Seneca S6001-RTU, User Manual

Page: 51 / 210

USER MANUAL – Z-TWS4/Z-PASS2-S/S6001-RTU
51
To let this scenario work correctly, an essential rule must always be followed: the Device LANs and the PC
LAN shall have different and not colliding subnets; so, in the above figure, the following subnets allocation
has been depicted:
PC LAN 192.168.1.0/24
SCADA LAN 192.168.2.0/24
Z-PASS2 LAN 192.168.10.0/24
Z-PASS2 LAN 192.168.20.0/24
Z-PASS1 LAN 192.168.30.0/24
The “VPN Box Manager” application guides you in the configuration task, checking that no subnet/IP
address conflict is present in the network.
If subnet/conflicts cannot be avoided, using a “Single LAN” VPN is still possible if local IP addresses are not
used; devices can be reached by means of their VPN IP addresses and machines beyond them can be
reached by configuring some “port forwarding” rules on the Device Router (see 18.1.5 paragraph).
10.2 “Point -to- Point” VPN
The above figure gives an example of a “Point-to-Point” VPN.
In this scenario a PC (acting as a VPN Client) can connect, on demand, to only one Device and its subnet,
using local IP addresses. Since the client “sees” just one Z-TWS4/Z-PASS2-S/S6001-RTU (and attached
devices) at time, the same subnet configuration can be assigned to different sites, without creating
conflicts.
For this kind of VPN, the “VPN Box Manager” application lets define group of users that can connect only
to assigned devices.