AUG-035-0-EN-(Remote Access for Allen Bradley PLCs)

8/14/2019 AUG-035-0-EN-(Remote Access for Allen Bradley PLCs)

1/45


2/45

Table of Contents

1.Hard- and software requirements ......................................................................................................3

1.1 Hardware requirements ................................................................................................................31.2 Software requirements .................................................................................................................3

1.2.1 eWON related software ....................................................................................................31.2.2 Rockwell Automation related software ...........................................................................31.3 eWON Firmware ersion .............................................................................................................3

2.Objective .............................................................................................................................................4

3.Typical confiuration setup ...............................................................................................................!

4."rerequisite# $eterminin suitable %" addresses .............................................................................&

!.1 "nternet connection usin# t$e WAN "nterface ...............................................................................%!.2 "nternet connection &' modem ()S*+ ,S-N+ AS/0 ...................................................................

!.'eac(in your e)O* t(rou( t(e %nternet ......................................................................................+

.1 Ste 14 Settin# ", address of eWON /AN ....................................................................................5.2 Ste 24 6onfi#ure eWON for "nternet connection .......................................................................11.3 Ste 34 6reatin# t$e eWON in 'our -alk2* account..................................................................1!.! Ste !4 )ettin# t$e -alk2* acti7ation ke' for t$e eWON ..........................................................1. Ste 4 6onfi#urin# 'our eWON to connect to -alk2* ..............................................................18.% Ste %4 6onnectin# t$e eWON remotel' .....................................................................................22. Ste 4 -erminatin# t$e remote connection ................................................................................2!

&.,inin e)O* and ", ....................................................................................................................2!

%.1 /ocal link caa&ilities ..................................................................................................................2%.2 Serial link confi#uration ..............................................................................................................2

%.3 9t$ernet link confi#uration ..........................................................................................................25/.", software mappin confiuration .............................................................................................30

+.", remote access ..........................................................................................................................32

.Troubles(ootin ...............................................................................................................................34

8.1 6annot reac$ serial ,/6: ..........................................................................................................3!8.2 6annot reac$ 9t$ernet ,/6: .....................................................................................................3!

10.ppendi 1 5pecifics for 6odem connections ..........................................................................3&

1;.1 )eneral ....................................................................................................................................3%

1;.2 6onfi#urin# t$e eWON for "nternet connection (Ste 20 ...........................................................3%1;.3 6reatin# t$e eWON in 'our -alk2* account (Ste 30 ...............................................................351;.! 6onnectin# t$e eWON remotel' (Ste %0 .................................................................................351;. -erminatin# t$e remote connection (Ste 0 ............................................................................38

11.ppendi 2 e)O* as 7ateway in ", .......................................................................................40

12.ppendi 3 5ecurity aspects ......................................................................................................43

12.1 /o#in securit' ...........................................................................................................................!312.2 -raffic securit' ..........................................................................................................................!3

13.ppendi 4 5erial $81 cable pinout ...........................................................................................44

Re7ision $istor' .....................................................................................................................................!

Remote Access for Allen


3/45

Hard< and software requirements 6$ater 1.

1. Hard- and software requirements

1.1 Hardware requirements

"n order to follow t$is #uide 'ou?ll need4

1 eWON wit$ ,N caa&ilities (for e@amle eWON 21;16 wit$ inte#ratedmodem or a 2;;6 wit$ second 9t$ernet interface0

1 Allen>suort.ewon.&iB>softwares.$tm

eatc(er ,N tunnelin# utilit'

$tt4>>suort.ewon.&iB>softwares.$tmNote4 t$is utilit' will &e used to create t$e -alk2* account and to connect to 'oureWON remotel'.

1.2.2 Rockwell Automation related software

'5,in 6ommunication utilit'

'5,oi!00if 'ou intend to connect to a ,/6 of t$e S/6;; Series

'5,oi!000if 'ou intend to connect to a ,/6 of t$e /o#i@ Series

1.3 e)O* 8irmware :ersion

Successfull' followin# t$ese #uidelines requires an eWON firmware 7ersion %.1 s2 or$i#$er. -$e e=udd' alication will allow 'ou to u#rade 'our eWON firmware ifrequired.



4/45

O&Cecti7e 6$ater 2.

2. Objective

-$e o&Cecti7e of t$is document is to #uide 'ou t$rou#$ t$e stes required to ena&leremote access of 'our Allen


5/45

-'ical confi#uration setu 6$ater 3.

3. Typical confiuration setup

6onfi#urin# remote access is simle. Howe7er+ 'ou will need to a' attention to t$edifferent ", ran#es in7ol7ed. -$e dia#ram &elow summariBes t$e different networkran#es in use (", num&ers are e@amles0.

W$en it is $ooked on t$e 6oman' /AN (or to t$e Site /AN0 t$e confi#uration ,6needs to &e confi#ured in H6,


6/45

,rerequisite4 eterminin# suita&le ", addresses 6$ater !.

4. "rerequisite# $eterminin suitable %" addresses

-o a7oid routin# ro&lems later+ it is &etter to start to confi#ure t$e eWON and t$e,/6 wit$ /AN ", addresses t$at will &e suita&le.

-$e t'e of $'sical carrier (),RS or WAN>/AN0 'our eWON will use to connect tot$e "nternet will $a7e imact on 'our ", address selection.

=efore startin# actual confi#uration+ lease read t$e #eneral rinciles &elow.

4.1 %nternet connection usin t(e )* %nterface

"f 'ou lan to connect to t$e "nternet usin# t$e WAN interface+ t$e eWON will workwit$ a /AN ", address at t$e ,/6 side and a WAN ", address at t$e network side.

9@amle of ", ran#es in7ol7ed in a WAN>/AN confi#uration4

%mportant *ote4 -$e coman' network address ran#es (6oman' /AN and Site /ANin t$e e@amle a&o7e0 are secified and mana#ed &' t$e resecti7e networkadministrators. -$ese ran#es siml' cannot &e c$an#ed. So &efore confi#urin# 'oureWON /AN ", address and 'our ,/6 ", addresses+ lease ask for4

1. -$e secified coman' /AN network ran#e to &e used &' t$e ,6 t$at willinitiate t$e remote connection (6oman' /AN0.

"n our e@amle t$is ran#e is 1;.;.;.

2. -$e secified coman' /AN network (Site /AN0 ran#e (and #atewa'0 w$ic$

t$e eWON WAN ort will use to #et "nternet connection.

"n our e@amle t$is ran#e is 1;.1;.;.

Gnowin# t$e ran#es in use at t$e 6oman' and Site side+ 'ou will &e a&le to select aran#e outsidet$ese networks for t$e eWON /AN!


7/45

!. ,rerequisite4 eterminin# suita&le ", addresses

4.2 %nternet connection by modem ;756< "5T*< $5,=

"f 'ou lan to connect to t$e "nternet t$rou#$ a modem+ 'ou onl' need to select an ",address for t$e eWON /AN side. -$e ", address of t$e eWON /AN interface must &ecomati&le wit$ t$e ", address of t$e ,/6+ &ut &e outside t$e network address saceto w$ic$ 'our ,6 is connected (6oman' /AN0. "f t$ere is as an o7erla &etween t$e", ran#e of 'our ,6 and t$e ",


8/45

Reac$in# 'our eWON t$rou#$ t$e "nternet 6$ater .

!. 'eac(in your e)O* t(rou( t(e %nternet

!.1 5tep 1# 5ettin %" address of e)O* ,*

Once 'ou $a7e selected 'our ", addresses+ 'ou can start confi#urin# 'our eWON."n our e@amle+ we will c$an#e t$e default factor' address 1;.;.;.3 to 182.1%5.;.3.

-o confi#ure 'our eWON /AN ",4

1. -$is connection will usuall' &e made t$rou#$ t$e 6oman' network. "t can also&e made wit$ a ointsuort.ewon.&iB>softwares.$tm

6onnection t$rou#$ coman' /AN

,oint!
http://support.ewon.biz/softwares.htmhttp://support.ewon.biz/softwares.htm


9/45

. Reac$in# 'our eWON t$rou#$ t$e "nternet

3. "n t$e $ome a#e+ select et !" Address

!. Jou don?t need to fill out t$e Serial Num&er+ Cust click on Browse

e=udd' finds 'our eWON. Select it &' dou&le


10/45


%. Wait until address udate and de7ice re&oot are comleted. 6lick $inis%.

"n our e@amle t$e eWON was set to /AN ", address 182.1%5.;.3.As s$own &elow+ t$is address fits into t$e ,/6!


11/45


!.2 5tep 2# onfiure e)O* for %nternet connection

-o confi#ure 'our eWON?s "nternet connection 4

1. 6onfi#ure t$e network arameters of 'our confi#uration ,6 to encomass t$e ",ran#e of t$e eWON /AN. -o do t$is+ #o to S-AR-+ Settin#s+ Network6onnections. Oen t$e currentl' used connection+ select t$e -6,>", arameterrow and select a fi@ed ", address wit$in t$e ran#e of t$e eWON /AN. 6lick OG toclose t$e wiBard.

2. 6onnect t$e ,6 to one of t$e /AN orts of t$e eWON.

3. Oen 'our "nternet &rowser and access t$e eWON internal We& a#e &' t'in#

t$e /AN address 'ou Cust confi#ured (in our e@amle $tt4>>182.1%5.;.30!. -o oen t$e eWON wiBard a#e+ click on Confi&urationin t$e tool&ar and t$en

on t$e wiBard icon. -$e followin# a#e will &e disla'ed4

. 6lick on t$e icon ne@t to Confi&ure !NT'RN'T Connectionto launc$ t$e wiBard.Followin# window will &e disla'ed (otions in dro down are deendin# on$ardware confi#uration0 4



12/45


%. Accordin# to 'our eWON t'e (wit$ a modem or a second 9t$ernet interface0+ 'ouwill $a7e t$e ossi&ilit' to c$oose &etween different connections4

'odem Connection

(thernet !A#) connection

A*+$

)!A# refers to wide area network, which is networ% that coers a broadeternal area using the Internet infrastructure, as opposed to $A# referring tolocal area networkthat is restricted to internal networ%s.

From t$e ne@t ste onwards+ we will address t$e most current access w$ic$ is't%ernet WAN connection(for modem connection refer to K 1;Aendi@ 1 Secifics for *odem connections0.

. *ake sure t$e WAN ort of t$e eWON is $'sicall' connected wit$ t$e coman'network. Traffic ,>$ do not lit yet as t(e connection is not yet defined.

5. Select 't%ernet WAN connection. -$e usual confi#uration for 9t$ernet is H6,ena&led (de7ice o&tains ", address and "nternet access automaticall' from $ost0.Lse a fi@ed ", address+ )atewa' and NS onl' if t$is is clearl' required &' t$enetwork admin.



13/45


8. 6lick Ne#tand #o to ste 1;!nternet Connection Test.

1;. -$e last ste of t$e "nternet confi#uration consist in a communication test. -$is

test s$ould end u successfull' as s$own in t$e snas$ot &elow4

T%e !nternet Connectionmeans t$at t$e eWON is correctl' confi#ured for an"nternet connection. "f t$is test is not successful+ t$en #o &ack to t$e re7iousconfi#uration stes and rec$eck all settin#s for comati&ilit' and accurac'.

-$e Online !" C%eckmeans t$at t$e eWON was actuall' a&le to reac$ an ",address on "nternet. !t mi&%t not be so critical if t%is (articular test fails. )o

a$ead wit$ t$e rocedure wit$out &ein# too muc$ concerned.

Jou normall' do not need to read it to comlete t$e resent rocedure+ &ut wemention for reference t$e detailed document descri&in# t$e use of t$e wiBard4AL)


14/45


!.3 5tep 3# reatin t(e e)O* in your Tal26 account

-o connect to 'our eWON remotel'+ we will use e6atc$er and -alk2*.

1. Jou can ski t$e resent oint if 'ou alread' created a -alk2* account. "f 'ou$a7en?t created 'our -alk2* account 'et+ install e6atc$er and create 'our -alk2*account as er K 3 of t$e #uide D-alk2* )ettin# started on Ser7ice FreeDa7aila&le at $tt4>>suort.ewon.&iB>docs>-alk2*MFree.$tm. Jou can downloade6atc$er from t$is link as well.

2. 6onnect 'our confi#uration ,6 to t$e coman' /AN and confi#ure its networkarameters to H6, ena&led (acquirin# an ", address automaticall'0.

1. On t$e menu on t$e left side of t$e e6atc$er interface click on t$e D?D (NeweWON0 icon in t$e eWON list section. -$e followin# window aears4

2. 9nter t$e eWONname'ou want to use on t$e -alk2* ser7er to identif' t$eremote connection to 'our eWON.

3. -$e eWON erial Number can &e left emt'. "t will &e encoded automaticall'durin# t$e -alk2* connection confi#uration of t$e eWON.

!. Select t$e Connection Ty(eto secif' $ow 'our eWON will &e connected to t$e-alk2* ser7er usin#4

a ,*@$5, connection

a 7"'5@>$7>connection or

an "nternet connection o7er a "5T* connection (analo# modem0.

"f 'ou secif' a ),RS>9d#e connection+ t$en 'ou will &e asked to secif' t$e$one num&er. -$is will allow -alk2* to wae up your e)O* remotelyusin# a Wake


15/45


6lick on Ne#t.

"n older 7ersions+ 'ou were asked to secif' t$e Remote Networkto reac$ &e$ind

t$e eWON like s$own &elow. Since firmware 7ersion %.2s;+ w$en launc$in# t$eeWON -alk2* wiBard to enter t$e -alk2*


16/45


17/45


!.4 5tep 4# 7ettin t(e Tal26 activation ey for t(e e)O*

L to now we onl' added t$e eWON on our -alk2* account+ &ut we did not 'etconfi#ure t$e eWON to connect to t$e -alk2* ser7er.

-o ena&le t$e eWON connectin# to t$e -alk2* ser7er+ an acti7ation ke' is needed.-$is ke' will allow t$e eWON to #et &ack t$e ,N ke's and certificates needed for t$e,N connection. -$is ste still uses t$e H6,!


18/45


-$e followin# window oens4

3. Lnder t$e Confi&ure *ia Acti*ation +eysection 'ou will find t$e Acti7ation Ge'

needed for t$e eWON confi#uration. 6lick on t$e Co(yicon to co' t$e acti7ationke' into t$e cli&oard of 'our ,6. Gee t$is information on 'our cli&oard tocomlete Ste (#o to t$is ste0.

Note4 Lsin# t$e Acti7ation Ge' is t$e standard rocedure. Ne@t to t$is met$od+t$ere are 2 alternati7e met$ods4

Confi&ure *ia eWON Name4 urin# t$e eWON -alk2* wiBard+ instead ofusin# t$e Acti7ation Ge' 'ou can alternati7el' secif' t$e eWON Nameanduse t$e user name and assword of 'our Free account.

Confi&ure *ia ,4 "f 'our eWON $as a )S* modem and if t$e eWON isalread' confi#ured for "nternet connection+ t$en 'ou can also send an S*S tot$e eWON containin# t$e acti7ation ke'. W$en eWON recei7es t$e S*S+ it willt$en tri##er automaticall' t$e -alk2* connection wiBard and will confi#ureitself to connect to t$e -alk2* ser7er.

!. 9nd of ste !.



19/45


!.! 5tep !# onfiurin your e)O* to connect to Tal26

1. 6onfi#ure t$e network arameters of 'our confi#uration ,6 to encomass t$e ",ran#e 'ou used to allocate t$e /AN ", address to t$e eWON.

2. 6onnect t$e ,6 to one of t$e /AN orts of t$e eWON.

3. Oen 'our "nternet &rowser and access it?s internal We& a#e &' t'in# t$e /ANaddress 'ou Cust confi#ured (in our e@amle $tt4>>182.1%5.;.30.

!. -o oen t$e eWON wiBard a#e+ click on Confi&urationin t$e tool&ar and t$enon t$e Wi-ard icon.

-$e wiBard window will oen4

. 6lick on t$e Talk2,wiBard.

-$e followin# window will &e disla'ed4



20/45


%. 6lick on Ne#tto re#ister t$e eWON on t$e -alk2* ser7er.

. 6lick on Re&ister wit% ACT!AT!ON +'/+ as in t$e re7ious ste+ we coied t$e

Acti7ation Ge' to t$e cli&oard of 'our ,6. ,aste t$e Acti7ation Ge'(6trl0.

5. 6lick Ne#t

*ote4 "f 'ou c$oose t$e Re&istration wit% eWON NA,'met$od+ t$en 'ou will&e asked to enter t$e Name 'ou secified for t$e remote connection in 'our-alk2* account. Jou will also need to secif' 'our -alk2* account name andenter t$e user name and t$e assword w$ic$ 'ou use to connect to 'our -alk2*account.

-$e ne@t window of t$e wiBard will ask 'ou if 'ou need to connect t$rou#$ a ,ro@'ser7er.

8. 6$eck t$is otion onl' if 'ou need to secif' a ,ro@' ser7er for t$e "nternetconnection. Ot$erwise lea7e t$is otion unc$ecked and click Ne#t.



21/45


1;. -$e -alk2* re#istration will now start and t$e result will &e disla'ed on t$ewiBard a#e4

-$e eWON will first test t$e different connections needed to connect to t$e -alk2*ser7er (L, and H--, or H--, usin# a ,ro@'0. -$en t$e eWON will connect tot$e -alk2* ser7er and retrie7e t$e ,N ke's. At t$e end+ t$e eWON will esta&lis$t$e ,N connection to t$e -alk2* ser7er.

Once t$e re#istration and confi#uration of t$e eWON are comleted+ t$e result will&e disla'ed on t$e WiBard a#e as s$own in t$e followin# icture4

11. 6lick on t$e )one&utton to close t$e wiBard.Jour eWON is now confi#ured to connect to t$e -alk2* ser7er.

12. 9nd of ste .



22/45


!.& 5tep onnectin t(e e)O* remotely

Now t$at t$e eWON is confi#ured to connect to -alk2*+ we can esta&lis$ t$e remote

connection to t$e eWON.

1. 6onnect 'our confi#uration ,6 to t$e coman' /AN and confi#ure its networkarameters to H6, ena&led (acquirin# an ", address automaticall'0.

2. /aunc$ e6atc$er and oen 'our -alk2* account.

3. "n t$e eWON list section select t$e eWON 'ou want to use for t$e remoteconnection.

-$e eWON w$ic$ 'ou Cust confi#ured s$ould now &e disla'ed as on line (#reentick in t$e action column0. -$is means t$at t$e eWON $as esta&lis$ed its ,N

connection to t$e -alk2* ser7er.

!. ou&le


23/45


%. -$e ,6 is now connected to t$e eWON usin# t$e ,N tunnel and 'ou can start touse t$e remote connection.

. "f 'ou want>need to connect to t$e eWON itself+ 'ou can click on t$e ", addresslink in t$eActi*e Connectionsection+ as disla'ed in t$e followin# icture. Oncet$e $ome a#e of t$e eWON we& interface is disla'ed+ 'ou know for sure t$at'our connection is effecti7e.

*ote4 For secifics related to modem connection (includin# ),RS>9d#e0 lease#o to K 1; Aendi@ 1 Secifics for *odem connectionsat t$e end of t$is #uide.

5. 9nd of ste %.



24/45


!./ 5tep /# Terminatin t(e remote connection

1. 6lick on t$e disconnect &utton in t$e Acti7e connection section. -$is will close t$e

,N connection wit$ t$e eWON.

2. *ote4 For secifics related to modem connection (includin# ),RS>9d#e0 lease#o to K1;Aendi@ 1 Secifics for *odem connectionsat t$e end of t$is#uide.

3. 9nd of ste num&er .



25/45

/inkin# eWON and ,/6 6$ater %.

&. ,inin e)O* and ",

&.1 ,ocal lin capabilities

eendin# on w$et$er t$e ,/6 will &e connected to t$e eWON wit$ a serialor>t(ernetlink+ t$e eWON confi#uration and t$e connection to t$e ,/6 will &e sli#$tl'different. =ot$ t'es of connections will &e e@lained.

Gee in mind t$at 'ou can com&ine &ot$ connection t'es wit$out an' ro&lem. Fore@amle+ 'ou can connect at t$e same time to an S/6;; usin# t$e serial ort of t$eeWON and connect to one or more 6ontrol/o#i@ ,/6(s0 usin# t$e 9t$ernetconnection &etween t$e eWON and t$e ,/6.

&.2 5erial lin confiuration

1. Set t$e serial ort di switc$ of t$e eWON to RS232 mode (all OFF0 to allow t$e F1communication wit$ t$e ,/6. -$e settin#s of t$e switc$es are indicated on t$eeWON sticker on t$e left $and side of its $ousin#.



26/45

%. /inkin# eWON and ,/6

2. )o to t$e eWON We& a#e eit$er usin# t$e Cust confi#ured ,N tunnel or a oint


27/45


Brid&e '!" connection4 Onl' c$eck t$is otion if 'ou connect to a 6omact/o#i@+6ontrol/o#i@ or Fle@lo#i@ ,/6. o not c$eck t$is otion if 'ou connect to anS/6;; or *icrolo#i@.

On an S/6;; ,/6 'ou can find t$is information in t$e 6$annel confi#uration windowof 'our ,/6 roCect. An e@amle is s$own in t$e icture &elow4



28/45


%. Sa7e 'our settin#s &' clickin# on (date Confi&

. 6onnect t$e eWON serial ort to t$e serial ort of t$e ,/6 (usin# a F1 crossedca&le as s$own in K 13Aendi@ ! Serial F1 ca&le inout0. -$is is t$e sameserial ca&le 'ou use w$en 'ou connect t$e serial ort of 'our ,6 to t$e serial ort oft$e ,/6.

*ote4 "n t$e ,/6 confi#uration+ t$e serial ort must &e confi#ured in $818ull$uplemode. -$is is t$e standard settin# for t$e ,/6 interface w$en used forro#ram maintenance.

5. 9nd of serial link confi#uration.

&.3 >t(ernet lin confiuration

1. "f 'our eWON runs a firmware %.2s1 or #reater (see note0 AN 'our alication isstrai#$t forward+ t$ere is not$in# to do &ut makin# sure t$at t$e ,/6 ", address is int$e same ran#e t$an t$e /AN ", of t$e eWON.

*ote 1# From eWON firmware 7ersion %.2s1 onwards+ t$e "luAn'outefunctionautomaticall' confi#ures t$e 9t$ernet routin#. Wit$ t$is confi#uration+ it is < in mostcases< no lon#er necessar' to set t$e eWON address as )atewa' into t$e ,/6.

"f+ for an' reason+ 'ou are usin# an earlier firmware 7ersion (not recommended0 ORwould t$e ,lu#n?Route function not work in 'our secific alication + t$en 'ou s$ouldrefer toAendi@ 2 eWON as )atewa' in ,/6.



29/45


*ote 2# -$eeWON t'es wit$ ! /AN orts (2;;6 or !;;60 can &e connected tot$e 9t$ernet ort of t$e ,/6 directl'. W$ereas t$e eWON t'es wit$ a sin#le /AN ort

(21;16 or !1;160 need to &e connected wit$ a crossed cable(sin#le ,/60 or aneternal switc((multile ,/60.

2. 9nd of 9t$ernet link confi#uration.



30/45

,/6 software main# confi#uration 6$ater .

/. ", software mappin confiuration

1. -$is confi#uration $as to &e done on a ,6 $ostin# t$e ,/6 software t$at will &e used forremote access (H6,


31/45

. ,/6 software main# confi#uration

. 6lick on t$eAdd New&utton to add t$e ", address on w$ic$ t$e ,/6 can &e reac$ed in t$etation ,a((in&ta&le. -$is will differ deendin# on t$e connection used &etween t$e ,/6

and t$e eWON. Serial /ink4 9nter t$e /AN ", address of t$e eWON.

"n our e@amle 182.1%5.;.3

9t$ernet /ink4 9nter t$e ", address of t$e ,/6."n our e@amles+ resecti7el' 182.1%5.;.%1 (/o#i@!


32/45

,/6 remote access 6$ater 5.

+. ", remote access

1. First esta&lis$ t$e remote connection to t$e eWON as e@lained inSte %of t$e eWONconfi#uration art.

2. Once t$e -alk2* ,N tunnel towards t$e eWON is esta&lis$ed &' e6atc$er+ start RS/o#i@.

3. "n RS/o#i@ select< W%o Acti*e 6o Online (RS/o#i@;;0+ or< W%o Acti*e(RS/o#i@;;;0

!. "n t$e tree select t$e ", address< of t$e eWON (for serial connection0+ or< of t$e ,/6 itself (for 9t$ernet connection0and click on t$e< OG &utton (RS/o#i@;;0< )o Online &utton (RS/o#i@;;;0



33/45

5. ,/6 remote access

. Allow enou#$ time for t$e connection to actuall' take lace+ eseciall' w$en usin# amodem connection since t$e t$rou#$ut ma' &e relati7el' slow.

%. As soon as t$e connection is workin#+ it aears in t$e status &ar of RS/o#i@.

. Jou can now work in remote ro#rammin# mode.Once 'ou finis$ed 'our work wit$ RS/o#i@4< )o Offline and close< -erminate t$e remote connection to t$e eWON e@lained in Ste of t$e eWONconfi#uration art.

5. 9nd of ,/6 remote access.



34/45

-rou&les$ootin# 6$ater 8.

. Troubles(ootin

.1 annot reac( serial ",B"f 'ou cannot reac$ t$e serial ,/6 connected to t$e eWON t$en 7erif' t$e followin#4

6$eck serial di switc$ ositionsof t$e eWON (all OFF for RS2320.

6$eck "OSer7er confi#uration in eWON a#e(F1 and rotocol settin#s0

Oen t$e eWON 97ent /o# 7,ain ,enu8 )ia&nostic+ '*ent 9o&:to c$eck forerror messa#es.

"n RS/in@ c$eck if t$e correct ", address $as &een confi#ured4 Jou must useeit$er t$e eWON /AN ", address or t$e eWON ,N ", address.

-o 7erif' if t$e eWON serial ort and t$e eWON "OSer7er is correctl' confi#ured 'oucan create a -a# inside t$e eWON w$ic$ will oll a re#ister on t$e ,/6. "f t$e ollin#succeeds+ t$is indicates t$at t$e serial F1 connection is workin# correctl'.

.2 annot reac( >t(ernet ",B

-o &e a&le to reac$ t$e 9t$ernet ,/6+ t$e followin# conditions must &e fulfilled4

Re&oot t$e ,/6 after ", address and>or #atewa' c$an#e.

6$eck t$at t$e network /9 are li#$tin# at &ot$ ends. "f t$e' aren?t+ it means t$ere

is an issue wit$ t$e 9t$ernet ca&le(s0. "f 'ou use an eWON $a7in# a sin#le9t$ernet /AN ort (no inte#rated switc$0+ t$en 'ou $a7e to use eit$er a crossed9t$ernet ca&le (oint!


35/45

8. -rou&les$ootin#

-$e eWON etail window will oen4

Here 'ou will find t$e different information 'ou entered earlier. -$e Remote

Network is secified under t$e Remote connection section.

-o c$an#e t$e Remote 6onnection settin#s+ click on t$e 9dit &utton on t$e to oft$e a#e.

Once t$e modification is finis$ed+ click on t$e Sa7e &utton w$ic$ is disla'ed ont$e to of t$e window w$en in edit mode. After t$e c$an#e 'ou would t$en $a7e tosa7e and )isconnectand Connectt$e ,N &rid#e to t$e eWON for -alk2* totake t$e modification into account.

-$e remote ,/6 network must &e in a different ran#e t$an t$e coman' networkon w$ic$ 'our ,6 is connected (see K .1 Ste 14 Settin# ", address of eWON/AN0.



36/45

Aendi@ 1 Secifics for *odem connections 6$ater 1;.

10. ppendi 1 5pecifics for 6odem connections

10.1 7eneral

-$e &asic confi#uration rinciles remain t$e same e@cet for t'ical modem settin#s.Allow enou#$ time for tasks to &e e@ecuted w$en 'ou use a modem link.

"n t$e followin# e@lanations+ we took t$e most current e@amle of ),RS>9d#emodem. 9@traolatin# to ot$er modem tec$nolo#ies is rat$er strai#$t forward.

Onl' t$ose stes t$at are different from t$e /AN>WAN connection are addressed.

10.2 onfiurin t(e e)O* for %nternet connection ;5tep 2=

1. "n t$e "nternet confi#uration wiBard of t$e eWON+ select ,odem Connectionotion and+ deendin# on t$e modem installed in t$e eWON+ t$e interface askst$e user to fill out t$e different arameters of t$e rele7ant modem. Fill out t$edifferent fields (,"N code+ A,N and user name>assword0 accordin# t$ose 'ourecei7ed from 'our Ser7ice ,ro7ider. For most Ser7ice ,ro7iders+ Lser Name and,assword can &e left emt'. 6lick Ne#t.

2. 6onfi#ure $ow t$e eWON s$ould #o online+ and click Ne#t.



37/45

1;. Aendi@ 1 Secifics for *odem connections

3. "n most cases+ it will &e Tri&&ered by out&oin& actions. -$is otion is needed to&e a&le to use t$e Wake9d#e line0.

!. 6onfi#ure 'our online time arameters+ and click Ne#t

"n most cases+ 'ou can lea7e t$e default arameters.

-$e ,a# out&oin& call durationis set &' default to %; minutes. -$e eWON willdro t$e -alk2* connection after 1 $our. "f 'ou need lon#er connection times+

enter a $i#$er 7alue or set it to ; for no limit.

=' default+ t$e !dle time before %an&in& u(is set to 12; seconds. Jou can lea7et$is 7alue as is. "n fact+ it is not a useful arameter for a -alk2* connection&ecause a ,N life &it is eriodicall' e@c$an#ed re7entin# connectioninterrutions due to idle times.

. 9nd of Ste 2 in Aendi@ 1.



38/45


10.3 reatin t(e e)O* in your Tal26 account ;5tep 3=

1. "n t$e creation rocess of t$e eWON in 'our -alk2* account+ t$e sole additional

stes are4< secif'in# t$e connection t'e (in our e@amle ),RS>9d#e0< enterin# t$e $one num&er (includin# ;;A=+ A= &ein# t$e countr' code0

2. 9nd of Ste 3 in Aendi@ 1.

10.4 onnectin t(e e)O* remotely ;5tep &=

1. "f 'ou use an eWON ),RS+ t$en 'ou ro&a&l' confi#ured t$e eWON not to sta'connected all t$e time to t$e -alk2* ser7er. =efore &ein# a&le to connect to t$eeWON o7er -alk2* 'ou will first need to wake


39/45


2. -alk2* sends an S*S (te@t messa#e0 to t$e eWON to ask t$e eWON to start its"nternet connection and to connect to t$e -alk2* ser7er. -$is can take u tose7eral minutes do not interfere until t$is rocess is comleted.

Note4 Jou do not necessaril' need -alk2* to send t$e wake


40/45

Aendi@ 2 eWON as )atewa' in ,/6 6$ater 11.

11. ppendi 2 e)O* as 7ateway in ",

"f+ for an' reason+ t$e "luAn'outefunction is not workin# in 'our confi#uration+ t$en

'ou will need to disa&le t$e ,lu#?nRoute feature in t$e eWON and confi#ure manuall't$e eWON /AN ", address as default )atewa' in t$e confi#uration of t$e ,/6.

3. -o disa&le t$e ,lu#?nRoute function+ connect to t$e eWON we& site and click onConfi&uration+ ystem etu(from t$e ,ain ,enu. Na7i#ate furt$er toCommunication8 Networkin& Confi&8 Routin&and t$e screen &elow s$ould &edisla'ed4

Select NAT and T$ disabled form t$e dro


41/45

11. Aendi@ 2 eWON as )atewa' in ,/6

"f 'ou are workin# wit$ a ,/6 of t$e /o#i@


42/45


43/45

Aendi@ 3 Securit' asects 6$ater 12.

12. ppendi 3 5ecurity aspects

12.1 ,oin securityA #ood securit' ractice consists in modif'in# t$e lo#in and assword of t$e defaultsuer user adm>adm (t$is default suer user cannot &e deleted0. *odif'in# t$e defaultsuer user is done &' clickin# on Confi&uration8sers etu(&utton on t$e mainmenu of t$e eWON we& a#e.

12.2 Traffic security

Since t$e eWON firmware 7ersion %.2s1 (see note0+ w$en t$e -alk2* wiBard ise@ecuted+ t$e WAN Securit' settin# is set automaticall' to )iscard all traffic

e#ce(ted "N and initiated traffic. -$is is re7entin# t$ird art' traffic to interactwit$ 'our ri7ate traffic.

"f+ for an' reason+ 'our eWON runs an earlier firmware 7ersion (not recommended0OR t$at 'ou want to c$eck t$e WAN rotection status+ 'ou can do it usin# t$efollowin# at$4 Confi&uration8 ystem etu(8 Communication8 Networkin&Confi&8 ecurity.

6$eck t$at t$e )iscard all traffic e#ce(ted "N and initiated trafficc$eck9)9 connection. T(is type of access definitely requiresprotection. "f t$e eWON is confi#ured to use its second 9t$ernet "nterface to #o outon t$e "nternet+ t$en t$e WAN connection is t$e 9t$ernet WAN ort t$at uses t$ecoman' infrastructure and &enefits from t$e "- rotections in lace. Hence+ t$is t'eof access is less e@osed to securit' issues.

*ote=-$e c$an#es alied on t$is a#e will onl' &e effecti7e from t$e ne@t WANconnection. So from t$e ne@t ),RS connection+ or after an eWON re&oot if 'ou uset$e 2nd9t$ernet ort of t$e eWON for t$e "nternet connection.



44/45


45/45

Re7ision $istor'

Re*ision9e*el )ate )escri(tion

1.; 2!>;3>1; First issue

2.; 22>;!>11 *aCor udate reformulation+ new document or#aniBation

2.1 ;1>;%>11 Automated ", confi# reco#nition (e6atc$er>-alk2* art0

2.2 23>;%>11 ,lu#?nRoute imact < c$an#ed %.3 artl' mo7ed to Aendi@ 2+ 8.3mo7ed to Aendi@ 2. 6osmetic corrections.

i Allen

Date post:	04-Jun-2018
Category:	Documents
Upload:	quantumautomation
View:	227 times
Download:	0 times

AUG-035-0-EN-(Remote Access for Allen Bradley PLCs)

Documents