CHAPTER 02 / INSTALL

Check the server

  1. 1Check Windows and account rights
  2. 2Find the site size
  3. 3Check the PC parts
  4. 4Check .NET and the network
  5. 5Plan remote sites
STEP 5 OF 5

Plan remote sites

Warning

A VPN is the safer link. Do not expose Integriti services directly to the internet if you can avoid it.

  1. Find which parts will sit at other sites: controllers, client PCs, or both.
  2. Use a VPN between the sites if you can. Then treat the remote parts as on the same network.
  3. If you cannot use a VPN, forward TCP 4711 to the Integriti Controller Server for controllers on other networks.
  4. Use firewalls to allow only the known IP addresses of the allowed clients.
  5. Allow TCP 44000 from each client PC to the application server.
  6. Do not set up port forwarding on the controller side.
Diagram of three sites. Site A is the main site with the Integriti server PC, a network switch, and a router. Site B has a controller behind a router and reaches the server on TCP 4711. Site C has a client PC behind a router and reaches the server on TCP 44000. The sites connect through the internet or a customer WAN. A dashed VPN tunnel between the routers is the recommended link. Without a VPN, forward TCP 4711 to the Controller Server and allow only known client IP addresses. (opens full size in a new tab)
Remote sites. Use a VPN between the sites if you can.Source: Drawn for this guide from the Hardware and Software Prerequisites (PDF page 7), the System Configuration Handbook (PDF pages 83 and 90), and the Cyber Security Hardening Guide (PDF pages 10-11). All addresses are examples.

VPN A private, encrypted link between two networks.

Note

The addresses in the pictures are examples for a demo site with no DHCP server. Use the addresses of your own site.

Expected result

The plan names the route and the open ports for every remote part.

I need help with this step

Ask the site IT team which route joins the sites.

If a step does not work, refer to the original documentation supplied with the software or contact support@innerrange.com.

Search the installer FAQ