Hi everyone,

I am new to the Industrial Edge topic. I have just setup the IEM and have onboarded the IED (IPC 427E). IEM and IED are at the same location and are locally connected in the same subnet.

Now I have to move the IED to other location. Is it possible to setup IED - IEM connection over the internet?

Is it the "proxy setting", that serves the purpose mentioned above?

Any suggestion, hint is highly appreciated!

thank you!

Hi,

what you are having set up right now is a PoC (proof of concept) environment which is only for local use. The proxy settings will not change that.

In order to connect an IED to the IEM via Internet you need a different approach where you need to involve your IT department and host the IEM centrally with all security or VPN matters that come attached with this.

A simpler and faster way to achieve your desired scenario would be to order the IEM Cloud, which is a no-headache IEM in the cloud as a service solution. The IED will only need an outgoing connection from its location and you are good to go.

I hope this gives a little bit of insight about the complexity of your project and discuss possible solutions with the responsible people. 

In case you need further project support you can contact your local Siemens representative.

Dear Berle_C,

thank you for the advice. I am indeed implementing a Proof of Concept. I have no doubt that the IEM Cloud would work fine.

However all I have at hand right now are just the virtual IEM and the IED (IPC 427E).

How about aVPN tunnel between the IEM and the IED. A VPN tunnel would serve as a single subnet?!

Best Regards

Hi,

yes, you could set up a connection with a VPN, e.g. our Sinema Remote Connect and Scalance Hardware. For this to work the IED has to be in a different subnet with the appropriate gateway configured and the VPN Device will route the connection to the IEM. Be aware: IEM IP adress should never be changed. IED IP can be changed at any time.

Basically you need two VPN Routers, one at the IEM location and one at the IED location. Then configure the VPN Routers via the VPN Server to allow connections between these two subnets/devices. If you are not familiar with this or dont have VPN Server at hand, this can be quite a challenge. 

Alternatively if you only move the IED within the company it would be much easier to install the IEM on a server or connect your IEM in bridged mode with static IP adress to the company network. Then the IED and IEM can communicate within the company network. Usually this has to be supported by the IT department as there are a few network configurations in the company network to be carried out for this to work properly.