Talk2M Free+ Remote-Access Connectivity Solution for ewon COSY 131 3G devices. Getting Started Guide

Talk2M Free+ Remote-Access Connectivity Solution for ewon COSY 131 3G devices Getting Started Guide Page 1 of 32 mac-solutions.net ABBMA: v1 JAN 2015

INTRODUCTION... 3 1. HARDWARE AND SOFTWARE REQUIREMENTS... 5 2. CREATING YOUR TALK2MFREE+ ACCOUNT... 7 3. LOGGING INTO YOUR TALK2MFREE+ ACCOUNT... 9 4. ADDING AN EWON TO YOUR TALK2MFREE+ ACCOUNT... 10 5. CONFIGURING THE EWON COSY S INTERNET CONNECTION (WAN)... 13 6. REACHING ETHERNET DEVICES, BEHIND THE EWON... 24 APPENDIX A. USING ECATCHER THROUGH A PROXY SERVER... 26 APPENDIX B. INSTALLATION CHECKLIST FOR INTERNET CONNECTION: EWON COSY 131 3G MODEL... 28 APPENDIX C. NORMAL LED STATUS OF THE EWON COSY 131 3G MODEL... 32 Page 2 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Introduction Purpose : This document describes how to configure and use a remote-access connection to your ewon COSY 131 3G model, using the Talk2M Free+ connectivity service. Pre-requisites : This document is not a substitute for a sound understanding of the basics of networking. The ewon COSY 131 3G is a networking product. To configure and install an ewon COSY 131 3G, a user needs to have a sound understanding of the basic principles of networking. These fundamental principles are not specific to a COSY 131 3G device. They are relevant to any network product, from any networking vendor, anywhere in the world. This knowledge includes (but is not limited to) the following:- IP addresses Subnet Mask the purpose and functions of the Gateway address how to use the PING instruction in Windows how to change IP settings in Windows the functions of a DNS server how to change DNS server in Windows the functions of common network devices (switches, hubs & routers) the differences between Static and Dynamic (DHCP) addressing a basic understanding of the principles of a VPN Note: Please request our Simple Networking Guide, if you feel that you need a better understanding of the above. This guide is available from our website http://macsolutions.net/en/useful-links The steps required to set up a successful ewon COSY 131 3G + Talk2MFree+ remote-access connection are shown on the next page. Page 3 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Steps 1 and 2 must be completed in order to use the Talk2MFree+ Service. 1. Create your Free+ account on Talk2M. This step is only required once, when you begin to use the Talk2M Free+ service, for the first time. 2. Log into your Free+ account. This step is required whenever you need to add/edit an ewon or connect to a remote site. ------------------------- Steps 3 to 6 must be completed BEFORE an ewon COSY 131 3G is installed, at the remote site. 3. Add an ewon COSY 131 3G to your Free+ account. 4. Obtain the ewon COSY 131 3G activation Key 5. Configure the Internet connection on your ewon COSY 131 3G. 6. Configure the Talk2M connection on your ewon COSY 131 3G. The above 4 steps are required for each new COSY 131 3G. ------------------------- Steps 7 to 8 are completed at the remote site, during installation. 7. Modify the Internet connection settings, of the ewon COSY 131 3G, to suit the remote site. 8. Verify the ewon COSY 131 3G connection to Talk2MFree+, from the remote site. ------------------------- Step 10 connects the User with the remote site, through the Talk2M Free+ service. 9. Utilise the remote connection to your ewon COSY 131 3G. This step is required to communicate with a remote site. Page 4 of 32 mac-solutions.net ABBMA: v1 JAN 2015

1. Hardware and software requirements Hardware requirements In order to follow this guide you will need: 1 x ewon COSY 131 3G 1 x 12V-24V Power Supply ewon COSY 131 3G which has 4 x LAN Ethernet ports one of which can be a WAN Ethernet interface and 3G WAN interface. (By default WAN Ethernet interface is on port 4 indicated by orange port LED) Software requirements The following software tools can be downloaded from links shown on the following page at http://mac-solutions.net/en/useful-links ewon management software: ebuddy ebuddy is used to discover an ewons on a network, set its IP addresses, upgrade the firmware and create a Backup of the ewon configuration. ewon configuration software: The ewon COSY 131 3G is configured through its web server interface. All you need is a standard Web Browser e.g. I.E 11, Firefox, Opera or Chrome. Page 5 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Talk2M VPN Client software: ecatcher v4 ecatcher V4.3.0 or higher must be installed on your PC, to establish the remote connection through the Talk2M system. Talk2M Connectivity Checker software This software is used to check the suitability and operation of an Internet connection, at the final, installation, remote site. ewon Firmware Version To be able to follow this guide, your ewon COSY 131 3G needs a firmware version 8.1s1 Use the ebuddy software to upgrade your ewon's firmware. To download the latest version of firmware from the Internet, to your PC, us the Update ebuddy option, in the ebuddy software. Page 6 of 32 mac-solutions.net ABBMA: v1 JAN 2015

2. Creating your Talk2MFree+ account Before you can use the Talk2M Free+ service, you will need to install the ecatcher software (version 4.3.0 or later) on your PC. Connect your PC to the Internet. Download the ecatcher software. Launch ecatcher - you will see the screen below, after installation. Click on the "Create a Free+ account" link and enter the required values, as shown below. Enter the Account name you want to create and specify the User name, Password and Email address for your account. Page 7 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Typically, the Account name is the name of your company. To check whether the Account name you wish to use is available, use the "check availability" link. By default, "admin" is configured as the user name of the first created user account. (it is possible to change this admin name, if you wish). This first User is the administrator for the account and creates all subsequent User names. (The Free+ service allows you to create multiple users under the same account.) Once all the fields are entered click on Next. The next window will allow you to enter detailed information about your company. Once you are finished, click on the Create button to create your account. A message indicating that your account was successfully created will be displayed. Note: In order to complete your account creation, you have to activate it. The activation procedure is sent to the email address you entered. Please check your emails. Page 8 of 32 mac-solutions.net ABBMA: v1 JAN 2015

3. Logging into your Talk2MFree+ account Once your Talk2M Free+ account has been created, you may log in to your account. Launch the ecatcher software and specify the Username, Password and your Talk2M Account. Select the Login button. (Directly after creating your Account, the login information will already be filled in automatically) Selecting Remember me will cause the Account & Username values to be remembered, each time ecatcher is launched, but you will still need to enter the Password. The main interface of Talk2M Service will be displayed, as below: Here you can manage all Users and ewons to your account (Add, Delete, Edit, etc.) Page 9 of 32 mac-solutions.net ABBMA: v1 JAN 2015

4. Adding an ewon to your Talk2MFree+ account.here, you are declaring the details of a machine, or site, which will be connected via Talk2MFree+, and where you will install an ewon device. (At this stage, your ewon unit is not yet configured.) On the left side of the ecatcher interface, click on the ewons button (default view). To add a new ewon to your account, click on the + icon in the My ewons list section, as below: The following window will appear: The ewon name and Description on the Talk2M server should be meaningful, in order to allow a User to uniquely identify the specific remote site/machine. (These can be edited at any time) The Connection Type specifies how your ewon COSY 131 3G will be connected to the Talk2M server, across the Internet: NOTE: The usual setting, for 99% of ewon devices, is Connection Type = Permanent. Users should only use Triggered under certain specific reasons, where there is a good reason why Permanent is not possible. PSTN is a legacy setting, which is not used, these days. Page 10 of 32 mac-solutions.net ABBMA: v1 JAN 2015

EWON COSY 131 3G model Choose Connection Type = Permanent (LAN / ADSL / 3G) After specifying the connection type, click on Next. Here you can enter additional information concerning your remote connection. Custom Fields provide a way of categorizing remote sites and / or Talk2M users. E.g. by machine type, by PLC type, by country, by region, etc. The Custom Fields are easily set-up in the Talk2M account, in the Account area. Click on Create to add the ewon to the ewon list of your Talk2M account. The Talk2M Connectivity page opens: Page 11 of 32 mac-solutions.net ABBMA: v1 JAN 2015

When an ewon device is added to a Talk2MFree+ account, an unique set of VPN security keys and certificates are generated by Talk2MFree+ server, for that ewon. The Talk2M system is very secure. So the VPN security keys and certificates are sophisticated and complex. Obviously, the ewon needs to know these unique VPN security keys and certificates, in order to make a successful, secure connection, to the Talk2M Free+ server. To simplify the process of linking an ewon with the Talk2M Server, ewon have created a user-friendly method, by which the Talk2MFree+ server can configure the VPN keys and certificates, into an ewon, using an unique ewon Activation Code. Under the Configure via Activation Key section you will find the Activation Key needed for the ewon. Click on the Copy to Clipboard icon to copy the activation key into the clipboard of your PC. Note: The activation Key method is the recommended method and is most widely used method. However, you will see that there is another configuration method: Configure via ewon Name: During the ewon Talk2M wizard, instead of using the Activation Key you can also specify the ewon Name and use the user name and password of your Free+ account. Click Back to ewon list. The new ewon is now being displayed in My ewons list section in the central part of the window. Page 12 of 32 mac-solutions.net ABBMA: v1 JAN 2015

5. Configuring the ewon COSY s Internet connection (WAN) Next, the ewon needs to be configured to connect to the Internet. Disconnect your PC from the Internet and connect your PC to any LAN port of the ewon COSY 131 3G (by default any port other than port 4). The LAN ports of the ewon COSY 131 3G are where machine devices (e.g. PLC, HMI, servo, etc) are connected, as illustrated below, using a COSY 131 3G model. ewon s WAN machine network Device name LAN IP address Subnet mask Gateway ewon 192.168.100.254 255.255.255.0 n/a PLC 192.168.100.1 255.255.255.0 192.168.100.254 (IP of ewon) HMI 192.168.100.2 255.255.255.0 192.168.100.254 (IP of ewon) Inverter drive 192.168.100.3 255.255.255.0 192.168.100.254 (IP of ewon) Programming laptop 192.168.100.4 255.255.255.0 192.168.100.254 (IP of ewon) etc.. Note: The IP addresses in the above table are only for reference and not a requirement. These network settings are configured into each device (e.g. PLC, HMI, servo, etc), using the appropriate device configuration software. Page 13 of 32 mac-solutions.net ABBMA: v1 JAN 2015

IMPORTANT:- The ewon COSY 131 3G functions as a VPN Router. Therefore the IP address used on the WAN port of the ewon COSY 131 3G must be in a different network range from the IP addresses used on the LAN ports of the ewon COSY 131 3G. E.g. If the LAN port = 192.168.100.xxx, then the WAN IP cannot = 192.168.100.xxx Note: If you are configuring an ewon COSY 131 3G for the first time, we will need to download the ebuddy v8 software, as described earlier. ---------------- Connect the machine devices (e.g. PLC, HMI, servo, etc) to any of the LAN ports of the ewon COSY131 3G. Connect your PC to any of the LAN ports of the ewon COSY 131 3G. Set the ewon COSY s LAN IP address, using ebuddy, to suit the IP addresses to be used on the machine LAN. Check that the PC can PING the ewon COSY 131 3G and PING the other devices on the machine LAN. Using ebuddy, sign into the web-config pages of the ewon COSY 131 3G. Default Username = adm Default Password = adm ---------------- Page 14 of 32 mac-solutions.net ABBMA: v1 JAN 2015

The easiest way to configure the Internet connection of your ewon COSY 131 3G is to use the Internet Connection wizard. Click on the icon under Quick Launch Wizard. Following window will be displayed: Select the ewon name and Password for login. Page 15 of 32 mac-solutions.net ABBMA: v1 JAN 2015

After clicking on next, the following screen will be displayed System date and time can be set manually or automatically using NTP on this page. Click next to assign one of the ewon s LAN ports as WAN port (by default port 4). Page 16 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Click save to move on to Internet Connection setup as shown in the picture below: The Internet connection will be set to Ethernet as a default but from the drop down menu Modem connection can be selected. At all times, the ewon COSY 131 3G will make and hold a VPN a VPN to the Talk2M Server, if it can reach the Internet. Physical protection setting:- If you wish to control when the ewon makes the connection to Talk2M, by using the COSY s in-built digital input, then change the Physical protection drop down box option, as shown above. It will then be necessary to hard-wire a switch or relay to the COSY s in-built digital input. Please see Appendix XXX for a diagram of how this input is wired Input ON = Talk2M Connection ON Input OFF = Talk2M Connection OFF Only tick the initialize configuration first box, if you wish to erase the existing Talk2M configuration in the ewon COSY 131 Wi-Fi. Click, next. Note: Skip Ethernet WAN Configuration section if you have selected to connect using 3G Modem. Ethernet WAN Configurations You will need the following information, before you can configure the Ethernet WAN port settings:- o o IP address Subnet mask Page 17 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Please also see appendix C, for an Installation Checklist NOTE 1: Initially, you should set up the ewon COSY 131 3G in your office / workshop / assembly area. So, these WAN network settings will be settings related to your workshop Ethernet network. When the ewon is installed on site, these WAN network settings will be related to the Ethernet network at the installation site (i.e. the final customer s network). NOTE2: The IP address used on the WAN port must be in a different network range to the the IP addresses used on the LAN E.g. If the LAN port = 192.168.100.xxx, then the WAN IP must not = 192.168.100.xxx Follow the steps, to complete the Internet connection wizard. Selecting DHCP allows the device to obtain network details from the host network otherwise select Static to manually enter network details. Then click Next to move on to the next configuration page Page 18 of 32 mac-solutions.net ABBMA: v1 JAN 2015

3G Modem WAN Configurations On this page please enter the APN settings provided by your network provider (a list of APN settings from major network providers can be found in appendix C). In the advanced setting on the same page, additional session duration can be set accordingly. On a maintained connection it is advised to set maximum idle time to a large value such as 9999 and set the maximum call duration to 0. This way ewon never drops its internet connection. Then click Next to move on to the next configuration page. Page 19 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Tick the Test online address checkbox to perform an online IP check. Once the wizard has completed, ewon should display a message like in the screen shot displayed below: The Internet Connection tick means that the ewon is correctly configured for an Internet connection. The Online IP Check tick means that the ewon was actually able to reach an IP address on Internet. (NOTE: Sometimes online IP check fails. This may not be important, so continue to the next Wizard anyway). Page 20 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Click, Done. Paste the Activation Key, as created earlier in ecatcher, into the web interface setup of the COSY 131 3G. Proxy Settings The next window of the wizard will ask you if you need to connect through a Proxy server. Only check this option if you need to specify a Proxy server for the Internet connection. If a Proxy Server is used, there will be 4 values to enter: o Proxy Server Address & Port Number o Proxy Username & Password Otherwise leave this option unchecked and click on Next. The ewon will then connect to the Talk2M server, using its unique Activation Key and retrieve the VPN keys and certificates. Your ewon is now configured to connect to the Talk2M server. Page 21 of 32 mac-solutions.net ABBMA: v1 JAN 2015

NOTE 1: The ewon functions as a VPN Router. The IP address used on the WAN port (customer s network) must be in a different network range to the the IP addresses used on the LAN (machine network) NOTE 2: The final customer will provide an Ethernet cable, to connect the WAN port of the ewon to the sitenetwork. Before connecting this cable to the ewon s WAN port, do the following: connect the cable to the netwok port of a laptop (PC) change the network settings of the network port to the same settings given to you, for the ewon (i.e. those mentioned above) run the Talk2MconnectionChecker software (see below) The Talk2MconnectionChecker software is used to check that the network settings you have been given, by the end customer, are correct and that, using these settings, it is possible to reach the Talk2M server, through the customer s network. The Talk2MconnectionChecker software can be downloaded from the support section of www.ewon.biz If all is OK, then the software should give you a display like that shown below. If all is OK, then the ewon can be given these network settings and should be able to reach the Talk2M server, through the customer s network If any errors occur, then these errors are caused by security restrictions on the customer s network. Red errors must be resolved, before the ewon can be connected. Orange warnings can be ignored, so long as the final message contains VPN Connection possible. Page 22 of 32 mac-solutions.net ABBMA: v1 JAN 2015

The ports used by an ewon, and the Talk2MconnectionChecker software, are:- TCP port 443 or TCP port 443 & UDP port 1194 These ports need to be open, in an outbound direction, through the customer s network / firewall. Visit the link below, for full details of ports and IP addresses used by the Talk2M Free+ solution. http://wiki.ewon.biz/support/06_knowledge_base/questions_and_answers/talk2mpro_used_addresse s_and_ports Result = FAIL. (Talk2M connection not possible) NOTE: TCP 443 is blocked. No Talk2M connection will be possible Page 23 of 32 mac-solutions.net ABBMA: v1 JAN 2015

6. Reaching Ethernet devices, behind the ewon Probably the primary purpose of using an ewon is connect to some target device(s), located behind the ewon, at the remote site. There are 2 methods to achieve this: Configure the IP address of the ewon as the Gateway IP in the target Ethernet device(s) (this is the preferred method, since it follows the standard rules of networking) Use the ewon Plug-n-Route facility Ethernet device configuration For new machines, it is good practice to configure all IP settings of the Ethernet devices behind the ewon:- IP address Subnet mask Gateway address. For the ewon to act as the gateway for the network behind it, the devices on the network must know the IP address of the gateway. i.e. IP address of ewon = Gateway IP address configured in each network device Manual configuration of Talk2M device settings The LAN IP address in the ewon and the LAN IP address, for the ewon, in the Talk2MFree+ server must match. Since firmware version 6.2s0, the ewons LAN IP address is automatically transferred to the Talk2M Free+ server, when the ewon Talk2M wizard is run. If the LAN settings in the ewon subsequently change on site, you must manually change the settings for the ewon, in the Talk2M Free+ server, using the ecatcher software. Select the ewon from the ewon list and click on the Properties button. In the ewon Properties window, you will see the ewon Name, Description, Custom Fields, plus the ewon s LAN (Remote Connection) settings. The IP address displayed here must correspond with the LAN IP address of your ewon on site. Page 24 of 32 mac-solutions.net ABBMA: v1 JAN 2015

To change the Remote Connection settings, click on the Modify button on the top of the page. Once the modification is finished, click on the OK button which is displayed on the bottom of the window when in edit mode. Page 25 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Appendix A. Using ecatcher through a Proxy Server If your computer connects to the Internet, through a Proxy server, you will need to enter the Proxy settings, in the ecatcher software. Before logging in, click on the Settings menu, displayed on the bottom of the ecatcher login window. As seen in the page below: The following page will be displayed: Click on the Modify... button on the right of the zone to edit the connection type. Page 26 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Select for the Connection "TCP through proxy server" and enter your Proxy settings. To save the settings, click on OK. Page 27 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Appendix B. Installation checklist for Internet connection: ewon COSY 131 3G Model ewon LAN settings The LAN ports of the ewon are where machine devices (e.g. PLC, HMI, servo, etc) are connected, as illustrated below, using a ewon COSY 131 3G. ewon s WAN machine network Use the table below to plan and record the network settings of your LAN devices Device name/ type LAN IP address Subnet mask Gateway ewon N / A Installation laptop ewon LAN IP address PLC ewon LAN IP address HMI ewon LAN IP address >Other device 1< ewon LAN IP address >Other device 2< ewon LAN IP address ewon LAN IP address ewon LAN IP address Page 28 of 32 mac-solutions.net ABBMA: v1 JAN 2015

ewon COSY 131 3G Ethernet WAN settings These settings will be given to you by the IT / network engineers at the installation site You will need the following information, before you can configure the Ethernet WAN port settings:- o o o IP address Subnet mask Gateway address o DNS address 1 o DNS address 2 Use the table below to record the WAN port settings for your ewon device. EWON WAN port setting Value IP address = Subnet mask = Gateway = DNS1 = DNS2 = ewon Proxy settings You may also need the proxy Settings for the site, if a Proxy Server is used on the installation site :- o o o o Proxy Server Address Proxy Server Port Proxy Username Proxy Password Use the table below to record the Proxy settings for your ewon device. EWON Proxy setting Value Proxy Server Address = Proxy Server Port = Proxy Username = Proxy Password = Page 29 of 32 mac-solutions.net ABBMA: v1 JAN 2015

ewon COSY 131 3G Modem WAN settings Here are values that have been proven to work, from the major UK cellular providers. Contract Data SIM Provider APN Username Password O2 Contract Data-only SIM mobile.o2.co.uk mobileweb password Vodafone Contract Data-only SIM internet web web 3 Data-only SIM three.co.uk <none / blank> <none / blank> EE Contract Data-only SIM everywhere <none / blank> <none / blank> NOTE 1: Initially, you should set up the ewon in your office / workshop / assembly area. So, these cellular settings will be settings related to the SIM card used in your workshop ADSL line. When the ewon is installed on site, these cellular settings will be related to the SIM card used at the installation site (i.e the final customer s site). NOTE 2: Avoid Pay asyou Go SIMS It is not recommended to use Pay-As-You-Go or Pre-payment data SIM cards. These typically have certain technical restrictions (E.g. they are sometimes limited to be used only in branded USB dongles, from the cellular provider, and / or to be used in conjunction with branded software running on a laptop / PC) NOTE 3: Avoid Phone / Voice SIMS It is not recommended to use a phone (voice) SIM, which comes with a data-bundle (E.g. like the SIM used in a 3G smartphone). The running costs, of paying by data volume, can be prohibitive. NOTE 4: How to choose the best network to use, in the UK. It is recommended that you visit the OFCOM website, called Sitefinder, to decide which cellular network has best coverage / performance, in a particular installation location. http://www.sitefinder.ofcom.org.uk/ Page 30 of 32 mac-solutions.net ABBMA: v1 JAN 2015

NOTE 5: When to use Pay per MB, contract SIM cards For countries where fixed-cost, Mobile Broadband tariffs are not available, it is necessary to use a data-sim are on a pay per MB tariff. With this type of SIM, cost depends upon the data-usage. For this type of SIM: Do not set the Internet Connection to Maintain Connection The User will need to send a Wake-Up SMS message, to force the ewon to create a VPN connection to the Talk2MFree+ Server. (For details of this process, please see the support pages of www.ewon.biz). Page 31 of 32 mac-solutions.net ABBMA: v1 JAN 2015

Appendix C. Normal LED Status of the ewon COSY 131 3G Model 3 2 1 6 4 5 1. Power LED is solid green. 2. USR (User) LED flashes green at a set interval. 3. WAN port LED is solid orange and the small LED flashes orange when communicating. 4. LAN port LED is solid green and the small LED flashes green when communicating. 5. T2M LED is solid green when connected to the Talk2M Service. 6. ST LEDs signify Wi-Fi signal strength. Higher the signal strength more of the orange LEDs light up. Page 32 of 32 mac-solutions.net ABBMA: v1 JAN 2015