Skip to Content

Register Login

Industry Online Support

Technical Forum

Navigation

VPN Network

Created by: tootall at: 1/23/2008 2:39 PM (13 Replies)

Rating (0)

Thanks 0

Result pages:: |; 1 | 2; |

14 Entries

Entries per page: 10 | all

1/23/2008 2:39 PM	Rate (0)
tootall Posts: 6 Rating: (0)	I have a S7 315 2DP (CPU)linked via a CP 343-1 (Part No 6GK7 343-1EX21-0XE0) to an etherenet switch which in turn is linked to an MP270 HMI unit running smartclient. The customers IT departmenthas set up there network opened all the ports so I can connect via the network in our office network. I can connected to this customers network and ping both the PLC and HMI on there IP addresses, and using the Siemens smartclient software I can remotley control the HMI unit fine. The PLC again I can ping but when Itry to go online using Step 7 Simatic ManagerNo joy!!.I have asked the cutomer to confirm that port 102 is open. which I am assured it is. I am using the windows XPVPN application which does connect fine. I have set the PC/PG interface of the Step 7 software for this network but the error meaasge is that the the connection partneris not responding asif no network is notestablished. I am stuck between a rock and a hard place as I can not think of what to try next, looking on other forums the problems encountered with VPN and not of this case. Any advice would be appricated. Ta Tootall
tootall Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

1/24/2008 9:36 PM	Rate (0)
Late Platinum Expert Joined: 1/7/2006 Last visit: 12/23/2024 Posts: 2705 Rating: (320)	Hi, I think that I know what your problem is...... STEP7 couldn't go outside when it not have a proper VPN-tunnel between the place from where you are to the factory where the S7 is. So you need to go from a Private address <--> Public address <--> Public Address <--> Private address, so you need NAT routing to for example a SCALANCE S that routes it back into your Private network. On the PC site on your own Private network, you could use Security Client to built up a VPN-tunnel to the Scalance S612 on the Factory network. There is a example in Applications and Tools....
	I hope that the answer will help, if you have still questions, don't hesitate to ask me. All the best, Late Never say never, think in solutions, not in trouble......
Suggestion To thank Quote Answer

1/25/2008 12:11 AM	Rate (0)
J_Bell Posts: 5822 Rating: (412)	Hello, I am not sure... are you really sure that you use the MS VPN Client Software? If so.... I think it should work... if you have access to the Secured Network. I wonder, how does the Networking look like, if you check the Connection with trace route... do you see the Gateways? As far as I see it right now ... if you use MS VPN Client it has to work... I have seen it myself. Please verify once more that you have the Port 102 available on the Secured Network... this is the main reason for the system not to work. Best regards J_Bell
J_Bell Posts: 5822 Rating: (412)
Suggestion To thank Quote Answer

4/7/2008 12:10 PM	Rate (0)
PCS Posts: 9 Rating: (0)	Hello Tootall, How did you fix your problem? Our application is almost the same. Best regards, PCS
PCS Posts: 9 Rating: (0)
Suggestion To thank Quote Answer

4/7/2008 12:43 PM	Rate (0)
tootall Posts: 6 Rating: (0)	Hi PCS, I did finally get a connection with the PLC, the Gateway address I assigned at the start of the job had changed when installed on site and so did not match, putting this address in the connection details of the local connection solved the PLC connection problem. The connection to the HMI i.e. remote downloads was not achievable with the unit on site but when simulating the test with Siemens tech. supports VPN network it worked first time. An important note is that ports 2308 and 50523 must be open at both ends for this to work. Please see the link below for information on ports and there usage, it might help. Good luck!! https://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=24534065&caller=view
tootall Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

4/7/2008 1:42 PM	Rate (0)
PCS Posts: 9 Rating: (0)	Hello Tootall, If I understand you correct you made a connection without using a TS Adapter? You made an VPN connection with one off the devices and you can reach also the other devices. You can go online with the PLC and start smartclient. You opened port 102, 2308 and 50523. Don’t you have to open port 5800 and 5900? PCS
PCS Posts: 9 Rating: (0)
Suggestion To thank Quote Answer

4/7/2008 3:02 PM	Rate (0)
tootall Posts: 6 Rating: (0)	Hi PCS, The VPN network is a connection without a TS adaptor. This works via an Ethernet connection direct into a Ethernet switch or Hub then linked to the PLC & HMI. The VPN network meant that all the connections PLC and HMI are on the same VPN link i.e. PLC IP address= 137.62.30.1 and HMI IP address 137.62.30.2 the only problem I still have is downloading to the HMI and I can only put this down to the customers network ports not all been open as the test I did to Siemens tech. office worked fine on the first attempt. I don’t know if ports 5800 and 5900 must be open as we opened all ports. One other thing I was told to check and that was is it a true VPN network. Again please see attached link for more info. Hope this helps. https://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=19865167&caller=view
tootall Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

4/10/2008 3:54 PM	Rate (0)
PCS Posts: 9 Rating: (0)	Hello Tootall, To make a VPN connection you need a IP address to connect with. Did you made a connection with the PLC or HMI? Because it is not possible to make a connection with a switch because they don’t have an IP address. Correct me if I’m wrong
PCS Posts: 9 Rating: (0)
Suggestion To thank Quote Answer

4/10/2008 5:17 PM	Rate (0)
J_Bell Posts: 5822 Rating: (412)	Dear PCS, a VPN Connection could be done by a SCALANCE S unit or any Networking device that supports VPN, just like some Routers. Switches are not able to handle VPNs because they only transfer the information but do not handle it. Even so, some Switches have IP Addresses, if they are capable of being SNMP Devices. Best regards J_Bell
J_Bell Posts: 5822 Rating: (412)
Suggestion To thank Quote Answer

4/10/2008 5:31 PM	Rate (0)
tootall Posts: 6 Rating: (0)	The short answer is YES an IP address needs to be assigned. Please see the attached for the example that applied to my installation. Hope it helps. Ta Attachment vpn example.pdf (650 Downloads)
tootall Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

|

Share this page:

Share this page on...

Follow us on