00198615-04_UM_IPC-HERMES-9852-V1.2_DE_EN_ZH.pdf - 第15页
3 Configuration 3.1 Connection configuration in the LAN Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020 15 Setting up ► Create a connection between stacker and printer. Outgoing connec…
3 Configuration
3.1 Connection configuration in the LAN
14 Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020
3.1.1 Using the Line Computer as a router
Since the line computer has two network cards and is connected to the shop floor LAN and the
SIPLACE LAN it can be used as a router for the Hermes connection. This can be achieved by us-
ing netsh from Windows.
► Issue the following commands from Windows Command Prompt started via Run as adminis-
trator.
Setting up
► Create a connection between stacker and printer:
ð netsh interface portproxy add v4tov4 listenport=40101 listenaddress=172.22.0.100
connectport=50101 connectaddress=192.168.0.1
► Establish a connection between placement machine and conveyor:
ð netsh interface portproxy add v4tov4 listenport=60101 listenaddress=192.168.0.100
connectport=50101 connectaddress=172.22.0.101
Displaying
► A list of configured connections can be viewed via:
ð netsh interface portproxy show all
Deleting
► Deleting the connections that have been set up:
ð netsh interface portproxy delete v4tov4 listenport=40101 listenaddress=172.22.0.100
ð netsh interface portproxy delete v4tov4 listenport=60101 listenaddress=192.168.0.100
NOTICE
Configuring a network card under Windows
Information on configuring a network card under Windows can also be found in the internet.
3.1.2 Using the symmedia Plug & Work Box Industrial as a router
The symmedia box of the Remote Smart Factory solution can be used as a router for Hermes con-
nections as well. Here, the Linux service firewalld is used. To issue the commands you need to
open a connection via the symmedia client to the symmedia box. Afterwards, you need to run Tools
-> Remote Console. There is also the possibility to configure the symmedia box via ssh.
3 Configuration
3.1 Connection configuration in the LAN
Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020 15
Setting up
► Create a connection between stacker and printer. Outgoing connections from the SIPLACE
LAN via symmedia box are working out-of-the-box.
► Establish a connection between placement machine and conveyor:
ð firewall-cmd --zone=red --add-forward-port=proto=tcp:port=60101:toaddr=172.22.0.101:
toport=50101--permanent
ð firewall-cmd --reload
Displaying
► A list of configured connections can be viewed via:
ð firewall-cmd --list-all-zones
Deleting
► Deleting the connections that have been set up:
ð firewall-cmd --zone=red --remove-forward-port=proto=tcp:port=60101:
toaddr=172.22.0.101:toport=50101 --permanent
ð firewall-cmd --reload
Configuring (LAN)
► Configure the symmedia box for ssh access via the root account on one of the two LAN net-
work plugs:
The ssh connection on the LAN network plugs are working out-of-the-box.
Configuring (WAN)
► Configure the symmedia box for ssh access via the root account on the WAN network plug:
ð firewall-cmd --zone=red --add-service=ssh --permanent
ð firewall-cmd --reload
Disabling (WAN)
► Disable the ssh access on the WAN network connection:
ð firewall-cmd --zone=red --remove-service=ssh --permanent
ð firewall-cmd --reload
NOTICE
Configuring a network card under Linux
Information on configuring a network card under Linux can also be found in the internet.
3 Configuration
3.1 Connection configuration in the LAN
16 Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020
3.1.3 Using the symmedia Plug & Work Box as a router
The symmedia box of the Remote Smart Factory solution can be used as a router for Hermes con-
nections as well. Here, the command iptables is used. To issue the commands you need to open a
connection via ssh on one of the two LAN network plugs and login as root.
Setting up
► Create a connection between stacker and printer:
ð iptables -A CUSTOMFORWARD -i br0 -o eth3 -p tcp --syn -d 192.168.0.1 --dport 50101
-j ACCEPT -m state --state NEW
► Establish a connection between placement machine and conveyor:
ð iptables -t nat -A CUSTOMPREROUTING -i eth3 -p tcp --dport 60101 -j DNAT
--to 172.22.0.101:50101
ð iptables -A CUSTOMFORWARD -i eth3 -o br0 -p tcp --syn -d 172.22.0.101 --dport 50101
-j ACCEPT -m state --state NEW
► You need to add the above lines in /var/efw/inithooks/rc.firewall.local in the start section for
the changes to persist.
Displaying
► A list of configured connections can be viewed via:
ð iptables -t nat -nvL
ð iptables -nvL
Deleting
► Deleting the connections that have been set up:
ð iptables -D CUSTOMFORWARD -i br0 -o eth3 -p tcp --syn -d 192.168.0.1 --dport 50101
-j ACCEPT -m state --state NEW
ð iptables -t nat -D CUSTOMPREROUTING -i eth3 -p tcp --dport 60101 -j DNAT
--to 172.22.0.101:50101
ð iptables -D CUSTOMFORWARD -i eth3 -o br0 -p tcp --syn -d 172.22.0.101 --dport 50101
-j ACCEPT -m state --state NEW
► You need to delete the above lines in /var/efw/inithooks/rc.firewall.local in the start section for
the changes to persist.
NOTICE
Configuring a network card under Linux
Information on configuring a network card under Linux can also be found in the internet.