Specifications

ManualsBrandsD-Link ManualsComputer equipmentDIR-330 - Wireless G VPN Router

Lutron Technical Support Center

1.800.523.9466

Application Note #231

Revision C

September 2011

Using a VPN Connection to Remotely Access Lutron

® Systems

Overview

This application note describes a method of configuring remote access to a Lutron® system using an Internet connection

to a Virtual Private Network (VPN) router. This application note covers configuring a router to use Point to Point Tunneling

Protocol (PPTP) for VPN access. Microsoft Windows XP

®, Windows Vista®, and Windows® 7 have native client support for

this type of VPN.

PPTP VPN adds a layer of security before the homeowner’s system is connected to the Internet. It should be noted that

any time remote access is provided for a homeowner’s site there is a risk of having the network and equipment

compromised by unauthorized access.

Key Terms

VPN Virtual Private Network

VPN Router A piece of hardware or software that provides a virtual connection through a public network (such as

the internet) to a private network.

VPN Client Hardware or software that connects to a VPN router over a public network connection and provides an

additional network connection to the private network which the VPN router is connected to.

ISP Internet Service Provider

Static IP An IP address assigned to a network computer or device which does not change at a given time

interval or during the network connection process.

Dynamic IP An IP address assigned to a network computer or device which changes at a predetermined time

interval or during the network connection process.

URL Universal Resource Locator: a readable name that represents a network IP address (i.e. google.com or

myname.dyndns.org). A URL is often referred to as a host name or web address.

DNS Server A server on a public or private network that translates URL’s into network IP addresses.

Dynamic DNS A service that maps static or dynamic IP address to a URL.

Before You Begin…

1. In order to connect to a VPN router the VPN client must be able to find the VPN router. This is done with one of the

following two options:

a. A static IP address from the client’s ISP. This address must be known to complete the setup and will be provided

by the ISP.

b. An account with a dynamic DNS service. This application note uses DynDNS.org. This will allow the use of a host

name (URL) instead of a static IP.

2. Acquire a VPN router and its accompanying manual. This application note covers the use of the D-Link® DIR-130

(wired) and the D-Link

® DIR-330 (wired/wireless) routers. Please note that all screenshots within this application note

may differ in appearance to the screens rendered on your computer. This application note also assumes the

router is in its “default” or “out-of-box” state. If this is not the case, there is a risk of running an untested VPN

Summary of content (27 pages)

PAGE 1
Application Note #231 Revision C September 2011 Using a VPN Connection to Remotely Access Lutron® Systems Overview This application note describes a method of configuring remote access to a Lutron® system using an Internet connection to a Virtual Private Network (VPN) router. This application note covers configuring a router to use Point to Point Tunneling Protocol (PPTP) for VPN access. Microsoft Windows XP®, Windows Vista®, and Windows® 7 have native client support for this type of VPN.
PAGE 2
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems router environment incompatible with Lutron® systems. See “Appendix C – Technical Specifications” subsection “Default Factory Settings” of the router’s product manual for instructions on performing a reset. 3. Ensure each HomeWorks® IlluminationTM/QS Processor or the RadioRA® 2 Main Repeater is using a static IP address and you have those addresses readily available.
PAGE 3
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Configuring the Router 1. 2. Setup a private network with the VPN router: Follow the manufacturer’s instructions included with the router to connect computers and other network devices to the router. a. The manufacturer’s instructions can be found on the CD included with the VPN router. Insert the CD into your PC and select “View Manual”.
PAGE 4
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 1. Set the Router IP Address to 192.168.100.1 2. Ensure the Default Subnet Mask is 255.255.255.0 3. Ensure the Local Domain Name is blank. 4. Ensure the Enable DNS Relay is checked. 5. Press the Save Settings button at the top. iii. Restart the computer that is connected to the router in order for it to acquire its new IP address. Then re-open a web browser and enter the new IP address of the VPN router (192.168.100.
PAGE 5
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 7. Press the Save Settings button at the top. Figure 3 ii. If the ISP provides a Dynamic IP address a dynamic DNS service must be used. Dynamic DNS services can be used with static IP addresses as well to utilize a custom web address instead of a static IP address when directing the VPN client device to the VPN router over the Internet. This can be done using a dynamic DNS hosting service such as DynDNS.org.
PAGE 6
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 7. Leave Timeout at 240. 8. Press the Save Settings button at the top. Figure 4 c. Configure User Groups i. Select the Advanced tab. ii. Click User Group from the left menu. iii. Under User Settings, replace the first User Name (“admin”) with a VPN user. Also, assign a Password for that user. (If “admin” does not appear already in the username list, just begin adding users in position number “1”).
PAGE 7
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 5 NOTE: The VPN router supports up to 25 simultaneous connections. Each User Name may be used to open multiple connections before the simultaneous-connection limit is reached. d. Configure VPN Access: i. Select the Setup tab. ii. Click VPN Settings from the left menu. iii. If prompted, press the Manual VPN Setup button. iv. Under Add VPN Profile, select PPTP/L2TP from the dropdown and click Add. Figure 6 1.
PAGE 8
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 2. Provide a name for the VPN connection appropriate to the location. 3. Ensure the radio button for PPTP is selected. 4. Enter the router’s LAN IP Address (192.168.100.1) into the VPN Server IP field. 5. Assign a Remote IP range of 192.168.100.200 in the first field and 225 in the second field (192.168.100.200-225). 6. Ensure MSCHAP v2 is selected for Authentication Protocol. 7.
PAGE 9
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 2. Click the Project Setup link below the menu bar. a. Under the Network Settings tab, for every Processor: i. Uncheck the DHCP option. ii. Assign a unique IP address within the 192.168.100.151 – 192.168.100.199 range to the Processor in the IP Address field (Example: Processor 1: 192.168.100.151, Processor 2: 192.168.100.152, etc.). b. b. Set the Gateway Address to 192.168.100.
PAGE 10
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 13. Ensure that the port numbers are correct for the site. Most sites will use the default ports, which are 80 for Web access, 21 for FTP, and 23 for Telnet. 14. Click Next. 15. The Setup Wizard should connect to the processor and apply any necessary configuration changes. 16. A message window should appear indicating that the TCP/IP configuration completed successfully. 17. Press the OK button on the message window. 18.
PAGE 11
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Overview After the VPN router is successfully configured, you will need to create a Virtual Private Network (VPN) connection within Microsoft Windows®. This connection can then be enabled anytime you need to connect to the client’s network. Instructions for Windows XP® 1. On the Windows® desktop, right click the My Network Places icon and select Properties.
PAGE 12
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 9 5. On the Network Connection screen, select Virtual Private Network connection and then click Next >. Figure 10 6. On the Connection Name screen type in your client’s name in the Company Name text field, then click Next >. 7. If the Public Network screen appears (some network configurations skip this screen) select the option Do not dial the initial connection then click Next >.
PAGE 13
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 11 13 Lutron® Technical Support Center 1.800.523.
PAGE 14
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 8. On the VPN Server Selection screen type in the static IP address of your client’s network or the DynDNS host name then click Next >. Figure 12 9. If the Connection Availability screen appears (some PC configurations skip this screen) select the desired availability then click Next >. 10. Click Finish to complete the setup. 11.
PAGE 15
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 13 15 Lutron® Technical Support Center 1.800.523.
PAGE 16
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Instructions for Windows Vista® and Windows® 7 1. Open the Control Panel and click on Network and Internet and then click on Network and Sharing Center. 2. In the Network and Sharing Center click Set up a connection or network. Figure 14 3. On the Choose a connection option screen click Connect to a workplace and click Next. Figure 15 4. On the How do you want to connect? screen, select Use Internet Connection (VPN).
PAGE 17
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 16 5. On the Type the Internet address to connect to screen, type in the static IP address of your client’s network or the DynDNS host name into the Internet Address box. Type the name of the client into the Destination box. Ensure the checkboxes are unchecked and click Next. Figure 17 6. On the next screen, type in the User name and Password that you created in the router to log into the VPN.
PAGE 18
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 18 7. A new connection will have been created for the VPN. In the Network and Sharing Center, click Connect to a network, select the client’s VPN and then click Connect to establish the VPN connection to the client’s network. Figure 19 18 Lutron® Technical Support Center 1.800.523.
PAGE 19
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Instructions for Apple® iPhone®/iPod Touch® Mobile Devices 1. Open the Settings App. 2. Tap General. 3. Tap Network. Figure 20 4. Tap “VPN”. 5. Tap “Add VPN Configuration”. 6. Select the “PPTP” tab. Apple, iOS, iPhone, and iPod Touch are trademarks of Apple Inc., registered in the United States and other countries. 19 Lutron® Technical Support Center 1.800.523.
PAGE 20
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 21 7. Enter the appropriate information, based on how you configured the VPN router. a. Description is a user-friendly, arbitrary name given to the VPN connection. b. Server will be the IP address or Dynamic DNS name to access the router from the Internet. c. Account is the user name set up for the PPTP server on the VPN router d. RSA SecurID should remain set to OFF. e.
PAGE 21
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 22 21 Lutron® Technical Support Center 1.800.523.
PAGE 22
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 10. Launch the Lutron® Application. Please note that Lutron® Home App for iOS® will ONLY work with RadioRA® 2, whereas the Lutron® Home+ App for iOS® will work with HomeWorks® IlluminationTM, RadioRA® 2, or HomeWorks® QS. Figure 23 22 Lutron® Technical Support Center 1.800.523.
PAGE 23
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Instructions for Android® devices NOTE: Visual elements across devices using Android® OS can vary. Your device’s screen output may differ in appearance from the screenshots below. 1. From the Home screen, press the Menu button on the device. Tap Settings. 2. Tap Wireless & networks. 3. Tap VPN settings. a. NOTE: Some devices may prompt the user to select between “Basic VPN” and “Advanced IPSec VPN”. Select Basic VPN.
PAGE 24
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Figure 25 24 Lutron® Technical Support Center 1.800.523.
PAGE 25
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 7. Press the Back button on the device. Tap the new VPN connection. 8. Username and Password should be set as the user name and password set up for the PPTP server on the VPN router (created in “Configuring the Router”, step 3.c.iii.). 9. Check Remember username if desired. Tap Connect. If a connection is successful, a message will appear in the notification area indicating connection status. Figure 26 10.
PAGE 26
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems 11. Launch the Lutron® Application. Please note that Lutron® Home Control+ for Android® will ONLY work with RadioRA® 2 or HomeWorks® QS. Figure 27 26 Lutron® Technical Support Center 1.800.523.
PAGE 27
Application Note #231 – Using a VPN Connection to Remotely Access Lutron® Systems Using a VPN Connection to Remotely Access Lutron® Systems Once you have the VPN router configured and a VPN client connection setup within Microsoft Windows®, you can use the VPN along with the HomeWorks® QS, HomeWorks® IlluminationTM, and RadioRA® 2 Inclusive software to connect to the client’s system remotely. The software will work just as if you were plugged into the processor through the network at the client’s site. 1.