Improving Remote Access for Modicon M340 PLCs and Telemecanique XBTG HMIs

Question:

Seeking advice on remotely accessing control systems at various customer sites around the world, particularly using Modicon M340 PLCs and Telemecanique XBTG HMIs. Currently, we utilize modem/routers in control boxes connected to PLCs and HMIs via unmanaged switches. Each device is assigned a unique IP address by our company, with customers receiving a specific range of IP addresses. However, relying on dedicated phone lines for connection can be slow and unreliable, hindering troubleshooting and updates. An alternative option involves providing customers with a computer pre-loaded with necessary programming software, connected to both their network for internet access and the equipment network. Yet, this approach may entail managing software upgrades and resolving potential PC issues. Open to any other suggestions or recommendations for improving remote access capabilities. Thank you for your input.

Top Replies

There is a wide range of options available, and I am confident that others will also provide their input. One effective solution that I have come across is the e*W*O*N device. To access their website, simply remove the asterisks from the link: http://www.ewon.biz/en/ewon-2005cd-4005cd.html?ewp=4. This device requires internet access and establishes a connection using OpenVPN to a server in the US. By establishing a separate connection on your computer, the system seamlessly links the two ends of the network together, providing you with remote access to your machine. You can utilize any type of internet connection, such as DSL, leased line, or mobile 3G. With permission from your client, you can even use their internet connection by making sure that Port 1194 or Port 443 is open on their outgoing firewall.

I have experience working with these efficient and user-friendly devices. They utilize 3G communication, eliminating the need for an IT department. Additionally, they can support both 3G and MPI connections simultaneously. These devices also offer extra features such as SMS alarming. Regarding alternative options, ComboBryanG suggested considering eWON devices. These devices require internet access and use OpenVPN to establish a connection to a US-based system. Through a separate connection on your computer, the system connects the two ends of the network, providing access to your device. Internet access can be achieved through various means such as DSL, leased line, or mobile 3G. With permission from your customer, their site's internet connection can also be utilized with ease by ensuring Port 1194 or Port 443 are open on their outgoing firewall. For more information, visit: http://www.ewon.biz/en/ewon-2005cd-4005cd.html.

Thank you, BryanG and Combo, for sharing this promising information. Aside from the alarm functions, serial port, and advanced features, can a regular router also be used to connect to a PLC over the internet? Do routers have the ability to communicate with both the external internet and the static network of equipment?

We frequently utilize the SonicWall TZ series for various networking needs. The cost for each unit can be less than 500 depending on the specific features required. By using this firewall, you can establish a VPN connection into the plc network, whether through an air card or the company's network. It is important to note that the IT department will need to be more involved with setting up the SonicWall compared to other options. Another alternative is the Tofino firewall, specifically designed for control systems and also offers VPN functionality. This firewall can be DIN rail mounted and is highly regarded. Setting up a VLAN for the equipment network through the corporate firewall with minimal scanning, and placing a router/firewall on that VLAN is recommended. This ensures that WAN traffic from different machine vendors is routed to their respective networks, providing a secure setup for each vendor's equipment. This approach is commonly implemented by company IT departments to maintain network security and efficiency.

Can routers communicate both with the internet and a device's static network? To connect to a PLC remotely, you can utilize a program like eCatcher. This program allows you to access a list of registered machines on an account, giving you the ability to connect to a machine and access its LAN as if you were physically present. Through this connection, the machine can also access the internet based on your e*W*O*N settings. You can make changes, set alarms, view logs, and more on the e*W*O*N device within the machine LAN. However, the router may not function as a DHCP server or DNS forwarder, requiring static IP addresses and DNS servers to be set manually. To simplify this process, using a public DNS provider like OpenDNS with fixed public IP addresses can be beneficial. If you encounter any issues, the recommended course of action is to contact the vendor you purchased the e*W*O*N from for expert support.

Have you considered setting up a VPN (Virtual Private Network) for your remote access requirements? A VPN can be setup to securely connect to your customer sites from anywhere in the world via the internet, not relying on dedicated phone lines. Additionally, it gives you the ability to remotely access and manage every device, including your Modicon M340 PLCs and Telemecanique XBTG HMIs, on the network as if you were locally present. You would also be able to perform programming software updates, troubleshooting, and maintenance without having to provide customers with a pre-loaded computer. There are numerous industrial VPN solutions available that are specifically designed to function with PLCs and HMIs, which could be worth looking into.

Have you considered using a virtual private network (VPN)? They're typically more reliable than dedicated phone lines and negate the need to manage hardware at the customer's site. VPNs securely tunnel data across the internet ensuring privacy and safety. Coupled with a solid remote type software (like TeamViewer) or an OPC server that supports remote connection, you can freely access the PLCs and HMIs within the VPN, just like being on-site. Of course, keep in mind that for this solution to work, your customer's network has to support VPNs, and consulting with your network admin regarding this would be a good move.

More Replies →

Streamline Your Asset Management
See How Oxmaint Works!!

✅   Work Order Management

✅   Asset Tracking

✅   Preventive Maintenance

✅   Inspection Report

We have received your information. We will share Schedule Demo details on your Mail Id.

To add a comment, please sign in or register if you haven't already..   

Frequently Asked Questions (FAQ)

FAQ: 1. How can remote access be improved for Modicon M340 PLCs and Telemecanique XBTG HMIs?

Answer: - Consider utilizing VPN solutions for secure and reliable remote access, enabling faster troubleshooting and updates without relying on dedicated phone lines.

FAQ: 2. What are the drawbacks of using modem/routers and unmanaged switches for remote access?

Answer: - Reliance on dedicated phone lines can lead to slow and unreliable connections, hindering efficient troubleshooting and updates.

FAQ: 3. Is providing customers with a pre-loaded computer a viable solution for remote access?

Answer: - While it can be an option, managing software upgrades and potential PC issues may add complexity to the process.

FAQ: 4. Are there any other recommendations for improving remote access capabilities for control systems?

Answer: - Explore alternative remote access solutions like cloud-based platforms or remote monitoring services to enhance connectivity and efficiency.

Ready to Simplify Maintenance?

Join hundreds of satisfied customers who have transformed their maintenance processes.
Sign up today and start optimizing your workflow.

Request Demo  â†’