Setting up Internet Access on ISY-99i

[osurh18]

I know that there are multiple threads on this but I can't seem to figure this out. I had it all running at one point and then I had a power outage...please help:

 

 

 

Router Settings for ISY:

IP is 192.168.1.101

Internal Port is 443

External Ports is 443

 

ISY Configuration:

When I try to use the FILE/Enable Internet Access I get that an error that it fails

If I go to the Configuration Tab I show that it has Automatic DHCP selected (greyed out ip address of 192.168.1.1 and http port of 80 and https port of 443). If I uncheck automatic DHCP and try to manually change the ip address to 192.168.1.101 I get an error that the subnet mask is in correct. This is where I am stuck. Any and all help is appreciated. Thanks.

[Xathros]

Uncheck DHCP and use the following settings for the ISY:

 

IP Address: 192.168.1.20

Subnet Mask: 255.255.255.0

Gateway: 192.168.1.1

DNS: 8.8.8.8

 

 

Then in your routers port forwarding section:

 

Outside Port 443 to Inside Port:443 at IP Address 192.168.1.20

 

And don't bother with "Enable Internet Access" in the ISY

 

 

-Xathros

[osurh18]

I made the changes you suggested and when I clicked SAVE it reset the ISY. After it reset I tried to log back into it and it opened in SAFE Mode. I went and unplugged it and then powered it back up. Went to login again and it still logs into SAFE Mode.

 

Any suggestions.

[osurh18]

I reset the PLM and ISY and it works. Thanks a bunch

[Xathros]

Always happy to help.

 

-Xathros

[smorgasbord]

Uncheck DHCP and use the following settings for the ISY:

IP Address: 192.168.1.20

Subnet Mask: 255.255.255.0

Gateway: 192.168.1.1

DNS: 8.8.8.8

Then in your routers port forwarding section: Outside Port 443 to Inside Port:443 at IP Address 192.168.1.20

And don't bother with "Enable Internet Access" in the ISY

 

OK, I've done this (used a different IP than 192.168.1.20). Now, what do I do to actually try this out?

 

Sorry for the newbie question.

[KMan]

Uncheck DHCP and use the following settings for the ISY:

IP Address: 192.168.1.20

Subnet Mask: 255.255.255.0

Gateway: 192.168.1.1

DNS: 8.8.8.8

Then in your routers port forwarding section: Outside Port 443 to Inside Port:443 at IP Address 192.168.1.20

And don't bother with "Enable Internet Access" in the ISY

 

OK, I've done this (used a different IP than 192.168.1.20). Now, what do I do to actually try this out?

 

Sorry for the newbie question.

 

First, you need to know your router's external IP address (this is the address assigned by your internet provider, not a local 192.168.x.x address). You can find this somewhere on the router's web pages (usually under a "WAN" section) ... or easier is just to go http://checkip.dyndns.com/ from a PC in your home.

 

The checkip site should give you a simple one line page with your external IP.

 

Now, you just need to try to access that external IP from outside your router's network. You can do this by using a PC external to your home (friends house, work or Starbucks), or if you have a smartphone, turn off wifi and access the following web page:

 

https://

 

If everything is working right, that will connect you to your ISY. Note that you will likely get a certificate warning ... there are ways to fix that if you want.

[oberkc]

My experience is that, in addition to the steps described by kman, one must set up port-forwarding rules in the router to match the ports defined in the ISY. In doing so, be aware of the other devices on your network and ensue that there are no other devices trying to use the SAME ports. It is likely best to use ports other than 80 and 443.

 

Once established, the address for your ISY when outside your LAN would be:

 

Https://myipaddress:mysecureportnumber/

[smorgasbord]

This isn't working for me.

 

I got my external IP address from http://www.whatsmyip.org/. It's something like 50.xxx.yyy.zzz

 

I have set port forwarding on my Asus RT-N66U router as follows:

 

On my phone, disabled wireless, so I'm on LTE. Then browsed to https://50.xxx.yyy.zzz:59876

 

And I get "This webpage is not available."

[smorgasbord]

I'm wondering if I've got the right Gateway and DNS settings.

I don't have DNS on, so perhaps that should be blank?

And should the Gateway be the actual IP address of the router (192.168.85.100)?

[KMan]

I'm wondering if I've got the right Gateway and DNS settings.

I don't have DNS on, so perhaps that should be blank?

And should the Gateway be the actual IP address of the router (192.168.85.100)?

 

DNS shouldn't matter in this case.

 

Gateway should be your router's IP address. And your subnet mask should be 255.255.0.0 in this case.

[oberkc]

And I get "This webpage is not available."

 

Unfortunately, we are reaching the limits of my knowledge and experience.

 

In your port forwarding rules, I note that 59876 is listed under "range". And you have 443 under "local port". None of these terms show up in my DLink port-forwarding rules page.

 

I am also curious what it is that your ISY settings for secure and non-secure ports are? Is one of them 59876? I believe these need to match.

 

Have you tried 443 as a port number: https://50.xxx.yyy.zzz:443/

[smorgasbord]

Got a clue: With the manual Network Settings I had I was no longer able to contact the NTP Server. So, I took a different route. Instead of having the ISY ask for a specific static IP address, I told the router to assign the ISY a static IP address of 192.168.1.200. This way I can leave the ISY on Automatic DHCP, but the router will always assign it that same 192.168.1.200 address. That let's me leave the ISY on its default settings, which work.

 

OK, so this seemed really promising: Internally I can go to http:192.168.1.200 or even https:192.168.1.200 in a browser and I connect just fine (yes, cert warning on the SSL, but that's OK for now) to the ISY's HTML interface. But, why can't I connect via http:192.168.1.200:443/? That is the port I have setup for SSL on my ISY.

 

The reason I ask is that I think I've got the port forwarding thing setup right (forwarding port 59876 to IP 192.168.1.200 at port 443), but since it won't connect via the port specification internally, the port forward thing similarly isn't working. I believe if I can figure out how to get http:192.168.1.200:443/ working internally I'll be able to access from outside.

[oberkc]

you might try https:// rather than http://. Is port 443 a secure port?

 

In case you missed it, there is actually a sticky topic under how to. In that sticky topic is a reference to:

 

http://portforward.com/

 

Where this likely describes the setup in your particular router. Both are worth checking out.

[smorgasbord]

I did read through the sticky thread at: viewtopic.php?f=26&t=635

 

As I said, internally I can access via: https://192.168.1.200, but not via http://192.168.1.200:443 I think that's the root of my problem. In other words, my router is successfully forwarding to http://192.168.1.200:443 but that isn't responding even internally.

 

Here's my Network Settings:

 

 

I haven't done anything with certificates. Could that be the problem? I did read through the Security Guide, but to be honest, that didn't actually tell me what to do.

[LeeG]

Have you used HTTPS rather than HTTP to go to the Secure port?

[smorgasbord]

I setup a new port for HTTPS and can connect through that internally: https://192.168.1.200:59876 That works internally.

 

So, I now forward that 59876 to the ISY's IP (above), but can't get external access. I think it's something to do with my ISP, so I'll contact them.

 

Thanks for all the help so far, btw.

[oberkc]

As I said, internally I can access via: https://192.168.1.200, but not via http://192.168.1.200:443

 

Perhaps I am missing something here, but let me clarify how it works at my house. If I am on wifi or ethernet on my LAN, I use only one address: http://192.168.0.33:88/ or https://192.168.0.33:555/. Both get me to my dashboard. The secure port gives me a certificate error, but I have never attempted to resolve that issue. Both of these ports match what is in the ISY and router.

 

External access is through an entirely different IP address. When I connect externally, I use the external ip address https://70.aaa.bbb.ccc:port , using the SAME port numbers as when internally.

 

Now that is appears you have both secure and non-scure ports working internally, do you continue to use the https://50.xxx.yyy.zzz:59876 address externally? Have you checked this address more recently through whatismyip? Is it possible that your ISP has changed it?

[smorgasbord]

That's correct - access through the external address isn't working, even if I don't change the port number when doing the port forwarding thing. I think it has something to do with my ISP and so have contacted them to find out more. I'll update the thread if I get anything helpful.

[shannong]

I'm wondering if I've got the right Gateway and DNS settings.

I don't have DNS on, so perhaps that should be blank?

And should the Gateway be the actual IP address of the router (192.168.85.100)?

 

Your router's internal address is 192.168.85.100? Is that a typo? All your other references and screen shots show 192.168.1.x.

[shannong]

I noticed you chose a port about 49,152. Port numbers above there are considered "ephemeral" ports and some firewalls don't allow connections to be initiated on them. Try choosing something below 49,152.