NAT 1:1 on Flexy not working

nat1:1

#1

Trying to get NAT 1:1 setup using Tim B’s great setup guide and not having luck.
I’m trying to access both a Siemens PLC and an Automation Direct C-more HMI behing the Flexy via the Wan side.

I can access the PLC and HMI remotely just fine thru the cloud, but my customer’s maintenance people want to get there also thru their plant WAN.

I have followed Tim’s guide exactly and can’t get it to work at all.

The Flexy’s Wan port is on a static address 192.168.40.1. It’s Lan ports are at 10.16.61.1.
The Siemens S7 PLC is on the Lan side as 10.16.61.10 and the HMI is 10.16.61.20.

I have Allow all traffic on Wan button checked.
I have Wan IP forwarding box checked.

I have Nat on Lan (Plug’n Route selected), and enable transparent forwarding checked.
I have Nat 1:1 on Wan mapping selected.

My Nat routes are:
Lan 192.168.40.10 mapped to 10.16.61.10 (PLC) and
Lan 192.168.40.20 mapped to 10.16.61.20 (HMI)

On the Wan side with my laptop (with laptop set to a 192.168.40.x subnet address, I can ping 192.168.40.1 (Ewon Wan IP) just fine, but I canot ping either 192.168.40.10 or 192.168.40.20, nor can I initiate a browser or other connection to either.

If I put the Laptop on the Lan side, I can do either and hit the devices just fine.
Seems my NAT is not routing thru the Ewon.

Oh, and FWRDtoWAN=1, WANITFPROT=2, NATITF=3 were already set when I looked in the tabular section.

Any ideas?


#2

You need to disable NAT on LAN (Plug n Route) and set it to NAT on WAN. This is the same as setting NATItf=2. Reboot and it should work fine.


#4

Also, keep in mind that after changing that setting, you will need to make sure that all of your LAN devices have the default gateway set to be the LAN address of the Flexy.


#5

I am sorry, I misunderstood that. Please disregard my previous posts. Is there a phone number we can reach you at and then take a look with Teamviewer?


#6

If I do this, do I then have to setup the Ewon as a gateway on both the PLC’s and HMI’s IP configurations?


#7

Which device and firmware are you running?


#8

Tried that and still nothing.


#9

Flexy 205 Firmware 13.2S1

Any configs or logs I can upload?

I can be reached by a cell phone and we can do a team viewer also but dont want to post it in a public forum if this isnt a private convo.


#10

Flexy 205 V13.2S1


#11

We remove any personal info before approving any post and we can also make it a private thread.


#12

I have teamviewer installed on my laptop.


#13

Ready whenever you are. I have teamviewer on my laptop.


#15

Hey Dave,

Sorry for the delay. Did you ever send me a backup of this device? I have been able to duplicate the issue with another Flexy this week, but have 2 other devices with the same firmware where it works, so I’m trying to figure out what the link is. If you can make a backup with support files and reply with it attached, it will be securely sent to me.

Kyle