Only qualified personnel should install and service the equipment. The installation, starting up, and servicing of heating, ventilating, and air-conditioning
equipment can be hazardous and requires specific knowledge and training. Improperly installed, adjusted or altered equipment by an unqualified person
could result in death or serious injury. When working on the equipment, observe all precautions in the literature and on the tags, stickers, and labels that
are attached to the equipment.
July 2020
Firewall Router Solution
S S A A F F E E T T Y Y W W A A R R N N I I N N G G
B B A A S S - - S S V V X X 0 0 6 6 9 9 F F - - E E N N
Page 1
Installation, Operation, and Maintenance ® ® Trane Firewall Router Solution S S A A F F E E T T Y Y W W A A R R N N I I N N G G Only qualified personnel should install and service the equipment. The installation, starting up, and servicing of heating, ventilating, and air-conditioning equipment can be hazardous and requires specific knowledge and training.
Page 2
Introduction Read this manual thoroughly before operating or servicing this unit. Warnings, Cautions, and Notices Safety advisories appear throughout this manual as required. Your personal safety and the proper operation of this machine depend upon the strict observance of these precautions. The three types of advisories are defined as follows: Indicates a potentially hazardous situation which, if not avoided, could result in WARNING...
Page 3
I I n n t t r r o o d d u u c c t t i i o o n n W W A A R R N N I I N N G G F F o o l l l l o o w w E E H H S S P P o o l l i i c c i i e e s s ! ! F F a a i i l l u u r r e e t t o o f f o o l l l l o o w w i i n n s s t t r r u u c c t t i i o o n n s s b b e e l l o o w w c c o o u u l l d d r r e e s s u u l l t t i i n n d d e e a a t t h h o o r r s s e e r r i i o o u u s s i i n n j j u u r r y y .
Connecting to the WR21 ..........12 Configuring the WAN Interface of the WR21 ....... 13 Configuring the LAN Interface of the WR21 .
Page 5
T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s Pre-shared Key and Account Creation ........25 VPN Client Configuration for iPhone/iPad Connection .
(LAN/WAN), ideally with the assistance of the customer’s IT staff. In some scenarios, a firewall already exists but is misconfigured; in other cases there is no firewall. A Digi Transport WR21 firewall, installed into the BAS network. provides an additional layer of security when other scenarios exist outside of the recommended best practices.
Page 7
O O v v e e r r v v i i e e w w Place a Digi Transport WR21 firewall in front of Tracer BAS controller. This solution can provide an additional layer of security when installed between the customer's network equipment and a Tracer BAS controller.
Project Planning Choosing the Appropriate Firewall Router Kit Internal Mount Kit (Part# WR21-NOCELL-TRANEKIT-INTERNAL) If there is room within the Tracer BAS enclosure, order the Internal Mount Kit. The firewall router must be installed inside the Trane enclosure or in close proximity to the enclosure.
Page 9
P P r r o o j j e e c c t t P P l l a a n n n n i i n n g g Figure 3. Trane Estimator Assemblies for contracting projects BAS-SVX069F-EN...
Page 10
P P r r o o j j e e c c t t P P l l a a n n n n i i n n g g Figure 4. Trane Estimator Assemblies for service projects Figure 5. Firewall router assembly estimate (Internal Mount Kit) Figure 6.
Trane Connect Remote Access is the preferred method for remote access for both Trane employees and customers. If needed, the Digi WR21 can be configured to allow customer remote access through VPN (L2TP/IPSEC). Some configuration changes may be required on the existing network equipment in order to facilitate this remote access.
Configuration Requirements Because every environment is different, the Digi WR21 will likely require some small changes to the configuration. This section will cover the initial setup of the router and the IP address changes necessary for the Digi WR21 and the Tracer BAS controller to match your installation.
E E T T H H 0 0 should instead be set to G G e e t t a a n n I I P P a a d d d d r r e e s s s s a a u u t t o o m m a a t t i i c c a a l l l l y y u u s s i i n n g g D D H H C C P P . N N o o t t e e : : ETH 0 and ETH 1 must have addresses on separate IP networks. The DIGI WR21 ships with E E T T H H 1 1 –...
C C o o n n f f i i g g u u r r a a t t i i o o n n d d i i a a l l o o g g . 10. Click S S a a v v e e A A l l l l . After the save operation is complete, reboot the WR21.
C C o o n n f f i i g g u u r r a a t t i i o o n n d d i i a a l l o o g g . 8. Click S S a a v v e e A A l l l l . After the save operation is complete, reboot the WR21.
2. Enter the new IP address, Subnet Mask and Default Gateway of the Tracer BAS controller. N N o o t t e e : : For the IP address, choose an IP not already in use on the LAN side of the WR21 (E E T T H H 1 1 ) ) .
LAN 0 port on the Digi WR21. 2. Connect a second Ethernet cable to the LAN1 port on the Digi WR21 to the Tracer BAS controller. Use the same port on the Tracer BAS controller that you removed the Ethernet cable from.
Trane Connect for your Tracer BAS controller. Test the Connectivity to the Trane Cloud After the Digi WR21 has been installed, it is necessary to test the Trane Connect Remote Access connection. 1. Log into the Tracer BAS controller and navigate to I I n n s s t t a a l l l l a a t t i i o o n n > > I I d d e e n n t t i i f f i i c c a a t t i i o o n n a a n n d d C C o o m m m m u u n n i i c c a a t t i i o o n n s s , and then select the I I n n t t e e l l l l i i g g e e n n t t S S e e r r v v i i c c e e s s Tab.
Firewall Router Order Process The Firewall Router solution ordering process consists of the following tasks: • Register with INS (Industrial Networking) web site at www.industrialnetworking.com/Trane. • Log in using new ID and password to access the INS online store with Trane pricing. •...
F F i i r r e e w w a a l l l l R R o o u u t t e e r r O O r r d d e e r r P P r r o o c c e e s s s s Table 2. Firewall router kit (Internal) packaged contents Internal Mount Kit PN# WR21-NOCELL-TRANEKIT-INTERNAL (contents) • Digi Firewall Router •...
F F i i r r e e w w a a l l l l R R o o u u t t e e r r O O r r d d e e r r P P r r o o c c e e s s s s Submitting an Order Add the firewall router items to the INS shopping cart and submit your order.
Installation procedures will vary depending on whether adequate space is available to mount the firewall router inside the Trane enclosure. Internal Kit Installation If adequate space is available within the Trane enclosure, use the Internal Mount Kit (Part# WR21- NOCELL-TRANEKIT-INTERNAL). 1. Attach the provided DIN rail to the Digi firewall router.
UDP/1701, UDP/4500, and UDP/500. N N o o t t e e : : If the customer is using Windows 7, and the WR21 does not have a public IP address, the customer must apply a registry fix. Navigate to the...
Page 24
5. Repeat these steps for P P P P P P 6 6 – – L L 2 2 T T P P 1 1 and P P P P P P 7 7 – – L L 2 2 T T P P 2 2 . Figure 19. Digi WR21 PPP setup I I f f t t h h e e L L A A N N I I P P a a d d d d r r e e s s s s h h a a s s b b e e e e n n m m o o d d i i f f i i e e d d t t o o r r e e f f l l e e c c t t t t h h e e B B A A S S n n e e t t w w o o r r k k ( ( 1 1 9 9 2 2 .
4. Tap T T y y p p e e and select L L 2 2 T T P P . Tap B B a a c c k k . 5. In the D D e e s s c c r r i i p p t t i i o o n n field, enter a name for the connection. For example, VPN to Digi.
Page 28
C C u u s s t t o o m m e e r r R R e e m m o o t t e e A A c c c c e e s s s s C C o o n n f f i i g g u u r r a a t t i i o o n n Figure 26.
Page 29
C C u u s s t t o o m m e e r r R R e e m m o o t t e e A A c c c c e e s s s s C C o o n n f f i i g g u u r r a a t t i i o o n n Figure 28.
Page 30
C C u u s s t t o o m m e e r r R R e e m m o o t t e e A A c c c c e e s s s s C C o o n n f f i i g g u u r r a a t t i i o o n n Figure 30.
Setting Up Remote Access For Customers When customers require remote access to their facilities through the cellular router solution, utilizing Trane Connect is easy to use and built into Tracer BAS controllers, including Tracer SC/ SC+ and Concierge. The following procedure describes how to set up Trane Connect Remote Access for your customer.
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s individual who will serve as the Trane Connect customer administrator for the facility.
Page 37
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s Figure 39.
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s Figure 40.
Page 39
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s 2.
Page 40
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s Upon successful account creation and login, the customer activation screen appears (see the following figure).
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s Logging in to Trane Connect After customer administrators have activated their accounts from the Welcome to Trane Connect e-mail, they are now able to access Trane Connect.
Page 42
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s 2.
Page 43
S S e e t t t t i i n n g g U U p p R R e e m m o o t t e e A A c c c c e e s s s s F F o o r r C C u u s s t t o o m m e e r r s s •...
Configure the LAN IP Address on a PC When configuring the Digi WR21 router, it is often necessary to connect to different IP addresses and often DHCP will be disabled. Therefore, you must manually configure your IP address to connect to a specific IP.
Page 45
C C o o n n f f i i g g u u r r e e t t h h e e L L A A N N I I P P A A d d d d r r e e s s s s o o n n a a P P C C Figure 43.
Page 46
C C o o n n f f i i g g u u r r e e t t h h e e L L A A N N I I P P A A d d d d r r e e s s s s o o n n a a P P C C Figure 44.
Page 48
Trane - by Trane Technologies (NYSE: TT), a global innovator - creates comfortable, energy efficient indoor environments for commercial and residential applications. For more information, please visit trane.com or tranetechnologies.com. Trane has a policy of continuous product and product data improvements and reserves the right to change design and specifications without notice.
Need help?
Do you have a question about the WR21 and is the answer not in the manual?
Questions and answers