Adjust the subnet to hide individual IPs and present a single address on the main network using Siemens S615
Adjust the subnet to hide individual IPs and present a single address on the main network using Siemens S615
I'm working on a network design that groups many operational devices into a single IP address across the Siemens Scalance S615. The plan involves connecting to a VPN and accessing VLAN 1 (external) from the S615, while all devices are placed in VLAN 2. The plant network layout is as follows:
Network -------------------------------
192.168.1.0/24 VLAN 1 (external facing) - connected via VPN
192.168.2.0/24 VLAN 2 (internal) - contains several devices, including 192.168.3.0/24
Currently, I lack access to the plant network settings and only have control over the S615 and its connected PLCs/drives. The goal is to make all devices appear as one IP from the rest of the network without using VLAN separation or firewalling, as that’s the default configuration. If possible, static routing or NAT should bridge the two segments so everything functions together seamlessly.
Can I reach out to IT or collaborate with them? Why do you not have the necessary access? Because there are several subnets, we either require fixed routers on every device or set up a static route on the primary router to guide VPN traffic. Full access to the main network is essential—it would be challenging without it. Do you have permission to distribute static routers across all systems?
I’m used to handling IT tasks here. Without proper support, it’ll be a big challenge. NAT is designed to unify multiple systems under a single IP address, but the issue is that other systems can’t reach behind it unless we use workarounds like port forwarding. Ideally, you’d want to collaborate with IT and plan the rest of the network accordingly.
I’d much prefer to connect with a professional network consultant rather than filling out forms. This is important because it’s work-related and I’m putting in effort.
You should be able to set it up, but confirm with the IT team to ensure nothing is blocking it.