Hub Hybrid

Control panel with Fibra, Jeweller and Wings support (2 × SIM 2G/3G/LTE, Ethernet)


To one space you can add:

  • up to 200 users;
  • up to 50 rooms;
  • up to 25 security groups.

No, you need an Ajax hub to connect a system to monitoring software.

Other features do not depend on the adding of a hub to the space, including the Control and Rooms tabs and quick access to automation devices.


You can add an unlimited amount of Yale smart locks to one space.


Only one hub can be added to one space.


No, you only need to update your app:

Features will remain the same, including the Control and Rooms tabs and quick access to automation devices.


Space is a virtual entity where various autonomous devices located on the same physical object are gathered. To create a space, a user does not need an Ajax hub. Devices are added to a system according to the needs of the facility.

You can add a hub with detectors, only NVR with cameras, only Ajax cameras, smart locks, or combine all these devices into one system.

The space concept offers flexibility for customizing the system according to the specific needs of the facility.


No such option is provided for. Deleting security system events is prohibited under the requirements of EN 50131.


The identifier (ID) is the serial number of the device. It is located under the QR code on the body, board, and packaging of the device.

ID at the bottom of the box

ID under the lid

The ID can also be found in the device states in the Ajax app.

  1. Sign in to the Ajax app.
  2. Select the required hub from the list if you have several of them or if you are using a PRO app.
  3. Go to the Devices menu.
  4. Select a device from the list. Device ID information is located at the bottom of the status screen.

Use a 12 V⎓ battery with a capacity of 4, 7, or 9 Ah. The maximum battery size for installation in the hub casing is 151 × 65 × 94 mm, and the weight is 5 kg. For batteries of this form factor, special mounts are provided in the hub casing.

You can use batteries of a different capacity if they fit in size and the charging time does not exceed 72 hours for Grade 2 compliance and 24 hours for Grade 3 compliance. The maximum charging current for the Hub Hybrid battery is 300 mA.

The maximum load for Hub Hybrid (2G) is 0.6 A and for Hub Hybrid (4G) is 0.53 A on all Fibra lines (24 V⎓).
To meet the duration time of 12 and 24 hours, the maximum load with GSM and Ethernet enabled* should be reduced to:

Battery capacity 12 h 24 h
4 Ah 100 mA 30 mA
7 Ah 190 mA 70 mA
9 Ah 230 mA 85 mA

* If only Ethernet or GSM channels are used, the values will be 10 mA and 30 mA higher respectively.

To comply with EN 50131 at Grade 3 and to meet the duration time of 60 hours, please use Fibra power supply calculator.


For Hub Hybrid, you can use a SIM card of any cellular operator.

The supported cellular standard for Hub Hybrid (2G):

  • 2G (GSM900/DCS1800 (B3/B8))

The supported cellular standards for Hub Hybrid (4G):

  • 2G (GSM900/DCS1800 (B3/B8))
  • 3G (WCDMA 850/900/2100 (B1/B5/B8))
  • LTE (FDD B1/B3/B5/B7/B8/B20)

Before inserting a SIM card, turn off the PIN code request and update your account with money to pay for the operator’s services.

We recommend connecting the hub using all communication channels. It is unreliable to use only one communication channel like aSIM card as it may stop working, for example, due to a cellular operator failure.


To reset the Hub Hybrid to factory settings:

  1. Turn on the hub if it is turned off.
  2. Remove all users and installers from the hub.
  3. Hold the power button for 30 s — the LED indicator on the hub body will start flashing red light.
  4. Clear the list of hub notifications.
  5. Remove the hub from your account.

The hub identifier (ID) is the first 8 digits of the serial number of the security system control panel. It is used to add a hub to Ajax apps.

The identifier can be found in the Ajax app, on the hub box, and on the hub board (under the QR code).


No. The hub is designed for indoor installation, operates in temperatures from -10°C to + 40 °C, and relative humidity up to 75%.

Outdoor installation may damage the device or lead to its malfunction.


OS Malevich 2.9 update has added the ability to transfer data from one hub to another without reconfiguring the system, adding users or devices.

To use the function, go to the Data Import menu in the settings of the hub to which you want to transfer data, and follow the on-screen instructions. To transfer data, OS Malevich of both hubs must be 2.9 or higher.


Hubs don’t have a Radio Signal Extender operation mode. If you need to expand the coverage of your security radio network, use radio signal extender.


When hub loses the connection with the server, Ajax apps can notify the users using a standard push-notification sound or a siren sound (enabled by default).

To disable the siren sound when hub loses the connection with the server in the Ajax app:

  1. Go to Service settings of the hub (Device HubSettings Service).
  2. Select menu item Server Connection.
  3. Enable the option Receive events of server connection loss without alarm.
    ajax alarm

The hub can operate with a 2G network connection, sending all alarms, events and Photo in Case of Alarm (depends on the hub model) to the users and the security company’s Central Monitoring Station.

The minimum connection speed required for the hub operation is 0.5 kbps.


The SIM card number can be determined using two methods:

  • Through the Ajax application: go to GSM settings (Devices HubSettings Cellular). The menu opposite the SIM card will display its number.

    The functioning of the feature depends on whether the manufacturer recorded the number-related information on the SIM card

  • Using USSD code: go to GSM settings (Devices HubSettings Cellularand select the SIM card. In the USSD-request field, enter the number check code (provided by your operator) and click Check Balance. After the request is executed, the SIM card number will be displayed under the Check Balance button.

The number of ReX range extenders connected to the Ajax security system depends on the hub model:

Hub 1
Hub Plus 5
Hub 2 (2G) 5
Hub 2 (4G) 5
Hub 2 Plus 5
Hub Hybrid (2G) 5
Hub Hybrid (4G) 5

Only hubs on OS Malevich 2.8 and higher support the connection of several ReX.


Tamper is a miniature button on the device board. It reports an alarm in case of opening the device enclosure, removing the device from the mounting panel, or detaching it from the surface.

The tamper status is displayed in Ajax apps, in the Enclosure section in the states of each device. When the body status is Open, a fault symbol appears on the device icon.


The maximum distance between the hub and the device can reach 2,000 meters in an open space.

Walls, ceilings, and other structures that interfere with the radio signal to get through can significantly reduce the range. In this case, maximum distance mainly depends on the structures’ material, thickness, and arrangement.

You can expand the coverage area of Ajax security systems with the help of radio signal range extenders


In order to allow automatic updating of the firmware of the Hub, select the Hub in the device list, go to the settings , select Service and turn on the option Automatic software update.

Auto-Update is turn on by default.


Most likely, several users are receiving SMS alerts. For example, if three people receive SMS alerts, then each notification is sent out three times.


No, Ajax Hub can work without port forwarding.


Check if both LEDs are lit on the Ethernet port when the cable is connected. If they aren’t, connect another Ethernet cable. If they are, check your router settings. It should be set to DHCP mode.


By default, Ajax apps notify about the loss of hub connection with the Ajax Cloud server when there is no connection via all the connection channels: Ethernet, Wi-Fi, cellular (connection channels depend on the hub model).

Ajax apps can notify about such an event in two ways: with a push notification, with a siren sound (enabled by default).

To be notified about the connection loss, even on one of the channels, in the Ajax app:

  1. Select a hub if you have several of them or if you are using the Ajax PRO app.
  2. Go to the Devices menu and select the hub.
  3. Go to the hub settings by clicking on the gear icon in the upper right corner of the screen.
  4. Go to the Service category.
  5. Go to the Server connection category.
  6. Specify the required communication channels in the Notify of connection loss over channels category (connection channels depend on the hub model):
    • Ethernet
    • Cellular
    • Wi-Fi
    • Notification delay, min (3 to 30 minutes)
  7. Click Back to save your settings.

Ajax’s security system can use the following connection channels with the Ajax Cloud server and the security company: Ethernet, Wi-Fi, or cellular. The number and the type of connection channels depends on the hub model. If connection is lost on any of the channels, the hub will instantly switch to another channel available.

When several channels are connected to the hub, priority is given to the faster ones: Ethernet and Wi-Fi (connection channels depend on the hub model). Cellular is used as a backup channel and consumes minimum of traffic. It is impossible to change this priority.


The Ajax security system supports connection to Ajax Cloud via all connection channels at once: Ethernet, Wi-Fi, and cellular (channels depend on the hub model). This is necessary to ensure that in case of loss of connection on any of the channels, the hub instantly switches to another channel.

Most of the data is transferred via Ethernet and Wi-Fi, and fewer data is transferred via cellular. It is impossible to change this priority.


The hub update does not exceed 1 megabyte.


Ajax encrypts data using its own proprietary floating key protocol. This protocol is resistant to breaking: even with the power of a supercomputer, it will take years to break the key by a Brute-force search.

Let’s assume a situation where an attacker was able to compromise the key. In this case, the protocol is still protected by the session counter: a new encryption key is generated within each device-hub communication session.

Even if an attacker bypasses the session counter, he will be stopped by device authentication: a secure communication channel is created between the detector and the hub, followed by an ID check.

Each device has a personal ID by which the hub recognizes it.

If the device fails the ID check, the hub will ignore its commands.

Moreover, the hub will detect the loss of the Ajax device that the attackers want to replace with the fake one. The detection time depends on the device type: 3 seconds for wired Ajax devices and the time set in Jeweller settings — for wireless ones. The lost connection notification will be sent to the security company and system users.


To delete a group:

  1. Go to group settings (HubSettings Groups).
  2. Select the group, move all devices to other groups.
  3. After there are no sensors and devices left in the group, you can delete it by the group settings .

At the moment, it is impossible to delete all groups from the hub. To completely remove all groups, the hub must be returned to the factory settings!


To disable the group mode, go to groups settings (HubSettings Groups) and deactivate the group mode.


The ID of the group is a number of the group, which is necessary for arm separate groups from the keyboard.

The group number (ID) is displayed in the group settings (HubSettings Groups).


At the moment, such an opportunity is not provided, since the equipment of other manufacturers uses other frequencies and communication protocols with the control panels.


The automatic update is optional and can be disabled. To do this, go to the service settings of the hub (Devices HubSettings  Service) and disable Firmware Auto-Update.


Change the SIM card is possible, while you need to clarify the tariff, tariff conditions and APN data from the operator whose SIM card you plan to use.

After changing the SIM card, you need to make changes to the GSM connection configuration in the Ajax application.

Ajax mobil applications

You need to click on the Number field, enter the balance check USSD code (available from the mobile phone service provider).

After entering the number, click “Check balance”. It takes about a minute to complete the request. After the query is executed, you will see the status of the SIM card account.


The hub consumes mobile traffic regularly to check the functioning of the GSM channel and its availability as a backup communication channel.


The volume data depends on the settings and the number of devices assigned to the Hub. Working in the regular mode without alarms, the Hub uses up to 10 Megabytes per day.


The loop (zone) number is required to describe all devices connected to the hub when adding a protected facility to the security company monitoring station.

The number is assigned when adding a device to the hub. The first added device has the first loop (zone) number. After removing the device from the system, its number becomes available. This number can be assigned to the next device to be added to the system.

The loop (zone) number is available in the states of each device in the Ajax app:


The firmware version can be found in the device states in the Ajax app.

  1. Sign in to the Ajax app.
  2. Select the required hub from the list if you have several of them or if you are using a PRO app.
  3. Go to the Devices menu.
  4. Select a device from the list. The firmware version information is located on the status screen at the bottom.
  1. Open the Ajax app and go to the hub settings:

    Devices HubSettings  → Cellular

  2. Select SIM card, enter the balance check USSD code (provided by your operator).
  3. Tap Check balance.

It is possible. In the Ajax Security System application, on average, you can add up to 50 Hubs. Such an amount can withstand the average user’s smartphone, the number of the attached Hubs is not limited and depends only on the phone characteristics.

However, we do not recommend using the Ajax Security System application to monitor a large number of objects, for these purposes there is a solution for professional installers, Ajax PRO: Tool For Engineers.


The detection time of communication failure with the server depends on two parameters in the Hub settings (Hub Settings Service):

  • Hub-Server Polling Interval. The period of the pings by the Hub to the Ajax Cloud server, is set in the range from 10 to 300 seconds. The recommended and default value is 60 seconds.
  • Deley of Server Connection Failure Alarm. This is the delay required to reduce the risk of a false event of loss of communication with the server. The delay can be adjusted from 30 to 600 seconds. The recommended and default value is 300 seconds.

    The connection delay is activated after 4 failed pings.

The time until the message about the loss of communication between the Hub and the server is generated is calculated by the formula:

(Ping interval * 3) + Connection Delay

With the default settings, the server records the loss of the hub after 8 minutes:

(60 s * 3) + 300 s = 8 minutes

Reducing the time of registration the loss of communication with the Hub can be achieved by reducing the values ​​of the ping interval and the connection delay. But this increases the likelihood of a false event of loss of connection with an unstable Internet connection.


Go to the Devices tab , select the device you want to check.

ajax security system application

Featured articles

How to configure a space

How an Ajax system operates in case of a power outage

How to configure an Ajax system according to the EN 50131 requirements

Spelling error report

The following text will be sent to our editors: