Эта страница является переводом страницы Remote Control Lite. Перевод выполнен на 88%.

---

Remote control object i3 lite

General instructions for setting up remote control of an i3 lite object

At the moment controlling a house via the internet is a standard function of any project. In i3 lite versions earlier than 1.2.6 remote control was possible only with the help of forwading ports of iRidium server on the router.
But this technology has a number of disadvantages:

• Firstly, this technology decreases the security of the objects, as open ports are a threat of a potential attack.
• Secondly, to use this remote control technology white IP-address is required, but it is not always possible.

Starting with 1.2.6 version remote control can be set via iRidium cloud gate, that:

• does not decrease security when controlling a project remotelly
• does not require port forwarding
• does not require white IP-address
• is easy to set

What is iRidium cloud gate?

It's a cloud server of iRidium mobile company that retransmits messages between panels and the server via a protected protocol. The cloud server does not store data that it transmits or know information about devices that work with it.

Setting

iRidium cloud gate function is available only if there is a server in a project.
Setting is done in ther "Server" tab of the config. To activate work via cloud, use the following manual:
1 Add and activate a server in the main "Server" tab.

2 Next open "Work mode" section in the "Server" window.

3 Select Local and External mode

4 Select Cloud - control via cloud in the menu

5 Press Home WiFi (name) and enter the name of the home WiFi network.

Changing connection mode

A projecy in i3 lite app can work in 3 modes:

• Local only - if this mode is on, a panel is connected to the server only in the local net.
• External only - this mode means that a panel is connected to the server only via the Internet.
• Local and External - is a mixed mode of work. An installer indicates the name of the local Wi-Fi net. The app reads the net name, to which a panel is connected at the moment, and if the name agrees with the name of the home network, the app will connect to the server by the local IP-address. If the name of Wi-Fi net does not agree with the name of the home net or a panel has only 3g\4g connection, the app switches to the mode of work via the Internet.

To set the logics of mode work, it is required:
1 Open a project in i3 lite app and go to Config

2 Перейти на вкладку Server. В содержимом данной вкладки нас интересуют поле Work Mode - режим подключения к iRidium Server.
If you want a project to work only in the local net, set "Local only" value in the "Work mode" field "Local only". To work with the server via the Internet set "External only" or "Local and External" values.

Instructions for using static IP-address, DDNS service and setup of the NAT and Port Forwarding

To work with i3 lite via the Internet you can setup remote control of hardware using the static IP-address or DDNS service.
We do not recommend using these methods since they can decrease the security of the objects: open ports can be used for potential cyber attacks.

Connection through the static IP address in the internet.

i3 can connect to a remote router and to a hardware through it via the router internet IP-address on condition that it does NOT change i.e. it is static.

1 Getting the static IP-address in the internet
Static IP-address can be assigned to your IP-router only by Internet provider. If you use mobile internet, assignment of Static IP-address is impossible, go to the next option (DDNS).
Permanent IP-address is called "static external" and means that you can connect to your router from anywhere in the world and it's IP-address does NOT change
What is my internet IP-address?(IP-address changes if it is NOT static)
Not all internet providers can give you the static IP-address. But if the provider does use a provider's instruction to setup the router to work with static IP-address.
Providing access to hardware through the router is a next step - NAT and PortForwarding setting

2 Nat and PortForwarding setting on the router
The NAT service provides transfer of data sent to the router from the external network to LAN. If rules of data transfer are not set up, commands will not be sent anywhere but your router.

NAT (Network Address Translation) - the service for translation of internal network IP-addresses to IP- addresses of the external network. Before you start to set up NAT, give the equipment you use static local IP-addresses

The principle of forwarding data from the external network to the internal one:

1. a remote device sends a command to the router address in the Internet and the "external" port of the equipment specified in the table of data forwarding
2. the router forwards the command to the device in the local network specified in the table of data forwarding
3. the command is executed by the device

The number of forwarding "rules" on the router has to be set up based on what devices of your network have to receive data or commands from the Internet.

Using the example of the D-Link router, let us set up one forwarding rule (every network device needs its own rule):

1. "IP Address" - the local IP-address of the device on which you want to send commands from the Internet
2. "Public Port" - the port where you need to send the command from the Internet so it would come to the device
3. "Private Port" - the real hardware port that receives commands (it can be different from "Public Port")
4. "Traffic Type" - the allowed protocol for connection between the sender and receiver of commands (TCP or UDP)

ExampleProvider gives to your router the public static IP address 215.110.10.15. You set a data redirection from external TCP port 8445 to internal TCP port 8443 on 192.168.0.100 host which is iRidium server IP address.
ATTENTION A potential security issue when using Port Forwarding!

The open port on the router means that your equipment can be connected by anyone who finds an open port and finds out the type of the equipment. This problem can not be avoided because it is dictated by the technology of communication with remote devices via an open router port.

Observe basic safety precautions:

• do not open remote access to cameras that are not protected by a complex password
• do not open remote access to equipment hardware that is not protected by a complex password
• try to select an external port of the equipment which is different from the standard one to complicate the determination of the equipment type by the hacker

Connection through a subdomain DDNS without the static address

i3 lite can connect to a remote router via a domain name which is given to router by DDNS service. The domain name is used if the internet provider does NOT give the static IP-address or when you use a mobile internet.
Without the static IP-address, your IP will constantly change. It is called a dynamic IP-address. Change of the IP-address leads to the fact that the control program could NOT apply to hardware by the external IP-address, because it periodically loses the relevance.
Companies which can provide a service of dynamic DNS (DDNA or DynDNS) are able to solve the problem with dynamic IP-address. This service is used to assign the constant domain name to the router with the dynamic IP-address. This service can be provided by: No-IP, DynDNS and others.
Let's consider an assignment of subdomain to the router via the paid service No-IP. There are 3 stages of configuration:

1. Register the subdomain on the site, which provide the DDNS service.
2. Set up the DDNS service on the router
3. Set up the Nat, PortForwarding service on the router

1 Account and subdomain registration on No-IP.com

1. Register a new account on No-IP. During the account registration select a subdomain address - you can use this address as your router address. For example:i3pro.hopto.org
2. Confirm account registration (a confirmation code will come on e-mail). You will get access to manage the domains in the "Managed DNS" field.
3. The subdomain registered during the creation of account is already active. Subdomain name is needed for setting the router

Note that in a free No-IP account you need to prolongate the subdomain every month (click the button on the site to prolongate). Otherwise it will stop working. You can pay one year subscription or more to create multiple domains, which will constantly work. See subscription terms on the site.

2 Setting the router for working with No-IP DDNS service
Make sure your router supports DDNS. Path to DDNS settings depends on model and manufacturer of the router. Examples:

DDNS settings are approximately the same regardless of the router model:

1. "Enable the DDNS Client" - activate the service on the router
2. "Server" - server of the DDNS service provider. In our case:WWW.NO-IP.COM
3. "User Name or E-mail Address" - login or e-mail which you entered during account registration on noip.com
4. "Password" - your account password on noip.com

After saving DDNS settings your router will report noip.com it's internet IP-address and noip.com will redirect to the router a data sent to the subdomain's address.

3 Nat and PortForwarding setting on the router
The NAT service provides transfer of data sent to the router from the external network to LAN. If rules of data transfer are not set up, commands will not be sent anywhere but your router.

NAT (Network Address Translation) - the service for translation of internal network IP-addresses to IP- addresses of the external network. Before you start to set up NAT, give the equipment you use static local IP-addresses

The principle of forwarding data from the external network to the internal one:

1. a remote device sends a command to the router address in the Internet and the "external" port of the equipment specified in the table of data forwarding
2. the router forwards the command to the device in the local network specified in the table of data forwarding
3. the command is executed by the device

The number of forwarding "rules" on the router has to be set up based on what devices of your network have to receive data or commands from the Internet.

Using the example of the D-Link router, let us set up one forwarding rule (every network device needs its own rule):

1. "IP Address" - the local IP-address of the device on which you want to send commands from the Internet
2. "Public Port" - the port where you need to send the command from the Internet so it would come to the device
3. "Private Port" - the real hardware port that receives commands (it can be different from "Public Port")
4. "Traffic Type" - the allowed protocol for connection between the sender and receiver of commands (TCP or UDP)

ExampleYou have registered the subdomain i3lite.hopto.org on noip.com and activate the DDNS service on the router. Also you have set up on the router the data redirect rule from external 8080 TCP port to internal 8443 TCP port with 192.168.0.100 IP-address, which is the hardware address.
To connect to the hardware through the internet you need to specify in settings:
Host: i3lite.hopto.org, Port: 8080
ATTENTION A potential security issue when using Port Forwarding!

The open port on the router means that your equipment can be connected by anyone who finds an open port and finds out the type of the equipment. This problem can not be avoided because it is dictated by the technology of communication with remote devices via an open router port.

Observe basic safety precautions:

• do not open remote access to cameras that are not protected by a complex password
• do not open remote access to equipment hardware that is not protected by a complex password
• try to select an external port of the equipment which is different from the standard one to complicate the determination of the equipment type by the hacker

Setting up a connection to iRidium server through the internet

To configure the object remote control you need to:

1 На главной вкладке "Сервер" добавьте и активируйте сервер.

2 Далее, откройте раздел Work mode, который находится в окне "Сервер"

3 Выберите режим Local and External

4 В меню выберите External IP (port forwarding) - управление через интернет

5 Заполните все поля:

• Home WiFi (name) - в это поле требуется вписать имя домашней WiFi сети
• External IP - в это поле требуется вписать внешний ip адрес роутера.
• API Port - в это поле требуется вписать внешний порт для порта 8443.
• iR Port - в это поле требуется вписать внешний порт для порта 30464.