Independent of using a VPN connection, you will need to know the WAN IP address for the location you want to connect to. If the WAN IP is dynamically assigned by the ISP ie not a fixed|static IP, then you will need to utilise a Dynamic DNS service like DynDNS.org [free for non-commercial use]. A dynamic DNS service will allow you to always resolve the IP address of the location using your chosen domain-name eg my-home.dyndns.org
To determine what the WAN IP address of your location is, on a computer open a browser session and navigate to http://whatsmyip.net/ and it will list the current WAN IP for your network. If using Chrome, you can simply type “what is my ip?”
STEP 2 Is Port forwarding enabled to the NetLinx master?
You will need to ensure that port forwarding is enabled within the router configuration at the site. Specifically, Port 1319, which is the default port for AMX ICSP communications, will need to be forwarded to the IP Address of your target NI master. You may want to turn on Security for the NI master, and select ICSP and Encrypt ICSP. If you do so, all devices that connect to the NI master via ICSP will need to have their connection profiles updated with the Username|Password that you define within the NI's Security - User Level: profile.
STEP 3 Test port forwarding
Then, from outside of the target network [in case your router does not provide reverse lookup], to determine if port forwarding is up and running correctly, open a command prompt session and type in: "telnet 1319" .
If port forwarding is configured correctly, you should see something similar to the following:
----
☻[☻☺☺☺ù☺♦☺☺+☺|v3.60.453NI MasterAMX LLC♠ └¿☺Ë'`ƒôÇgN☻S☻☺☺☺ù☺♦☺☺☺+N/ A ☺zv3.60.453vxWorks ImageAMX LLC|☻M☻☺☺☺ù☺♦☻☺☺+N/A ☺{v3. 60.453BootROMAMX LLC¶☻\☻☺☺☺ù☺♦♥☺☺0000000000000000☺v1.30.8AXLink I/F uController AMX LLC♥%
----
This has proven that you can establish a connection to your NetLinx master from outside of the target network.
At that point, all that is required to connect with the NetLinx master from TPControl is to enter the WAN IP or Host-Name in the profiles Host field, and TPControl will establish a connection with the NI when connecting to any network
If your device is MobileData enabled, you can set the "Use Mobile Data" option to “With WiFi”, and your device will connect using MobileData when Wi-Fi is not available.