160 likes | 437 Views
Complete Remote Management. A complete Remote Management solution must provide…. 1. Remote Service access for service engineers to program and diagnoze devices Engineers can be at any location Conflicting subnets must not be an issue (all locations uses same IP addresses)
E N D
A complete Remote Management solution must provide… • 1. Remote Service accessfor service engineers to program and diagnoze devices • Engineers can be at any location • Conflicting subnets must not be an issue (all locations uses same IP addresses) • Individual access for the enginees must be controlled centrally • The engineer should not make configurations locally on the PC • The engineer must access Ethernet, Serial and USB devices remotely • 2. Remote Monitoring access by central servers to log status and events. • Push/pull data collection of specific device info from a central site. • Optionally allow a traditional routed infrastructure (full VPN network access) • 3. Central Management of all communication components • Configuration, user access, etc. must be available from a central location.
Secomea solves all 3 requirements • A. Remote Serviceaccess for programming, trouble shooting and monitoring with Secomea LinkManager: • LinkManager full access from Windows to any IP, Serial or USB device. • LinkManager Mobile access for monitoring and operation of devices from handheld devices (e.g. Remote HMI, Remote desktop, Scada web etc.) • B. Remote Monitoring access for data logging via Secomea SiteManager: • SiteManager Relay Chains, for logging on specific ports, or push messages from devices, or.. • SiteManager EasyTunnel VPNaccess for full network access • SiteManager SMS Gateway for receving and sending SMS messages. • C. Central Managementfrom the central M2M Server called GateManager that is operated by a web based administration portal.
A. LinkManager accessfor programming and diagnostics TLS/AES Encrypted connection A technician can obtain access from anywhere directly to a PLC or Panel, regardless of where the GateManager is located. SNMP/Ping etc.Status Polling Serial /USB Proping GateManager Heartbeats (Status, Alerts) Optional Email Alerts and Reports Optional SMS send/receive (SMS Gateway) Email alerts Backup and other scheduled ”actions” TLS/AES with 2 factor login (certificate and password) IP, Serial and USB access to devices from native programming tool IP attached devices LinkManager SMS Alerts/instructions SiteManager Serial or USB attached device RUN
B. Advantages of each of the Remote Monitoring solutions • Relay Chains between SiteManager Soft on server site via GateManager to SiteManagers on remotes sites. • All remote sites can have the same subnet. Subnet conflicts do not occur. • The firewall friendly connection via GateManager is used for all communication. • Ideal for push and/or pull data logging and defined ports • EasyTunnel VPN access from EasyTunnel Server on server site via EasyTunnel module in SiteManagers on remotes sites • Ideal when a traditional routed VPN infrastructure is desired • Ideal for QoS and other routing sensitives protocols (e.g. Advanced Video streaming)
B1. Relay ChainsLogging via GateManager • All devices can have the same IP addresses. Subnet conflicts does not occur! • The firewall friendly connection via GateManager is used for all communication. No separate connections are needed. SiteManager PLC Dynamic Public IP 10.0.0.1 3G/GPRS or ADSL 10.0.0.5:8000 10.0.0.5:8000 10.0.0.5:443 10.0.0.5:443 SiteA 10.0.0.6:3389 10.0.0.6:3389 Panel 3G/GPRS or ADSL Main Site SiteB PLC Logserver 10.0.0.1 Dynamic Public IP 10.0.0.5:8000 10.0.0.5:8000 10.0.0.5:443 10.0.0.5:443 SiteManager GateManager Server 172.31.1.1:8000 172.31.1.1:443 172.31.1.2:3389 192.168.0.10 172.31.1.3:8000 10.0.0.6:3389 10.0.0.6:3389 172.31.1.3:443 Panel 172.31.1.4:3389 ”alias” addresses represents each device
B2. EasyTunnel VPNFull Network Access • Direct tunnels allow for complex IP protocols (e.g. advanced video streaming) • QoS challanging protocols can be used (e.g. Certain Video protocols) • Functions as a traditional fully routed VPN infrastructure GateManager Server SiteManager PLC Dynamic Public IP 10.0.1.1 3G/GPRS or ADSL 10.0.1.5:8000 10.0.1.5:8000 10.0.1.5:443 10.0.1.5:443 SiteA TrustGate (EasyTunnel Server) 10.0.1.6:3389 10.0.1.6:3389 Panel 3G/GPRS or ADSL SiteB Main Site PLC Log server 10.0.2.1 Dynamic Public IP 10.0.2.5:8000 10.0.2.5:8000 10.0.2.5:443 10.0.2.5:443 SiteManager 10.0.1.5:8000 10.0.1.5:443 GateManager also monitors the TrustGate! 10.0.1.6:3389 192.168.0.10 10.0.2.5:8000 10.0.2.6:3389 10.0.2.6:3389 10.0.2.5:443 Panel 10.0.2.6:3389 (mask 255.255.255.0) (mask 255.255.255.0)
Detailed Technical Descriptions • Refer to the documents: • Logging via SiteManager Relay Chains – Deployment Overview • Logging via SiteManagerEasyTunnel Client – Deployment Overview