A well-designed guestroom control system keeps lights, curtains, air-conditioning and the door-side controls working from local logic when the hotel network drops. What should stop is only what genuinely depends on the network: PMS check-in status, central BMS setpoints, mobile or TV-based control, and alarms reaching the front office. The design task is to decide that boundary in advance and test it before handover.
This reference is written by Singapore-based AV and IPTV integrator Prestige Solutions for facility managers, hotel IT managers and system integrators responsible for smart room control systems in hotels and serviced apartments. It lists what should keep working, the typical failure modes by network segment, safe default states and the recovery tests we expect at commissioning. Behaviour varies by platform as of 2026, so confirm each row against the controller manufacturer's documentation.
Everything a guest touches inside the room should run from the room controller alone. The network should carry supervision and integration, not the basic control loop between a keypad and a light circuit.
| Function | Expected behaviour on network loss | Depends on |
|---|---|---|
| Lighting scenes from wall keypads | Keep working | Room controller and local bus only |
| Curtains and blinds | Keep working from keypads | Room controller and motor wiring |
| Fan coil unit / air-conditioning control | Keep working at local setpoint limits | Room controller and thermostat |
| Key card or presence-based room power | Keep working | Card switch or occupancy sensor wired to the room controller |
| Do Not Disturb / Make Up Room at the door | Door indicator keeps working; front office no longer sees status | Local wiring for indicator; network for reporting |
| Unsold-room energy mode from PMS | Stops updating; room keeps its last state | PMS interface over network |
| Central BMS setpoint changes | Stop; room keeps the last received values | BMS integration over network |
| Mobile app, TV or voice control | Stops | Network and cloud or server |
| Fault and alarm reporting | Stops reaching the front office; local buffering if supported | Network and central server |
If any of the first five rows depends on the network in the proposed design, treat it as a design defect. Keypads that send commands through a central server work well on a good day, but a switch reboot then becomes a guest complaint in every affected room.
"The network is down" covers several different faults. Each breaks a different set of rooms and functions, so the diagnosis starts by finding out which segment failed.
| Failure | Scope | Typical symptom | First check |
|---|---|---|---|
| Room controller lost link (cable, port, PoE) | One room | Room shows offline at the front office; guest controls normal if local logic is correct | Switch port status and PoE budget |
| Floor or IDF access switch down | One floor or riser | Block of rooms offline at once | Switch power, uplink and UPS status in the IDF |
| Core switch or VLAN change | Whole building | All rooms offline; PMS events not reaching rooms | Recent change records; VLAN and routing for the controls segment |
| Central control server down | Whole building (supervision) | Dashboard blank; rooms work locally | Server services, disk space, licence status |
| PMS interface stopped | All rooms (integration) | Check-in does not wake rooms; unsold-room mode stale | Interface service log; last message timestamp |
| BMS gateway lost | All rooms (setpoints) | Central setpoint changes ignored | Gateway reachability and protocol session (for example BACnet/IP) |
| Internet or cloud loss | Remote features only | Mobile app and remote support unavailable | ISP link; confirm local server functions are unaffected |
The PMS interface row is the one most often missed. The network can be healthy while the interface service has stopped, and rooms simply stop reacting to check-in and check-out. A "last message received" time on the dashboard catches that within minutes. The data flow between PMS and room systems is covered in our hotel IPTV and PMS integration reference, which uses the same check-in events.

A room that loses contact should hold its last known state for a defined period and then fall back to a documented default. Do not leave this to the factory default of the controller, which may switch everything off or leave everything on.
| Room condition at network loss | Recommended hold behaviour | Recommended fallback |
|---|---|---|
| Occupied (card inserted or presence detected) | Hold current scene and setpoint | Keep local control; no automatic changes |
| Vacant, sold | Hold current energy-saving state | Local occupancy logic continues to run |
| Vacant, unsold | Hold unsold-room state | Card insertion still restores normal control |
| Check-in during the outage | Room wakes on card insertion only | Welcome scene and pre-cooling skipped until network returns |
The key rule: local presence and key card inputs must always override a stale network instruction. A guest checking in during an outage should get light and air-conditioning when the card goes in, even if the PMS message never arrives.
Most of the protection comes from decisions made before installation. These rules apply regardless of controller brand.

Recover infrastructure first, then supervision, then integrations, and only then push any changes to rooms. Pushing a full PMS resynchronisation to hundreds of rooms while switches are still converging creates a second burst of faults.
Run these on a mock-up room first, then on a sample of production rooms on each floor. A pass means a guest in the room would not notice the outage.
Record the results per room type with the controller firmware version, so later firmware updates can be checked against the same behaviour.

It depends on where the logic runs. A wireless system with a local room gateway behaves like a wired controller. A system that relies on a building-wide wireless coordinator or a cloud service may lose keypad-to-light control, so ask the supplier to demonstrate an outage on a mock-up.
Yes, but with a delay of a few minutes to avoid alerts during planned switch reboots. Group alerts by floor, so a single switch failure produces one alarm rather than one per room.
After every controller firmware update, server upgrade or network redesign, and at least once a year on a sample of rooms. Firmware changes can alter hold times and fallback states without being listed as a major change.
Visit Prestige Solutions for the wider AV and IPTV service range.
Contact Prestige Solutions to review your site drawings and current operating pattern. Call +65 8010 2337 or +65 9825 8218, message us on WhatsApp (+65 8010 2337), or email sales@prestigesolutions.com.sg. You can also browse the full product range before the site walk.
Explore our full product range or speak with our technical team for a tailored consultation.