SEVIO User Guide https://sevio.it
2017 Sevio. All rights reserved. Trademarks Sevio is an Sevio S.r.l. trademark. Microsoft, Windows are a Microsoft Corporation registered brand. Other product names and brands are registered brands or trademarks of their respective owners. Declaration of terms In the interest of improving internal design and operational aspects, Sevio S.r.l. reserves the right to make changes to the products described herein without any prior warning. Sevio S.r.l. denies all liability during the use or application of the products or circuit diagrams described herein. https://sevio.it 2
Summary Industrial production demands in the era of globalization or delocalization are becoming increasingly more complex. Within this context, creating a network of systems, processes and information is critical in order to ensure success in a perpetually competitive environment and guarantee a continuous presence. Thus, the possibility to remotely manage a production system becomes a keystone allowing reduced processing times and costs, subsequently increasing and enhancing the performance of your business. Our objective is to offer a system that complements existing computer technology, offering Clients simple, efficient and secure control solutions. The aims of the Sevio system are: to offer Clients a private, affordable and continuously available network; to relieve Clients of the need to perform complex configurations and subsequent maintenance; to guarantee the highest standards of security; to offer an efficient and timely system during all stages of a project's development. Using this manual it is possible to perform the most appropriate and immediate procedures in the initial stages of using the Sevio system. We will show step-by-step mechanical and electrical installation instructions for the Sevio system as well as the functions that are available locally and remotely. The Sevio solution does not require any software or additional hardware. Using the Sevio Portal, the web application available at https://sevio.it, you can change parameters, display the status, and much more. The fundamental requirements for use the Sevio system are: the Sevio Router; the Registration Sheet (supplied along with the Sevio Router); a PC with an up-to-date web browser; an Internet access. So at this point, enjoy! Sevio S.r.l. https://sevio.it 3
Table of contents 1 Sevio Router installation... 5 1.1 Mechanical installation... 5 1.2 Electrical installation... 6 1.3 Ethernet ports... 6 1.4 USB port... 7 1.5 Reset button... 7 1.6 Diagnostics... 8 2 The Realm... 9 Associating the Sevio Router to the Realm... 9 Associating the Control Stations with the Realm... 9 3 The Networks... 10 4 Sevio Portal... 11 4.1 Registering a new Realm... 11 4.2 Account details... 12 4.3 Change Password... 12 4.4 Devices... 13 4.5 Status... 13 4.6 Parameters... 14 4.7 The Control Stations... 19 4.8 The Operators... 20 4.9 Firewall... 22 4.10 Multi Realm Operators... 22 5 Sevio Router on location... 23 6 Sevio Router access... 24 6.1 Internet access through Mobile Broadband Modem... 24 6.2 Internet Access through the network in the installation location... 25 7 Configuring Control Stations... 27 8 Use of Sevio system... 30 9 Configuring of network devices... 31 10 Registration Sheet... 32 11 Prerequirements Internet Connection... 33 12 Declaration of conformity and warranty... 34 https://sevio.it 4
1 Sevio Router installation This chapter provides the Sevio Router mechanical and electrical installation instructions. At the time of purchase, your package will include the following items: Sevio Router 8-30V DC power supply (only for Sevio Basic) Power terminal block connector USB key Wi-Fi antenna (only for Sevio Basic) Quick Start-up guide Registration Sheet USB key Sheet If any components are missing or damaged or if you have any questions regarding the contents, contact us at support@sevio.it. 1.1 Mechanical installation Sevio Router is equipped with a clip to hold the device on a standard 35 mm DIN rail. The top of the hook must first be set on the DIN rail. Then just press down (step 1) and at the same time turn the Sevio Router until it is vertical (step 2). https://sevio.it 5
1.2 Electrical installation Sevio Basic Sevio One The Sevio Basic s power supply connector is in the bottom. It requires 8 to 30 V DC and the maximum absorption at minimum voltage is 1 A. We suggest protecting the power supply with a time-delay fuse (not greater than 2 A) and to ground the terminal. 1.3 Ethernet ports INTERNET LAN NETWORK INTERNET LAN NETWORK Sevio Basic Sevio One The network field devices (PLC, HMI, and any other IP device) are connected to the Sevio Basic RJ45 connectors numbered 1-4 or to the Sevio One LAN port. Both MDI and MDIX cables can be used. The Sevio Router Ethernet ports self-network speed/duplex and support 10, 100, 1000 Mbit/s. (Sevio Basic). One or more switches can be cascaded to increase the number of nodes in compliance with the Ethernet standard up to a maximum configuration of 253 IP devices. Automatic crossover adaptation is supported but not recommended if not necessary as it limits the speed to 100 Mbit/s. The door marked WAN is used to connect the Sevio Router to an Internet access point or to connect the router directly to an ADSL modem. https://sevio.it 6
1.4 USB port Sevio Basic Sevio One The Sevio Basic s USB port is in the bottom, the Sevio One s USB port is on the top. There is a USB port that can be used to connect the device to the internet with the Mobile Broadband Modem option (only Sevio Basic). The USB port may also be used to configure the Sevio Router offline through an appropriately configured USB flash drive. (see chapter Changing parameters offline) 1.5 Reset button Do not press without being instructed by our technical support, incorrect operation may require a factory restore. https://sevio.it 7
1.6 Diagnostics The description of the LED indicators on the device is below. These provide the user with important information. Power This indicator flashes when the boot operation is in progress and remains steady once the Sevio Router is completely started. Wi-Fi Note: Indicator only present on Sevio Basic. In Access Point mode the indicator is on steady if at least one device is connected to the LAN. When Sevio Basic is operating in Station mode, the steady LED means that the device is connected to an Access Point. Info The light turns on if the virtual private network (VPN) is active. Since that time the device can be reached remotely. Note: On Sevio One the flashing indicate the change of a parameter. Ethernet All of the Ethernet ports on the Sevio Router are connected to a light that is on and steady if a device is connected and flashes when there is traffic. NOTE: Remember that the VPN status could show active up to a few minutes after connection has been lost. https://sevio.it 8
2 The Realm SEVIO NETWORK Realm SEVIO NETWORK SEVIO NETWORK The Sevio system was created to provide the Customer with a solution for connecting to several independent and physically spread out networks, transforming them in several Sevio networks. Each customer owns a Realm, or the infrastructure made up of all of the Sevio networks and the Control Stations (PC, tablet, smartphone). Inside a single Realm, each device with IP connectivity can be reached by the Control Stations and can talk to other local or remote devices. Associating the Sevio Router to the Realm A Sevio Router is associated to the Realm using Sevio Portal, the Sevio system web application accessible on the webpage https://sevio.it. The Sevio Router is associated to the Realm during the Registering a new Realm or, for later Sevio Routers directly from the Sevio Portal in the section Add Device. Associating the Control Stations with the Realm Control Stations are devices (PC, tablet, smartphone...) that are used to access the Sevio Networks. Even Control Stations do not need any software so they can use any operating system. To use it and for the first configuration, an Internet access point is required (see chapter Configuring Control Stations). https://sevio.it 9
3 The Networks The following illustration shows the networks present on the Sevio Router. WI-FI WAN Sevio Network WAN Sevio Network INTERNET LAN INTERNET LAN Sevio Basic Sevio One WAN Network available in the installation location used by the Sevio Router for Internet access only. LAN Network made up of all of the field devices Note: Network only present on Sevio Basic. Wi-Fi Network The network can be used in two different ways: - Access Point: Connects the devices associated to the LAN and/or WAN according to the SSID selected. - Station: Connects the Sevio Router to the Wi-Fi network in the installation location. As an alternative to the cabled WAN connection. Sevio Network Network used for remote access: with permission from the Firewall, it allows the connection of the Control Stations or devices from other Sevio networks in the same Realm to the devices connected to the LAN. https://sevio.it 10
4 Sevio Portal Sevio Portal, the web application for the Sevio system, can be used to configure and view the status of the devices that are part of the Realm. No software needs to be installed: just access the webpage https://sevio.it. Sevio Router is installed on separate systems so the ability to change the configuration remotely offers an enormous advantage. Sevio Portal is used to: manage the configuration and display the status of all of the Sevio Routers associated with the Realm; manage the configuration and implementation of the Control Stations (PC, tablet, and smartphone); manage the account data; manage supplementary accounts. 4.1 Registering a new Realm To register a new Realm, access page https://sevio.it, press the button Access Sevio Portal (or you can directly access it from the page https://portal.sevio.it) selecting the option New Registration. Fill out the registration form including the Registration Key on the Registration Sheet for the Sevio Router purchased. By pressing the Register! button, the user completes the creation of the Realm for the individual account and at the same time associates a new device. At this point the new user receives a certified e-mail with the password to be used to access Sevio Portal. https://sevio.it 11
4.2 Account details In this section you can view and set the data for the account being used. Proper compilation of the following fields is indispensable when User identification is required (E.g., forgotten password, etc.). 4.3 Change Password In this section you can set the password for your account, which is needed to access Sevio Portal and to configure the Control Stations. https://sevio.it 12
4.4 Devices After accessing Sevio Portal, or pressing the Devices button on the MENU bar, you can access the list of Sevio Routers associated with the current Realm. MENU Devices List Bar Devices Location 4.5 Status Clicking on one of the Sevio Routers in the Device List access the specific area. In this section you can view the status of the router and display/change the parameters on the device. offline: Sevio Router not reachable remotely. online: Sevio Router reachable remotely. It is possible to change the parameters and remotely access the Sevio network. ready: the parameters set on the Sevio Portal are aligned with the parameters on the Sevio Router. updating: the parameters set on the Sevio Portal may be different than the parameters on the Sevio Router. https://sevio.it 13
4.6 Parameters Communication between the PC and the Sevio Router is through the Sevio system : both devices only need to be connected to the Internet. The parameters are changed in real time. Changing parameters online To change or view the parameters proceed as follows: 1. access Sevio Portal and select with double-click the specific Sevio Router in the Devices section; 2. press the Modify button (the background of the parameters that can be changed will become white); 3. confirm the changes by pressing the Save button or cancel by pressing the Cancel button. Changing parameters offline If the Sevio Router cannot be reached (offline), after saving the parameters, proceed as follows: 1. press the Offline Configuration button. The configuration file will be saved on the PC; 2. transfer the configuration file to the USB Key (included into the packaging) or to a common empty USB flash drive formatted with the FAT32 file system; 3. insert the flash drive in the USB port on the Sevio Router; 4. wait for the beep signaling loading is complete (on Sevio Basic) or the flashing light signaling (on Sevio One) https://sevio.it 14
DHCP Client OFF ID: the Sevio Router data PARAMETER DESCRIPTION DEFAULT Name System identification name, may be changed by the customer. - Position Installation location position, may be changed by the customer. - SEVIO Network Service Tag Network assigned to the Sevio Router to be used for remote access to the devices on the LAN. This parameter cannot be changed. Sevio Router identification code. This parameter cannot be changed. Registration Sheet or Sevio Portal Registration Sheet or Sevio Portal WAN: Internet access point (network in the installation location) PARAMETER DESCRIPTION DEFAULT DHCP Client The address and the WAN Gateway for the Sevio Router are automatically assigned by the network in the installation location. The address and the WAN Gateway for the Sevio Router must be manually set by the user. This parameter is only for cabled WAN port connections. ENABLED WAN address Address manually assigned to the Sevio Router corresponding to the network present in the installation location. This parameter is only for cabled WAN port connections. NOTE: The use of /24 specifies the routing prefix (255.255.255.0) and must always be set. E.g., 192.168.10.20/24 - Gateway Router address in the installation location that sends the traffic to the Internet. This parameter is only for cabled WAN port connections. - https://sevio.it 15
LAN: the network of field devices PARAMETER DESCRIPTION DEFAULT DHCP Server In the LAN, the Sevio Router is the DHCP server. If enabled, it can automatically assign address to connected devices. ENABLED Masquerade LAN Address Masquerade mode enabled: from the Control Stations you can also access field devices on which the Gateway address was not set. NOTE: When Masquerade mode is enabled the routing functions are disabled so communication between devices belonging to different Sevio networks is not possible. The Sevio Router LAN address can be changed by the user, verifying that the IP corresponds to the network of connected devices. 1 NOTE: to make the automation devices visible remotely, set private and not public address belonging to one of the following intervals. STARTING ADDRESS ENDING ADDRESS from 192.168.0.1 to 192.168.255.254 from 10.0.0.1 to 10.127.255.254 from 172.16.0.1 to 172.31.255.254 DISABLED 192.168.1.1 Wi-Fi network in ACCESS POINT mode (only on Sevio Basic) PARAMETER DESCRIPTION DEFAULT Enable WiFi Mode Country Frequency Wi-Fi enabled All Wi-Fi functions are disabled Access Point: connecting a device to the Wi-Fi Sevio Router makes the following possible: - Access all field devices in the LAN. - Automatically access an Internet access point. Final installation location needed to align the Wi-Fi network parameters according to local regulations. Frequency and channel used by the Wi-Fi network. Allows you to select one of the Wi-Fi channels to be used to connect the devices connected to the Sevio Router in wireless mode. Sevio Router can identify the available channels itself when in Automatic mode. Sevio Router and the connected devices must have the same frequency (same channel). NOTE: once the configuration has been saved in Automatic mode the field will appear empty. ENABLED ACCESS POINT ITALY AUTOMATIC 1 Corresponding address: address with the same first three octets (e.g., 192.168.0.12 and 192.168.0.27, 192.168.0.x). https://sevio.it 16
WAN Enabled ON SSID WPA Password WAN Enabled WAN SSID WAN Password WLAN name. Connecting a device to the Sevio Router with the LAN SSID specified will make it possible to access all of the field devices in the LAN. NOTE: The connected device can be configured as a DHCP Client (automatically obtains IP) only if the DHCP Server parameter in the LAN settings is enabled. Otherwise, the IP on the connected device must be compliant with the LAN network. Password to be used to access the WLAN. - Enabled: a second Wi-Fi network is enabled that allows access to the WAN (the network in the installation location) and connection to the Internet. The LAN (field devices) cannot be accessed from this network. WWAN name. NOTE: The connected device can be configured as a DHCP Client (automatically obtains IP) only if the installation location has a DHCP Server. Otherwise, the IP on the connected device must be compliant with the network in the installation location. - DISABLED Password to be used to access the WWAN. - - Wi-Fi network in STATION mode (only on Sevio Basic) PARAMETER DESCRIPTION DEFAULT Enable Wi-Fi Mode Country Wi-Fi enabled All Wi-Fi functions are disabled Station: Connect the Sevio Router to an existing Wi-Fi network for Internet access or connect it by cable to the WAN. Final installation location needed to align the Wi-Fi network parameters according to local regulations. ENABLED ACCESS POINT ITALY Frequency Frequency and channel used by the Wi-Fi network. Allows you to select a Wi-Fi channel in which the Sevio Router will connect to the router wirelessly. Sevio Router can identify the Access Point channel itself when in Automatic mode. Sevio Router and the connected devices must have the same frequency (same channel). NOTE: once the configuration has been saved in Automatic mode the field will appear empty. AUTOMATIC SSID Name of the Wi-Fi network in the installation location. - WPA Password Password to use to access at the network in the installation location. Does not support WEP algorithm - https://sevio.it 17
DHCP Client OFF DHCP Client The address and the Gateway for the Sevio Router are automatically assigned by the network in the installation location. The address and the Gateway for the Sevio Router must be manually set by the user. ENABLED Address manually assigned to the Sevio Router corresponding to the network present in the installation location. WAN address This parameter is only used for the Wi-Fi connection to the network in the installation location. - NOTE: The use of /24 specifies the routing prefix (255.255.255.0) and must always be set. E.g., 192.168.10.20/24. Gateway Router address in the installation location that sends the traffic to the Internet. This parameter is only used for the Wi-Fi connection to the network in the installation location. - Mobile Broadband Modem Settings PARAMETER DESCRIPTION DEFAULT APN SIM telephone company APN setting on Mobile Broadband Modem. - PIN SIM PIN Setting on Mobile Broadband Modem. NOTE: Although the Sevio system is completely compatible with this safety parameter, we recommend caution to avoid irreversibly locking the SIM card. Conversely, if the PIN is not present, leave the field empty. - Notes field The notes field lets you enter some notes related to the Sevio Router such as the current configuration of the field IPs or information visible to all operators who can access the Parameters section through the Sevio Portal. Generic notes on Sevio Router connectivity. Changing any parameter on the Sevio Portal also changes the configuration of the Sevio Router. Therefore, the connectivity guaranteed by the Sevio Network could be lost for a few seconds and remote control may not be possible during that time. The local switch function remains active however. Whenever Sevio Basic is connected to the same network with a cabled connection (WAN) or with Station mode (Wi-Fi), make sure not to manually set (DHCP OFF) two identical addresses. In Wi-Fi Station mode, Sevio Basic is compatible with all MOBILE HOTSPOTS that can be generated by a common smartphone or tablet. https://sevio.it 18
4.7 The Control Stations When configuring a Control Station, regardless of the operating system used, the following data is required: Internet address: vpn.sevio.it Username and Password: the same one used to access to Sevio Portal. One of the advantages of the Sevio system is that it gives the user the ability to access the Realm from different Control Stations if configured appropriately (see chapter Configuring Control Stations) using the parameters provided above. To access it simultaneously from different PCs, tables, or smartphones, just create additional credentials to be associated to the new posts on the Sevio Portal in the Accesses section, as indicated below. Creating a new Control Station Access in the Accesses section and press Create new access button. Insert the description of the new Control Station and press Save. Use the Username generated to configure the VPN on the new Control Station. Changing a Control Station From the Control Stations list you can access the properties and change (with double-click) the description or remove it by pressing Delete. https://sevio.it 19
4.8 The Operators In the Operators area, the Admin may invite other Users and set their access privileges: a User invited as an Admin can access all of the Sevio devices in the Realm, an external integrator or final customer may have access to preset systems with limited privileges. Roles The primary differences between the Admin and a regular User are listed below: ADMIN USER Access to Sevio Portal YES YES Change personal account data and password Access to Control Stations section YES YES YES YES Access to Operators section YES NO Access to Firewall section YES NO Access to Sevio Routers Parameters List of Sevio Routers associated to the Realm Remote access to the Sevio networks READ AND WRITE ALL ALL READ ONLY ONLY THE SEVIO ROUTERS AUTHORIZED IN THE FIREWALL ONLY THE SEVIO ROUTERS AUTHORIZED IN THE FIREWALL https://sevio.it 20
Inviting a new Operator Access to the Operators section and press Invite an Operator. Fill out the email of the user to be invited to the Realm in use. Select the role (Admin or User) to assign to the Operator. The role can be changed at any time as indicated in Edit an Operator. Establish whether the Operator can access all or any Sevio network. Typically, no network is selected for the User and the desired accesses are enabled through the Firewall section. When Invite! button is pressed a confirmation message appears. The new operator will receive an email with instructions for completing the registration procedure. At this point the new user will automatically be added to the list of Realm Operators. Edit an Operator From the Operator list you can access the Operator properties and change the role, with double-click. The Operator can be removed from the Realm using the Delete button. https://sevio.it 21
4.9 Firewall In the Firewall area the Admin operator can determine the accesses to the specific Sevio network. It is also possible to authorize interaction between several Sevio networks needed, for example, to enable the dialogue between two PLCs of two geographically separate systems. The Firewall properties for each Sevio Router can be customized through the Sevio Portal as indicated below: From the Devices section, select the specific Sevio Router whose Firewall you wish to edit. In the Firewall section you can enable or disable Operators and other Sevio Routers for access to the Sevio network of the router being edited. When Save is pressed, the changes are saved and propagated to the Sevio Router being edited. 4.10 Multi Realm Operators Sevio Portal supports multi Realm management, or the possibility for the Operator to participate in several Realms. Just access Sevio Portal using his credentials and, as shown in the figure below, select the desired Realm. https://sevio.it 22
5 Sevio Router on location Sevio is a system that offers many functions, each one created as a response to the customer's needs, working with them in all phases of setting up a system, requesting the minimum amount of operations and ensuring the best results. Sevio Router comes preconfigured and ready to use. However, using Sevio Portal you can change the factory settings, locally or remotely. WI-FI INTERNET LAN INTERNET LAN CLIENT DHCP Sevio Basic Sevio One DHCP Server Sevio Router is preconfigured as a DHCP server on the LAN. This means it can automatically assign addresses to devices connected to LAN network or to the Wi-Fi network (only on Sevio Basic). Gigabit Switch (only on Sevio Basic) Sevio Basic is a Gigabit industrial Switch that ensures traffic with high data volumes at high speed thanks to the 4 10BASE-T, 100BASE-T, and 1000BASE-T ethernet ports, both in full-duplex and half-duplex mode. Sevio Basic supports the self-adaptation of MDI/MDIX cables, completely eliminated the use of crossover cables. The ports can automatically recognize the type of device connected and automatically adapt the Tx and Rx polarity. Wi-Fi (only on Sevio Basic) There are two distinct scenarios with the Wi-Fi network: Access Point mode allows access to the LAN (the field network) from any properly authenticated device with a wireless card such as a PC for programming devices, a Tablet for test operations on the system, or a smartphone for surfing the Internet. Station mode, allows Sevio Basic to be directly connected to the Wi-Fi network in the installation location equipped with Internet access. This access can also be through a MOBILE HOTSPOT generated by a common smartphone. Sevio Basic is preconfigured in Access Point mode so, without changing the configuration, just select the network indicated in the Registration Sheet document to then be authenticated with the special password. https://sevio.it 23
6 Sevio Router access Sevio Router access requires an Internet connection in the system installation location, using the computer network or a mobile connection. When the LED on the Sevio Router is on, the system is connected. 6.1 Internet access through Mobile Broadband Modem In order to make a mobile connection, the optional Modem supplied by Sevio S.r.l. is required along with a SIM set up for data traffic. From Devices section, through Sevio Portal, select the specific Sevio Router Click on Modify, set the APN for the telephone company and the SIMcard PIN if applicable. Save the current configuration and, for the Sevio Router Online, the parameters are updated automatically. NOTE: we recommend removing the PIN from the data SIM beforehand and leaving the PIN parameter empty on Sevio Portal. For Sevio Offline: Download the configuration you just edited using the Offline Configuration button; Save the file to an empty USB flash drive formatted with the FAT32 file system; Insert the flash drive in the USB port on the Sevio Router; A signaling on Sevio Router will confirm that the update was successful. https://sevio.it 24
6.2 Internet Access through the network in the installation location Sevio Router does not require changes to the installation location network (setting static addresses or opening ports). It behaves like a common PC connected to the Internet. It is best to specify that the WAN is used by Sevio Router only as an Internet access. The WAN and the field network (LAN) are always isolated from each other. As in the initial configuration, on the WAN Sevio Router shows up as a DHCP Client so the installation location network will automatically assign a valid address. Cabled connection to the installation location network: setting a static IP Through Sevio Portal, access the Devices section and select the specific Sevio Router. Click on Modify Client. and unflag DHCP Set the address established for the Sevio Router and the Gateway address. Save the current configuration and, for the Sevio Router Online, the parameters are updated automatically. NOTE: The use of /24 for the Sevio Router address specifies the routing prefix (255.255.255.0) and must always be set. For Sevio Offline: Download the configuration you just edited using the Offline Configuration button; Save the file to an empty USB flash drive formatted with the FAT32 file system; Insert the flash drive in the USB port on the Sevio Router; A signaling on Sevio Router will confirm that the update was successful. https://sevio.it 25
Wi-Fi connection to the network in the installation location (only on Sevio Basic) Through Sevio Portal, access the Devices section and select the specific Sevio Router. Press the Modify button and select the Station mode for the Wi-Fi network. Set the Frequency parameter to Automatic. In the SSID parameter, enter the name of the Wi-Fi network in the installation location. In the WPA Password parameter, enter the password for the Wi-Fi network in the installation location. Click Save to confirm. If the network in the installation location does not have a DHCP Server, set a static IP: Unflag DHCP Client. Set the address established for the Sevio Router and the Gateway address. Save the current configuration. For Sevio Router Online, the parameters are updated automatically. NOTE: The use of /24 for the Sevio Router address specifies the routing prefix (255.255.255.0) and must always be set. For Sevio Offline: Download the configuration you just edited using the Offline Configuration button; Save the file to an empty USB flash drive formatted with the FAT32 file system; Insert the flash drive in the USB port on the Sevio Router; A signaling on Sevio Router will confirm that the update was successful. https://sevio.it 26
7 Configuring Control Stations By configuring the Control Stations, the Operators authorizes their post (PC, tablet, smartphone) to connect with all of the accessible Sevio Networks (Sevio Routers). In this chapter we describe the procedure for configuring a PC with the Windows 10 operating system. For other operating systems, refer to the manual "Control Stations". Before starting make sure: The Control Station has an Internet access The Operator has the credentials to access to Sevio Portal. https://sevio.it 27
7.1 Windows 10 Click on Start button, type VPN and press Change virtual private network. Click on Add a VPN connection. Connecting to the private network Select a built-in VPN Provider, assign a connection name ( E.g. SEVIO or Virtual Network ), in Server name field type vpn.sevio.it. Enter Username and Password for the Sevio account, flag Remember my sign-in info and click Save. https://sevio.it 28
Select the VPN and click Connect. NOTE: Sevio Portal allows access to several operators at the same time. Each operator can also use several Control Stations. For simultaneous use of the Control Stations by the same operator, refer to the paragraph Appendix in the manual Control Stations. Disconnecting from the private network Click on the SEVIO network connected (or the name set during setup of the private network) using the Network icon in the application bar and press Disconnect. https://sevio.it 29
8 Use of Sevio system Control Station 10.254.12.30 Plant A Plant B Sevio Network 10.254.12.x Sevio Network 10.128.71.x IP: 192.168.1.30 IP: 192.168.1.30 IP: 192.168.1.31 IP: 192.168.1.1 IP: 192.168.1.1 Each Sevio Router is distinguished by a specific Sevio network. In the example above, the Sevio network of plant A is 10.254.12.x, while the Sevio network of plant B is 10.128.71.x. To access the PLC of system A from the Control Stations, it s sufficient to combine the first three bytes of the specific Sevio network with the fourth byte of the PLC address: Sevio Network plant A.... 10. 254. 12. x PLC address plant A.... 192. 168. 1. 30 Remote PLC address plant A.... 10. 254. 12. 30 https://sevio.it 30
9 Configuring of network devices The Sevio system allows Control Stations to communicate with all devices connected to the various Sevio Routers. Another exclusive feature of the Sevio system is routing, or rather the possibility for communication between devices connected to different Sevio networks, yet forming part of the same Realm. Realm Plant A Plant B Sevio Network 10.254.12.x Sevio Network 10.128.71.x IP: 192.168.0.1 IP: 192.168.0.104 IP: 192.168.1.83 IP: 192.168.1.1 To use the routing feature, it is required to configure the Sevio Router as the default Gateway IP address into all the network devices that communicate with each other. IP address...192.168.0.104 Subnet Mask.. 255.255.255.0 Gateway..192.168.0.1 IP LAN.192.168.0.1 IP address...192.168.0.105 Subnet Mask.. 255.255.255.0 Gateway..192.168.0.1 https://sevio.it 31
10 Registration Sheet This document includes the essential data for the device and is indispensable for registering the Sevio Router. The figure above shows the example of the Registration Sheet of Sevio Basic which includes very useful information for the operation of your Sevio Router. Below is a simple description: Sevio Network IP WAN MAC Address WAN SSID Wi-Fi (Basic) Password Wi-Fi (Basic) MAC Address Wi-Fi (Basic) IP LAN Part No Date Service Tag Registration Key Pre-assigned and unique virtual network IP for Sevio Router, or the address call made available for each Sevio system. Default configuration protocol in DHCP client mode. Media Access Control, unique identifier address assign to Wi-Fi device. Service Set IDentifier is the name of the Wi-Fi network. Wi-Fi network protection code so that only authorized users can access it. The safety protocol used is WPA-2. Media Access Control, unique identifier address assign to device. Sevio Router IP address in the field network. Model identification code Production date Product serial number Code needed to register the product. https://sevio.it 32
11 Prerequirements Internet Connection Sevio Router o o o o Sevio Router doesn t need any public IP or any ports opened from outside to inside on the Company firewall. The IP can be statically or automatically assigned via DHCP, be sure that MAC based filter is not applied. The IP address should be able to reach this public IP: vpn.sevio.it Ensure that have not been intentionally closed on the Company firewall the following ports: DNS: 443 TCP - OpenVPN: 1194 TCP/UDP (53 TCP/UDP - NTP: 123 UDP). Control Station (PC, tablet, smartphone) o o o The Control Stations doesn t need any public IP or any ports opened from outside to inside on the Company firewall. The Control Stations should be able to reach this public IP: vpn.sevio.it Ensure that have not been intentionally closed on the Company firewall the following ports: SSTP: 443 TCP - OpenVPN: 1194 TCP/UDP - L2TP: 1701 TCP/UDP - PPTP: 1723 Port GRE(47). https://sevio.it 33
12 Declaration of conformity and warranty Sevio S.r.l. declares that the Sevio Basic device is compliant with the essential requirements and all relevant provisions of Directive 1999/5/EC. Sevio S.r.l. declares that the Sevio One device is compliant with the essential requirements and all relevant provisions of Directive 2014/30/EU. Extended Declarations of Conformity may be requested by contacting sales@sevio.it. Every request for replacement under warranty must be sent before the expiry of the 2-year warranty and must be transmitted together with the product that has allegedly presented an anomaly. SEVIO Sevio S.r.l. Via Dei Caniana, 6/a Bergamo (IT) Tel. (+39) 035 0514333 Email customer assistance: support@sevio.it Email sales department: sales@sevio.it https://sevio.it https://sevio.it 34