ECOM100-gateway

[PLCGuy]

My question is when setting up a peer-to-peer modbus/tcp, it ask for a IP Address, but no gateway. If I could enter a gateway would that solve a problem of me not being able to use NetEdit to a specific subnet. If I could enter a gateway, let's say to my desktop addy, now I could talk to the Ecom100 over a different subnet. Is that the wrong thinking? I bet it gets way more complicated then that doesn't it?

[Greg]

The gateway setting for each ECOM100 is global. In other words, you can't have a different gateway address for each peer-to-peer Modbus TCP connection. But perhaps I'm misunderstanding you. What exactly are you trying to do?

[PLCGuy]

That was what I was asking. I was wondering why each peer-to-peer could not have it's own gateway. I was just thinking I could put my desktop ip addy there with the gateway and then I could use netedit on any of the networks here at work.

[b_carlton]

He's talking about the peer-to-peer setup but I think that's irrelevant. He wants to use Netedit 3 on an ECOM100 which is in a different network subnet from his programming PC.

[Greg]

PLCGuy, that won't help. Peer-to-peer configuration has no affect on the way NetEdit itself works. Peer-to-peer configuration is for setting up an ECOM100 to communicate with another ECOM100 or any Modbus TCP server/slave. It will not change the way NetEdit talks to ECOM100s.

It is not possible to use NetEdit over a router. The reason is because NetEdit must use a broadcast telegram to discover devices on the network which, potentially, do not have configurations (i.e. no IP address). Any intervening router will not pass a broadcast telegram, thus, if the ECOM100 is not on the local network of the PC running NetEdit, it will not be seen in NetEdit's list of devices.

Does that explain what you are asking?

[PLCGuy]

Yes. So is it possbible to program a managed switch to pass the info from the ecom100 back to the pc requesting the info? Sorta like helping the blind get to where it needs to go. The managed switch will get the data from the ecom100 on a different subnet and direct it to the requesting pc? We have 4 different networks here and our IT guys made it so I can talk to anyone of them with DS5 and the C-More software. Actually any software. Even our network in China. Sounds like the programming of switches is already done. It is only NetEdit I can not access the Ecom100's.

[b_carlton]

It sounds like the switches are programmed to pass the normal running traffic to/from the ECOM100 but not the broadcast access messages required by NetEdit.

[Greg]

Unless you are specifically needing NetEdit for some reason (e.g. firmware/booter updates), then it is possible to access the ECOM100 for configuration (if it already has an IP address) via any Internet browser simply by typing in the http:// and the IP address of the ECOM100.

[PLCGuy]

Sorry for the late reply. Yes, we have a plant in China and out of state, so I am thinking of the future if I needed to update the ecoms.

[Greg]

Updating the booter/firmware over the Internet would be very problematic indeed. Currently (and in the future, I'm pretty sure) is is not possible. It adds a whole other layer of security issues. The best option available to you is to have someone at the remote locations who is fairly competent to download NetEdit3 from our website, hook up locally to the ECOM100 network, and do the update for you.

[BobO]

We are just now in the process of dealing with security issues due to both the Department of Homeland Defense as well as white hat hackers at Digital Bond trying to exploit (for constructive purposes) security weaknesses in networked products. I cannot stress firmly enough why this is a *bad* idea. The specific concern of DHD, was that firmware could be rewritten, thus re-purposing the device for nefarious intent. Does Stuxnet ring a bell?

Quite simply: Don't.

[Controls Guy]

Updating the booter/firmware over the Internet would be very problematic indeed. Currently (and in the future, I'm pretty sure) is is not possible. It adds a whole other layer of security issues. The best option available to you is to have someone at the remote locations who is fairly competent to download NetEdit3 from our website, hook up locally to the ECOM100 network, and do the update for you.

Plus it sounds like a good way to brick the ECOM if the comms get interrupted somewhere in the 12,000 mile link while you're doing the update.  I don't like to do firmware updates with anything more than a switch between me and the device at most.

[Controls Guy]

Or you could pre-flash ECOMs in your office and send them to China.

[PLCGuy]

If the systems are working and no mods are being used, why do the updates. I am sure some of the ecoms installed have old versions in them and working just fine. And yes there is someone there who could do updates. Our IT frowns on our systems being on the WWB. None of our networks are accessible from the Would Wide Web. Only the IT guys can do that. They can be accessed from our plant which is a closed network. But like it was said, if the connection was lost, there goes the Ecom.