Port Forwarding On The Network Router; Prerequisites And Potential Problems; Multiple Poolmanagers; Security For Remote Access - Bayrol PoolManager Chlorine User Manual

48
47.2.3

Port forwarding on the network router

For remote access to PoolManager
forwarding on the network router. Port forwarding ensures that the
router forwards the respective queries from the Internet to
PoolManager .
®
Remote access to PoolManager ®
port 80. The port accesses the data recipient, which in this case is
PoolManager ® web server.
Therefore, port forwarding must be set up as follows:

Port 80 forwarded to PoolManager
network.

If applicable, port 80 should be entered as the destination port.
Nearly all modern network routers offer the capacity to set up port
forwarding.
For a detailed description, please refer to the documentation for the
router being used.
47.3

Prerequisites and potential problems

Requirements for the web browser used

Support for the current HTM5 standard

JavaScript activated (it usually is)
Requirements for the network router

Port forwarding

DynDNS function
(Only when using a dynamic IP address)

External access to port 80 may not be blocked

The router must be configured such that it is permanently
connected to the Internet. If it is not connected, then remote
access will not be possible.
Requirements for the Internet Service Provider

Contract terms and conditions may not prohibit operation of a web
server

You need a public IP address, i.e. your network router's IP
address must be visible on the Internet. For some wireless
contracts (e.g. LTE without telephony), you are not issued a public
IP address. Operating a web server is not possible with that type
of contract. A public IP address is generally a dynamic IP address
that can change at any time. Unchangeable IP addresses are
designated as static or fixed.

The Internet service provider has to permit access to port 80
TIP
Alternative port 55555
Some Internet service providers block access to the
standard HTTP port 80. In that case, port 55555 can be
used, which PoolManager
Port forwarding on the pouter has to be set up
accordingly for port 55555.
In the browser, you simply need to add the port to the
IP address or URL. The port is separated with a colon,
such as
http://myPoolManager.dtdns.net:55555 or
http://192.168.1.99:55555
47.4

Multiple PoolManagers

If there are multiple PoolManagers
each device will be given its own IP address. Remote access from the
local network is realised via the corresponding IP address.
For remote access from the Internet, however, direct access of the
various IP addresses is not possible.
Instead, external access can be realised various ports, which the
router forwards to the individual devices' IP addresses.
84
® , you'll still need to set up port-
is realised via the standard HTTP
IP address on the local
®
® offers as an alternative.
on one network
®
® running on one network, then
Example:
PoolManager ® 1

IP address 192.168.1.88

External access via port 80 (standard port), for example:
http://myPoolManager.dtdns.net
(standard port 80 does not have to be indicated in the URL)

Port-forwarding on the router:
Port 80 192.168.1.88:80

PoolManager 2
®

IP address 192.168.1.99

External access via Port 81, for example:
http://myPoolManager.dtdns.net:81

Port-forwarding on the router:
Port 81 192.168.1.99:80

48

Security for remote access

In order to guarantee maximum security, remote access is equipped
with comprehensive security mechanisms:

Data transmission in remote access is encrypted
(SSL encryption)

Login with username and password is required

Supplemental access code necessary
in order to modify parameter settings

The default setting is for remote access to be deactivated

User rights for remote access can be configured individually

It is possible to assign different rights for Internet access and for
access from the local network
When security requirements are particularly high, established IT
concepts can be applied, such as VPN (virtual private network).
Consult an IT specialist as needed.
HAZARD!
Unauthorised access
Despite the highest security standards, there is
fundamentally a residual risk for potential unauthorised
access when releasing remote access. Unauthorised
access can lead to dangerous configurations.
Potential consequence: Death or the gravest
degree of injury, heavy material damage.
 Do not use trivial
usernames or passwords
 Keep usernames and especially
passwords strictly confidentially
 Restrict user rights for remote access according to
your individual security needs in
a sensible manner.
 Only release remote access for the user level
actually needed.
 Where possible, use remote access on the local
network only and secure it against unauthorised
access via the standard measures.
 Where possible, use additional security standards
for Internet remote access, e.g. VPN
(virtual private network)