Skip to Content

SiePortal

The integrated platform for your product selection, buying and support workflow - bringing together Industry Mall and Online Support.

SiePortalDeutsch

Search

Home
Support Support
{{(apiData.Support | filter:{'rank':1}:true)[0].title}} Support
- Menu temporary not available
- Menu temporary not available
- Menue temporary not available
- {{item.title}}

Products & Services
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
Support Support
{{(apiData.Support | filter:{'rank':1}:true)[0].title}} Support
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
MySiePortal MySiePortal
{{(apiData.MySiePortal | filter:{'rank':1}:true)[0].title}} MySiePortal
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
Cart ({{apiData.CartCount}})

Navigation

Accessing S7-1200 From different subnet

Created by: ariespamuji at: 5/28/2019 8:12 AM (6 Replies)

Rating (1)

Thanks 0

7 Entries

5/28/2019 8:12 AM	Rate (0)
ariespamuji Member Joined: 1/4/2019 Last visit: 9/22/2023 Posts: 3 Rating: (0)	I have S7 in remote area with IP 192.168.20.5/27, connected to mikrotik router with IP 192.168.20.1/27. My office with network 192.168.10.0/24 with mikrotik router 192.168.10.1 Both mikrotik connected using OpenVPN. PC in office and remote area are all connected. Both can ping each other, but PC in my office can't ping and access S7. Only PC in remote area can ping and access S7. Is there any missing configuration in here as for network all fine except PC in office can't access S7?

Suggestion To thank Quote Answer

5/28/2019 8:23 AM	Rate (1)
Towome Platinum Expert Joined: 7/9/2015 Last visit: 3/21/2025 Posts: 4204 Rating: (624)	Hello, have you ever tried to ping the CPU? Possibly. are blocked by router ports - check if port 102 is enabled. Which ports are used by the various services for data transfer via TCP and UDP and what should you watch out for when using routers and firewalls? Greetings, Towome
	If my post was useful, please rate me - if not, please tell me - thank you!
Suggestion To thank Quote Answer

5/28/2019 9:50 AM	Rate (0)
ariespamuji Member Joined: 1/4/2019 Last visit: 9/22/2023 Posts: 3 Rating: (0)	Hello, The router is not bloking any port. ping other PC in remote area same with PLC subnet is fine from my office Pinging 192.168.20.17 with 32 bytes of data: Reply from 192.168.20.17: bytes=32 time=114ms TTL=126 Reply from 192.168.20.17: bytes=32 time=111ms TTL=126 Reply from 192.168.20.17: bytes=32 time=111ms TTL=126 Reply from 192.168.20.17: bytes=32 time=111ms TTL=126 Ping to CPU is RTO from my office Pinging 192.168.20.5 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Request timed out. But from same subnet in remote are can ping each other. Ping from PC to S7 Pinging 192.168.20.5 with 32 bytes of data: Reply from 192.168.20.5: bytes=32 time=1ms TTL=30 Reply from 192.168.20.5: bytes=32 time=1ms TTL=30 Reply from 192.168.20.5: bytes=32 time=2ms TTL=30 Reply from 192.168.20.5: bytes=32 time=1ms TTL=30 Is there any firewall setting in S7 that only allow connection from same subnet so connection from other subnet is not allowed?

Suggestion To thank Quote Answer

5/28/2019 10:58 AM	Rate (0)
Hati Platinum Member Joined: 9/21/2012 Last visit: 3/23/2025 Posts: 4344 Rating: (489)	Is your subnet mask configured how? How wide the accessable IP area is? With subnet mask you can define that.

Suggestion To thank Quote Answer

5/28/2019 11:23 AM	Rate (0)
ariespamuji Member Joined: 1/4/2019 Last visit: 9/22/2023 Posts: 3 Rating: (0)	This is IP configuration in remote area : Network 192.168.20.0/27 Subnet 255.255.255.224 or 27 Ip range 192.168.20.1-192.168.20.30 Mikrotik IP 192.168.20.1 PLC 192.168.20.5 My office Network 192.168.10.0/24 Subnet 255.255.255.0 or 24 IP range 192.168.10.1-192.168.10.254 Mikrotik IP 192.168.10.1 Both mikrotik connected using OpenVPN. Mikrotik office as server openvpn and mikrotik remote area as client openvpn. As I mention before, network configuration is fine as PC in each subnet can ping each other. PC in office can ping PC in remote area and vice versa Network configuration is fine. The problem is, PLC only accessable from same subnet in remote area. Can't be accesable from office from different subnet. Just only the PLC. If the network configuration not working, PC in our office and PC in remote area should not be able to access each other.

Suggestion To thank Quote Answer

5/28/2019 6:31 PM	Rate (0)
Hati Platinum Member Joined: 9/21/2012 Last visit: 3/23/2025 Posts: 4344 Rating: (489)	What is the PLC's IP configuration? From the attached picture, you can get the idea how the subnet mask should be setup. Attachment Subnet Mask config.jpg (181 Downloads)

Suggestion To thank Quote Answer

6/11/2019 3:37 PM	Rate (0)
Murof Platinum Member Joined: 8/3/2009 Last visit: 3/21/2025 Posts: 15056 Rating: (1870)	Hello If you work with VPN then you have also a router (or more than one) in your topology. Did you configure the router/Gateway IP in the Configuration of your remote PC and your PLC? Bye Murof
	If this Information really helps, you could use the Rate function
Suggestion To thank Quote Answer

|

Share this page:

Share this page on...

Follow us on