Sevio Basic Manuel utilisateur

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it

Secure Local Access

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 2

Trademarks

Sevio is an Sevio S.r.l. trademark. Microsoft®, Windows®are a Microsoft Corporation® registered brand.

Other product names and brands are registered brands or trademarks of their respective owners.

Declaration of terms

In the interest of improving internal design and operational aspects, Sevio S.r.l. reserves the right to make

changes to the products described herein without any prior warning.

Sevio S.r.l. denies all liability during the use or application of the products or circuit diagrams described

herein.

 
Document ID: sv_secure_local_access_en_v18_04 
https://sevio.it 3 
 
 
TABLE OF CONTENTS 
1Firewall and Secure Local Access....................................................................................................... 4
2Configuration......................................................................................................................................... 5
2.1 Sevio Portal................................................................................................................................... 5 
2.2 Local Control Stations configuration ............................................................................................. 7 
Windows 10®................................................................................................................................. 8 
Enable Internet connectivity on the Local Control Station ............................................................ 9 
Connecting to the private network............................................................................................... 10 
Disconnecting from the private network...................................................................................... 10 
Windows 7®................................................................................................................................. 11 
Enable Internet connectivity on the Local Control Station .......................................................... 13 
Connecting to the private network............................................................................................... 14 
Disconnecting from the private network...................................................................................... 14 
 

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 4

1 Firewall and Secure Local Access

Sevio Basic

Sevio One

The internal firewall, who grant the network isolation, is a fundamental feature on which Sevio Router is

based on.

The internal Firewall of Sevio Router provides many advantages:

- no IP address conflicts, no need to change the existing automation network configuration;

- more protection from local attacks;

- ensure privacy and security protection: through an exclusive and protected access from authenticated

control stations

Secure Local Access is the Sevio solution who permits a local communication between automation

devices and data processing/IT systems according to the Industry 4.0 model.

Using this guide it is possible to configure one or more exclusive and protected accesses from WAN

network to the automation devices, preserving the Firewall isolation in order to avoid complex

configurations like port forwarding.

INTERNET

WAN

LAN

INTERNET

WAN

LAN

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 5

2 Configuration

This chapter describes the configuration procedures of many operating systems. Does not precluding the

operation of other no-mentioned operating system, as long as support the VPN Client Protocol.

2.1 Sevio Portal

Sevio Portal, the web application for the Sevio system, can be used to configure and view the status of the

devices that are part of the Realm, for more detailed information please refer to the User Guide.

To enable Secure Local Access feature:

Through Sevio Portal log into

Devices section and select the

Sevio router.

Set up a static IP for Sevio Router

on the WAN network, 192.168.1.50

in the example.

NOTE: The WAN static IP address is

necessary to configure the Local

Control Station. Therefore do not

use DHCP Client to avoid the

automatic IP address modification.

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 6

Press Modify and select Local VPN

enabled.

Select or personalize the Key to set

up on Local Control Station.

Set up the IP address range

dedicate to Local Control Station.

NOTE: Each Local Control Station using a specific IP address on Sevio Network, then follow as

indicated below:

1. The IP address range indicates the amount of Local Control Stations allowed to connect

simultaneously to automation devices. The range can change from 1 Local Control Station (E.g. from

x.x.x.250 to x.x.x.250)to a maximum of 4 Local Control Station (E.g. from x.x.x.250 to x.x.x.253).

2. The first three octects in range fields must coincide with the Sevio network, 10.255.254.x in the

example.

3. The IP address range configured in the interface must be different and not overlapping with any IP

address used for remote devices (E.g. if the remote IP address is 10.255.254.250, must set up the

range from 10.255.254.251 to 10.255.254.254).

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 7

2.2 Local Control Stations configuration

Using the procedure described below, it is possible to enable the Local Control Stations to access on LAN

(automation network). It will only be configured one time for each Local Control Station.

Before starting to configure, verify that the Local Control Stations and Sevio Router are connect to the

same WAN, without interposed hub or router.

WAN

LAN

Local Control

Station

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 8

Windows 10®

Click on Start button, type “VPN”and

press Change virtual private

network.

Click on Add a VPN connection.

Select a built-in VPN provider, assign

a connection name (E.g. Sevio Local).

In Server name field type Sevio

Router WAN IP address (E.g.

192.168.1.50).

Select VPN type L2TP/IPsec with

pre-shared key then as pre-shared

key type sevio.

Type in Username field local-vpn and

in Password field the key sets on

Sevio Portal.

Flag Remember my sign-in info,

then Save.

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 9

Enable Internet connectivity on the Local Control Station

During a VPN connection, Windows OS sends all traffic to VPN and inhibits Internet connectivity.

1. Click on Start button and Type VPN.

2. Select Change adapter options.

3. Select the Local VPN then with a right

mouse button select Properties.

4. Select Network, Internet Protocol

version 4 and Properties.

5. Press Advanced.

6. Deselect flag Use default gateway on

remote network.

Document ID: sv_secure_local_access_en_v18_04

https://sevio.it 10

Connecting to the private network

Select VPN and Connect.

Disconnecting from the private network

Click on the Sevio Local network (or the

name set during setup of the private

network) using Network icon in the

application bar and select Disconnect.

Autres manuels pour Basic

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Sevio Adaptateur

Sevio

Sevio M100 Manuel utilisateur

Manuels Adaptateur populaires d'autres marques

PCB Piezotronics

PCB Piezotronics 090B274 Manuel utilisateur

Auvidea

Auvidea J20 Manuel du produit

Gossen MetraWatt

Gossen MetraWatt AT3-III E Manuel utilisateur

Akribis

Akribis ITF-21-BISS-MIT Manuel utilisateur

Tenda

Tenda W54U Manuel utilisateur

ROHO

ROHO AGILITY Manuel utilisateur

PROLiNK

PROLiNK WN2001 Manuel utilisateur

Hawking

Hawking HUF2 Manuel utilisateur

Airlink101

Airlink101 AWLC4030 Manuel utilisateur

NETGEAR

NETGEAR XAV101v1 - Powerline AV Ethernet Adapter Manuel utilisateur

Philips

Philips SWA4554S/10 Manuel utilisateur

JVC

JVC TS-C9D2B Manuel d'instructions

NETGEAR

NETGEAR A6100 Manuel utilisateur

D-Link

D-Link DWA-121 Manuel utilisateur

Philips

Philips SWA2037 Manuel utilisateur

Basalte

Basalte 0610-20 Manuel utilisateur

Yealink

Yealink EHS40 Manuel utilisateur

Balluff

Balluff BIC 1B0-IT1A7-Q40KFU-SM4A4A Manuel utilisateur