Difference between revisions of "ISY-99i/ISY-26 INSTEON:Remotely Connect to Your ISY"

From Universal Devices, Inc. Wiki
Jump to: navigation, search
m (Port Number)
(Introduction)
 
(75 intermediate revisions by 4 users not shown)
Line 1: Line 1:
==Creating a Self Signed Certificate==
+
==Introduction==
 +
In order to access your ISY remotely, you have two choices:
 +
# '''Free''': You will need to create port forwarding rules in your router to point to ISY's web server
 +
# '''Fee Based''': For a very low fee, You can use [[Main_Page#ISY_Portal:_Integration_with_Amazon_Echo.2FGoogle_Home.2FIFTTT | ISY Portal Service]] which does not require any router configurations, continues to work even if your ISP's IP address changes, and comes with a whole host of other features such as integration with Amazon Alexa, Google Home, IFTTT, and may other cloud based services
  
  
To eliminate the problem of being warned all the time about the default certificate the first thing that is suggested is to creating a Self Signed Certificate.
+
This article details the procedures for option 1. For option 2, please refer to [[Main_Page#ISY_Portal:_Integration_with_Amazon_Echo.2FGoogle_Home.2FIFTTT | ISY Portal Service]].
  
# Create my INSTEON ISY [https://www.universal-devices.com/ssl/insteon/ Self Signed Certificate] Now!
+
==Configuring ISY Remote Access==
#* See [[ISY-99i/ISY-26_INSTEON:Help_Menu#Request.2FManage_SSL_Certificates|Request & Manage_SSL_Certificates]]
+
# Login using your ISY credentials
+
# Choose Generate and Install New Self Signed Certificate; this will install a new certificate in your ISY and reboots ISY
+
  
==Configuring Remote Access==
+
In order to access and control your ISY unit from the Internet (away from home) you will need to enable Internet access on your ISY and make sure your router configured to forward the ISY port. This process allows the ISY to get a real IP address from your Cable/DLS modem which is seen across the Internet. Many routers can auto-configure directly with the UPnP protocol and others will need to have it done manually. If you need to configure your router manually please see the below section [[ISY-99i/ISY-26 INSTEON:Remotely Connect to Your ISY#On a Non-UPnP Router|On a Non-UPnP Router]].
  
In order to access and control your ISY unit from the Internet (away from home) you will need to enable Internet access on your ISY and make sure your router configured to forward the ISY port. This process allows the ISY to get a real IP address from your Cable/DLS modem which is seen across the Internet. Many routers can auto-configure directly with the UPnP protocol and others will need to have it done manually. If you need to configure your router manually please see the below section [[ISY-99i/ISY-26 INSTEON:Remotely Connect to Your ISY#Configuring a Non-UPnP Router|Configuring a Non-UPnP Router]].
 
  
 +
<font color=red>Please Note: If you're using a Portal enabled service to connect to your ISY remotely, in most cases you do not need to port-forward your ISY. Some products that have NOT been setup with the Portal service still however do need port forwarded and in that case please follow the steps below. Also note the Portal is a safe automatic connection that bypasses your router's standard NAT firewall.</font>
  
Most Internet Service Providers (ISP) use dynamic ISP addresses. This means that your ISP address can change at any time.
 
* Your ISP address can be found:
 
** by logging into your router and viewing the '''Status''' page, or
 
** by opening a browser page to [http://www.portforward.com/ Portforward.com], or
 
** by opening a browser page to [http://whatismyipaddress.com WhatIsMyIPaddress.com]
 
* Use dynamic DNS services such as [http://www.dyndns.com DynDNS] or [http://www.tzo.com tzoDNS] to assign a domain name to your dynamic ISP address
 
  
 +
<ol style="list-style-type:decimal">
 +
===<li>Configuring a UPnP Router===
  
===Configuring a UPnP Router===
+
# Check the auto-configure [[ISY-99i/ISY-26 INSTEON:Supported Remote Access Routers|Supported Remote Access Routers]] list, if not see [[ISY-99i/ISY-26 INSTEON:Remotely Connect to Your ISY#On a Non-UPnP Router|On a Non-UPnP Router]] below
 
+
# Check the auto-configure [[ISY-99i/ISY-26 INSTEON:Supported Remote Access Routers|supported remote access routers]] list, if not see [[ISY-99i/ISY-26 INSTEON:Remotely Connect to Your ISY#Configuring a Non-UPnP Router|Configuring a Non-UPnP Router]] below
+
 
# Make sure you have enabled UPnP within your router so the ISY can auto-configure your router
 
# Make sure you have enabled UPnP within your router so the ISY can auto-configure your router
# In your ISY click on "File --> Enable Internet Access" to enable the ISY internet access. This will negotiate the port through the router and out to the Internet
+
# In your ISY click on '''File --> Enable Internet Access''' to enable the ISY internet access. This will negotiate the port through the router and out to the Internet
 
# Verify your ISY IP address in the popup window, it should NOT be from your local network (a local IP would look like: 192.168.1.101)
 
# Verify your ISY IP address in the popup window, it should NOT be from your local network (a local IP would look like: 192.168.1.101)
 
#*<nowiki>https://your.isp.add.ress</nowiki> - an example might be '''<nowiki>https://10.88.24.15</nowiki>'''
 
#*<nowiki>https://your.isp.add.ress</nowiki> - an example might be '''<nowiki>https://10.88.24.15</nowiki>'''
 
# Using the address assigned by your ISP or a domain name from a dynamic DNS service you are now ready to access your ISY software from the Internet!  
 
# Using the address assigned by your ISP or a domain name from a dynamic DNS service you are now ready to access your ISY software from the Internet!  
 
 
  
  
Line 37: Line 29:
  
  
 +
[[{{ns:6}}:Internet_Access_-_Enabled_Message.gif|Enabled Access Message]]</li>
  
[[{{ns:6}}:Internet_Access_-_Enabled_Message.gif|Enabled Access Message]]
 
  
 +
===<li>Configuring a Non-UPnP Router===
 +
[https://www.youtube.com/watch?v=VV7u771uX7E '''Instructional Video for Port Forwarding''']
  
====When successful====
+
If you do not have a UPnP router, or if File->Enable Internet Access returns '''null''' or fails, then:
Menu item '''Help | About''' will display the external IP address
+
* Note the address is preceded with '''https''' as you will be using a secure port.
+
 
+
 
+
[[{{ns:6}}:QSG External IP Address.gif|frame|none|''External IP Address'']]
+
 
+
===Configuring a Non-UPnP Router===
+
 
+
If you do not have a UPnP router, or if File->Enable Internet Access returns "null" or fails, then:
+
  
 +
# Make sure you do '''NOT''' use File | Enable Internet Access. It's an either/or scenario
 
# Get [[ISY-99i/ISY-26 INSTEON:Your ISY IP Address|your ISY IP address]], and write it down. Here is an example of what you might have:  
 
# Get [[ISY-99i/ISY-26 INSTEON:Your ISY IP Address|your ISY IP address]], and write it down. Here is an example of what you might have:  
 
#* My URL: '''<nowiki>http://192.168.1.105</nowiki>'''
 
#* My URL: '''<nowiki>http://192.168.1.105</nowiki>'''
 
#If your ISY is on a DHCP (default behavior for most routers) then ISY's IP address may change. As such, if you plan to use remote access:
 
#If your ISY is on a DHCP (default behavior for most routers) then ISY's IP address may change. As such, if you plan to use remote access:
#* See [[ISY-99i/ISY-26_INSTEON:Quick_Start_Guide#Assigning_ISY_a_Static_IP_Address|Assigning_ISY_a_Static_IP_Address]] for ISY, or
+
#* See [[ISY-99i/ISY-26_INSTEON:Quick_Start_Guide#Assigning_ISY_a_Static_IP_Address|Assigning ISY a Static IP Address]] for ISY, or
#* On your router, make ISY's IP lease permanent
+
#* On your router, make ISY's IP lease permanent (DHCP Reservation), or
 +
#* ISY firmware v2.7.9+ see [[ISY-99i/ISY-26_INSTEON:Network_Settings|Network Settings]]
 
# Follow the information on [http://www.portforward.com/ Portforward.com] to configure your specific router for port forwarding.
 
# Follow the information on [http://www.portforward.com/ Portforward.com] to configure your specific router for port forwarding.
 
#* Find and select your router on the initial page
 
#* Find and select your router on the initial page
#* Select the program "'''HTTPS'''" on the following page for instructions specific to your router
+
#* On the addvertisemnt page locate the "Click here to skip this advertisement..." link and click it to continue.
 +
#* Select the program '''HTTPS''' on the following page for instructions specific to your router
 
# Using the address assigned by your ISP or a domain name from a dynamic DNS service you are now ready to access your ISY software from the Internet!  
 
# Using the address assigned by your ISP or a domain name from a dynamic DNS service you are now ready to access your ISY software from the Internet!  
 
#* If you are using port 443 (the default) you can access your ISY using '''HTTPS''' which will automatically forward port 443 to the ISY.
 
#* If you are using port 443 (the default) you can access your ISY using '''HTTPS''' which will automatically forward port 443 to the ISY.
 
#* An example might be '''<nowiki>https://10.88.24.15</nowiki>'''
 
#* An example might be '''<nowiki>https://10.88.24.15</nowiki>'''
 +
# Once port forwarding is configured in the router you <font color="red">'''DO NOT'''</font> need to use the ISY Enable Internet Access option
 +
 +
===<li>Verifying your IP Address===
 +
 +
* Your ISP address can be found:
 +
** by opening a browser page to [http://www.portforward.com/ Portforward.com], or
 +
** by opening a browser page to [http://whatismyipaddress.com WhatIsMyIPaddress.com], or
 +
** by logging into your router and viewing the '''Status''' page
 +
**# Menu item '''Help | About''' will display the external IP address
 +
**# Note the address is preceded with '''HTTPS''' as you will be using a secure port.
 +
 +
 +
[[{{ns:6}}:QSG External IP Address.gif|frame|none|''External IP Address'']]</li>
 +
</ol>
 +
 +
==Setup Dynamic DNS services==
 +
 +
Most Internet Service Providers (ISP) use dynamic ISP addresses, this means that your ISP address can change at any time. It is suggested you use a dynamic DNS service that will give you a '''static web address''' to reach your ISY at all times. In order to keep the address static these services either use your router to auto update, or have a small program that runs on your local computer which will update the DNS servers that your IP has changed. Its a good solution when you don't want to obtain a costly static address from your internet provider. There is many providers out there but here is a couple recommendations: [http://www.dyndns.com DynDNS] or [http://www.tzo.com tzoDNS].
 +
 +
* Here is a helpful [http://www.dyndns.com/support/kb/dyndns.html Dynamic DNS setup guide] over at DynDNS
 +
 +
 +
==Creating an ISY Self Signed Certificate==
 +
 +
To eliminate the problem of being warned all the time about the default certificate the first thing that is suggested is to creating a Self Signed Certificate. Other details can be found in the [[ISY-99i/ISY-26_INSTEON:Help_Menu#Request.2FManage_SSL_Certificates|Request & Manage SSL Certificates]] section.
 +
 +
* You must be on the same local network as the ISY.
 +
* See [[ISY-99i/ISY-26 INSTEON:Internet Explorer SSL Certificate Install|Internet Explorer SSL Certificate Install]] for more details about accepting it when using we browsers.
 +
 +
==Changing HTTPS Port Number==
 +
 +
If your router is complaining about port 443 already being used, it means that you already have another network device (in your LAN) which uses 443 and thus the router will only forward the requests to that device. For reference here is a [http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers List of TCP and UDP port numbers] from the Wikipedia.
 +
 +
<ol style="list-style-type:decimal">
 +
===<li>Change Port via ISY Admin===
 +
 +
ISY firmware v2.7.9+
 +
 +
# Use the "[http://www.universal-devices.com/MyInsteonISY/ Logon to My INSTEON ISY] Now!" weblink, enter your user name and password when prompted to get logged in.
 +
# Click on the '''Configuration''' tab, then '''System''' tab
 +
# Under the '''[[ISY-99i/ISY-26_INSTEON:Network_Settings|Network Settings]]''' area change the HTTPS port, example 1443
 +
# After selecting a new port click the '''Save''' button to save the changes, then your ISY will reboot
 +
# Optional reboot your router (Some routers may need reconfiguring if they don't pick up the new IP address)
 +
#* Your remote access URL will be '''<nowiki>https://your.ext.ip.add:new_port</nowiki>'''
 +
 +
 +
[[Image:Configuration Network.gif|frame|none|''Configure the Network Settings.'']]</li>
 +
 +
 +
===<li>Change Port via Telnet Interface===
 +
 +
# [[ISY-99i/ISY-26 INSTEON:Telnet To Your ISY|Telnet To Your ISY]]
 +
# Issue the '''CWP''' command: [[ISY-99i/ISY-26_INSTEON:Advanced_Configuration_Guide#CWP_-_Configure_Webserver_Ports|CWP - Configure Webserver Ports]]
 +
# Change the HTTPS port to some other number, example 1443. This will reboot the ISY
 +
# Optional reboot your router (Some routers may need reconfiguring if they don't pick up the new IP address)
 +
#* Your remote access URL will be '''<nowiki>https://your.ext.ip.add:new_port</nowiki>'''
 +
 +
 +
[[Image:QSG Telnet Menu.gif|frame|none|''Telnet ISY Interface'']]</li>
  
==Port Number==
 
  
 +
===<li>Verify the new HTTPS Port Number===
  
If your router is complaining about port 443 already being used, it means that you already have another network device (in your LAN) which uses 443 and thus the router will only forward the requests to that device. To rectify:
+
# Login to the ISY Admin Console
 +
# Verify the external IP address, menu item '''Help | About'''
 +
#* Note the address is preceded with '''HTTPS''' as you will be using a secure port. In the image the Port has been changed to 1443.
  
  
# Make sure this is the case (port 443 is forwarded to another device)
+
[[Image:QSG External IP Address and Port.gif|frame|none|''Port = 1443'']]</li>
# Change your ISY's HTTPS port
+
</ol>
#* [[ISY-99i/ISY-26 INSTEON:Telnet To Your ISY|Telnet To Your ISY]]
+
#* Issue the "CWP" command: [[ISY-99i/ISY-26_INSTEON:Advanced_Configuration_Guide#CWP_-_Configure_Webserver_Ports|CWP_-_Configure_Webserver_Ports]]
+
#* Change the HTTPS port to some other number. This will reboot ISY
+
# Reconfigure your router (or let ISY do it for you after reboot)
+
# Your remote access URL will be '''<nowiki>https://your.external.ip.address:new_https_port</nowiki>'''
+
#* In the image the Port has been changed to 1443.
+
  
  
[[Image:QSG External IP Address and Port.gif|frame|none|''Port = 1443'']]
 
  
  
  
 
----
 
----
[http://forum.universal-devices.com/viewtopic.php?t=635 How To: Enable Internet Access]
+
[http://forum.universal-devices.com/viewtopic.php?t=635 How To: Enable Internet Access (forum)]
  
 
[[ISY-26 INSTEON|ISY-26 INSTEON]] '''/'''
 
[[ISY-26 INSTEON|ISY-26 INSTEON]] '''/'''
 
[[ISY-99i Series INSTEON|ISY-99i Series INSTEON]] ''':'''
 
[[ISY-99i Series INSTEON|ISY-99i Series INSTEON]] ''':'''
 
[[ISY-99i/ISY-26 INSTEON:How-To Guide|How-To Guide]]
 
[[ISY-99i/ISY-26 INSTEON:How-To Guide|How-To Guide]]

Latest revision as of 22:41, 6 July 2018

Introduction

In order to access your ISY remotely, you have two choices:

  1. Free: You will need to create port forwarding rules in your router to point to ISY's web server
  2. Fee Based: For a very low fee, You can use ISY Portal Service which does not require any router configurations, continues to work even if your ISP's IP address changes, and comes with a whole host of other features such as integration with Amazon Alexa, Google Home, IFTTT, and may other cloud based services


This article details the procedures for option 1. For option 2, please refer to ISY Portal Service.

Configuring ISY Remote Access

In order to access and control your ISY unit from the Internet (away from home) you will need to enable Internet access on your ISY and make sure your router configured to forward the ISY port. This process allows the ISY to get a real IP address from your Cable/DLS modem which is seen across the Internet. Many routers can auto-configure directly with the UPnP protocol and others will need to have it done manually. If you need to configure your router manually please see the below section On a Non-UPnP Router.


Please Note: If you're using a Portal enabled service to connect to your ISY remotely, in most cases you do not need to port-forward your ISY. Some products that have NOT been setup with the Portal service still however do need port forwarded and in that case please follow the steps below. Also note the Portal is a safe automatic connection that bypasses your router's standard NAT firewall.


  1. Configuring a UPnP Router
    1. Check the auto-configure Supported Remote Access Routers list, if not see On a Non-UPnP Router below
    2. Make sure you have enabled UPnP within your router so the ISY can auto-configure your router
    3. In your ISY click on File --> Enable Internet Access to enable the ISY internet access. This will negotiate the port through the router and out to the Internet
    4. Verify your ISY IP address in the popup window, it should NOT be from your local network (a local IP would look like: 192.168.1.101)
      • https://your.isp.add.ress - an example might be https://10.88.24.15
    5. Using the address assigned by your ISP or a domain name from a dynamic DNS service you are now ready to access your ISY software from the Internet!


    Enabling Internet Access


    Enabled Access Message


  2. Configuring a Non-UPnP Router
  3. Instructional Video for Port Forwarding

    If you do not have a UPnP router, or if File->Enable Internet Access returns null or fails, then:

    1. Make sure you do NOT use File | Enable Internet Access. It's an either/or scenario
    2. Get your ISY IP address, and write it down. Here is an example of what you might have:
      • My URL: http://192.168.1.105
    3. If your ISY is on a DHCP (default behavior for most routers) then ISY's IP address may change. As such, if you plan to use remote access:
    4. Follow the information on Portforward.com to configure your specific router for port forwarding.
      • Find and select your router on the initial page
      • On the addvertisemnt page locate the "Click here to skip this advertisement..." link and click it to continue.
      • Select the program HTTPS on the following page for instructions specific to your router
    5. Using the address assigned by your ISP or a domain name from a dynamic DNS service you are now ready to access your ISY software from the Internet!
      • If you are using port 443 (the default) you can access your ISY using HTTPS which will automatically forward port 443 to the ISY.
      • An example might be https://10.88.24.15
    6. Once port forwarding is configured in the router you DO NOT need to use the ISY Enable Internet Access option

  4. Verifying your IP Address
    • Your ISP address can be found:
      • by opening a browser page to Portforward.com, or
      • by opening a browser page to WhatIsMyIPaddress.com, or
      • by logging into your router and viewing the Status page
        1. Menu item Help | About will display the external IP address
        2. Note the address is preceded with HTTPS as you will be using a secure port.


    External IP Address

Setup Dynamic DNS services

Most Internet Service Providers (ISP) use dynamic ISP addresses, this means that your ISP address can change at any time. It is suggested you use a dynamic DNS service that will give you a static web address to reach your ISY at all times. In order to keep the address static these services either use your router to auto update, or have a small program that runs on your local computer which will update the DNS servers that your IP has changed. Its a good solution when you don't want to obtain a costly static address from your internet provider. There is many providers out there but here is a couple recommendations: DynDNS or tzoDNS.


Creating an ISY Self Signed Certificate

To eliminate the problem of being warned all the time about the default certificate the first thing that is suggested is to creating a Self Signed Certificate. Other details can be found in the Request & Manage SSL Certificates section.

Changing HTTPS Port Number

If your router is complaining about port 443 already being used, it means that you already have another network device (in your LAN) which uses 443 and thus the router will only forward the requests to that device. For reference here is a List of TCP and UDP port numbers from the Wikipedia.

  1. Change Port via ISY Admin
  2. ISY firmware v2.7.9+

    1. Use the "Logon to My INSTEON ISY Now!" weblink, enter your user name and password when prompted to get logged in.
    2. Click on the Configuration tab, then System tab
    3. Under the Network Settings area change the HTTPS port, example 1443
    4. After selecting a new port click the Save button to save the changes, then your ISY will reboot
    5. Optional reboot your router (Some routers may need reconfiguring if they don't pick up the new IP address)
      • Your remote access URL will be https://your.ext.ip.add:new_port


    Configure the Network Settings.


  3. Change Port via Telnet Interface
    1. Telnet To Your ISY
    2. Issue the CWP command: CWP - Configure Webserver Ports
    3. Change the HTTPS port to some other number, example 1443. This will reboot the ISY
    4. Optional reboot your router (Some routers may need reconfiguring if they don't pick up the new IP address)
      • Your remote access URL will be https://your.ext.ip.add:new_port


    Telnet ISY Interface


  4. Verify the new HTTPS Port Number
    1. Login to the ISY Admin Console
    2. Verify the external IP address, menu item Help | About
      • Note the address is preceded with HTTPS as you will be using a secure port. In the image the Port has been changed to 1443.


    Port = 1443




How To: Enable Internet Access (forum)

ISY-26 INSTEON / ISY-99i Series INSTEON : How-To Guide