ENTTEC S-PLAY Smart Lighting Control Playback Device User Guide
- June 12, 2024
- ENTTEC
Table of Contents
ENTTEC S-PLAY Smart Lighting Control Playback Device User Guide
How to set up remote access for your S-PLAY
Create a convenient, remote access system allowing you or your clients to connect to your S-PLAY from around the world.
Security Note – Internet Connection
- Before connecting your S-PLAY to the Internet ensure your local network firewall provides security all devices have been adequately secured.
- If ever unsure consult a qualified professional.
- Ensure you have sufficient extra bandwidth to deal with influxes of traffic caused by an internet connection.
- Ensure your SSH Tunnel is configured in such a way to ensure only trusted users can access the tunnel to remotely configure the S-PLAY.
Introduction
In this application note, we are going to learn how to set up a simple remote access system for the S-PLAY alongside using SSH Tunnelling and reviewing other options. The goal is to create a system where we or our customer can connect from a laptop/PC/smartphone from anywhere we have internet access in case we want manual control of our shows.
For the purposes of this guide, we are going to assume that you have already programmed your S-PLAY with your desired cues and playlists – we will be focussing more on the necessary network structure and actual setup.
By the end of this process, we are going to be able to connect to our S-PLAY
remotely and see something like this:
1 – S-PLAY – remote access homepage
As you can see this is just the default S-PLAY home page.
What’s different is the webpage URL at the top of the screen. We are connecting over the internet through a server with IP address (in this case 3.12.104.225), whilst our S-PLAY is on a completely different address on its local network.
This application note features step by step instructions on how to set up this remote access method with an AWS cloud server. Using these principles, you may choose to set up your server with a different service using this application note for reference.
Getting started
Requirements.
Before you begin, we will need to have the following:
- S-PLAY with Internet access – this can be through a 4G router or just by being connected to a network with internet access.
- AWS account – you can sign up for a free account with AWS here: https://aws.amazon.com/
- A computer connected to the S-PLAY and internet so you can set up the remote access function.
- (Optional) a smartphone or other internet connected device that you can use to test the remote access function once it is set up.
Remote connection options + network structure
Simple remote connection options.
If you have worked with other network-based devices and control systems before
you are probably already familiar with some other remote access methods
including:
- Remote Desktop Access through a local computer – using a service like TeamViewer, LogMeIn, or RealVNC.
- Setting up port forwarding on a 4G router.
This remote access function, however, is designed to streamline the process
for the end-user so they can use a simple URL and connect from anywhere,
providing they have secure internet access. A high-level diagram of this
application can be seen below:
2 – Remote access network structure
As you can see, this method uses an AWS cloud server as the intermediary to connect your device to the S-PLAY. This seems a bit counter-intuitive… why use a separate web server to make this connection? Why can’t we just connect over the internet straight to the S-PLAY?
Well, we can, using the 2 methods listed before. Let’s take a look at those:
Remote Desktop Apps
The most straight forward way to connect remotely is to use an app like
TeamViewer or RealVNC to give access to a PC on the same network as the S-PLAY
that you can treat as if you are on the same network:
3 – Remote desktop network structure
As you can see, this method requires that we have a PC on-site that is connected to our lighting control network. The remote desktop apps will connect us to the PC, and then using that remote connection, we then navigate through the on-site PC to connect to our S-PLAY as if we were there in person.
The limitation of this method is that we need to have a PC on site, and it needs to be on all the time if we are to connect to it remotely at any time.
Port forwarding on 4G routers
How about 4G routers? You can get 4G routers inexpensively and add a data SIM
card to them to allow remote internet connections. You can also then set up a
port forwarding rule so that whenever you connect to that router, you are re-
directed to the S-PLAY
4 – Port forwarding network structure
The limitation with this method is that you need a public IPv4 address on your 4G router. Depending on where you are and what your ISPs can provide, this might be a bit difficult. For example, here in Australia, most mobile services use CGNAT which means your public ip can change many times in a hour, so you may have to get specific, and much more expensive business internet plans to get a fixed IP.
This brings us to the method using the S-PLAYs new remote connection feature. Using a separate web server to help with the connection eliminates the need for an expensive business-level data plan like we needed for port forwarding. Instead, we’ll set up a cloud server once, then the S-PLAY will give us a URL that we can use to connect to it from anywhere in the world as long as we and the S-PLAY both have internet access. Stay tuned as we’ll be running through how to set up this cloud server later on.
Setting up the S-PLAY
Firstly, let’s update our S-PLAY and see how this all works. In Settings,
select Remote in the menu, we’ll see a section titled: “Remote Access” It’s
asking for an IP Address, port number, username and SSH Key. These are all
obtained when we set up our virtual server.
Setting up the cloud server
-
We’ll be using Amazon Web Services as an example on how to set up a simple cloud server for remote connection. We won’t go through how to make an account – that’s straight-forward, but once you’ve created a free AWS account, you’ll want to log in and look through the various services being offered. We need a “Compute” service for this function, and we’ll use the EC2 version since it’s free tier eligible and has the functionality we need.
-
Next, we’ll go to “Launch Instance” to create a new server instance.
-
Create a name for this instance and for the Application and OS Images, we’ll just chose Amazon Linux, again because it’s free tier.
-
For the Instance type we’ll just go with t2 micro because – you guessed it – it’s free and we really don’t need this to be too powerful for what we need to do.
-
Key pair is a key file that your S-PLAY will need to be able to connect to the AWS server. Create a new key pair and save this in a safe location. The key pair will be in the form of a .pem file which you will need to upload to your S-PLAY in the SSH Key field at the end of the settings
Note:- Ensure to keep this file as there is no any way to access it again if the file is lost.
- Disabling remote access on the S-PLAY will wipe all SSH configuration including the .pem SSH
Key from the S-PLAY for security reasons.
-
Network Settings is where we add our port settings so that any device can access the server. Click ‘Edit’ on the right to access more settings.
-
By default, the SSH rule (Port range 22) will be present in Inbound security groups rules, we just need to change the source to “anywhere”. In addition to this we need to add exceptions for 4 additional port ranges: 80, 8080, 13133 & 55555 by clicking ‘Add security group rule’. These are ports that the S PLAY will be using to display its web page and allow interactivity to the connecting device.
-
Enter Port Range and change Source Type to ‘Anywhere’ for each 4 port ranges so that any device can
connect to our S-PLAY no matter where they are. You can improve the security of the system by limiting the source ranges. For example, if you work for an integration business and you are installing S-PLAYs on your clients’ projects. You can set the source to be the client’s office IP address range. This means only a device in the client’s office can access the SPLAY. You could also set this to your own office IP address range if you were to make changes/updates on your clients’ behalf. Once the rules in the previous section have been set, the new server instance is ready to be launched by clicking the ‘Launch instance’.
-
After the instance is successfully created, it will bring us to the “Next Steps” menu. From here we click
“Connect to instance” which brings us to this screen showing us the public IP address and Username of our instance.
-
We can enter both these values into the appropriate lines on our S-PLAY remote access settings. Then, open the .pem file created from Step 5 with Notepad and copy the key into the SSH Key field. Click update to ensure those are saved.
-
The last step in this configuration process is to modify an access setting on our newly generated AWS cloud server, so the S-PLAY can access it. To do this, connect through to your instance. This opens up a new tab and a command prompt window. To update the setting, we’ve put together a short code segment to go through and make the necessary changes. Here is the code segment you will require: usr
-
After copying that code segment in, the necessary update is made. We can now go back to our S-PLAY screen and use the given URL to connect remotely. You should notice that the globe icon has now changed to green – indicating that the remote access setting is active and the URL will allow S-PLAY access from your smart phone or any other device from other network.
Remote access multiple S-PLAYs in one server
If you have multiple S-PLAYs, they are allowed to be accessed remotely within
the same AWS cloud server. Simply add extra ports in the exiting cloud server
by the following guide and configure multiple S-PLAYs to be accessible via
one single AWS.
-
Click ‘Instance’ from the menu on the left, select the existing ‘Instance ID’ from the list for the additional S-PLAY to be added in. This brings us to the instance summary page showing the instance settings.
-
In Instance summary page, navigate to ‘Security’ and select the ‘Security Groups’. From here it will open up a page to allow Inbound rules to be edited.
-
Select ‘Inbound rules’ tag and click on ‘Edit inbound rules’.
-
Click ‘Add rule” and set ‘Port range’ to be a value between 1000 to 65000 (excepting 5555) and ‘Source’ to be same as above ports ‘0.0.0.0/0’. You can create multiple ports here all at once to allow all your SPLAYs to be accessed from this server. Don’t forget to ‘Save rules’. Here in the below example, one extra port 8081 is added for the additional S-PLAY and we will use this when setting up the S-PLAY.
-
Before we configure our S-PLAY, the IP address and the Username from the server are required. Go back to the instance summary and click ‘Connect’ button on the top right corner that will navigate us to the page showing the required information.
-
Now we can start setting on the additional S-PLAY. Access to the S-PLAY webpage and navigate to Settings tab. Enable the Remote Access from your additional S-PLAY, enter the IP, Username and SSH Key (the .pem Key pair file created in Page 8) while the Remote Port at the value set from the last step. Here in our example is 8081. Press Update, and the remote access globe sign should turn green which means it is active.
Remote Access: Troubleshooting
On first connection, the S-PLAY will automatically try to configure the
server’s gateway by running:
If the Username provided in setup doesn’t have any sudorights or sshd config is located in different place, you will need to manually update the sshd_ config on your AWS Server to set “Gateway Ports yes” and restart the sshdservice.
To access the terminal, navigate to the server instances on AWS. Press
Instance ID and then ‘connect’ on the top right corner which brings us to the
page as below. Click ‘Connect’ again to open the terminal.
It’s worth noting that. /etc/ssh/sshd_config can be located in a different folder depending on the operating system running on your remote server.
Wrapping up
That brings us to the end of the configurations we need to do for remote connections but remember that we set up this server to be accessible from any IP address, so for security it’s highly recommended to use the S PLAY’s password lock function. You can do that by going to your S-PLAY’s home page and clicking “user” drop down and clicking “change passwords”.
To connect remotely, just go back to our remote access settings and look for the URL that the S-PLAY displays. This address is generated by the S-PLAY according to the settings you have just input and is the address you need to enter to access your S-PLAY remotely.
Conclusion
By following these steps, you can create a control panel on your smart phone or tablet to intuitively control the S-PLAY, call shows, and adjust brightness’s. This guide gives you a run down on a basic workflow and control panel, but this is just the beginning. With a bit of time and ingenuity, you can create even more sophisticated control panels.
This brings us to the end of this guide on how to set up remote access on your S-PLAY. By following these steps, you can set up your S-PLAY to be accessible from around the world over the internet.
We hope you found this application note useful!
Due to constant innovation, information within this document is subject to change.
S-PLAY (70092)
Visit the ENTTEC website
for the latest version
References
Read User Manual Online (PDF format)
Read User Manual Online (PDF format) >>