Timber SAV · Build & Wiring Reference

Greg LeFevre Gate Phone Control

Adds Open and Close buttons to the client's iPhone for the existing Viking gate operator, using one relay on the gate network. No subscription. Roughly $240 in parts.

22 Aug 2026 · Source: _artifacts/greg-lefevre-gate-control-build.html

Three things must be confirmed on site before anything is cut or ordered. Where the 120VAC for the new enclosure originates, the conduit run length between enclosures, and sun exposure at the post.
Back to overview

What It Does

  • Two Apple Shortcuts pinned to the client's iPhone home screen, Open Gate and Close Gate. No new app to learn.
  • Each tap closes a relay contact for half a second, which is electrically identical to pressing the Guard Station pushbutton the Viking board already expects.
  • Works from anywhere. The Shortcut tries the relay's local IP first and falls back to Shelly Cloud, which is free and has no subscription.
  • Nothing about existing gate operation changes. The RF remote, the free-exit loop, the photo beams and edge sensors all continue to work exactly as they do now, and none of them route through any of this.
  • The RF clicker remains primary. The phone is convenience. An internet outage means "use the clicker", not "locked out".
  • No position feedback in this design. The Reolink camera at the gate is the position feedback.
Back to overview

Bill of Materials

Digital Bay Tech, only US source, not on Amazon

ItemSpecWherePrice
Shelly Pro 2 ULSHPRO2ULUS, mfg part SPSW-202XE16EU, cUL listedDigital Bay Tech$84.99

Amazon

ItemSpecWherePrice
QILIPSU enclosureB08ZRR2DJX, 16.1 x 12.2 x 7.1 in external (410x310x180mm), grey, ABS, IP67, mounting plate and wall brackets includedAmazon$61.99
35mm top-hat DIN rail, 12 in-Amazon~$8
Breather ventBud Industries IPV-67121-B, M12x1.5, IP67Amazon~$8.48
PG9 stainless cable glands, 4-8mm, 3-pack, buy twoB0711SB5W9, two used for the Cat6 entries, remainder spareAmazon~$16
Krylon Fusion All-In-One, gloss black-Amazon~$10

Home Depot / local

ItemSpecWherePrice
Liquidtight flexible nonmetallic conduit1/2 in x 20 ft, 2 straight fittings included, Southwire Ultratite model 59714701Home Depot$28.00
Liquidtight straight fittings, 2xalready included with the Ultratite kit above, one per end of the 18/4 run, do not buy separatelyHome Depotincluded above
Liquidtight right-angle connectoronly if the Viking cabinet entry needs an angled approach, not in the kitHome Depot / local~$9
WAGO 221-2401 lever nuts, 10-pack-Home Depot$9.97
18/4 (or two runs of 18/2) CL2 thermostat wireby the foot, ~$0.25/ftHome Depot / locallength site-measured
1/8 in aluminum flat stock for a sun shieldonly if the post catches afternoon sunHome Depot / local~$20

Already on hand or already ordered, do not rebuy

ItemNote
Cat6from the trueCABLE 1000 ft box
Ideal 85-368 shielded plugsuse the Ideal FT-45 crimper, never the Klein
8 ft ground rod, acorn clamp, 10 ft #6 bare copperalready on the client's August order, about $45

Total: about $240, or about $260 with the sun shield.

Buy the Pro 2, never the Pro 2PM. The 2PM's outputs are line-referenced and cannot drive these terminals. Amazon stocks only the 2PM and the Z-Wave "Wave Pro 2"; neither is correct.
Back to overview

Wiring

120VAC power (L/N) Cat6 / network data Ch1 → Open + GND Ch2 → Close + GND Ground bond, #6 bare copper New for this build Already ordered / existing Verify on site before landing OUTSIDE, ON THE POST NEW QILIPSU ENCLOSURE, PAINTED BLACK EXISTING VIKING VFLEX CABINET Loco5AC radio NanoStation 5AC Loco, on UB-AM mount INS-3AF-O-G converter at antenna ALREADY ORDERED 8 ft ground rod + acorn clamp + #6 bare copper ON HAND / ORDERED Reolink RLC-811A gate camera, PoE ALREADY ORDERED NEW QILIPSU enclosure, painted black UACC-ETH-SP-Pro 20kA Ethernet surge protector GND lug, ground bond lands here ALREADY ORDERED USW-Flex-Utility ALREADY ORDERED USW-Flex switch P1 → uplink P2 → camera P3 → Shelly LAN 3 SPARE PORTS 60W PoE adapter powers the USW-Flex ALREADY ORDERED Shelly Pro 2 SHPRO2ULUS · cUL listed · 12in DIN rail L / N supply terminals CH1 output → Open + GND CH2 output → Close + GND LAN port, data only, not PoE NEW VERIFY SILKSCREEN LABELS ON SITE WAGO 221-2401 120VAC splice feeds adapter + Shelly L/N NEW 120VAC SUPPLY origin TBD, confirm on site (landing blocker) Breather vent IPV-67121-B · lowest point, facing down NEW PG9 gland PG9 gland PG9 gland Liquidtight connector, 120VAC in Liquidtight connector, 18/4 to Viking CH1 → OPEN + GND CH2 → CLOSE + GND EXISTING Viking VFLEX cabinet Guard Station terminal bank Open Stop Close GND existing OEM terminals, unchanged
Solid outline = new for this build. Dashed outline = already ordered or existing equipment. Wire color identifies the circuit, not the equipment's age: red is 120VAC, blue is Cat6, teal is Shelly channel 1 (Open), violet is channel 2 (Close), copper is the ground bond. Nothing here changes the Viking board's own Guard Station wiring; the Shelly's two relays land on the same three terminals a pushbutton would.

Terminal-by-terminal

Source deviceSource terminalDestination deviceDestination terminalConductorNotes
120VAC supplyL / NWAGO lever nuts (in enclosure)in120VAC, 2-conductor + groundOrigin must be confirmed on site, landing blocker
WAGO lever nutsout, leg AUSW-Flex-Utility 60W adapterAC input120VACPowers the switch
WAGO lever nutsout, leg BShelly Pro 2L / N supply120VACMains-referenced supply only
Loco5AC radio (via INS-3AF-O-G at antenna)Ethernet outUACC-ETH-SP-Proline sideCat6Uplink to the house. Enters enclosure through PG9 gland
UACC-ETH-SP-Proprotected sideUSW-Flexport 1Cat6-
USW-Flexport 2Reolink RLC-811APoE inCat6PoE. Camera exits enclosure through PG9 gland
USW-Flexport 3Shelly Pro 2LANCat6Data only, short patch. Shelly is mains powered, not PoE
Shelly Pro 2CH1 output (verify silkscreen)Viking VFLEX terminal bankOpen18/4 conductorIn 1/2in liquidtight conduit
Shelly Pro 2CH1 output (verify silkscreen)Viking VFLEX terminal bankGND18/4 conductorIn 1/2in liquidtight conduit
Shelly Pro 2CH2 output (verify silkscreen)Viking VFLEX terminal bankClose18/4 conductorIn 1/2in liquidtight conduit
Shelly Pro 2CH2 output (verify silkscreen)Viking VFLEX terminal bankGND18/4 conductorIn 1/2in liquidtight conduit
8 ft ground rodrodUACC-ETH-SP-Proground lug#6 bare copperBond shield at the grounded end only. Enters enclosure through PG9 gland
Never wire anything to the Shelly's SW1 or SW2 inputs. They are line-voltage referenced, 110-240VAC, not dry-contact sensing. This design uses no inputs at all. Landing a low-voltage loop there will damage equipment.
Bond the cable shield at the grounded end only. The surge protectors and the ground rod only work on shielded cable; on unshielded cable they are decorative.
Confirm the exact silkscreen labels on the Shelly's output terminals against the device itself before landing conductors.
Back to overview

Build Steps

  1. Paint the enclosure. Scuff 220-320 grit, degrease with isopropyl, shoot Krylon Fusion gloss black, mask the gasket, sealing lip, latches and hinge pins, cure fully before any electronics go in. Painting is the UV fix for ABS, not a cosmetic step, because UV degradation is a surface effect.
  2. Mount the DIN rail and the Flex-Utility to the QILIPSU's included mounting plate. Flex-Utility flat on the left roughly two thirds; DIN rail on the remaining width with clear rail left spare; surge protector near the uplink cable entry, close to the ground point.
  3. Drill and fit the enclosure entries. Uplink Cat6 and camera Cat6 each take a PG9 gland. The 18/4 run to the Viking cabinet and the 120VAC supply each take a liquidtight connector, not a gland. Ground conductor takes a gland or a lug through a drilled hole, installer's call. Breather vent at the lowest point.
  4. Mount the enclosure to the post using the included wall brackets. Drip loop on every cable entering from above.
  5. Run and terminate the conduit between the enclosures. A 1/2 in liquidtight connector threads into either a spare Viking knockout or a drilled 7/8 in hole with a locknut, so a missing knockout only means a step bit is needed.
  6. Land the 120VAC with WAGO lever nuts, feeding both the 60W adapter and the Shelly's L and N.
  7. Land the dry contacts at the Viking end, two conductors on Open and GND, two on Close and GND. Nothing else in the Viking cabinet changes.
  8. Patch the Shelly to a spare USW-Flex port.
  9. Ground rod and bonding.
Back to overview

Configuration

Shelly

  • Give it a DHCP reservation on the UDR7 so the LAN address is stable. The LAN-first Shortcut depends on it.
  • Both channels: enable auto_off with auto_off_delay of 0.5 seconds. This is Shelly's own published value for garage and gate pulse simulation. The setting lives on the device, not in a cloud scene, so it stays correct if a call is duplicated or arrives late.
  • Both channels default OFF.
  • Enable Shelly Cloud.
  • Check whether local RPC authentication is enabled. If it is, the LAN Shortcut needs a Basic Auth header. Confirm on site.
  • One Shelly Cloud account per client site, Timber SAV holds the login. The Shelly Cloud auth key is ACCOUNT-LEVEL, not per-device, so a leaked key reaches every Shelly on that account. Never share one account across client sites.

The two calls

Local, plain GET, no body. Use id=1 for the Close channel.

http://<gate-shelly-ip>/rpc/Switch.Set?id=0&on=true&toggle_after=1

Cloud, POST with header Content-Type: application/json.

https://<server-shard>/v2/devices/api/set/switch?auth_key=<AUTH_KEY>

{"id":"<device-id>","channel":0,"on":true,"toggle_after":1}

The auth key AND the regional server shard both come from the Shelly app under User Settings, Authorization cloud key, shown on the same screen. The device ID comes from Device, Settings, Device Information.

Apple Shortcuts

Two shortcuts, "Open Gate" and "Close Gate", each pinned to the home screen. Each one: Get Contents of URL against the LAN address first, and on failure fall back to the cloud POST, then show a notification reporting the result.

The notification matters: a fire-and-forget Shortcut that silently fails is the worst outcome for a non-technical client, because his phone has signal and everything else works, so a failure looks like the install broke.

Network

Gate post on its own VLAN. Out to internet allowed. No path to the house LAN in either direction. Verify WPA2/AES is actually enabled on the Loco5AC link at commissioning rather than assuming it; airMAX point-to-point gear commonly ships with encryption off.

Back to overview

Commissioning & Handover

Verify on site

  • UL 325. Actuation from out of line of sight is explicitly permitted provided two independent entrapment-protection means are present and functional and every trigger still runs the board's own timing and reversal logic. Wiring across Open/GND and Close/GND is electrically identical to the pushbutton the board expects, so it defeats nothing. What must be verified is that the existing photo beams and edge sensors are landed on the board's MONITORED entrapment inputs, not merely present. That is the single fact that decides compliance and it is a gate-technician check.
  • Confirm a momentary Open while the gate is already open does nothing harmful, and that the board's auto-close Timer does not fight a remote Close.
  • Confirm WPA2/AES on the radio link.
  • Confirm the relay fails open-circuit so loss of power, Ethernet or cloud simply reverts the gate to the RF remote and loops with no stuck input.

Client handover sheet

  1. The clicker is primary. If the internet is down, use the clicker.
  2. Always look at the live camera before sending Close. Never send it blind. Entrapment protection covers the gate striking something in its swing; it does not cover a vehicle parked in the swing arc outside beam coverage.
  3. Here is a spare RF remote.

Thermal note

The Shelly's +40C ceiling is the binding spec in that enclosure; the USW-Flex is good to 55C and its adapter to 60C. A sealed black box in direct sun runs 15 to 30C above ambient, so if the post catches afternoon sun, fit the sun shield: an aluminum plate standing off the top and sun-facing side by about an inch, painted black to match. The air gap does the work. In winter the nested boxes trap the adapter's waste heat, which helps hold the Shelly above its -20C floor.

Back to overview

Decisions

Option consideredReason rejected
Apple Home / HomeKitNeeds a bridge box, because Matter only added a Closures device type in spec 1.5 (Dec 2025) with unproven Apple rendering, and no Shelly SKU has both wired Ethernet and Matter. Would have meant an Apple TV plus a bridge appliance, about $430 and a permanent remote support obligation.
Apple-certified garage controllers (Meross, iSmartGate, ratgdo, Tailwind, Konnected)All Wi-Fi only, all indoor-rated, all built for a single-toggle garage button rather than Viking's separate Open/Stop/Close, and there is no AP at the gate.
UniFi UA-Hub-Gate$305, needs 802.3bt while the gate switch is af/at, and drags a whole access-control platform plus a second app onto the client's phone for one gate and one user.
LPR auto-openThe RLC-811A does vehicle detection, not plate reading; real LPR needs a dedicated plate camera plus an NVR or paid OCR, on a driveway that hits canopy at 30 yd.
Position feedback from the Viking maglock relayThe Shelly's SW inputs are line-voltage referenced, so reading it would put mains through a low-voltage aux contact.
Altelix DIN-rail enclosure at $384.99The DIN-rail-branded category carries a large premium; a plain gasketed NEMA 4X box plus $5 of rail is the same result.
Cloudflare Worker credential intermediarySolved a problem that one Shelly account per client site already handles at this scale.