×
Siemens Industry Online Support
Siemens AG
Entry type: FAQ Entry ID: 25620574, Entry date: 03/22/2011
(0)
Rate

What are the options for using the TS Adapter IE as standard router?

  • Entry
  • Associated product(s)

Instructions
There are many options available for using the TS Adapter IE. This often depends on the configuration. Some options for configuring the TS Adapter are given for the following topics below:
 

No. Topics
1 Sample application for using the TS Adapter IE as standard router (Internet)
2 Sample application for using the TS Adapter IE as standard router (company network/intranet)
3 Sample application for teleservicing with the TS Adapter IE
4 What is a standard gateway?
5 What is IP Masquerading (NAPT)?
  1. Sample application for using the TS Adapter IE as standard router (Internet)
    If the TS Adapter IE is used as "Standard Router", it can access various different Internet Service Providers. In this application case the TS Adapter IE IP package routes between the Internet (public IP address) and the LAN (private IP addresses). If a connection is to be set up from the TS Adapter IE to an Internet Service Provider, it is absolutely necessary that the IP Masquerading (NAPT) function is activated. (See the topic "What is IP Masquerading (NAPT)")

    Note on the modem interface of the TS Adapter IE:
    Regardless of the type of application (standard router, teleservicing or both) you have parameterized for the TS Adapter IE, it cannot be used for both functions simultaneously as long as an incoming or outgoing modem connection is physically established.


    Fig. 01
No. Parameterization of the TS Adapter IE
1 Open the parameterization interface of the TS Adapter IE by directly entering the IP address of the TS Adapter IE in your browser or via the TeleService software ("Options > Administer TS Adapter IE…"). Log on in the parameterization interface (default user: Administrator; default password: admin).
2 Open the dialog "Parameters > Outgoing calls" and select the parameter "if necessary" for "Connection". Specify the access data of an Internet Service Providers (ISP) via which the TS Adapter IE is supposed to be connected to the Internet, e.g. Calling number "01920782", User "arcor", Password "internet". Contact the provider concerned in each case for information about the costs involved. Then save the settings.


Fig. 02

3 Open the dialog "Security > Outgoing calls > General" and activate the following options (recommended settings):
  • "IP Masquerading (NAPT)": Active
  • Firewall: Active
  • Allow the following exceptions: "Internet protocols"


Fig. 03

4 Open the dialog "Security > Outgoing calls > Internet protocols" and activate the services that you wish to reach in the Internet, e.g. HTTP to be able to call websites. For this you open the "Internet protocols" tab.


Fig. 04

Result:
After successful configuration the TS Adapter IE supports access to the Internet.

Parameterization of the PC
 

No.  Parameterization taking the example of Win XP Professional
1 Open the Control Panel via "Start > Settings > Control Panel".
2 Double-click on "Network Connections".
3 Double-click on the network connection via which your PG/PC is connected with the TS Adapter IE. The "Status of..." window then opens.


Fig. 05

4 Click the "Properties" button.
5 In the "This connection uses the following elements" list you mark the element "Internet Protocol (TCP/IP)" and then open the properties by clicking on the "Properties" button.
6 Enable the option field "Use the following IP address".
7 Enter the IP address of the network card of your PG/PC. The IP address must be in the same network as the IP address of the TS Adapter IE.


Fig. 06

8 Enter the same "Subnet mask" that you assigned to the TS Adapter IE.
9 In "Standard gateway" you enter the IP address that you assigned to the TS Adapter IE.
10 Activate the option field "Use the following DNS server addresses" and for "Preferred DNS server" you also enter the IP address of the TS Adapter IE.
11 Close all the opened windows with "OK" or "Close".

Note:
You must configure you browser so that it does not use any proxy server. Check this in your Internet Explorer as follows.
 

No. Configuration of the Internet Explorer
1 Open the menu "Tools > Internet options".
2 Select the "Connections" tab and the LAN settings via the "Settings" button.
3 Deactivate all the options check boxes.


Fig. 07

4 Now acknowledge all the windows with "OK".
  1. Sample application for using the TS Adapter IE as standard router (company network/intranet)
    Instead of dialing in via an Internet Service Provider, you can use a connection to a dial-in computer in the company network. For this the TS Adapter IE requires just on IP address from the company network.


    Fig. 08
     
  2. Sample application for teleservicing with the TS Adapter IE
    Another application case is the use of the TS Adapter IE for teleservicing. The service PC dials into the TS Adapter IE and from the TS Adapter IE receives an IP address from the plant network (= private IP address).


    Fig. 09
     
  3. What is a standard gateway (default gateway / default route)?
    There are routing entries in the firmware for each IP network that is available via the TS Adapter IE. The packages are forwarded according to their IP address and the routing table. If a package does not have an entry in the routing table, it is forwarded to the standard gateway. If a standard gateway is not to be used, then you must enter the IP address of the TS Adapter IE. In this case the package is discarded.

    Exception:
    Using the TS Adapter IE as standard router. In this application case all the IP packages not designated for the LAN are sent via the dial-up connection (modem, ISDN). A parameterized default gateway will be ignored.
     
  4. What is IP Masquerading (NAPT)?
    The firewall security can be increased by activating IP masquerading. IP Masquerading is a special form of NAT in which the IP address and port (NAPT) of a sent package are replaced by the router. The TS Adapter IE receives the client queries from the automation network and forwards them to the server services in the Internet with the public IP address of the TS Adapter IE. Externally only the TS Adapter IE is visible in the Internet, the automation network behind it remains hidden. With IP masquerading on the TS Adapter IE can be accessed from the Internet. The sender port in the WAN is changed to a random port greater than 1023. An application case for IP masquerading is shown in the sample network illustrated below. IP addresses 192.168.1.x/24 are assigned in the automation network. The TS Adapter IE receives the IP address 205.1.1.2 upon dial-in to the Internet Service Provider (ISP).


Fig. 10

Example of an IP masquerading substitution table
The following tables are substitution tables for http requests from "PC 2" and "PC 10" to an http server in the Internet. Based on the "Target IP port number", the router (TS Adapter IE) forwards the package to the computer that initiated the request. The router creates a masquerading table for this.

Outgoing packages (connection setup)
 

Source IP : Port Target IP : Port NAPT Source IP : Port Target IP : Port
192.168.1.10:5000 205.1.1.88:80 -> 205.1.1.2:7000 205.1.1.88:80
192.168.1.2:5000 205.1.1.88:80 -> 205.1.1.2:7001 205.1.1.88:80

Incoming packages (reply from server)
 

Source IP : Port Target IP : Port NAPT Source IP : Port Target IP : Port
205.1.1.88:80 205.1.1.2:7000 -> 205.1.1.88:80 192.168.1.10:5000
205.1.1.88:80 205.1.1.2:7001 -> 205.1.1.88:80 192.168.1.2:5000
 

Security information
In order to protect technical infrastructures, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art IT security concept. Siemens’ products and solutions constitute one element of such a concept. For more information about cyber security, please visit
https://www.siemens.com/cybersecurity#Ouraspiration.