IS200DSPXH1B工控模块系统备件
在路由模式下，OpenVPN服务器创建一个“TUN”接口，该接口具有自己的IP地址池，与本地LAN不同。拨入的远程主机将获得虚拟网络内的IP地址，并且只能访问OpenVPN所在的服务器。如果您希望从客户端远程访问VPN服务器，并禁止在VPN服务器下访问远程LAN资源，OpenVPN TUN模式是最简单的解决方案。如图所示，M2M物联网网关作为OpenVPN TUN客户端，并连接到OpenVPN UN服务器。一旦OpenVPN TUN连接建立，连接的TUN客户端将被分配一个虚拟IP（10.8.0.2），该虚拟IP属于不同于Control EW200 Industrial Cellular Gateway 225 Center中本地子网的虚拟子网。使用这种连接，如果启用重定向Internet流量设置时，本地网络设备的流量通过OpenVPN TUN连接，则本地网络设备将获得虚拟IP 10.8.0.x；控制中心中的SCADA服务器可以使用虚拟IP地址（10.8.0.2）访问远程连接的串行设备。OpenVPN TAP场景术语“TAP”是指桥接模式，使用第2层数据包运行。在网桥模式下，VPN客户端与OpenVPN服务器下的LAN位于同一子网上。在这种配置下，OpenVPN客户端可以直接访问LAN上的资源。要为VPN客户端提供对整个远程LAN的远程访问，请将OpenVPN设置为“TAP”网桥模式。如图所示，M2M物联网网关作为OpenVPN TAP客户端，并连接到OpenVPN TAP服务器。一旦OpenVPN TAP连接建立，连接的TAP客户端将被分配一个虚拟IP（192.168.100.210），该虚拟IP与控制中心的本地子网位于同一子网上。通过此连接，控制中心的SCADA服务器可以使用虚拟IP地址（192.168.100.210）访问远程连接的串行设备。打开VPN设置转到安全>VPN>OpenVPN选项卡。OpenVPN设置允许用户创建和控制OpenVPN隧道。启用OpenVPN启用OpenVPN并为网关操作选择所需的配置（服务器或客户端）。EW200工业蜂窝网关226配置项值设置描述OpenVPN默认未选中选中启用框以激活OpenVPN功能。默认情况下选择“服务器/客户端服务器配置”。选择服务器后，将在下面显示服务器配置以进行进一步设置。选择“客户端”后，可以在客户端配置窗口中指定客户端设置。作为OpenVPN服务器如果选择了服务器，将显示OpenVPN服务器配置屏幕。OpenVPN服务器配置窗口允许您启用
In routing mode, the OpenVPN server creates a "TUN" interface with its own IP address pool which is different to the local LAN. Remote hosts that dial-in will get an IP address inside the virtual network and will have access only to the server where OpenVPN resides. If you want to offer remote access to a VPN server from client(s), and inhibit the access to remote LAN resources under VPN server, OpenVPN TUN mode is the simplest solution. As shown in the diagram, the M2M-IoT Gateway is cond as an OpenVPN TUN Client, and connects to an OpenVPN UN Server. Once the OpenVPN TUN connection is established, the connected TUN client will be assigned a virtual IP (10.8.0.2) which belongs to a virtual subnet that is different to the local subnet in Control EW200 Industrial Cellular Gateway 225 Center. With such a connection, the local networked devices will get a virtual IP 10.8.0.x if its traffic goes through the OpenVPN TUN connection when Redirect Internet Traffic settings is enabled; The SCADA Server in Control Center can access remote attached serial device(s) with the virtual IP address (10.8.0.2). OpenVPN TAP Scenario The term "TAP" refers to bridge mode and operates with layer 2 packets. In bridge mode, the VPN client is given an IP address on the same subnet as the LAN resided under the OpenVPN server. Under such configuration, the OpenVPN client can directly access resources on the LAN. To offer remote access to the entire remote LAN for VPN client(s), set up OpenVPN in “TAP” bridge mode. As shown in the diagram, the M2M-IoT Gateway is cond as an OpenVPN TAP Client, and connects to an OpenVPN TAP Server. Once the OpenVPN TAP connection is established, the connected TAP client will be assigned a virtual IP (192.168.100.210) which is on the same subnet as that of local subnet in Control Center. With this connection, the SCADA Server in Control Center can access remote attached serial device(s) with the virtual IP address (192.168.100.210). Open VPN Setting Go to Security > VPN > OpenVPN tab. The OpenVPN setting allows user to create and con OpenVPN tunnels. Enable OpenVPN Enable OpenVPN and select an expected configuration, either server or client, for the gateway to operate. EW200 Industrial Cellular Gateway 226 Configuration Item Value setting Description OpenVPN Unchecked by default Check the Enable box to activate the OpenVPN function. Server/ Client Server Configuration is selected by default. When Server is selected, server configuration will be displayed below for further setup. When Client is selected, you can specify the client settings in ather client configuration window. As an OpenVPN Server If Server is selected, an OpenVPN Server Configuration screen will appear. The OpenVPN Server Configuration window lets you enable
