Question

Hi,

I have a RUT240 wich uses a SIM Card from 1nce.com to connect to the Internet.

I have a PLC Siemens S7 1200 connected to the RUTs LAN port, wich I want to access from my PC.

1nce are offering a free openVPN Service to connect to their Network. In that Network each SIM Card has a fixed IP adress.

1nce VPN Dokumentation

I am able to connect to that network using a openVPN client on my PC. Once connected I can ping the WAN IP shown by my RUT240 however I am not able to reach the Webinterface of the RUT nor can I ping my PC from the CLI.

After that I tried to use a VPN directly on the RUT in addition to the provider VPN so my connection looks somethong like this:

PC -> openVPN to 1nce.com -> L2TP/IPSec -> RUT240.

With that configuration I was able to reach the RUTs Webinterface.

But what I didn't get working was connecting to the PLC connected to the LAN Port of the RUT240 I don't know what to put into the routing table or the firewall settings of the RUT so make that connection work.

can someone please help me?

Answer 1

Hello,

As i understand everything worked fine after you configured PC -> openVPN to 1nce.com -> L2TP/IPSec -> RUT240.

Now only PLC part is remaining . Right ?

You want to access this PLC remotely as you are accessing the Rut240 device now ? Right 

May i know what port is this PLC using and what is the protocol supported by this ? 

If its using http(s) you can simply do port forwarding on the IP that is assigned by Rut240 device to PLC. 

Further for the port forwarding you may refer to https://wiki.teltonika-networks.com/view/RUT240_Firewall#New_Port_Forward_Rule.

After creating port forward rule you can simply access the PLC with Rut240 WAN IP : Port number of PLC. For E.g ( 217.xx.xx.xx:8081) 217.xx.xx.xx is the WAN IP of the RUt240 and 8081 is port of PLC. 

Note : Please use correct IP(that is assigned to PLC by RUT240) and port for PLC in RUT240 to make port forwarding work. 

Please correct me if i understand wrong.

Have a good day. 

Regards,

Ahmed

Comments

Hi,

Thank you that did work.

The PLC is using Port 80 for http, Port 443 vor https and Port 102 for the programming software TIA.

I forwarded them to 8081 for http, 8443 for https and 102 for TIA and it does work and I don't even need the L2TP/IPSec VPN to the Router, only 3 Port forwardings.

But I am not able to reach the Webinterface of the RUT that way even with the rules for that already applied.

I've attached some Screenshots of my config, do I miss something here?

---

Hello,

Could you try reflashing the device firmware ?

Please try to uncheck keep settings while reflashing the firmware.

Latest firmware could be downloaded here:

https://wiki.teltonika-networks.com/view/RUT240_Firmware_Downloads

Might be some misconfigurations are causing the issue. Also remote http access is enabled in the device.

So, better to re-flash the firmware and reconfigure because you configured VPN before.

Thanks

---

Hi,

I've reflashed the device firmware and deleted all the settings.

After that I've made a new setup without VPN, just the port forwardings and the Remote http/https setting in management.

But I still can't access the WebUI from WAN.

The PLC works fine.

---

Hello,

Is it possible if you can draw a network diagram with IP addresses and ports used by all the devices . For me to understand more clearer that where is the issue ?

You can use draw.io for drawing a topology.

Thanks

---

Hi,

here is a ruff Network Diagramm.

as I said I can access the PLC now flawlessly the only thing that is not working is the remote access of the WebUI of the RUT

---

Hello,

Did you enabled remote http access of device after firmware upgrade in Administration ?

Also could you please also write ports used by devices ?

Thanks

---

Hello,

Yes I reenabled the remote access after the reset.

RUT Web UI IP Adress 192.168.1.1

http LAN: 80 WAN: 80

https LAN:443 WAN: 443

The PLC IP Adress 192.168.1.231

http LAN: 80 WAN: 8081

https LAN: 443 WAN: 8443

TAI LAN: 102 WAN: 102

---

Hello,

Router port and PLC port both are 80. And this is not going to work like this. Could you try changing any of them to different ?

Because both the devices cannot use the same port at the same time.

Thanks.