Direct access to data of a PLC behind the router

Hello,
the data of the PLC of a pump station should be connected to a SCADA server. I have already done the setup of the sim card. It is possible to ping from the SCADA server to the router (172.29.195.13), but everything in the network behind the router (PLC) is not accessible for me. What settings do I need to make in the router so that I can directly access the data from the PLC?

Skizze

Hello,

Thanks for your query,

Could you please give more information on whether the Scada server is connected to the RUT360 in a private network since from the topology you are able to access the RUT360 using a private IP through the internet? Also, confirm if you are using any VPN service in the interconnection between the server and the RUT360.

Secondly, you did mention that you are able to get a reply from the ping test from the server to the router, this can be that you are getting a reply from a device in the internal network. I would recommend that you enable remote access on the router from System>Administration>Access control, enable remote HTTP and try to access the router from a computer that is connected to the same network as the SCADA server.

If you just want to reach the PLC you can also set up port forwarding and this redirects the packets from the Router to the PLC allowing you access to the PLC. More information on how to set that up is here RUT360 Firewall - Teltonika Networks Wiki. Another option is using the Bridge mode which and by enabling it will allow you to reach the PLC via the router’s WAN Ip but this will disable most of the router’s features and the PLC will be exposed to the WAN network. More information on how to set that up is here Mobile Bridge mode troubleshooting - Teltonika Networks Wiki (teltonika-networks.com)

Best regards,

Kennedy .K

Hello,

the router is connected to the server with a VPN from Marcant.
I have enabled the HTTP remote connection. When I enter the IP (172.29.195.13) in the browser, no connection to the router is established.
I have set up the port forwarding according to the wiki. Unfortunately I cannot reach the PLC yet.

Hello,

Thanks for your query,

Could please confirm that after implementing the bridge mode in the RUT360 there was no success? Another suggestion is implementing the passthrough mode that is less restrictive, to set that up you will start by ensuring no failover is enabled, secondly ensure that the LAN has DHCP enabled, navigate to Network → Interfaces → Interfaces:MOB1S1A1, and choose passthrough through mode where you will use the mac address of the device that the IP is to be assigned and finally you will have to reboot the device for changed to take effect.

Can you also confirm that the reverse ping is possible in that you can reach the server from the RUT360? You could try reaching any device that is connected to the same network as the Scada server. You could also try port forwarding and confirm if you can be able to reach the PLC device while in the network that SCADA server is connected. Here is an example of how to set that up RUT955 Firewall - Teltonika Networks Wiki. If you are not successful, please attach a screenshot after setting up the port forwarding rule to confirm that the rule is set up correctly.

If none of this work, I would suggest contacting the VPN service provider (Mercant) to verify that there are no setting or policies set that restricts access to the local network of the device and if so if that could be extended to the devices behind the router.

Best regards,

Kennedy .K

This topic was automatically closed after 15 days. New replies are no longer allowed.