NAT 1:1 on Flexy not working
Trying to get NAT 1:1 setup using Tim B's great setup guide and not having luck.
I'm trying to access both a Siemens PLC and an Automation Direct C-more HMI behing the Flexy via the Wan side.
I can access the PLC and HMI remotely just fine thru the cloud, but my customer's maintenance people want to get there also thru their plant WAN.
I have followed Tim's guide exactly and can't get it to work at all.
The Flexy's Wan port is on a static address 192.168.40.1. It's Lan ports are at 10.16.61.1.
The Siemens S7 PLC is on the Lan side as 10.16.61.10 and the HMI is 10.16.61.20.
I have Allow all traffic on Wan button checked.
I have Wan IP forwarding box checked.
I have Nat on Lan (Plug'n Route selected), and enable transparent forwarding checked.
I have Nat 1:1 on Wan mapping selected.
My Nat routes are:
Lan 192.168.40.10 mapped to 10.16.61.10 (PLC) and
Lan 192.168.40.20 mapped to 10.16.61.20 (HMI)
On the Wan side with my laptop (with laptop set to a 192.168.40.x subnet address, I can ping 192.168.40.1 (Ewon Wan IP) just fine, but I canot ping either 192.168.40.10 or 192.168.40.20, nor can I initiate a browser or other connection to either.
If I put the Laptop on the Lan side, I can do either and hit the devices just fine.
Seems my NAT is not routing thru the Ewon.
Oh, and FWRDtoWAN=1, WANITFPROT=2, NATITF=3 were already set when I looked in the tabular section.
Any ideas?
-
You need to disable NAT on LAN (Plug n Route) and set it to NAT on WAN. This is the same as setting NATItf=2. Reboot and it should work fine.
0 -
Also, keep in mind that after changing that setting, you will need to make sure that all of your LAN devices have the default gateway set to be the LAN address of the Flexy.
0 -
I am sorry, I misunderstood that. Please disregard my previous posts. Is there a phone number we can reach you at and then take a look with Teamviewer?
0 -
If I do this, do I then have to setup the Ewon as a gateway on both the PLC's and HMI's IP configurations?
0 -
Which device and firmware are you running?
0 -
Tried that and still nothing.
0 -
Flexy 205 Firmware 13.2S1
Any configs or logs I can upload?
I can be reached by a cell phone and we can do a team viewer also but dont want to post it in a public forum if this isnt a private convo.
0 -
Flexy 205 V13.2S1
0 -
We remove any personal info before approving any post and we can also make it a private thread.
0 -
I have teamviewer installed on my laptop.
0 -
Ready whenever you are. I have teamviewer on my laptop.
0 -
Hey Dave,
Sorry for the delay. Did you ever send me a backup of this device? I have been able to duplicate the issue with another Flexy this week, but have 2 other devices with the same firmware where it works, so I'm trying to figure out what the link is. If you can make a backup with support files and reply with it attached, it will be securely sent to me.
Kyle
0 -
Yes you downloaded a backup via teamviewer when you were connected. If you have lost it I can probably find it on my laptop on Monday.
0 -
Hi Dave,
I'm unable to locate the backup so if you could send me a new one that would be great.
Please make sure to check "Include Support Files" in eBuddy.
Thanks,
Kyle
0 -
Here's the backup attached.
Let me know what you think.
Dave Ewaldz
Project Engineer
Martin Automatic Inc.
MOVED TO STAFF NOTE (180 KB)
0 -
Please try switching the addresses. Your LAN address should be NAT11In1 and the WAN Address should be NAT11Out1.
0 -
That's how they were.
My company Wan is IP subnet 192.168.40.x
My machine Lan is 10.16.61.x
I tried swapping them as you suggest and no luck.
Two questions:
1.) Does NAT 1:1 pass pings to/from Wan to Lan?
2.) What ports should be passed automatically thru the NAT- all, or just port 80? Siemens PLC's use tcp port 102 for connections.
I tried using the Networking Proxy feature to reach my HMI and PLC as described in KB-0149-00 "Reach your PLC via the eWON proxy feature" and of course that works,
but we don't really want to do it this way as it is clumsy.
BTW- I put an A-B 1783-NATR in instead of the Ewon and things work just fine, so I know my devices and LAN/WAN work right if the NAT router does.
My customer would really like to get this playing with existing Ewon's without having to buy an extra $1000 router.
0 -
Hi Dave,
For some reason I thought you had them backwards.
NAT 1:1 will pass pings and all other traffic. That's why it's easier than using a proxy (or at least it should be). This should be working. I've set it up on a few different devices over the last few days and it's worked, I only had problems with one Flexy 201 with a FLX3101 card, but it set up easy on the 205.
You are using the 205, right? Just using the 4 built in ports?
Kyle
0 -
Flexy 205.
No, using expansion card for WAN port.
All 4 internal ports are LAN only.
Try a different firmware?
Wipe and start from scratch?
0 -
I'm starting to think this may be an issue with the WAN port expansion card. Do you want to try it without with card?
I would try that first and if that doesn't work we can factory reset it.
0 -
Sure.
Will try and get back to you.
0 -
So I removed the card and defined one of the builtin ports as WAN port.
It made me re-add to the cloud which I did.
Now, NAT on Lan (Plug'n Route) when I check this and click update, and then click something else and the come back I find NAT and TF disabled.
It will not stay checked.
In the tabular section, NATItf keeps resetting to 0 no matter what!
I beginning to think 13.2S1 firmware is horribly bug ridden.
0 -
Dave,
Check the value of "RTEnIpFwrd' and make sure it's set to "1'. If it's set to "0' it might be causing that issue.
Kyle
0 -
Yep, that was it.
Is there a checkbox somewhere that controls that parameter?
And the best news is that it is NATing now!
Apparently you have a NAT bug when used with the FLX3101 WAN card.
0 -
Thank you for your patience with this Dave. I'm glad it's working now! I'm going to escalate the issue to see if we can get to the bottom of it and get this fixed. I will let you know when find out more information.
Kyle
0 -
Any news?
Our customer is bugging us for a date to get this resolved.
This is a major Fortune 1000 customer who has a new plant with a bunch of our machines and Ewons, so it is getting a little awkward.
Right now our only option is to swap out 4 slot Flexys for the new 2 slot Flexys, but obviously that a lot of money for us to do that.
Any idea of a timeline for a fix?
0 -
Hi Dave,
I completely understand your frustration on this. I do have a ticket open with the eWON developers and will follow up with them today. I will get back to you with an update as soon as I speak to them.
Kyle
0 -
Thanks!
0 -
Hi Dave,
The developers said this issue only effects the Flexy 205 so if you are having an issue with a 201 please check the settings. I think we've discussed most of them already, but also make sure NATItfProt is set to 2. If you still have problems please send me a backup w/support files.
Thank you,
Kyle
0 -
We don't have an NATItfProt
We have a NAT11Itf and is indeed =2
Do you mean WANItfProt?
We have NatItf and it =3
Please advise
0
Por favor, entrar para comentar.
Comentários
32 comentários