How To: Enable Internet Access

jswedberg · July 9, 2008

I never have been able to "Enable Internet Access". It always fails.

I have opened ports in my firewall / DSL Router (AT&T 2Wire) for HTTP (80) and HTTPS (443), and given the ISY a static IP address.

It appears that everything is working properly (I can access the unit, including the Admin console, remotely with either HTTP or HTTPS, using the static IP address).

I even brought up the Admin console remotely and clicked on "Enable Internet Access" but it still says it can not be enabled. What exactly occurs when it attempt to enable internet access?

What am I missing, if anything?

Perhaps others have answered this question, but I have not been able to find a solution.

Michel Kohanim · July 9, 2008

jswedberg,

First and foremost, please DISABLE the port forwarding on port 80 immediately. This is a security risk as others can sniff your credentials. Please only use HTTPS (port 443) for remote access.

File->Enable Internet Access attempts to do what you have already done (automatically). As such, you are all set; please do not worry about File->Enable Internet Access.

With kind regards,

Michel

I never have been able to "Enable Internet Access". It always fails.

I have opened ports in my firewall / DSL Router (AT&T 2Wire) for HTTP (80) and HTTPS (443), and given the ISY a static IP address.

It appears that everything is working properly (I can access the unit, including the Admin console, remotely with either HTTP or HTTPS, using the static IP address).

I even brought up the Admin console remotely and clicked on "Enable Internet Access" but it still says it can not be enabled. What exactly occurs when it attempt to enable internet access?

What am I missing, if anything?

Perhaps others have answered this question, but I have not been able to find a solution.

to_lighter · December 18, 2008

I continue to struggle with this. I get the SSL Certificate Management window, select Generate and Install New Self-Signed Certificate. I then get the pop up window where I type my url (in the format www.domain.com). I leave the key strength # alone, and have tried different settings for Save. When I hit OK, nothing happens. The dialog box disappears, and I am back to the large empty blue window of the Certificate Manager. There is no progress bar, no errors, no confirmation that anything has happened.

Did it work? If not, am I doing something wrong?

Another question. I have forwarded port 443 to port 80 on the ISY and I can access the ISY from outside of the house. If I forward 443 to 443 on the ISY, I can't get external access. Is this the correct way of forwarding?

Cheers!

d_l · December 18, 2008

to_lighter,

I suspect that forwarding port 443 to port 80 on the ISY is only giving you unencrypted remote access to your ISY. This would be the same type of openly visible access as you have on your LAN. Unencrypted access is a security risk if a third party intercepts your transmissions and can record your ID/PW.

Probably the lack of an SSL certificate is why you can't get 443 forwarded to 443 to work. Someone else will have to help you get through the certificate generation process, but once you get it, you might consider using a port forwards of a higher port number to 443, say something like xx443 to 443.

There are frequent malware probes on 443 and if all those are passed through to the ISY, I can't say how it will react to what it might interpret as a lot of garbled access requests. Plus if a hacker happened to discover in a port scan of your IP that your 443 port led to something interesting, it might encourage them to attempt a break-in. By using another port forwarded to 443, you obfuscate this important port somewhat.

to_lighter · December 18, 2008

to_lighter,

I suspect that forwarding port 443 to port 80 on the ISY is only giving you unencrypted remote access to your ISY. This would be the same type of openly visible access as you have on your LAN. Unencrypted access is a security risk if a third party intercepts your transmissions and can record your ID/PW.

Probably the lack of an SSL certificate is why you can't get 443 forwarded to 443 to work. Someone else will have to help you get through the certificate generation process, but once you get it, you might consider using a port forwards of a higher port number to 443, say something like xx443 to 443.

There are frequent malware probes on 443 and if all those are passed through to the ISY, I can't say how it will react to what it might interpret as a lot of garbled access requests. Plus if a hacker happened to discover in a port scan of your IP that your 443 port led to something interesting, it might encourage them to attempt a break-in. By using another port forwarded to 443, you obfuscate this important port somewhat.

Good advice. Thanks!

Michel Kohanim · December 18, 2008

Hello to_lighter,

If you do not see a dialog box notifying you of an impending reboot, then nothing worked. The most prevalent reason for this not working is perhaps you did not accept The Legions of Bouncy Castle certificate (the code that actually generates certificates). In order to do so, please:

1. Control Panel -> Java

2. Security-> Cerificates

3. Remove All

With kind regards,

Michel

to_lighter · December 18, 2008

Hello to_lighter,

If you do not see a dialog box notifying you of an impending reboot, then nothing worked. The most prevalent reason for this not working is perhaps you did not accept The Legions of Bouncy Castle certificate (the code that actually generates certificates). In order to do so, please:

1. Control Panel -> Java

2. Security-> Cerificates

3. Remove All

With kind regards,

Michel

Thanks Michel,

I have accepted the Legions of Bouncy Castle certificate. I am on a Mac, and have tried Safari and Firefox. Both give the same result. Any ideas?

Cheers!

Michel Kohanim · December 18, 2008

Hi to_lighter,

I do apologize for the inconvenience. Yes, if you would be kind enough to:

1. Look at the Java Console for any exceptions

2. Turn a few scenes on/off and then send me your log (for performance reasons, we flush the log after 32 entries)

My email address is support@universal-devices.com.

With kind regards,

Michel

Hello to_lighter,

If you do not see a dialog box notifying you of an impending reboot, then nothing worked. The most prevalent reason for this not working is perhaps you did not accept The Legions of Bouncy Castle certificate (the code that actually generates certificates). In order to do so, please:

1. Control Panel -> Java

2. Security-> Cerificates

3. Remove All

With kind regards,

Michel

Thanks Michel,

I have accepted the Legions of Bouncy Castle certificate. I am on a Mac, and have tried Safari and Firefox. Both give the same result. Any ideas?

Cheers!

to_lighter · December 19, 2008

Hi to_lighter,

I do apologize for the inconvenience. Yes, if you would be kind enough to:

1. Look at the Java Console for any exceptions

2. Turn a few scenes on/off and then send me your log (for performance reasons, we flush the log after 32 entries)

My email address is support@universal-devices.com.

With kind regards,

Michel

Hello to_lighter,

If you do not see a dialog box notifying you of an impending reboot, then nothing worked. The most prevalent reason for this not working is perhaps you did not accept The Legions of Bouncy Castle certificate (the code that actually generates certificates). In order to do so, please:

1. Control Panel -> Java

2. Security-> Cerificates

3. Remove All

With kind regards,

Michel

Thanks Michel,

I have accepted the Legions of Bouncy Castle certificate. I am on a Mac, and have tried Safari and Firefox. Both give the same result. Any ideas?

Cheers!

Thanks as always for the quick replies.

Here is the log:

16/12/08 10:40:02 PM [0x0-0x9e09e].com.apple.Safari[1553] /SourceCache/JavaScriptCore/JavaScriptCore-5525.26.2/bindings/jni/jni_jsobject.cpp:83: Attempt to access JavaScript from destroyed applet, type 9.

18/12/08 10:56:56 AM [0x0-0x9e09e].com.apple.Safari[1553] java.lang.ClassNotFoundException: com.universaldevices.client.ui.UDClientApplet.class

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at sun.applet.AppletClassLoader.findClass(AppletClassLoader.java:179)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at java.lang.ClassLoader.loadClass(ClassLoader.java:316)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at sun.applet.AppletClassLoader.loadClass(AppletClassLoader.java:119)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at java.lang.ClassLoader.loadClass(ClassLoader.java:251)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at sun.applet.AppletClassLoader.loadCode(AppletClassLoader.java:613)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at sun.applet.AppletPanel.createApplet(AppletPanel.java:723)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at sun.plugin.AppletViewer.createApplet(AppletViewer.java:1864)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at sun.applet.AppletPanel.runLoader(AppletPanel.java:652)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at sun.applet.AppletPanel.run(AppletPanel.java:326)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] at java.lang.Thread.run(Thread.java:613)

18/12/08 10:56:57 AM [0x0-0x9e09e].com.apple.Safari[1553] java.lang.ClassNotFoundException: com.universaldevices.client.ui.UDClientApplet.class