“talk2m free+” remote-access connectivity solution for ... · steps 1 and 2 must be completed...

M.A.C. Solutions

“Talk2M Free+” Remote-Access Connectivity Solution

for eWON devices

Getting started & User Guide

of 54 mac-solutions.co.uk DSH : v13 Oct 2014

INTRODUCTION ....................................................................................................................... 3

HARDWARE AND SOFTWARE REQUIREMENTS .................................................................. 5

1. CREATING YOUR TALK2MFREE+ ACCOUNT................................................................... 8

2. LOGGING INTO YOUR TALK2MFREE+ ACCOUNT ......................................................... 10

3. ADDING AN EWON TO YOUR TALK2MFREE+ ACCOUNT .............................................. 11

5. CONFIGURING THE EWON’S INTERNET CONNECTION ............................................... 15

6. CONFIGURING THE EWON’S TALK2MFREE+ CONNECTION ....................................... 24

7. MODIFYING THE EWON CONNECTION SETTINGS, DURING INSTALLATION. ............ 27

8. VERIFYING THE EWON’S TALK2MFREE+ CONNECTION, DURING / AFTER INSTALLATION ....................................................................................................................... 33

9. UTILISING THE TALK2MFREE+ REMOTE-ACCESS CONNECTION, TO YOUR EWON 34

11. REACHING ETHERNET DEVICES, BEHIND THE EWON .............................................. 37

APPENDIX A. USING ECATCHER THROUGH A PROXY SERVER ..................................... 39

APPENDIX B. TALK2MCONNECTIONCHECKER ERRORS, CAUSED BY SECURITY ISSUES ON THE CUSTOMER’S NETWORK ......................................................................... 41

APPENDIX C. INSTALLATION CHECKLIST FOR INTERNET CONNECTION: EWON MODELS 2005CD / 4005CD / FLEXY ..................................................................................... 47

APPENDIX D. INSTALLATION CHECKLIST FOR INTERNET CONNECTION : EWON MODELS 2104CD / 4104CD ................................................................................................... 49

APPENDIX E. INSTALLATION CHECKLIST FOR INTERNET CONNECTION : EWON MODELS 2101CD / 4101CD ................................................................................................... 51

APPENDIX F. PORTS AND IP ADDRESSES USED BY THE TALK2MFREE+ SERVICE AND TALK2MPRO SERVICE .......................................................................................................... 53

of 54 t: +44 (0)1527 529774 | w: mac-solutions.net DSH: v13 Oct 2014

Introduction

Purpose: This document describes how to configure and use a remote-access connection to your eWON, using the Talk2M Free+ connectivity service.

Pre-requisites:

This document is not a substitute for a sound understanding of the basics of networking. The eWON is a networking product. To configure and install an eWON, a user needs to have a sound understanding of the basic principles of networking. These fundamental principles are not specific to an eWON device. They are relevant to any network product, from any networking vendor, anywhere in the world. This knowledge includes (but is not limited to) the following:-

• IP addresses

• Subnet Mask

• the purpose and functions of the Gateway address

• how to use the ‘PING’ and ‘ipconfig’ instructions in Windows

• how to change IP settings in Windows

• the functions of a DNS server

• how to change DNS server in Windows

• the differences between Class A, Class B & Class C networks

• the difference between TCP & UDP

• the functions of common network devices (switches, hubs & routers)

• the differences between Static and Dynamic (DHCP) addressing

• a basic understanding of the principles of a VPN The steps required to set up a successful “eWON + Talk2MFree+” remote-access connection are shown on the next page.


Steps 1 and 2 must be completed in order to use the Talk2MFree+ Service.

1. Create your Free+ account on Talk2M. This step is only required once, when you begin to use the Talk2M Free+ service, for the first time.

2. Log into your Free+ account. This step is required whenever you need to add/edit an eWON or connect to a remote site.

------------------------- Steps 3 to 6 must be completed BEFORE an eWON is installed, at the remote site.

3. Add an eWON to your Free+ account. 4. Obtain the eWON activation Key 5. Configure the Internet connection on your eWON. 6. Configure the Talk2M connection on your eWON.

The above 4 steps are required for each new eWON.

------------------------- Steps 7 to 8 are completed at the remote site, during installation.

7. Modify the Internet connection settings, of the eWON, to suit the remote site 8. Verify the eWON connection to Talk2MFree+, from the remote site

------------------------- Step 9 connects the User with the remote site, through the Talk2M Free+ service.

9. Utilise the remote connection to your eWON This step is required to communicate with a remote site.


Hardware and software requirements

Hardware requirements In order to follow this guide you will need:

• 1 eWON with VPN capabilities. eWON 2005CD/4005CD which has 4 x LAN Ethernet ports, plus a WAN Ethernet interface

eWON 2104/4104CD which has 4 x LAN Ethernet ports, plus an integrated ADSL modem

eWON 2101CD/4101CD which has a LAN port, plus an integrated 3G/GSM/EDGEmodem


eWON Flexy 101/201 which has 4 x LAN Ethernet ports, plus 4 extension card slots

eWON Flexy 102/202 which has 1 x LAN Ethernet and Serial ports , plus 4 extension card slots

eWON Flexy 103/203 which has 1 x LAN Ethernet and MPI ports, plus 4 extension card slots

Note: For available extension cards please visit the Product section of www.ewon.biz.


Software requirements These software tools can be downloaded from the Support section of www.ewon.biz

eWON managment software: eBuddy eBuddy is used to discover an eWONs on a network, set its IP addresses, upgrade the firmware and create/restore a Backup of the eWON configuration.

eWON configuration software: The eWON is configured through its web server interface. All you need is a standard Web Browser e.g. I.E, Firefox, Opera or Chrome.

Talk2M VPN Client software : eCatcher v4 eCatcher V4.3.0 or higher must be installed on your PC, to establish the remote connection through the Talk2M system.

Talk2M Connectvity Checker software This software is used to check the suitability and operation of an Internet connection, at the final, installation, remote site. It can be downloaded from http://ftp.ewon.biz/software/eCatcherpro/Talk2MConnectionChecker.exe

eWON Firmware Version To be able to follow this guide your eWON CD needs a firmware version 7.0s0 or higher and version 8.0s0 or higher for eWON Flexy. The best way to upgrade your eWON's firmware is to use the eBuddy software.

Before configuring each eWON device, download the latest version of firmware from the Internet, to your PC, using the ‘Update eBuddy’ option, in the eBuddy software.


1. Creating your Talk2MFree+ account

Before you can use the Talk2M Free+ service, for remote access to machines or systems, you will need to install the eCatcher software (version 4.3.0 or later) on your PC. Connect your PC to the Internet. Then download the eCatcher software from the Support section of the eWON website .www.ewon.biz. Launch eCatcher: you will see the screen below, after installation.

Click on the "Create a Free+ account" link and enter the required values, as shown below.


Enter the Account name you want to create and specify the User name, Password and Email address for your account. Typically, the Account name is the name of your company. To check whether the Account name you wish to use is available, use the "check availability" link. By default, "admin" is configured as the user name of the first created user account. (it is possible to change this ‘admin’ name, if you wish). This first User is the administrator for the account and creates all subsequent User names. (The Free+ service allows you to create multiple users under the same account.) Once all the fields are entered click on Next. The next window will allow you to enter detailed information about your company.

Once you are finished, click on the Create button to create your account. A message indicating that your account was successfully created will be displayed. Note: In order to complete your account creation, you have to activate it. The activation procedure is sent to the email address you entered. Please check your emails.


2. Logging into your Talk2MFree+ account

Once your Talk2M Free+ account has been created, you may log in to your account. Launch the eCatcher software and specify the Username, Password and your Talk2M Account. Select the Login button. (Directly after creating your Account, the login information will already be filled in automatically) Selecting ‘Remember me’ will cause these values to be remembered, each time eCatcher is launched.

The main interface of Talk2M Service will be displayed, as below:

Here you can manage all Users and eWONs to your account (Add, Delete, Edit, etc.)


3. Adding an eWON to your Talk2MFree+ account

.Here, you are declaring the details of a machine, or site, which will be connected via Talk2MFree+, and where you will install an eWON device. (At this stage, your eWON unit is not yet configured.) On the left side of the eCatcher interface, click on the eWONs button (default view).

To add a new eWON to your account, click on the + icon in the My eWONs list section, as below:

The following window will appear:

The eWON name and Description on the Talk2M server should be meaningful, in order to allow a User to uniquely identify the specific remote site/machine. (These can be edited at any time)


The Connection Type specifies how your eWON will be connected to the Talk2M server, across the Internet: EWON 2005CD / 4005CD models Choose “Connection Type = Permanent (LAN / ADSL / 3G)”

-------------------------- EWON 2104CD / 4104CD models Choose “Connection Type = Permanent (LAN / ADSL / 3G)”

-------------------------- EWON 2101CD / 4101CD models

• An eWON 2101CD/4101CD has 1 LAN Ethernet ports, plus an integrated cellular 3G/GSM/EDGE modem.

------------------------

EWON Flexy All models • All eWON Flexy models have extension ports and potentially all three different modems can be

installed. ------------------------

For 2101CD, 4101CD and Flexy with 3G GSM card, you have 2 options, depending upon the type of SIM card. (For details on these modems, please see the support pages of www.ewon.biz). 1) ‘Mobile Broadband” contract SIM cards’

The best data-SIMs to use is a fixed-cost, ‘Mobile Broadband’ tariff.

These come with a large allocation of data (e.g. 3GB ) at a flat-rate, fixed, monthly fee and can have a permanent connection to the Internet. For this type of SIM, choose “Connection Type = Permanent (LAN / ADSL / 3G)”. 2) ‘Pay per MB” contract SIM cards’

Only use these for countries where fixed-cost, ‘Mobile Broadband’ tariffs are not available, where it is necessary to use a data-SIM are on a ‘’pay per MB’ tariff. With this type of SIM, cost depends upon the data-usage. So it is best not to leave the eWON ‘always-on’ connected to Talk2M. For this type of SIM, choose “Connection Type = Triggered (GPRS / EDGE / 3G)”. If you specify a Triggered (GPRS / EDGE / 3G) connection, then you will be asked to specify the phone number. With an eWON that is not ‘Always-on’, the User needs to send a ‘Wake-Up SMS’ message, to force the eWON to create a VPN connection to the Talk2MFree+ Server. (Details of this process can be seen on the support pages of www.ewon.biz).


After specifying the connection type, click on Next.

Here you can enter additional information concerning your remote connection. Custom Fields provide a way of categorizing remote sites and / or Talk2M users. E.g. by machine type, by PLC type, by country, by region, etc. The Custom Fields are easily set-up in the Talk2M account, in the ‘Account’ area. Click on Create to add the eWON to the eWON list of your Talk2M account. The Talk2M Connectivity page opens:


When an eWON device is added to a Talk2MFree+ account, an unique set of VPN security keys and certificates are generated by Talk2MFree+ server, for that eWON. The Talk2M system is very secure. So the VPN security keys and certificates are sophisticated and complex. Obviously, the eWON needs to ‘know’ these unique VPN security keys and certificates, in order to make a successful, secure connection, to the Talk2M Free+ server. To simplify the process of linking an eWON with the Talk2M Server, eWON have created a user-friendly method, by which the Talk2MFree+ server can configure the VPN keys and certificates, into an eWON, using an unique eWON “Activation Code”. Under the Configure via Activation Key section you will find the Activation Key needed for the eWON. Click on the Copy to Clipboard icon to copy the activation key into the clipboard of your PC. Note: The activation Key method is the recommended method and is most widely used method. However, you will see that also 2 other configuration methods:

• Configure via eWON Name: During the eWON Talk2M wizard, instead of using the Activation Key you can also specify the eWON Name and use the user name and password of your Free+ account.

• Configure via SMS: If your eWON has a GSM modem and if the eWON is already configured for Internet connection, then you can also send an SMS to the eWON containing the activation key. When eWON receives the SMS, it will then trigger automatically the Talk2M connection wizard and will configure itself to connect to the Talk2M server.

Click Back to eWON list. The new eWON is now displayed in My eWONs list section in the central part of the window.


5. Configuring the eWON’s Internet connection

Next, the eWON needs to be configured to connect to the Internet. Disconnect your PC from the Internet and connect your PC to any LAN port of the eWON. The LAN ports of the eWON are where machine devices (e.g. PLC, HMI, servo, etc) are connected, as illustrated below, using a 2005CD / 4005CD eWON model. Flexy models with different WAN extension cards and eWON Cosy will emulate the same behavior as the diagram below.

Device name LAN IP address Subnet mask Gateway eWON 192.168.100.254 255.255.255.0 n/a

PLC 192.168.100.1 255.255.255.0 192.168.100.254 (IP of eWON)

HMI 192.168.100.2 255.255.255.0 192.168.100.254 (IP of eWON)

Inverter drive 192.168.100.3 255.255.255.0 192.168.100.254 (IP of eWON)

Programming laptop 192.168.100.4 255.255.255.0 192.168.100.254 (IP of eWON)

etc…..

Note: The IP addresses in the above table are only for reference and not a requirement. These network settings are configured into each device (e.g. PLC, HMI, servo, etc), using the appropriate device configuration software.

WAN Connection

WAN connection

LAN connections


IMPORTANT:- The eWON functions as a VPN Router. Therefore the IP address used on the WAN port of the eWON must be in a different network range from the IP addresses used on the LAN ports of the eWON. E.g. If the LAN port = 192.168.100.xxx, then the WAN IP cannot = 192.168.100.xxx Note: If you are configuring an eWON for the first time, we strongly suggest that you read the brief document, "Quick Start Guide for eWON", which has been shipped with your eWON. This document shows step by step instructions, to change the IP address of the LAN port of the eWON.

---------------- Connect the machine devices (e.g. PLC, HMI, servo, etc) to any of the LAN ports of the eWON. Connect your PC to any of the LAN ports of the eWON. Set the eWON’s LAN IP address, using eBuddy, to suit the IP addresses to be used on the machine LAN. Please refer to eBuddy Manual for detailed explaination. Check that the PC can ‘PING’ the eWON and ‘PING’ the other devices on the eWON LAN. There are two ways to access eWON web-configuration pages:

1. Open a web browser and enter the assigned IP address for the eWON in the search bar. Sign into the web-configuration using the following default details:

Default Username = adm Default Password = adm

2. Using eBuddy’s list view double click on the eWON available to browse to the web-configuration pages. Use the same default details as above.

----------------

The easiest way to configure the Internet connection of your eWON is to use the Internet Connection wizard. To open the eWON wizard page, click on Configuration in the toolbar and click on the wizard icon in the right corner of the window.


http://wiki.ewon.biz/Support/01_Getting_Started

http://wiki.ewon.biz/Support/01_Getting_Started

http://wiki.ewon.biz/@api/deki/files/148/=eBuddy_UG_1_1_UK.pdf

The following page will be displayed:

Click on the icon next to Configure INTERNET Connection to launch the wizard. Following window will be displayed:

According to your eWON type you have, you will have the possibility to choose between different connections, depending upon the modem of the eWON, to which you are connected:-

• Modem Connection

• Ethernet WAN connection

• ADSL Modem


eWON 2005CD/ 4005CD / Flexy with Ethernet or WiFi WAN Modem

An eWON 2005CD/4005CD has 4 LAN Ethernet ports, plus a WAN Ethernet interface for its connection to the Internet. For a eWON Flexy use Ethernet or WiFi WAN extension card with any Flexy model.

You will need the following information, before you can configure the WAN port settings:

o IP address o Subnet mask o Gateway address o DNS address 1 o DNS address 2

During the Wizard, you should:

• Choose ‘Ethernet WAN connection’, as the Network Connection to use.

• Select “Test online address” checkbox, at the end of the Wizard.

• Click “Test”. Please also see appaendix C, for an Installation Checklist NOTE 1: Initially, you should set up the eWON in your office / workshop / assembly area. So, these network settings will be settings related to your workshop Ethernet network. When the eWON is installed on site, these network settings will be related to the Ethernet network at the installation site (i.e the final customer’s network). NOTE 2: The IP address used on the WAN port must be in a different network range to the the IP addresses used on the LAN e.g. If the LAN port = 192.168.100.xxx, then the WAN IP must not = 192.168.100.xxx NOTE 3: It is generally advisable to use DHCP option for the Ethernet WAN Connection unless all the required fields are known.

Flexy Ethernet WAN Extension Card

Flexy WiFi WAN Extension Card


eWON 2104CD/ 4104CD / Flexy with PSTN Modem

An eWON 2104CD/4104CD has 4 LAN Ethernet ports, plus an integrated ADSL modem, for its connection to the Internet. For a eWON Flexy use PSTN extension card with any Flexy model.

You will need the following information, before you can configure the WAN port settings:-

o ADSL Username o ADSL Password o Protocol mode (usually = PPPoA VCMux in the UK) o VPI value (usually = 0 in the UK) o VCI value (usually = 38 in the UK) o ISP DNS address 1 o ISP DNS address 2

During the Wizard, you should:

• Choose “ADSL Modem”, as the Network Connection to use.

• Set the Internet Connection to “Maintain Connection”


• Click “Test”. Please also see appaendix D, for an Installation Checklist NOTE 1: Initially, you should set up the eWON in your office / workshop / assembly area. So, these ADSL settings will be settings related to your workshop ADSL line. When the eWON is installed on site, these ADSL settings will be related the ADSL line at the installation site (i.e the final customer’s site). NOTE 2: It is usual to select “Test online address”, during the Wizard, for the 2104CD / 4104CD / Flexy models.

Flexy PSTN Extension Card


eWON 2101CD/ 4101CD / Flexy with 3G/GSM Modem

An eWON 2101CD/4101CD has 1 LAN Ethernet ports, plus an integrated 3G/GSM/EDGE modem, for its connection to the Internet. For a eWON Flexy use 3G/GSM extension card with any Flexy model.

‘Mobile Broadband” contract SIM cards’

The best data-SIMs to use is a fixed-cost , ‘Mobile Broadband’ tariff.

These come with a large allocation of data (e.g. 3GB ) at a flat-rate, fixed, monthly fee and can have a permanent connection to the Internet. You will need the following information from your cellular SIM provider, before you can configure the WAN port settings:-

o Username o Password o Access Point Name o SIM PIN (normally not used)

The above values vary, with each cellular provider. During the Wizard, you should:

• Choose ‘Modem Connection’, as the Network Connection to use.

• Set the Internet Connection to “Maintain Connection”, (if using a SIM, with a fixed-cost , ‘Mobile Broadband’ tariff)

• Suppress the time-out figures, so that the eWON never drops it’s connection to the Internet (e.g. through inactivity).

o Idle time before hang-up = 9999 sec o Max call duration = 0 mins (value = 0 suppresses this setting)


• Click “Test”.

Flexy 3G/GSM Extension Card


Please also see appendix E, for an Installation Checklist Here are values that have been proven to work, from the major UK cellular providers.

Contract Data SIM Provider APN Username Password

O2 Contract Data-only SIM mobile.o2.co.uk mobileweb password

Vodafone Contract Data-only SIM internet web web

3 Data-only SIM three.co.uk <none / blank> <none / blank>

EE Contract Data-only SIM everywhere <none / blank> <none / blank>

NOTE 1: Initially, you should set up the eWON in your office / workshop / assembly area. So, these cellular settings will be settings related to the SIM card used in your workshop ADSL line. When the eWON is installed on site, these cellular settings will be related to the SIM card used at the installation site (i.e the final customer’s site). NOTE 2: Avoid Pay asYou Go SIMS It is not recommended to use ‘Pay-As-You-Go’ or ‘Pre-payment’ data SIM cards. These typically have certain technical restrictions (E.g. they are sometimes limited to be used only in branded USB dongles, from the cellular provider, and / or to be used in conjunction with branded software running on a laptop / PC) NOTE 3: Avoid Phone / Voice SIMS It is not recommended to use a phone (voice) SIM, which comes with a data-bundle (E.g. like the SIM used in a 3G smartphone). The running costs, of paying by data volume, can be prohibitive. NOTE 4: How to choose the best network to use, in the UK. It is recommended that you visit the OFCOM website, called ‘Sitefinder’, to decide which cellular network has best coverage / performance, in a particular installation location. http://www.sitefinder.ofcom.org.uk/


NOTE 5: When to use “Pay per MB”, contract SIM cards For countries where fixed-cost, ‘Mobile Broadband’ tariffs are not available, it is necessary to use a data-SIM are on a ‘’pay per MB’ tariff. With this type of SIM, cost depends upon the data-usage. For this type of SIM:

• Do not set the Internet Connection to “Maintain Connection”

• The User will need to send a ‘Wake-Up SMS’ message, to force the eWON to create a VPN connection to the Talk2MFree+ Server.

(For details of this process, please see the support pages of www.ewon.biz). NOTE 6: It is usual to select “Test online address”, during the Wizard, for the 2104CD / 4104CD / Flexy models.


According to the different model used, follow the steps, to complete the Internet connection wizard. Once the wizard has completed, eWON should display a message like in the screen shot displayed below:

The Internet Connection “tick” means that the eWON is correctly configured for an Internet connection. The Online IP Check “tick” means that the eWON was actually able to reach an IP address on Internet.

(NOTE: Sometimes online IP check fails. This may not be important, so continue to the next Wizard anyway). Detailed information of the use of the wizard can be found in following document: AUG-019-0-EN-(eWON Configuration for Internet Access Using the Wizard). http://support.ewon.biz/docs/Talk2M_Free.htm


http://support.ewon.biz/docs/Talk2M_Free.htm

6. Configuring the eWON’s Talk2MFree+ connection

Now that the eWON is configured to successfully make an Internet connection, you can launch the Talk2M connection wizard. This will configure the VPN settings inside the eWON to allow the remote connection using Talk2M services. To open the eWON wizard page, click on Configuration in the toolbar and click on the wizard icon in the right corner of the window.

The wizard window will open:

Click on the Talk2M wizard.


The following window will be displayed:

Click on Next to register the eWON on the Talk2M Free+ server. Specify to launch the Talk2M registration using the Activation Key. Click on the Register with Activation Key option and paste in the Activation Key, as copied in the previous section (Ctrl + V).

Then click on Next


Proxy Settings The next window of the wizard will ask you if you need to connect through a Proxy server.

Only check this option if you need to specify a Proxy server for the Internet connection. If a Proxy Server is used, there will be 4 values to enter:

o Proxy Server Address & Port Number o Proxy Username & Password

Otherwise leave this option unchecked and click on Next. The eWON will then connect to the Talk2M server, using its unique Activation Key and retrieve the VPN keys and certificates. Once this process is complete, the result will be displayed on the Wizard page as shown below.

Click on the Done button to close the wizard. Your eWON is now configured to connect to the Talk2M server.


7. Modifying the eWON connection settings, during installation.

The Internet Communications settings during testing (e.g. in your office workshop / assembly area) and on site, will normally be different. For example:

• The Internet settings for the LAN in your workshop will be different from the Internet settings on the customer’s site

• In your workshop, the data SIM card used in the eWON will be an O2 SIM card. At the site, the SIM card to be used will be a Vodafone SIM card

So at the time of installation, it is usually necessary to modify the Internet Communications settings for the eWON. Method 1: To make these modifications, you can re-run the eWON “Wizards” again. After you chose to re-run the “Internet Connection Wizard”, then it is highly recommended that you also re-run the Talk2M Connection Wizard. Method 2: Alternatively, if the modifications are small (e.g. just modified WAN port settings), it is often quicker and easier to directly edit the WAN settings, via the ‘System Set-up’ pages under the eWON’s Configuration tab. For example:

• To modify just the settings of an eWON’s WAN port, it is easy to edit the settings direct in the eWON’s Configuration pages, by navigating to….. System Setup >Communication >Network connections >Ethernet >Eth2-WAN

• For a WiFi WAN card navigate to …. System Setup > Communication > Networking > Internet >Connection > WIFI – WAN


eWON 2005CD/ 4005CD/ Flexy with Ethernet or WiFi WAN card

An eWON 2005CD/4005CD has 4 LAN Ethernet ports, plus a WAN Ethernet interface for its connection to the Internet. For a eWON Flexy use Ethernet or WiFI WAN extension card with any Flexy model.

The network settings for the WAN port will now need to be suitable for the Ethernet network at the installation site (i.e. the final customer’s network). You will need to obtain the following network information, from the end-customer, before you can configure the WAN port of the eWON:


Please also see appendix C, for an Installation Checklist You may also need the proxy Settings for the site, if a Proxy Server is used on the site:

o Proxy Server Address o Proxy Server Port o Proxy Username o Proxy Username

NOTE 1: The eWON functions as a VPN Router. The IP address used on the WAN port (customer’s network) must be in a different network range to the IP addresses used on the LAN (machine network) NOTE 2: The final customer will provide an Ethernet cable, to connect the WAN port of the eWON to the site-network. Before connecting this cable to the eWON’s WAN port, do the following:

• Connect the cable to the network port of a laptop (PC)

• Change the network settings of the network port to the same settings given to you, for the eWON (i.e. those mentioned above)

• Run the “Talk2MconnectionChecker” software

Flexy Ethernet WAN Extension Card

Flexy WiFi WAN Extension Card


The “Talk2MconnectionChecker” software is used to check that the network settings you have been given, by the end customer, are correct and that, using these settings, it is possible to reach the Talk2M server, through the customer’s network. The “Talk2MconnectionChecker” software can be downloaded from the support section of

www.ewon.biz If all is OK, then the software should give you a display like that shown below.

If all is OK, then the eWON can be given these network settings and should be able to reach the Talk2M server, through the customer’s network If any errors occur, then these errors are caused by security restrictions on the customer’s network. Red errors must be resolved, before the eWON can be connected. Orange warnings can be ignored. Please see Appendix B for details of these errors and what they mean.


eWON 2104CD/ 4104CD / Flexy with PSTN card

An eWON 2104CD/4104CD has 4 LAN Ethernet ports, plus an integrated ADSL modem, for its connection to the Internet. For a eWON Flexy use PSTN extension card with any Flexy model.

The ADSL settings will now need to be for the ADSL line at the installation site. You will need to obtain the following information, from the final end-customer (or provider of the ADSL line), before you can configure the Internet Connection:


Please also see appendix D, for an Installation Checklist

Flexy PSTN Extension Card


eWON 2101CD/ 4101CD / Flexy with 3G/GSM card

An eWON 2101CD/4101CD has 1 LAN Ethernet ports, plus an integrated 3G/GSM/EDGE modem, for connection to the Internet. For a eWON Flexy use 3G/GSM extension card with any Flexy model.

You will need to obtain the following information, regarding the cellular SIM card to be used in the eWON, at the final installation site, before you can configure the Internet Connection :-

o Access Point Name (APN) o APN Username o APN Password o SIM PIN (normally not used)

Please also see appendix E, for an Installation Checklist NOTE 1: These cellular settings will be related to the SIM card used at the installation site (i.e. the final customer’s site). NOTE 2: Avoid Pay as You Go SIMS It is not recommended to use ‘Pay-As-You-Go’ or ‘Pre-payment’ data SIM cards. These typically have certain technical restrictions (e.g. they are sometimes limited to be used only in branded USB dongles, from the cellular provider, and / or to be used in conjunction with branded software running on a laptop / PC) NOTE 3: Avoid Phone / Voice SIMS It is not recommended to use a phone (voice) SIM that comes with a data-bundle (E.g. like the SIM used in a 3G smartphone). The running costs, of paying by data volume, can be prohibitive. NOTE 4: How to choose the best network to use, in the UK. It is recommended that you visit the OFCOM website, called ‘Sitefinder’, to decide which cellular network has best coverage / performance, in a particular installation location. http://www.sitefinder.ofcom.org.uk/

Flexy 3G/GSM Extension Card


NOTE 5: When to use “Pay per MB”, contract SIM cards For countries where fixed-cost, ‘Mobile Broadband’ tariffs are not available, it is necessary to use a data-SIM are on a ‘’pay per MB’ tariff. With this type of SIM, cost depends upon the data-usage. For this type of SIM:

• Do not set the Internet Connection to “Maintain Connection”

• The User will need to send a ‘Wake-Up SMS’ message, to force the eWON to create a VPN connection to the Talk2MFree+ Server.

(For details of this process please see the support pages of www.ewon.biz).


8. Verifying the eWON’s Talk2MFree+ connection, during / after installation

When the Wizards have been successfully run on the final installation, it is possible to verify that the eWOn is successfully connected to the Talk2MFree+. The eWON will be given a VPN IP address, which can be seen by navigating to the Diagnostic pages in the eWON Main Menu > Diagnostic > Status > Status (bottom left corner)

The ‘VPN Allocated IP’ address is the address given to the eWON, by the Talk2MFree+ server. It will be a 10.8.xxx.xxx address.


9. Utilising the Talk2MFree+ remote-access connection, to your eWON

Now that the eWON is configured to connect to Talk2M, we can utilise the remote connection to the eWON.

Establish the remote connection Log into your eCatcher Free+ account and display the Device Window (default view).

Any eWON unit which have been correctly configured and are connected to the Internet should now be displayed as “Online”, with a green tick in the status column. This means that the eWON has established a VPN connection with the Talk2M server. In the eWON list, identify the eWON, to which you want to make a remote connection. To establish the remote connection using this eWON, double-click the online icon or select the eWON device from the list and click on the Connect button displayed in the eWON list menu.

eCatcher will now establish the VPN connection to the Talk2M server.


Once the VPN connection to the eWON is established, the eWON will be displayed in the "Active connection" section on the top of the window.

The PC is now connected to the eWON using the VPN tunnel. You can start to use the remote connection, e.g.

• Launch your programming software, associated with the site devices (e.g. PLC software)

• Display the eWON’s web-pages To display the eWON Web page, click on the eWON’s name link in the Active Connection section, as displayed in the following picture.

Your Web Browser should show up displaying the eWON Web pages using the VPN IP address of the eWON.


Terminate the remote connection Once you finished your remote connection, click on the disconnect button in the Active connection section. This will close the VPN connection with the eWON.


11. Reaching Ethernet devices, behind the eWON

Probably the primary purpose of using an eWON is to connect to some ‘target’ device(s), located behind the eWON, at the remote site. There are 2 methods to achieve this:

• Configure the IP address of the eWON as the Gateway IP in the target Ethernet device(s) (this is the preferred method, since it follows the standard rules of networking)

• Use the eWON ‘Plug-n-Route’ facility

Ethernet device configuration For new machines, it is good practice to configure all IP settings of the Ethernet devices behind the eWON:

• IP address

• Subnet mask

• Gateway address. For the eWON to act as the gateway for the network behind it, the devices on the network must know the IP address of the gateway. I.e. IP address of eWON = Gateway IP address configured in each network device

Plug’n Route Since eWON firmware version 6.2s0, the Plug'n Route function automatically routes the connected Ethernet devices. So no gateways IP is required on the Ethernet device behind the eWON. The Plug'n Route function is automatically activated when the Talk2M wizard is executed. You can enable / disable the Plug'n Route feature in the eWON setup page as shown below: Configuration> System Setup > Communication > Network Config > Routing


Manual configuration of Talk2M device settings The LAN IP address in the eWON and the LAN IP address, for the eWON, in the Talk2MFree+ server must match. Since firmware version 6.2s0, the eWONs LAN IP address is automatically transferred to the Talk2M Free+ server, when the eWON Talk2M wizard is run. If the LAN settings in the eWON change on site, you will need to manually change the settings, in the Talk2M Free+ server, using eCatcher. Select the eWON from the eWON list and click on the Properties button.

In the eWON Properties window, you will see the eWON Name, Description, Custom Fields, plus the eWON’s LAN (Remote Connection) settings. The IP address displayed here must correspond with the LAN IP address of your eWON on site.

To change the Remote Connection settings, click on the Modify button on the top of the page. Once the modification is finished, click on the OK button which is displayed on the bottom of the window when in edit mode.


Appendix A. Using eCatcher through a Proxy Server

If your computer connects to the Internet, through a Proxy server, you will need to enter the Proxy settings, in the eCatcher software. Before logging in, click on the Settings menu, displayed on the bottom of the eCatcher login window. As seen in the page below:

The following page will be displayed:

Click on the Modify... button on the right of the zone to edit the connection type.


Select for the Connection "TCP through proxy server" and enter your Proxy settings.

To save the settings, click on OK.


Appendix B. Talk2MconnectionChecker errors, caused by security issues on the customer’s network

The “Talk2MconnectionChecker” software is used to check that the network settings you have been given, by the end customer, are correct and that, using these settings, it is possible to reach the Talk2M server, through the customer’s network. The “Talk2MconnectionChecker” software can be downloaded from the support section of www.ewon.biz If any errors occur, then these errors are caused by security restrictions on the customer’s network. Red errors must be resolved, before the eWON can be connected. Orange warnings can (generally) be ignored. The ports used by an eWON, and the Talk2MconnectionChecker software, are:

• TCP port 443 Or

• TCP port 443 & UDP port 1194 These ports need to be open, in an outbound direction, through the customer’s network / firewall.

See Appendix F, for full details of ports and IP addresses used by the Talk2M Free+ solution. Please see the screen grabs on the following pages. These shows the effects upon a Talk2MconnectionChecker test, when various ports are blocked, in an outbound direction.

No ports are required to be open, in an inbound direction (I.e. from the Internet, to the network)


UDP 1194 = Open TCP port 443 = Open Errors = None Warnings = None Result = PASS. (Talk2M connection possible via UDP and/or TCP)


UDP 1194 = Closed TCP port 443 = Open Errors = UDP connection not possible Warnings = None Result = PASS. (Talk2M connection possible via TCP)

NOTE: UDP is blocked, but this will not stop a healthy Talk2M connection


UDP 1194 = Open TCP port 443 = Open PING (ICMP protocol) = Closed Errors = None Warnings = PING timeouts to Talk2M Servers Result = PASS. (Talk2M connection possible via UDP & TCP)

NOTE: PING packets do not get through, but this will not stop a healthy Talk2M connection


UDP 1194 = Closed TCP port 443 = Open PING (ICMP protocol) = Closed Errors = UDP connection not possible. Warnings = PING timeouts to Talk2M Servers Result = PASS. (Talk2M connection possible via TCP)

NOTE: UDP is blocked, but this will not stop a healthy Talk2M connection NOTE: PING packets do not get through, but this will not stop a healthy Talk2M connection


UDP 1194 = Open or Closed TCP port 443 = Closed Errors = TCP connection exception : Network is unreachable or = TCP connection exception : as.pro.talk2m.com Warnings = None Result = FAIL. (Talk2M connection not possible)

NOTE: TCP 443 is blocked. No Talk2M connection will be possible


Appendix C. Installation checklist for Internet connection: eWON models 2005CD / 4005CD / Flexy

eWON LAN settings The LAN ports of the eWON are where machine devices (e.g. PLC, HMI, servo, etc) are connected, as illustrated below, using a 2005CD / 4005CD eWON model. This same configuration can be reproduced using Flexy 201 with an Ethernet or WiFi WAN extension card or Flexy 202 / 203 with an Ethernet or WiFi WAN extension card and external Ethernet switch. Use the table below to plan and record the network settings of your LAN devices

Device name/ type LAN IP address Subnet mask Gateway eWON N / A

Installation laptop EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

WAN Connection

WAN connection

LAN connections


eWON WAN settings These settings will be given to you by the IT / network engineers at the installation site You will need the following information, before you can configure the WAN port settings:


Use the table below to record the WAN port settings for your eWON device.

EWON WAN port setting Value IP address =

Subnet mask =

Gateway =

DNS1 =

DNS2 =

eWON Proxy settings You may also need the proxy Settings for the site, if a Proxy Server is used on the installation site:

o Proxy Server Address o Proxy Server Port o Proxy Username o Proxy Password

Use the table below to record the Proxy settings for your eWON device.

EWON Proxy setting Value Proxy Server Address =

Proxy Server Port =

Proxy Username =

Proxy Password =


Appendix D. Installation checklist for Internet connection: eWON models 2104CD / 4104CD / Flexy

eWON LAN settings The LAN ports of the eWON are where machine devices (e.g. PLC, HMI, servo, etc) are connected, as illustrated below, using a 2104CD / 4104CD eWON model. This same configuration can be reproduced using Flexy 201 with a PSTN extension card or Flexy 202 / 203 with a PSTN extension card and external Ethernet switch. Use the table below to plan and record the network settings of your LAN devices



EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

WAN connection

LAN connections

WAN Connection


eWON ADSL WAN settings You will need to obtain the following information, regarding the cellular SIM card to be used in the eWON, at the final installation site, before you can configure the Internet Connectione :-


Use the table below to record the Cellular settings for your eWON device.

EWON WAN port setting Value ADSL Username =

ADSL Password =

Protocol Mode =

VPI =

VCI =

ISP DNS 1 =

ISP DNS 2 =


Appendix E. Installation checklist for Internet connection : eWON models 2101CD / 4101CD / Flexy

eWON LAN settings The LAN ports of the eWON are where machine devices (e.g. PLC, HMI, servo, etc) are connected, as illustrated below, using a 2101CD / 4101CD eWON model and an additional Ethernet switch. This same configuration can be reproduced using Flexy 201 with a 3G/GSM extension card or Flexy 202 / 203 with a 3G/GSM extension card and external Ethernet switch.

Use the table below to plan and record the network settings of your LAN devices



EWON’s IP address

EWON’s IP address

EWON’s IP address

EWON’s IP address

WAN Connection

WAN connection

LAN connections


eWON Cellular WAN settings You will need to obtain the following information, regarding the cellular SIM card to be used in the eWON, at the final installation site, before you can configure the Internet Connectione :-

o Access Point Name (APN) o APN Username o APN Password o SIM PIN (normally not used)

Use the table below to record the Cellular settings for your eWON device.

EWON WAN port setting Value Access Point Name =

APN Username =

APN Password =

SIM PIN (normally not used) =


Appendix F. Ports and IP addresses used by the Talk2MFree+ service and Talk2Mpro service

eCatcher connection to Talk2M The eCatcher will need to connect to the following servers: 1) Access Server: Address: as.pro.talk2m.com (92.52.111.210) Protocol and port: HTTPS (port 443) 2) VPN servers: Protocol and port:

- either UDP port 1194 - either TCP port 443

VPN Server 1 (European server) Addresses: 92.52.111.211 87.98.142.151 188.165.49.240 46.105.61.41 87.98.174.164 92.52.111.208 VPN Server 2 (American server) Addresses: 50.56.154.220, 208.43.241.76 VPN Server 3 (Australian server) Address: 101.0.90.58 VPN Server 4 (Japanese server) Address: 133.242.13.198 If the Internet connection is established through a Proxy server, then eCatcher will use the TCP protocol. Important: Since eCatcher 4.1, when eCatcher connects through a Proxy server, it will use the hostname (and not the IP address) to connect to the VPN server. The Proxy should allow outbound connections on Port TCP 443 to hostname: *.talk2m.com.


eWON connection to Talk2M The eWON will need to connect to the following servers: 1) Access Server: Address: as.pro.talk2m.com (92.52.111.210) Protocol and port: HTTPS (port 443) 2) VPN servers: Protocol and port:

- either UDP port 1194 - either TCP port 443

VPN Server 1 (European server) Addresses:

94.236.12.2 92.52.111.213 92.52.111.214 87.98.142.168 188.165.49.241 46.105.61.42 87.98.174.179 94.236.12.0

VPN Server 2 (American server) Addresses: 50.56.154.221, 208.43.241.77 VPN Server 3 (Australian server) Address: 101.0.90.59 VPN Server 4 (Japanese server) Address: 133.242.197.233 If the Internet connection is established through a Proxy server, then eCatcher will use the TCP protocol. Important: Since firmware 6.4s6, when eWON connects through a Proxy server, it will use the hostname (and not the IP address) to connect to the VPN server. So the Proxy on local site should allow outbound connections on Port TCP 443 to hostname: *.talk2m.com. No need to encode all Talk2M VPN server IP addresses on the Proxy server. This information can also be found here >> http://wiki.ewon.biz/Support/06_Knowledge_Base/Questions_and_Answers/Talk2MPro_used_addresses_and_ports of 54 t: +44 (0)1527 529774 | w: mac-solutions.net DSH: v13 Oct 2014

“talk2m free+” remote-access connectivity solution for ... · steps 1 and 2 must be completed...

Documents