Hi,
I’ve figured it out both by TAP and TUN RMS VPN hubs.
Here’s my config for tap tunnel (Note that i had to change the tap+ interface broadcast address from 0.0.0.0 to 192.168.1.255):
For TUN tunnel:
using those configs i can connect to a Bacnet Device Simulator from SCADA thats running in local network thats connected to eth0.1
But i can’t connect to a siemens PXC100-E-D using the BACnet Router package. Only way is to use the udp broadcast relay package with command udp-broadcast-relay 1 47808 eth0.1 tap+
Using Wireshark i was able to find out that the packets are properly distribiuted by bmmd over vpn but the pxc doesn’t respond.
I’ve also installed YABE on a local network and i can see the PXC but the who-Is packets are diffrent
Packet from teltonika(example shown here is over bbmd, when using only bacnet router function the source network address is one configured in bip, for example for my config of TAP vpn the source network address would show 2):
Packet from locally installed YABE:
I suspect that’s something to do with the fact that in case of PXC100.E-D the “who-is” request is answered over the BBMD back to the requester. You can see better explantion here : Siemens SiePortal There’s a pdf at the bottom called VPN_connection.
Regarding the interface not showing in web ui problem :
The web ui doesn’t show tap+ and tun interfaces that are created for the purpose of vpn connections, and are visible through ifconfig or ip a on the teltonika:
After all this i would like to say that the openvpn tunnels are up and running, i was using them to connect to a VM on the local network with RDP for the whole time i was testing
Will the BACnet package support older devices that can’t send unicast messages directly to sender? Or is there a configuration to resolve this ?