How to access the remote connected devices from the Anybus Defender OpenVPN network

This article describes the different ways to connect your industrial devices remotely using the Anybus Defender OpenVPN Server and the Ewon devices.

With routing you can access the remote devices (= devices connected to the Ewon LAN network) directly using their LAN IP address.

To do so, first make sure the Plug&Route or NAT on LAN is enabled in the Ewon device : 

(In an Ewon Cosy, go to Storage > Tabular Edition > Edit COM cfg and set the parameter "NatItf" to  3.)

Then add a route to the computer: 

• Open a cmd prompt in Administrator mode
• Type "Route add <Network Address of Ewon LAN> mask <Network mask of Ewon LAN> <Ewon VPN IP address>"
• In the top drawing, the needed command would be : "route add 192.168.120.0 mask 255.255.255.0 192.168.200.200"

These routes can be added manually via the command prompt or a batch (.BAT) file, or they can be automatically pushed to the computer by the OpenVPN server during the VPN connection process.

When using bridge mode, the routes can be added to the Defender, and any computer accessing devices on the Defender's LAN only needs to set its gateway to the Defender's LAN IP address.  Also make sure you disable all the other IP interfaces on the computer.

Using Port Forwarding

TBD

Using Tag publishing

TBD

ADDITIONAL INFO

• If you want to grant the Defender LAN network a transparent access to the VPN network of your Anybus Defender (eFive use case), please refer to the following article : 
  Configuring the Anybus Defender to bridge LAN traffic to the VPN network
• If you want to assign VPN Static IP addresses to your VPN clients, refer to this article :
  How to assign static IP addresses to the VPN Clients connected to the Anybus Defender