Limelight by Lutron. System IT Implementation Guide. Revision A 7 December 2018

Transcription

1 Limelight by Lutron System IT Implementation Guide Revision A 7 December 2018

2 Table of Contents... Limelight by Lutron Security Statement. 3 Limelight by Lutron Gateways. 4 Overview. 4 IP Addressing 4 Communication Speed. 4 Latency 4 Typical Network Components Diagram. 5 Ethernet Port Usage. 6 Protocols Used. 7 End User Devices 8 Overview. 8 Web Browser. 8 System Maintenance. 8 2

3 Limelight by Lutron Security Statement Lutron takes the security of our Lighting Control Systems very seriously. The Limelight by Lutron System can be configured to meet typical corporate standards for security. Lutron is committed to security and continuously improves product security throughout the product s lifecycle. Some of the notable features of the Limelight by Lutron security architecture include: 1. A web browser user interface protected using TLS. 2. The Gateway device connects to the Internet through a TLS connection and does not require inbound connections from the Internet to the Gateway. 3. The Gateway device can receive operating system updates as needed to improve security. 4. The Gateway device can connect to the Internet via a cellular connection to isolate the device from your corporate network or the Gateway can connect to the Internet via a wired Ethernet connection which can be managed and secured by your corporate IT department. System Network Deployment The Limelight by Lutron Gateway must be connected to the Internet in order to be accessible from the Limelight by Lutron web page. A customer may have multiple Gateways on-site, but there is no communication between the individual Gateway devices, allowing each Gateway to be individually secured. Support A Lutron representative is available to meet with our customer s corporate security and IT teams to discuss their security strategy, networking configuration, VLANs, firewalls, network settings, integration, etc., and to discuss recommended best practices for a secure deployment of the system. Contact Lutron Customer Assistance for more information. 3

4 Limelight by Lutron Gateways Overview The Gateway is the device on the jobsite that connects the system to the Internet. There are two models of this device that determine how the device connects to the Internet. Lutron model LL-CELLGATE will connect to the Internet via a cellular modem built into the Gateway. Lutron model LL-ETHGATE will connect to the Internet using a wired Ethernet connection through a corporate network. For more information on these devices, please review the product specification submittal at: and the product installation guide at: The Gateway wirelessly communicates with the Limelight Radio Modules that control the light fixtures in the system. The wireless communication used between the Gateway and the Limelight Radio Modules is ZigBee in a High Density Mesh network. This uses a 2.4 GHz frequency and is based on the IEEE standard. For more information on the communication between the Gateway and the Limelight Radio Modules see: IP Addressing IPv4 is the addressing version used for the Gateway. The IP address can be DHCP or reserved DHCP. Communication Speed 100 BaseT Full Duplex is the typical communication speed for the LL-ETHGATE wired Gateway. Latency Communication from the Gateway to the cloud-based Gateway Manager must be <100 ms in both directions. 4

5 Limelight by Lutron Typical Network Components Diagram End User Devices Public Internet Gateways Tablets Limelight By Lutron Web page server Limelight By Lutron Gateway Manager Limelight By Lutron Diagnos c Server Option 2: LL-CELLGATE cellular network connection Firewall Public Internet Firewall Computers Smart Phones Opera ng System Update Server DNS Server NTP Pool Time Server Option 1: LL-ETHGATE wired network connection Note: There may be more than one gateway on a jobsite 5

6 Ethernet Port Usage Please see the Typical Network Components Diagram on the previous page. Connection Destination Port Type Protocol Description Gateway to the Gateway Manager Gateway to the Diagnostic Server Gateway to the NTP Pool Gateway to the OS Update Server Gateway to the DNS Server End User Computer(s) to Web Page Server TCP SSH The Gateway establishes an SSH tunnel to the Manager 1883 TCP MQTT The Gateway connects to the MQTT broker 8883 TCP TLS The Gateway establishes a TLS connection to the Manager TCP FTP Used to collect diagnostic information as needed 0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org org/debian/ lutron.com 22 TCP FTP Used to collect diagnostic information as needed TCP FTP Used to collect diagnostic information as needed 123 UDP NTP Used to synchronize the time on the Gateway. Gateway will connect to one of the 4 mirror sites 80 TCP HTTP Used to update the operating system of the Gateway 53 UPD DNS Used to register with the Domain Name Server 443 TCP HTTP Allows the facility manager to control and monitor systems 6

7 Protocols Used Protocol SSH MQTT TLS/SSL FTP NTP DNS HTTPS HTTP Description Used for secure communication between the Gateway and the Gateway Manager Used to pass information between the Gateway and the Gateway Manager Used for secure communication between the Gateway and the Gateway Manager Used to push diagnostic files from the Gateway to the Diagnostic Server This protocol is used to connect to a public NTP Pool server to set the date and time on the Gateway Used to connect to public Domain Name Servers to associate host names with their IP Addresses Used to have the web browser on the facility manager s computer or mobile device connect to the web page. This page allows the facility manager to monitor and control their lighting control system When an operating system upgrade to the gateway is required, this protocol is used to download the files needed. These files are publicly-known, cryptographically signed updates 7

8 End User Devices Overview Access to the Limelight by Lutron system user interface is via a standard web browser. This web browser can run on a computer, tablet or smart phone. The device running the browser must be connected to the Internet and must be able to access the website. Web Browser The website will run in any industry standard web browser; however all browsers can operate slightly different. Lutron recommends using the latest version of Google Chrome for best results. System Maintenance 1. Lutron recommends keeping the End User Devices up to date with the latest operating system and browser software versions available from the manufacturers. 2. Lutron recommends installing, configuring and regularly updating an anti-virus program on any End User Device. 3. Lutron recommends using the latest available version of any recommended web browser when accessing the website. 8

9 Customer Assistance If you have questions concerning the installation or operation of this product, call the Lutron Customer Assistance. Please provide the exact model number when calling. Model number can be found on the product packaging. Example: LL-CELLGATE or LL-ETHGATE U.S.A., Canada, and the Caribbean: LUTRON1 Other countries call: Fax: Visit us on the web at )Lutron and Lutron are trademarks of Lutron Electronics Co., Inc., registered in the U.S. and other countries. Limelight is a trademark of TwistHDM, LLC. Google Chrome is a trademark of Google Inc. Zigbee is a trademark of Zigbee Alliance Lutron Electronics Co., Inc. P/N Rev. A 12/2018 Lutron Electronics Co., Inc Suter Road Coopersburg, PA USA