Using a VPN Connection to Remotely Access Lutron Systems Application Note #231 Revision B November 2010 Overview This application note describes one method of configuring remote access to a Lutron system using an Internet connection to a Virtual Private Network (VPN) router. There are a number of VPN technologies with varying levels of cost and security. To facilitate easy configuration and deployment, this application note covers configuring a router to use Point to Point Tunneling Protocol (PPTP) for VPN access. Microsoft Windows XP, Windows Vista, and Windows 7 have native client support for this type of VPN. While PPTP VPN is not the most secure type of VPN available, it is more secure than exposing the homeowner s system directly to the Internet. It should be noted that any time remote access is provided for a homeowner s site there is a risk of having the network and equipment compromised by unauthorized access. Key Terms VPN VPN Router VPN Client ISP Static IP Dynamic IP URL DNS Server Dynamic DNS Virtual Private Network A piece of hardware or software that provides a virtual connection through a public network (such as the internet) to a private network. Hardware or software that connects to a VPN router over a public network connection and provides an additional network connection to the private network which the VPN router is connected to. Internet Service Provider An IP address assigned to a network computer or device which does not change at a given time interval or during the network connection process. An IP address assigned to a network computer or device which changes at a predetermined time interval or during the network connection process. Universal Resource Locator: a readable name that represents a network IP address (i.e. google.com or myname.dyndns.org). A URL is often referred to as a host name or web address. A server on a public or private network that translates URL s into network IP addresses. A service that maps static or dynamic IP address to a URL. Before You Begin... 1. In order to connect to a VPN router the VPN client must be able to find the VPN router. This is done with one of the following two options: a. A static IP address from the client s ISP. This address must be known to complete the setup and will be provided by the ISP. b. An account with a dynamic DNS service. This application note uses DynDNS.org. This will allow the use of a host name (URL) instead of a static IP. 2. A VPN router. The router used for this application note is the Linksys RV042. Lutron Technical Support Center
Configuring the Router 1. Setup a private network with the VPN router: Follow the manufacturer s instructions included with the router to connect computers and other network devices to the router. Power up the router and access the router s internal configuration pages. 2. Verify the VPN router has the latest firmware: Once logged into the router s configuration pages, ensure that the Linksys RV042 Firmware Version is version 1.3.9 or higher. If it is lower, do not proceed prior to upgrading the firmware by following the manufacturer s instructions. The current firmware version information can be found in the upper-right-hand corner of the configuration page. 3. Configure the VPN router for remote access: There are only a few changes that need to be made to the router s default configuration in order to setup the router for remote access. Each change is listed below. a. Configure the VPN router s network settings: Note: The default LAN IP address is set to 192.168.1.1. If the VPN client computer is on a network with a different LAN IP address then 192.168.1.1 is fine. The PC using a VPN client will be assigned an IP address by the VPN router. If the home or office network uses IP addresses in the same range, the PC will get confused when you connect to the VPN router due to address conflicts. To alleviate address conflicts, Lutron recommends changing the LAN IP address to something more obscure. In this example, we will use 192.168.100.1 as the LAN IP address. i. Select the Setup tab from the top, and then select Network. ii. Modify the network address as shown below. If the ISP provides a dynamic IP address the only field that will need modification is the Device IP Address field under the LAN Settings section. If this is the case skip to step iv after completing this step. 2 Lutron Technical Support Center
iii. If the ISP does not provide a dynamic IP address, the VPN router must be configured for a static IP address. Change the WAN Connection Type for WAN1 as shown below and fill in the IP Address, Subnet Mask, Default Gateway and DNS Servers which the ISP has provided. iv. NOTE: Make sure to click on the Save Settings button at the bottom of the screen. Otherwise the changes that have been made to the Network Settings will not be saved. b. Configure Dynamic DNS Hosting Settings if necessary: i. If the ISP provides a Dynamic IP address, a dynamic DNS service must be used (dynamic DNS services can be used with static IP addresses also). This can be done using an account with DynDNS.org. To configure a dynamic DNS service, click on the More >> tab under the Setup tab. Click on the DDNS tab which will now appear under the Setup tab. ii. Select DynDNS.org for the DDNS Service. Provide the correct User Name, Password, Host Name and Custom DNS settings for the DynDNS.org account being used. 3 Lutron Technical Support Center
iii. NOTE: Make sure to click on the Save Settings button at the bottom of the screen. Otherwise the changes that have been made to the Network Settings will not be saved. c. Configure VPN Access: i. First select the VPN tab on the tab menu at the top of the screen and then select the PPTP Server tab under VPN. ii. Check the box labeled Enable PPTP Server. The default Range Start and Range End fields should not need to be changed. Create a username and password that will be used to log into the VPN. Click Add to list. iii. NOTE: Make sure to click on the Save Settings button at the bottom of the screen. Otherwise the changes that have been made to the Network Settings will not be saved. 4 Lutron Technical Support Center
Configuring Your PC to Connect to the VPN Router After the VPN router is successfully configured, you will need to create a Virtual Private Network (VPN) connection within Microsoft Windows. This connection can then be enabled anytime you need to connect to the client s network. Instructions for Windows XP 1. On the Windows desktop, right click the My Network Places icon and select Properties. (Alternatively, open the Control Panel and open Network Connections.) 2. In the Network Connections window, double-click on the New Connection Wizard. In the 3. New Connection Wizard, advance to the Network Connection Type screen by clicking Next >. Select Connect to the network at my workplace and click Next >. 5 Lutron Technical Support Center
4. On the Network Connection screen select Virtual Private Network connection and then click Next >. 5. On the Connection Name screen type in your client s name in the Company Name text field, then click Next >. 6. If the Public Network screen appears (some network configurations skip this screen) select the option Do not dial the initial connection then click Next >. 6 Lutron Technical Support Center
7. On the VPN Server Selection screen type in the static IP address of your client s network or the DynDNS host name then click Next >. 8. If the Connection Availability screen appears (some PC configurations skip this screen) select the desired availability then click Next >. 9. Click Finish to complete the setup. 10. After finishing the Connection Wizard, you will be prompted to enter the User name and Password. This is the same username and password that you created in step 3./c./ii. under Configuring the Router. You will also notice that in the Network Connections box a new connection has been created. Use this connection next time you need to connect to this VPN router. 7 Lutron Technical Support Center
Instructions for Windows Vista and Windows 7 1. Open the Control Panel and click on Network and Internet and then click on Network and Sharing Center. 2. In the Network and Sharing Center click Set up a connection or network. 3. On the Choose a connection option screen click Connect to a workplace and click Next. 4. On the How do you want to connect? screen select Use Internet Connection (VPN). 8 Lutron Technical Support Center
5. On the Type the Internet address to connect to screen type in the static IP address of your client s network or the DynDNS host name into the Internet Address box. Type the name of the client into the Destination box and click Next. 6. On the next screen, type in the User name and Password that you created in the router to log into the VPN. Click Connect to complete the setup. A new connection will have been created for the VPN. In the 7. Network and Sharing Center, click Connect to a network, select the client s VPN and then click Connect to establish the VPN connection to the client s network. 9 Lutron Technical Support Center
Instructions for Apple iphone/ipod Touch 1. Open the Settings App. 2. Click on General. 3. Click on Network. 4. Click on VPN. 5. Click on Add VPN Configuration. 6. Select the PPTP tab. 10 Lutron Technical Support Center
7. Enter the appropriate information, based on how you configured the VPN router. a. Server will be the IP address or Dynamic DNS name to access the router from the internet b. Account is the user name set up for the PPTP server on the VPN router c. Password is the password set up for the user name on the VPN router 8. Save the VPN configuration. 9. Slide the VPN switch to the ON position (this establishes the connection with the VPN, if available). Once connected, there will be an icon at the top of the screen indicating the VPN session is active. 10. Launch the Lutron Application. 11 Lutron Technical Support Center
Using a VPN Connection to Remotely Access HomeWorks IlluminationTM Once you have the VPN router configured and a VPN client connection setup within Microsoft Windows, you can use the VPN along with the HomeWorks Illumination software to connect to the client s system remotely. The software will work just as if you were plugged into the processor through the network at the client s site. 1. Connect to the client VPN by using the connection that you setup in the steps above. Enter your username and password when you are prompted for them. 2. Once you are connected to the VPN, launch the HomeWorks Illumination software and use it like you normally would if you were at the client s site. Using a VPN Connection to Remotely Access RadioRA 2 RadioRA 2 Essentials and Inclusive software will not work over a VPN connection. To achieve remote access, an on-site PC running the RadioRA 2 Essentials or Inclusive software must be used. Once the VPN connection is established, the remote PC can connect to the on-site PC using Remote Desktop Connection or similar software and then access the Lutron system using the RadioRA 2 Essentials or Inclusive software on the on-site PC. Using a VPN Connection to Remotely Control RadioRA 2 or HomeWorks Illumination using Apple iphone/ipod Touch Applications The Lutron iphone/ipod Touch Applications can be used to remotely control RadioRA 2 and HomeWorks Illumination software when a VPN connection is established. 1. Connect to the client VPN using the iphone/ipod Touch. 2. Once you are connected to the VPN, launch the Lutron iphone/ipod Touch Application and use it like you normally would if you were connected to the local network. For detailed information on setting up and using the Lutron iphone/ipod Touch Applications, please refer to the following: RadioRA 2: http://resi.lutron.com/portals/4/docs/appnotes/radiora 2 iphone ipod Touch App guide - revision B.pdf HomeWorks Illumination: http://resi.lutron.com/portals/3/support/app Notes - FAQs/048-244a.pdf Trademarks Microsoft Windows, Windows Vista, and Windows XP are registered trademarks of Microsoft Corporation, Redmond, Washington. Linksys is a registered trademark of Cisco Systems, Inc., Irvine, California. Apple, iphone, and ipod touch are trademarks of Apple Inc., registered in the U.S. and other countries. Lutron, HomeWorks, RadioRA, and the Lutron logo are registered trademarks, and Illumination is a trademark of Lutron Electronics Co., Inc. Lutron Contact Numbers WORLD HEADQUARTERS USA Lutron Electronics Co., Inc. 7200 Suter Road Coopersburg, PA 18036-1299 TEL: +1.610.282.3800 FAX: +1.610.282.1243 Toll-Free: 1.888.LUTRON1 Technical Support: intsales@lutron.com North & South America Technical Hotlines USA, Canada, Caribbean: Mexico: +1.888.235.2910 Central/South America: +1.610.282.6701 EUROPEAN HEADQUARTERS United Kingdom Lutron EA Ltd. 6 Sovereign Close London, E1W 3JF United Kingdom TEL: +44.(0)20.7702.0657 FAX: +44.(0)20.7480.6899 FREEPHONE (UK): 0800.282.107 Technical Support: +44. (0)20.7680.4481 lutronlondon@lutron.com ASIAN HEADQUARTERS Singapore Lutron GL Ltd. 15 Hoe Chiang Road #07-03, Tower 15 Singapore 089316 TEL: +65.6220.4666 FAX: +65.6220.4333 Technical Support: 800.120.4491 lutronsea@lutron.com Asia Technical Hotlines Northern China: 10.800.712.1536 Southern China: 10.800.120.1536 Hong Kong: 800.901.849 Indonesia: 001.803.011.3994 Japan: +81.3.5575.8411 Macau: 0800.401 Taiwan: 00.801.137.737 Thailand: 001.800.120.665853 Other Countries: +65.6220.4666 Lutron Electronics Co., Inc. 7200 Suter Road Coopersburg, PA 18036-1299 U.S.A. Made and printed in U.S.A. 11/2010 P/N 048-231 Rev. B