Open the “Links” view.
You have the option to search for devices in the network or to add a link.
To add a link, give the link a name.
Enter the device URL or IP address where the device can be reached in the remote network.
Click on “Apply”.
To access a device, click on the corresponding device in the link overview.
Open the “Remote Access” view.
Click on “Create new app access”.
Enter a name of your choice to make the assignment easier and click on “Apply”.
Enter the activation code shown in your app’s remote access configuration.
Open the “Message Forwarding” view.
Click on “Create new forwarding”.
Select which notifications are to be forwarded. You can select by urgency and/or category. The entries correspond to the fields from the ETS and must be written in the same way.
Select the forwarding medium and click on “Apply”.
The owner can remove all rights from all other users, including other administrators, at any time, but no-one can refuse access to the owner.
The owner is the person who is legally responsible for the use of remote access. During the construction phase, this is usually the electrical installer or system integrator.
Ownership is transferred to the installation owner by ownership transfer.
If you are the current owner, click on the “Change owner” button in the “Portal Users” view.
Enter the e-mail address of the new owner and a description if necessary and click on “Apply”. Important: The new owner must be registered as a user in the Gira device portal!
You and the new owner will receive an e-mail with a confirmation link.
When both you and the new owner have accepted, you will both receive an e-mail to that effect and ownership is transferred.
If one of the requests is not confirmed, no transfer of ownership will take place.
To do this, you must have administrator rights, i.e. you must be entered as an owner or administrator under “Portal Users”. Click on “Edit” on the line of the desired user.
A user's role refers to the configuration options in the device portal only. Access rights to the network are controlled by the access groups.
It is possible to use access groups to grant access to the KNX installation or the remote network temporarily or permanently, depending on the group.
KNX communication objects can be used to activate or deactivate access options for the “Residents” and “Installers” groups separately from one another at any time.
This connection type creates a separate network between your PC/smartphone and the Gira S1 and offers additional security. The data volume is lower than it would be if your PC/smartphone participated directly in the Gira S1 network.
The PC will receive its own IP address in the Gira S1 network. The required data volume is higher than it would be if a separate network were used between the PC/smartphone and the Gira S1.
This setting is required for certain application purposes that do not allow a connection via “Create your own network”, for example if you want to manage your Sonos system with the Sonos Windows App.
Automatic IP address assignment via DHCP must be activated in the Gira S1 network.
OpenVPN profiles with this setting cannot be used with the “OpenVPN Connect” app for Windows, Android and iOS.
If yes, not only do you access the content in your target network, but you also send all other data such as web page views via the target network. The increased data volume can slow down the VPN connection. This setting is usually required for segmented networks.
If no, then only data exchange with the target network takes place via the VPN connection. Internet traffic passes directly through the local router or mobile network as usual.
You need an OpenVPN Client to access your home network via VPN. You can use the VPN configuration file to establish the connection between this OpenVPN Client and the Gira S1.
Download the “OpenVPN” software here and install it on your PC.
If you intend to use the VPN with your smartphone or tablet, install the “OpenVPN Connect” app for Android or iOS on your mobile device. However, the app only supports the recommended “Create your own network” connection type.
Once you have installed the OpenVPN Client, upload the VPN configuration file there.
The Gira S1 communicates with the device portal exclusively via an HTTPS connection. All data are exchanged in both directions via this connection, so no additional firewall configuration is usually necessary.
If you would like to restrict network access to certain domains and ports, we recommend configuring exceptions. The domains and IP addresses listed in the following table may change during certain maintenance work on the portal! You will be informed of any such work by e-mail.
Domain | IP Address | Port | Required for |
---|---|---|---|
securedeviceaccess.net | 185.201.145.10 | TCP 443 | all functions |
api.securedeviceaccess.net | 185.201.145.10 | TCP 443 | all functions |
hub.securedeviceaccess.net | 45.12.49.68 | TCP 443 | all functions |
hub1.securedeviceaccess.net | 45.12.49.68 | TCP 443 | all functions |
hub2.securedeviceaccess.net | 45.12.49.85 | TCP 443 | all functions |
vpnproxy.securedeviceaccess.net | 45.12.49.86 | TCP 80 | VPN functionality |
httpaccess.net | 45.12.49.91 | TCP 443 | link functionality on the portal |
ise.de | 5.35.244.167 | TCP 80 | firmware update via the device website |
0.europe.pool.ntp.org (standard NTP server) or other configured server from Gira S1 5.0: pool.ntp.org (standard NTP server) |
UDP 123 | NTP time synchronization with activated time server function | |
deviceservices.securedeviceaccess.net | 83.169.16.174 | TCP 443 | Gira DCS-IP gateway |