Panametrics PanaFlow MV80, User Manual, Page: 73 / 184

PanaFlow™ MV80, MV82 & MV84 User’s Manual 61
Chapter 2. Installation
Figure 78: Configuration Interface In Frame
2.7.10 Internet connection to the meter, security issues
Typically the meter is connected to the Local Area Network (LAN) with non-routable Private Network Address
(192.168.xx.xx, 10.xx.xx.xx, 172.16-31.xx.xx). Th ere are two options to setup the meter from the Internet:
• Connect via Virtual Private Network (VPN)
• Port Forwarding technique.
In case of VPN, your home PC becomes part of your corporate network which will allow access to all resources on the
corporate LAN. Usually, your home PC is assigned an IP address from a different subnet than the meters. Therefore,
the
IPSetup program may not function correctly. You will need to know the specific IP address of the meter in order to
connect. Please contact your IT department about availability of VPN and connection instructions.
Second method of Port Forwarding is configuring the corporate firewall to allow you access to certain internal (LAN)
IP address by mapping it to your external corporate gateway IP and port number. This is usually done by mapping.
See the following for an example. Assuming your corporate gateway is 50.202.79.132 and your meter IP on LAN is
10.10.10.75.
Example of port forwarding:
External IP 50.202.79.132 Port 8080 ====>mapped to====> 10.10.10.75 Port 80

External IP 50.202.79.132 Port 10502 ====>mapped to====> 10.10.10.75 Port 502

External IP 50.202.79.132 Port 10443 ====>mapped to====> 10.10.10.75 Port 443
Please contact your IT department for configuration on corporate routers. They will need the following information on
the used network port:
TCP port 80 Non-secure access to main WEB pages. Read only. Protocol HTTP. It is also possible
to access meter using only secure connection via Port 443.
TCP port 443 Secure encrypted access to configuration pages. Protocol HTTPS, SSL.
Encryption 128 bit - does not require Export licensing.
User/password protected (secure)
TCP port 502 Access by automation software to Modbus/TCP server. Protocol Modbus/TCP
Optional: TCP ports 20,21- Access to internal FTP server. Protocol FTP. User/password protected (insecure)
UDP port 20034 Broadcast discover protocol. Used to find units on the local Network.
It is not routable and therefore works only within the same subnet.
Used by IPSetup (discover/IP config) and AutoUpdate (flash) programs.
AutoUpdate works across Ethernet switches. It uses UDP with direct address.
It may be blocked by most routers.
TCP port 20034 Firmware update using TcpUpdate utility. (Not enabled in Rev 1.0 of firmware).