ISY-994i won't connect to portal

[Tim Wilson]

Hey everyone,

 

I just got my ISY-994i as an upgrade from an Insteon Hub. I've only got a few Insteon devices now, but I'm planning to expand my lighting controls significantly. The basic config of the ISY has gone fine, but I can't for the life of me figure out why my ISY can't go online.

 

Symptoms:

• In the admin console java app, when I choose "Enable Internet Access" in the file menu, I get the error message "Failed Enabling Internet Access".
• I created an ISY portal account and added the UUID of my ISY, but the little circle is grayed out, and it displays "ISY never connected" when I mouse over it.
• I got a kind email from UDI sales saying they they are receiving requests from my Amazon Echo, but that my account is not authorized to the ISY [insert my UUID number]. The email recommends making sure that the ISY is authorized at the my.isy.io portal and further suggests going to the admin console and clicking Approve under configuration/portals. I don't see any "portals" option under the configuration section.

My ISY is connected to a switch on my LAN and to the the Internet through a Ubiquiti EdgeRouter X. I have enabled uPNP on my router, but it seems from other posts on the forum that uPNP may not be supported with that router. It doesn't seem like uPNP should be necessary to get my ISY visible in the portal anyway.

 

The ISY is controlling Insteon devices just fine from the admin console, so I know it's communicating internally.

 

Any suggestions on how to get my ISY authorized and connected to the portal?

 

Eventually, I plan to use it with two or more different Amazon Echo devices, but that configuration will have to wait until I get this worked out.

 

-Tim

[andyf0]

The ISY Portal cost $49 per year I believe. Go to Help/Purchase Modules in the Admin Console to purchase the ISY Portal.

[Tim Wilson]

Thanks. That did the trick. I appreciate the quick answer.

 

-Tim

[stusviews]

Do not enable internet access. It's a security risk and the portal will provide secure internet access to the iSY.

[Tim Wilson]

Do not enable internet access. It's a security risk and the portal will provide secure internet access to the iSY.

 

 

Great tip. Maybe this would be a good place for some help text in the admin console. It's not really clear there (to me anyway) what you're getting if you enable Internet access. I read it as "allow ISY to communicate to the Internet" and not "allow access to your ISY from the Internet".

 

-Tim

[stusviews]

There is no need for the iSY to connect to the internet. The ISY is fully functional without needing access the internet. There are some internet/cloud services that need to access the ISY. But there are safer ways to allow access from the internet.

[docrix]

Stusviews:

 

I have tried on multiple occasions to install security certificates on my ISY994i Pro, but the how to document is written for someone who already knows about certificates, what they do, etc., and I have never succeeded in setting up an SSL connection.  I would like to access my ISY using the MobileLinc Pro app on my iPhone, but want to do it securely.  What are some of the "safer ways" to allow access from the internet?  I know how to do port forwarding in my router, if that's any help.  Is the portal the only safe option in your opinion? I'd rather not pay for a service if there is some way to do it directly.

[jtara92101]

Stusviews: There are many reasons why ISY might need access TO the Internet.

 

- Weather Module. How else will ISY download the weather information?

 

- UDI Portal. Mobilinc Portal. They are both  "reverse proxys". Your ISY connects to the portal back-end. Not the other way around.

 

- Other reasons (multiple). For example, Network module outbound access to IFTTT.

 

Fortunately, "allow Internet access" has nothing to do with the ISY accessing the Internet. There are no settings in ISY admin console that control whether or not ISY can access the Internet. If you wanted to disable ISY access TO the internet, you have to do it on your router or firewall.

 

"allow Internet access" enables ISY to use UPNP to "punch a hole" in your firewall/router to allow access FROM the Internet. If you are smart, you haven't enabled UPNP on your router. And if you are smart and haven't enabled UPNP on your router, "allow Internet access" will effectively do nothing. UPNP is an incredibly bad idea. It allows a program running on any computer on your local network to tell your router to allow inbound access. What if that program is a virus that you somehow acquired? Generally, it is silent. You won't get popups with dire warnings that some program on some computer on your network is enabling inbound access. (Some anti-virus/firewall programs will alert you though.)

 

If you use the Portal, you don't need to fiddle with certificates. They have nothing to do with the Portal. They are for providing security for INBOUND connections from the Internet without using the Portal. You shouldn't, IMO. If you don't want to use the portal, the most safe way is to use a VPN to access the ISY FROM your own remote devices. The ISY won't know or care that the connection came from the Internet. It will appear to come from your local network. You will have to vet the VPN third-party provider or the VPN software that you use on your remote device or computer.

 

The safest way(s) to connect Mobilinc Pro to your ISY would be either by using a VPN that you trust, or the Mobilinc portal. You have to choose either the Mobilinc portal, or the UDI portal.