Port Forwarding Issue - Ecostruxure Machine SCADA Expert (Vijeo XL)

[budimanc]

Hi all,

I need some help regarding port forwarding issue at Ecostruxure Machine SCADA Expert and has been installed with thin client user.

I can connect through LAN connection by using internet explorer to my server.

But if by using the internet, i still failed to cnnect altough i have Ip publick with TCP port.

Could you please help, what configuration do I need to set on the software?

Thx. 

[TomDroll]

Hello budimanc,  just to confirm, you are able to browse your project with Internet Explorer on the local area network but not over the internet? Are you trying to connect over the internet using Internet explorer.  Is it the same PC?  What message do you get when you try to browse? Make sure that IE allows for Active X controls (or at least prompts).

If you can browse locally, it sounds like your webserver is working.  Just make sure that your project folder is shared - and the project folder’s security has IUSR and [Computer Name]/IIS_IUSRS added.

To answer your original question, If using port forwarding, make certain it is set up correctly to direct to the correct IP address on the following ports:
Port 1234- Data Server (IWS Runtime)
Port 80-Web Server (HTTP) (or the port configured in Microsoft IIS or Webserver of choice)
Port 443-Web Server (If using HTTPS/SSL)

I hope this helps, Let us know the results.

regards,

Tom Droll

[budimanc]

Hi Tom,

Thx for the reply.

I got Ip Public from my IT department with TCP port: 6789.

Below i put attached photos for you to help me

Thx.

Best Regards,

Budiman Chandra

[TomDroll]

Hi budimanc, sorry for the delay, so are you still having issues? 

How do you have the web server settings (Microsoft IIS)

I have a couple of thoughts/comments on your screen captures - but wanted to confirm this is still an issue.

[budimanc]

Hi Tom,

Yes this is still an issue and still need help.

Here i screenshot the IIS setting.

Thx.

Best Regards,

Budiman Chandra

[TomDroll]

Hi  Budimac - I replied on Monday but I don't see it here so I will try again.  Can you confirm a few things.  

You mentioned a PC/Client works on the Internal network?  If so - what are you putting in the web address bar? 

So if it works on local network,  but not on the WAN or Internet,   is the same PC used or are they different PC's?  If they are different, can you test the one that you are using external on local network (eliminate PC). 

Do you get a message on the external PC's browser - like site not found or anything?

If the PC works on local network, but not external - definitely sounds like a networking issue.  you mentioned port forwarding - are you confident this has been configured correctly in the router?  Lots of variables to consider - but first thing, lets confirm you can browse the application on the internal network.,

I also attached a thin client troubleshooting guide which is a good reference.  

[budimanc]

Hi TomDroll,

You mentioned a PC/Client works on the Internal network?  If so - what are you putting in the web address bar? 

- Yes, local Ip address: 172.17.33.50/home.html and it works well

So if it works on local network,  but not on the WAN or Internet,   is the same PC used or are they different PC's?  If they are different, can you test the one that you are using external on local network (eliminate PC). 

- Different PC with Thin Client installed and used Internet Explorer. I have tested it and i can access the directory of my program with Public IP Address xxx, but i failed to connect it with xxx/home.html

If the PC works on local network, but not external - definitely sounds like a networking issue.  you mentioned port forwarding - are you confident this has been configured correctly in the router?  Lots of variables to consider - but first thing, lets confirm you can browse the application on the internal network.

- Seems like its not networking issue, since i have tried make a simple HTML page and can access it thorugh internet with above IP.

Please guide me.

Thx.

Best Regards,

Budiman Chandra 

[TomDroll]

Ok, I am not 100% sure this will work but try and remove the IP address from the Data Server and Secondary Data server. Re-publish all the pages and let me know the result.  

[TomDroll]

Ok with the IP address' removed - does it still work locally?

[kingslim]

Hi, I will just go straight into troubleshooting guidelines. You mentioned the application works on LAN, but once it is on WAN (trying to access from Internet), it does not. This indicates a port forward issue over at the router, this is what I believe. Or there may be firewalls/proxies somewhere that prevents the traffic between router and HMI, or even on the external device itself that can be blocking port traffic. Port traffic troubleshooting is done by a magical good old DOS days command call Telnet.

Let’s get to basics…  Make sure this is enabled in your Windows (Telnet Client).

Then go into the command prompt, and do a Telnet into whatever port you want to check. In this example, I am going for data port 1234 (“telnet [ip addy] [port number]”).

If the port is open all the way through proxies, firewalls and router, you will get the below response, a blank screen. And this is good. Just close the command prompt.

If it does not, it shows up like the below. This means you will have to go check on all the proxies, firewalls and router along the way to see which one is blocking the traffic.

And that’s it. Just take note, you are saying that the IT department had assigned you port 6789 at the WAN side of the router. So, in order to check if 6789 had been properly configured to route traffic to whatever port on the HMI in the LAN side, get on to the Internet or the WAN side. Telnet to IP of WAN and that port (example: “telnet 203.123.12.33 6789).

[budimanc]

Hi Kingslim,

Thank you for the reply.

I have used telnet to WAN IP with port 6789 from my IT Department and i get the blank screen, means it is good.

But still i can't access the home page(IP WAN/home.html) of my project while i have already access my directory.

Below i attached some screenshot of the alarm.

Thx.

Waiting for your reply soon.

[TomDroll]

Hi Yes you need to make sure the data server port is forwarded. I think we may have covered a few of the topics below, but just wanted to post again to confirm.

DId you get a chance to look at the Thin Client Troubleshooting guide i posted earlier?  I can post again if you didn't get it.

but there is a before you begin section that states:

Verify the IP address of the runtime device.
If using port forwarding, make certain it is set up correctly to direct to the correct IP address
on the foll ports:
Port 1234- Data Server (IWS Runtime)
Port 80-Web Server (HTTP)
Port 443-Web Server (If using HTTPS/SSL)
If using firewalls/antivirus software, make certain the above ports are configured to allow access.

And then this

Web Settings dialog configuration

 Is the Data Server IP/Secondary Data Server IP correct?
     oTIP: If the Data Server (in the IWS Runtime) and the Web Server (e.g. IIS) have the same IP address,this field can be                   left blank.
Under the Advanced section, unless connecting on a single port, leave Web Tunneling Gateway disabled.This is for certain port security situations and is not commonly used. Please read the Technical Reference for more information.

Did you Publish the project (Application Menu>Publish>Save all as HTML)? This needs to be done if any changes are made in the project’s Web settings.
Check the box when completed.

Double check the port forwarding and let us know,

Thanks.

[budimanc]

Hi All,

Thx for all your support, everything works well.

I'm here to reply what I've done for this case.

IT department help to do mapping port such as:

- IP LAN:80 to IP WAN:6789

- IP LAN:51234 to IP WAN:51234

@TomDroll 

@kingslim

Really thx to both of you

I've got another case with Custom Widget(HTML5) didnt work on thin client, i will create a new topic for this case.

Thx.

[TomDroll · Accepted solution]

Excellent!! 

Thank you very much for the feedback!

Congrats!