ZZZ

x x x

Zoom Position

( 000 ~ 4E0 hex )

0 ~ 7 hex : Index of External Preset Position (total 8 preset position) Focus Position : ( 2B0hex~offsetMax (720hex)) * will be changed by Lens Offset Adjustment. 0 ~ 7 hex : Index of External Preset Position (total 8 preset position) Digital Zoom Position ( 00 ~ E7 hex )

D-Zoom position

*NNC50PZZYY

ZZ Move to Selected EPP* Non Zoom Tracking *NNC60PXXYY P

x x

0 ~ 7 hex : Index of External Preset Position (!!) Moving Method : Non Zoom Tracking Mode 0 ~ 7 hex : Index of External Preset Position (!!) Moving Method : Slow Zoom Tracking Mode

Slow Zoom Tracking

*NNC90PXXYY

Quick Zoom Tracking

*NNCA0PXXYY

0 ~ 7 hex : Index of External Preset Position (!!) Moving Method : Quick Zoom Tracking Mode

The Transmission of The PRP*

Set

*NNAAPPXXYY PP 00 01

(Dont) Transmit Preset Response Packet when the zoom lens moved to the target preset position. Dont Transmit Preset Response Data Enable Transmission of Preset Response Data (!!) Preset response packet : *NN111111YY

* IPP (Internal Preset Position) , EPP (External Preset Position) , PRP ( Preset Response Packet)

- 16 -

ZBN-20(1)Z27F`s Protocol Version 1.3

WB (White Balance) Control Commands

Command
Color

Command Message
On/Off

Command Packet
*NNB0PPXXYY

Command Option
PP 00 01 00 01 02 03 04 00 01 02 03 04 x Color OFF Color ON Auto Mode Manual Indoor Outdoor Push Auto Auto Mode Manual Indoor Outdoor Push Auto

Contents

WB Mode

Read

*NNB1XXXXYY *RR000000YY

RR

Set

*NNB2PPXXYY

PP

Adjusting Color Data at MWBM*

Read Red

*NNB7XXXXYY *RR000000YY *NNB8XXXXYY *RR000000YY *NNB9PPXXYY *NNBAPPXXYY

RR

00 hex ~ FF hex : RED adjust data 00 hex ~ FF hex : BLUE adjust data 00 hex ~ FF hex : RED adjust data 00 hex ~ FF hex : BLUE adjust data

Read BLUE

RR

Set RED Set BLUE

PP PP

x x

* MWBM(Manual WB Mode)

- 17 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Privacy Control Commands 1

Command
Privacy Mask On/Off

Command Message
Set

Command Packet
*NND1QQXXYY

Command Option
QQ 01 00 01 00 01 02 03 04 01 00 01 02 03 04 01 00 00 01 02 03 00 01 02 03 01 02 03 04 00~64 01 02 03 04 x

Contents
Privacy Mask ON Privacy Mask OFF Privacy Mask ON Privacy Mask OFF Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Area ON Mask Area OFF Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Area ON Mask Area OFF Mask Color Gray Mask Color Black Mask Color White Mask Color Yellow Mask Color Gray Mask Color Black Mask Color White Mask Color Yellow Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Top Position (00 hex ~ 64 hex) Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Top Position (00 hex ~ 64 hex)

Read

*NND20000YY *QQ000000YY *NND3QQPPYY

QQ

Mask Area ON/OFF

Set

QQ

PP

Read

*NND4QQXXYY *QQRR0000YY

QQ

RR

Privacy Mask Color

Set

*NND5QQXXYY

QQ

Read

*NND6XXXXYY *RR000000YY

RR

Mask Top Position

Set

*NND7QQPPYY

QQ

PP Read *NND8QQXXYY *QQRR0000YY QQ

RR

- 18 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Privacy Control Commands 2

Command
Mask Bottom Position

Command Message
Set

Command Packet
*NND9QQPPYY

Command Option
QQ 01 02 03 04 x 01 02 03 04 x 01 02 03 04 x 01 02 03 04 x 01 02 03 04 x 01 02 03 04 x Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3

Contents

PP Read *NNDAQQXXYY *QQRR0000YY QQ

Mask Bottom Position (00 hex ~ 64 hex) Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Bottom Position (00 hex ~ 64 hex) Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Left Position (00 hex ~ 64 hex) Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Left Position (00 hex ~ 64 hex) Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Right Position (00 hex ~ 64 hex) Mask Area 0 Mask Area 1 Mask Area 2 Mask Area 3 Mask Right Position (00 hex ~ 64 hex) Mask 1~4 On/FF, Color, Size Initial

RR Mask Left Position Set *NNDBQQPPYY QQ

PP Read *NNDCQQXXYY *QQRR0000YY QQ

RR Mask Right Position Set *NNDDQQPPYY QQ

PP Read *NNDEQQXXYY *QQRR0000YY QQ

RR Mask Initial Set *NNCBXXXXYY

- 19 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Key Action Commands - 1 (*NN 75 PP XX YY)

Command Option(PP)
09

Key Code
KC_STOP

Contents
Key Action Stop Action This Command must be followed after the other key action commands below. If continuous key service is needed, dont send this command. And, when you want to stop the continuous action, send this Stop command. Non Key Service Slow zoom Tele Quick zoom Tele Slow zoom Wide Quick zoom Wide Move focus to Far (in manual focus mode) Move focus to Near(in manual focus mode) Move focus to S-Far (in manual focus mode) (1step) Move focus to S-Near(in manual focus mode)(1step) Toggles Power ON/OFF Toggles Focus Auto/Manual Mode Activates focus auto Action only one time(in manual focus mode) In Menu mode, toggles item selection mode / item adjust mode Initialize camera to Manufacturers conditions Toggles Function OSD Off/On mode Menu On or Set in menu status Toggles Menu On/Off Change OSD language Toggles Backlight mode Toggles Flicker mode Shutter speed counter Up Shutter speed counter Down Switches Digital Effect modes(V-FlipMirrorReverseOFF) Toggles Mirror mode Toggles Negative mode Toggles Mono/Color mode Sharpness Data Up Sharpness Data Down Brightness Data Up Brightness Data Down Zoom Start Ratio Up Zoom Start Ratio Down Zoom Stop Ratio Up Zoom Stop Ratio Down In white balance push auto mode, It indicates Push Action. Switch AWB modes (automanualindooroutdoorpush auto) Switch AWB modes in reverse sequence of KC_AWB_UP

00 01 02 03 04 05 06 07 08 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1C 1D 1E 1F 20 21 22 23 24 25 26

KC_NKEY KC_TELE KC_QTELE KC_WIDE KC_QWIDE KC_FAR KC_NEAR KC_SFAR KC_SNEAR KC_POWER KC_FOCUS_AM KC_F_PUSH KC_M_SET KC_INITIAL KC_OSD_ONOFF KC_MENU KC_SET_MENU KC_LANGUAGE KC_BL KC_FLICKER KC_SSC_UP KC_SSC_DN KC_D_EFT KC_MIRROR KC_NEGA KC_MONO KC_SRP_UP KC_SRP_DN KC_BRT_UP KC_BRT_DN KC_ZM_SUP KC_ZM_SDN KC_ZM_EUP KC_ZM_EDN KC_WB_PUSH KC_AWB_UP KC_AWB_DN

- 20 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Key Action Commands - 2 (*NN 75 PP XX YY)

Command Option(PP)
27 28 29 2A 2D 2E 2F 30 31 32 3B 3C 3D 3E 3F

Key Code
KC_R_UP KC_R_DN KC_B_UP KC_B_DN KC_AE_MAN KC_IRIS_UP KC_IRIS_DN KC_AGC_UP KC_AGC_DN KC_LED KC_AUTO_PAN KC_PAN_RIGHT KC_PAN_LEFT KC_TILT_UP KC_TILT_DN In Manual WB mode, R gain Up In Manual WB mode, R gain Down In Manual WB mode, B gain Up In Manual WB mode, B gain Down Set AE mode to Manual mode Increase Iris Level Decrease Iris Level

Contents

Increase AGC gain Decrease AGC gain External LED On/Off toggle Auto Panning action(only act in digital zoom region) Pan Right action(only act in digital zoom region) Pan Left action(only act in digital zoom region) Tilt Up action(only act in digital zoom region) Tilt Down action(only act in digital zoom region)

40 41 42 43 44 45 46 47 48 49

KC_AUTO_TILT KC_STELE KC_SWIDE KC_MB_RESET KC_FREEZE KC_REVERSE KC_1SHOT_AF KC_DAYNIGHT KC_MAXFLDUP KC_MAXFLDDN

Auto Tilting action (only act in digital zoom region) Step Tele Step Wide Memory Board Reset Toggles Freeze/Live mode Toggles Reverse/Normal mode Execute Auto Focusing one time Day&Night mode change, OFFAUTOON Slow shutter max field up Slow shutter max field down

- 21 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Support Pelco-D compatible Protocol Commands

Pelco-D compatible Protocol Packet ( sub-standard command only ) If P/D condition in Menu OSD protocol set, the camera work in pelco-d standard protocol mode. We only support 7 commands orders in pelco-d standard protocol. If users needs more infomation, please refer to Pelco-D protocol in Pelco web site. Pelco-D protocol Byte Format
RS485 -- 2400bps, 1 Start bit, 8 data bits, 1 stop bit, no parity

Pelco-D protocol Message Format.

BYTE1 Sync Byte BYTE2 Address BYTE3 CMD1 BYTE4 CMD2 BYTE5 DATA1 BYTE6 DATA2 BYTE7 CHECKSUM

The Sync Byte is always 0xFF ( If Camera ID is 0xFF, then The Sync Error is possible )

Pelco-D protocol Check sum Format.

Byte 2 + Byte 3 + Byte 4 + Byte 5+ Byte 6 = Check sum The check sum is the 8 bit (modulo 256) sum of the bytes( 2 through 6) in the packet

Peclo-D Standard protocol Command Set

Bit7 Bit6 Reserved Zoom wide Bit5 Reserved Zoom tele Bit4 Auto/ Manua l scan Down Bit3 Camera On/off Up Bit2 Iris Close Left Bit1 Iris Open Right Bit0 Focus Near Always0

CMD1

Sense Focus far

CMD2

The reserved bits (6 and 5) should be set to 0.

Support protocol command Packet

- Zoom Tele : 0xFF + ID + 0x00 + 0x20 + 0x00 + 0x00 + checksum - Zoom Wide : 0xFF + ID + 0x00 + 0x40 + 0x00 + 0x00 + checksum - Focus Near : 0xFF + ID + 0x01 + 0x00 + 0x00 + 0x00 + checksum - Focus Far : 0xFF + ID + 0x00 + 0x80 + 0x00 + 0x00 + checksum - Continuous Key Stop : 0xFF + ID + 0x00 + 0x00 + dont care + dont care + checksum - OSD Menu On/Off : 1)0xFF + ID + 0x40 + 0x00 + 0x00 + 0x00 + checksum (Won woo ENG RC-100 Controller, CNB DVR) 2)0xFF + ID + 0x00 + 0x23 + 0x00 + 0x5F + checksum (Pelco Keyboard) 3)0xFF + ID + 0x00 + 0x03 + 0x00 + 0x62 + checksum (Bido Pelco System Keyboard) - Camera Power On : 0xFF + ID + 0x88 + 0x00 + 0x00 + 0x00 + checksum OFF : 0xFF + ID + 0x08 + 0x00 + 0x00 + 0x00 + checksum

- 22 -

ZBN-20(1)Z27F`s Protocol Version 1.3

Support Pelco-P compatible Protocol Commands

Pelco-P compatible Protocol Packet ( sub-standard command only ) If P/P condition in Menu OSD protocol set, the camera work in pelco-p standard protocol mode. We only support 11 commands orders in pelco-p standard protocol. If users needs more infomation, please refer to Pelco-P protocol in Pelco web site. Pelco-P protocol Byte Format
RS485 -- 9600bps, 1 Start bit, 8 data bits, 1 stop bit, no parity

Pelco-P protocol Message Format.

BYTE1 STX BYTE2 Address BYTE3 DATA1 BYTE4 DATA2 BYTE5 DATA3 BYTE6 DATA4 BYTE7 ETX BYTE8 CHECKSUM

Byte 1 is always $A0 Byte 2 is the receiver address, set by DIP switch in the receiver Byte 3-6, see below Byte 7 is always $AF Byte 8 is an XOR sum of Bytes 1-7

Peclo-P Standard protocol Command Set

Bit7 DATA1 DATA2 DATA3 DATA4 0 0 Bit6 Camera On Zoom wide Bit5 Auto scan On Zoom tele Bit4 Camera On/off Down Bit3 Iris Close Up Bit2 Iris Open Left Bit1 Focus Near Right Bit0 Focus far Always0

Pan Speed $00 to $3F and $40 for Turbo Tilt Speed $00 to $3F

Support protocol command Packet

- Zoom Tele : 0xA0 + ID + 0x00 + 0x20 + 0x00 + 0x00 + - Zoom Wide : 0xA0 + ID + 0x00 + 0x40 + 0x00 + 0x00 + - Focus Near : 0xA0 + ID + 0x02 + 0x00 + 0x00 + 0x00 + - Focus Far : 0xA0 + ID + 0x01 + 0x00 + 0x00 + 0x00 + 0xAF + checksum 0xAF + checksum 0xAF + checksum 0xAF + checksum

- Continuous Key Stop : 0xA0 + ID + 0x00 + 0x00 + dont care + dont care + 0xAF + checksum - OSD Menu On/Off : 1)0xA0 + ID + 0x80 + 0x00 + 0x00 + 0x00 + 0xAF + checksum 2)0xA0 + ID + 0x00 + 0x07 + 0x00 + 0x5F + 0xAF + checksum (Won woo ENG RC-100 Controller, CNB DVR) 3)0xA0 + ID + 0x00 + 0x23 + 0x00 + 0x5F + 0xAF + checksum (Pelco Keyboard) 4)0xA0 + ID + 0x00 + 0x03 + 0x00 + 0x5F + 0xAF + checksum (Bido Pelco System Keyboard) - Camera Power On : 0xA0 + ID + 0x50 + 0x00 + 0x00 + 0x00 + 0xAF + checksum OFF : 0xA0 + ID + 0x40 + 0x00 + 0x00 + 0x00 + 0xAF + checksum - 23 -

ZBN-20(1)Z27F`s Protocol Version 1.3

BLANK PAGE

- 24 -