Helmholz REX 200 User manual

Quick Start Guide REX 200/250 3G|LTE
Version
3en from FW 6.0.5
www.helmholz.com

Quick Start Guide REX 200/250 3G | LTE
2
Content
1. Introduction 3
2. Preparation of the REX 200/250 3
3. Access to the myREX24-V2 portal 6
4. Initial router conguration via the myREX24-V2 portal 8
5. Router conguration transfer options 11
6. Connection with the machine network 14
7. Tips and tricks 16
8. Remote maintenance of Ethernet CPUs 20
9. Setting up the MPI/PROFIBUS interface (only REX 250) 21
10. Setting up VCOM-LAN for serial communications (only REX 250) 22
11. Description of LEDs and buttons 23
12. Resetting to factory settings 24
13. Conguration / factory settings from the USB stick 24
14. Alternative conguration without myREX24-V2 portal 25
15. Technical data 26

Quick Start Guide REX 200/250 3G | LTE 3
1. Introduction
The REX 200/250 is an industrial router suitable for nearly worldwide remote access to
IPv4-enabled devices (PLCs, HMIs, IP cameras, etc.). This Quick Start Guide explains
the basic settings in the myREX24 portal and shows how to transfer the conguration
made there to the REX 200/250.
2. Preparation of the REX 200/250
2.1 Safety instructions
Assembly, installation, and commissioning of the router may only be carried out by
qualied personnel. The respective national safety and accident prevention regula-
tions are to be observed. The router is built in accordance with the state of the art
and the recognized technical rules relating to safety (see Declaration of conformity).
The router is exclusively designed for operation in the control cabinet and with safety
extra-low voltage (SELV) in accordance with IEC 60950/EN 60950/VDE 0805, and
may only be connected to devices that fulll the requirements of EN 60950.
The router is only designed for use within buildings and not outdoors.
Electrostatic discharge! Note the necessary precautionary measures for the handling
of electrostatically endangered building elements (EN 61340-5-1 and IEC 61340-5-1).
2.2 Installation position/minimum distances
The router is conceived of for assembly on DIN rails (pursuant to DIN EN 50 022)
and is designed for control cabinet installation. Installation and assembly must take
place pursuant to VDE 0100 / IEC 364. The router may only be installed in a vertical
installation position.
Important advance information: Please use the most current version (as of v3.7R1.0)
of the dial-up software shDIALUP for commissioning. You can acquire it as a download
at www.helmholz.de.
The current rmware must be installed on all REX 200/250 routers for successful connection
with the myREX24 V2 portal.
Minimum distances from neighboring modules:
P3 LAN P2 LAN
P1 WAN
P5 LAN P4 LAN
Ext. V DC
18 ... 30 V
PWR
RDY
CON
STAT
FC1
FC2
FC3
FC4
FCN
RST
USB
ANT
SIM
+FE– –+IO1 IO2 IN3 IN4
SN:
00012345
700-877-UMT01
40 mm
20 mm
40 mm
20 mm

Quick Start Guide REX 200/250 3G | LTE4
2.3 Terminals and interfaces
Rigid copper wires with a max. diameter of 1.5 mm² can be clamped onto the
provided connector plug. Network cables corresponding to at least category 5/5e
(CAT-5) should be connected to the RJ-45 sockets. The connection with the higher
level network/router to the Internet is created via the P1 WAN interface. The LAN
ports P2 to P5 are available for connection to the machinery network and for com-
missioning via PC.
The internal switch functionality is also active when the REX 200/250 has no
connection with the Internet.
The PWR LED lights up when the 24 V supply voltage is switched on. The boot
process starts following the internal system check (duration of approx. 25 sec.),
which is indicated by the blinking RDY LED (for approx. 90 sec.). The REX 200/250
is ready for operation as soon as the RDY LED lights solid.
The terminal (FE) is for the functional earth. Connect this correctly with the
reference potential.
2.3.1 2x digital inputs/outputs IO1 + IO2,
as well as 2x inputs IN3 + IN4
Due to the electrical isolation of these activation options, an additional 24 volt DC
power supply must be applied. The alarm inputs can be activated with potential-free
switches, buttons or relay contacts. Depending upon the con guration in the my-
REX24-V2 portal, 1 - 4 (up to 99 for multiplex wiring) different e-mail/SMS recipients
can be noti ed with individual noti cation texts. For each input, con guration can
also take place for the establishing of a connection with the myREX24-V2 portal or
for a system restart of the REX.
The con gurable output wiring provides signals for the status of an active Internet,
VPN, user connection of device malfunction of the REX 200/250.
Note: When using the outputs O1 or O2, the corresponding input signals I1 or I2 adopt
the respective output status and can themselves then no longer be used for other external
alarm input signals.
1
2
see 1
galvanically isolated
+
–
application example

Quick Start Guide REX 200/250 3G | LTE 5
2.3.2 Internet access options
In the case of these device variants, a GSM mobile connection can also be congured
as an alternative to the P1 WAN interface, which establishes the Internet connection
via a higher level network/router. In order to be able to log into the GSM network, at
least one mini SIM card of a provider of your choice must be inserted into the SIM 1
slot. The SIM card holders are found on the left side of the housing. To remove, press
the unlocking button next to the insert
2.3.3 Antennas
The required GSM antennas with SMA plugs are available in Helmholz accessories.
The installation location must be selected such that adequate GSM reception is pos-
sible. Due to the shielding effect, antennas should not be installed in metal housings
(e.g. In the control cabinet). When using antenna extensions, the instructions from
the technical data sheets of the manufacturers are to be observed.
2.3.4 REX 200/250 3G (UMTS)
The antenna required for radio reception is screwed onto the SMA socket “ANT”.
2.3.5 REX 200/250 LTE (4G)
For radio reception, a suitable antenna must at least be screwed onto the SMA socket
“MAIN”.
In order to improve the data throughput, a second antenna terminal is available on
the REX 200/250 LTE router with the SMA socket “Rx” that can be used as an option.
This functionality is called antenna diversity in the “WCDMA mode” and Downlink-
MIMO in the “LTE mode”.
The second receiver antenna should not be located in the immediate vicinity of the
main antenna. In order to improve the diversity gain and reduce other reciprocal
interactions (interference effects), the two antennas should be (taking the space
available in the application into account) installed with the greatest possible distance
between them.
For the same reason, the second antenna should be mounted cross-polarized
(rotated by 90° in relation to the main antenna).

Quick Start Guide REX 200/250 3G | LTE
6
2.4 Front interfaces
Name Description
P1 WAN
WAN connection of the router (customer network, DSL router,
etc.)
P2 - P5 LAN Connection of the local network (e.g. machine network)
USB Connection for USB stick
ANT Antenna with SMA connector (only REX 200/250 3G)
MAIN
Main antenna with SMA connector (only REX 200/250 LTE)
Rx Additional antenna with SMA connector (only REX 200/250 LTE)
PROFIBUS MPI/PROFIBUS up to 12 mbps (only REX 250)
Serial serial RS232 VCOM port (only REX 250)
3. Access to the myREX24-V2 portal
REX 200/250 routers can be fully congured in the shDIALUP dial-up software using
the myREX24 V2 portal. You can download this software, as well as additional doc-
uments with supplementary example applications at any time in the download area
under www.helmholz.de and install it on a Windows1 operating system.
Alternatively, you can also carry out the administration of your projects and the con-
guration of your REX router via an HTTPS-secured direct call-up from your browser.
To this purpose please use the following URL: https://v2.myREX24.net.
To log in, use the myREX24 V2 portal access data available to you. The various ways
to transfer a conguration you have created to the REX 200/250 are described as
follows. The secured VPN setup to a REX router can then always only be realized via
the remote client software shDIALUP. You can nd further information in the manual
for the myREX24-V2 portal.
Instructions for alternative conguration methods can be found in chapter 14.
3.1 Login at the myREX24-V2 portal server
Install the shDIALUP software with administrative rights on a Windows1 operating
system. After opening the program, select the “V2.myREX24.net” server in the top
menu bar and then log in to the myREX24-V2 portal with your access data.
You only need to register under www.myREX24.net when you don’t yet have a my-
REX24-V2 portal account or haven’t been granted user access by a myREX24 account
administrator. Fill out the required elds there. After your data is checked by our
service team (Mon.-Fri. 8 a.m. to 5 p.m. CET), you will receive two separate e-mails
P3 LAN P2 LAN
P1 WAN
P5 LAN P4 LAN
Ext. V DC
18 ... 30 V
PWR
RDY
CON
STAT
FC1
FC2
FC3
FC4
FCN
RST
USB
Rx MAIN
PROFIBUS
Serial
SIM
+FE–– +IO1 IO2 IN3 IN4
SN:
00012345
700-878-LTE01

Quick Start Guide REX 200/250 3G | LTE 7
with the access data. One e-mail contains the user name, the second the password.
Notes:
-Alternatively, the login page can also be reached under: https://v2.myrex24.net.
Any up-to-date browser can be used for this purpose.
-Your login name consists of, for example, your user and company name separated by
the @ character. Example: admin@helmholz
-Following the initial login, you will be prompted to register a new, individual password
for your account.
-If necessary, you can also create and administer additional users after logging into the
myREX24-V2 portal as account administrator
3.2 Navigation in the portal
Once a user has logged in for the rst time, it will be guided through a tutorial.
The navigation, basic settings, and the change from the simplied to the extended
view are shown.
3.3 Simplied and extended view
In the case of the menu interface of the myREX24 V2 portal, a choice can be made
between two views.
The ‘simplied view’ is active for the rst login. The ‘expanded view’ can be switched
to at any time without changes being lost or losing their validity.
The simplied view is used for the most part in the subsequent course of the
Quick Start Guide. The extended view is also presented in some places for purposes
of illustration.
Expanded view:
Simplied view:

Quick Start Guide REX 200/250 3G | LTE
8
4. Initial router conguration via the
myREX24-V2 portal
The following describes the basic conguration steps required to set up a REX router
for a VPN connection. A description of the extended functions can be found with
the online help or in the manuals/white papers. You can go to the online help in
the myREX24 V2 portal via the question mark symbol in the lower left area of the
screen ?. When you have logged in for the rst time, the myREX24 portal guides
you through a brief tutorial. Please change the password for your myREX24 account
following the tutorial.
4.1 Create new project
A project is the highest level for carrying out the following tasks:
-Device administration
-Remote maintenance
-Monitoring and alarms
-Data protocoling
-Visualizations
First, at least one new project needs to be created, in which a router is then assigned.
Navigate to the administration with the following symbol
(the tutorial also leads to this point).
An unambiguous project name is then assigned in this menu.
Additional account users, when created, can also be assigned to this project via the
“Access” tab

Quick Start Guide REX 200/250 3G | LTE 9
4.2 Create new device
A router can be added in the tree structure using the plus symbol + or with a right-
click of the mouse. If a project does not yet have a router, the same function is made
available in the main view by way of the green button “Create new device”. Clicking
on the respective button starts the conguration assistant, which guides the user
through the settings.
4.3 Congure REX 200/250 (connection data)
Three simple steps are adequate for the minimal conguration of the router.
- Selection of the device type
- Network settings / modem settings
- Transfer of the conguration to the REX router
4.3.1 Step 1 “Device” – Selection of the type and name
In the rst step, the correct device type must be selected in agreement with the
device order number. A freely selectable name should be assigned to this router.
Permitted are only numbers and letters (0 to 9, A to Z, a to z, no spaces or special
characters).

Quick Start Guide REX 200/250 3G | LTE
10
4.3.2 Step 2 “Internet” – Network settings
In step 2, the network conguration for the LAN and WAN side of the device is
dened.
-LAN Each REX 200/250 comes with the LAN-side IP address
192.168.0.100/24 as a default. Modify the IP address and the subnet
mask in keeping with the specications from the machinery network
to be maintained remotely.
-WAN The responsible network administrator provides you with the informa-
tion necessary for the setting DHCP or static IP. DHCP is preset upon
delivery.
-Modem The parameters for the APN access point (Access Point Name) of the
card provider and the correct SIM PIN must be available to you and be
stored here. Most providers are already available for selection (sorted
by country). In the event that the correct provider is not present, the
APN data can also be entered manually.
Note: If you enable DHCP, make sure that the DHCP server does not assign the
IP address to a WAN port that is already active on the LAN side. IP addresses from
two different subnets must be assigned to every router’s LAN and WAN ports.
4.3.3 Step 3 “Conguration” – Coupling/pairing of the router
with the portal
The fundamental parameters of the minimal conguration of the REX 200/250 are
now led in the Account portal and must now be transferred to the device
(See chapter 5).
Note: We recommend the “Download conguration to the PC” variant for the initial
conguration.

Quick Start Guide REX 200/250 3G | LTE 11
5. Router conguration transfer options
Newly created or retroactively changed device congurations can be transferred
to the REX 200/250 in a variety of ways.
-1. Download conguration to the PC (via USB stick)
The conguration le is saved on the PC and can subsequently be transferred to
the REX 200/250 using a USB stick (subsequent procedure described in chapter
5.1).
-2. Synchronize (recommended for retroactive changes)
When the router has already been congured and a connection with the portal has
been established, any retroactive change to the conguration can be carried out
via the existing VPN connection (subsequent procedure described in chapter 5.2).
-3. Submit to device
(with LAN connection only possible via shDIALUP)
For this conguration option, the REX 200/250 must be directly accessible in the
LAN of the PC. The PC must at the same time be logged in via the dial-up client
shDIALUP through your myREX24 account in the Internet.
The transfer via USB stick (point 1) is explained in this Quick Start Guide, and how
retroactive changes can be transferred via the function “Synchronization” (Point 2).

Quick Start Guide REX 200/250 3G | LTE
12
5.1 Transferring the conguration using a USB ash drive
Ensure the power supply of the REX 200/250. Download the conguration le made
available by the myREX24 portal via the download symbol onto your FAT-formated
USB stick connected to the PC.
Note: The conguration le myrex24.mbn(x) must be led in the root directory of your
USB stick and may not be renamed.
Now carry out the steps described on page 24 in chapter 13.1 “Loading the myREX24
portal conguration”.
3. Save the configuration file
1. Log in at myREX24 V2
2. Create/edit and download the
REX 300 configuration
4. Transfer the configuration
P3 LAN P2 LAN
P1 WAN
P5 LAN P4 LAN
Ext. V DC
18 ... 30 V
PWR
RDY
CON
STAT
FC1
FC2
FC3
FC4
FCN
RST
USB
ANT
SIM
+FE– –+IO1 IO2 IN3 IN4
SN:
00012345
700-877-UMT01

Quick Start Guide REX 200/250 3G | LTE 13
5.2 Synchronization
As soon as the REX 200/250 has logged into your account in the portal, you can
transfer retroactive changes at any time with “Synchronize”.
Where there is an existing myREX24-V2 portal connection, the REX 200/250 checks
cyclically whether there is a new conguration available for its serial number and then
loads it automatically. As soon as you have made a change to one or more parameters
and saved it, the symbol “Device conguration is not current” appears next to the
online LED. Click this symbol (or the “Synchronize” button) to start the process.
Synchronization in the simplied view:
3. Automatic synchronization
1. Log in via shDIALUP
2. Create REX 300 configuration
and prepare for
synchronization
P3 LAN P2 LAN
P1 WAN
P5 LAN P4 LAN
Ext. V DC
18 ... 30 V
PWR
RDY
CON
STAT
FC1
FC2
FC3
FC4
FCN
RST
USB
ANT
SIM
+FE– –+IO1 IO2 IN3 IN4
SN:
00012345
700-877-UMT01
Synchronization in the extended view:

Quick Start Guide REX 200/250 3G | LTE
14
The synchronization function is conrmed through the following dialog.
In this menu you can select optional user-dened settings, such as the sending of
information/conrmation mails.
The REX router now adopts the new settings and restarts independently. As soon as
the boot process has concluded, the REX router logs into the portal again.
6. Connection with the machine network
Note: The following steps presume that the REX 200/250 has already been congured
and that you have successfully logged into your account with shDIALUP.
A secured VPN connection with the end device can not be realized through the browser
view (https://v2.myREX24.net).
Logged in REX 200/250 routers are identied with a green circle in the dashboard.
The secured VPN connection between PC and REX router is rst established by click-
ing the connection button.
The active connection status with the REX 200/250 is represented with an orange
animated connection button. The number of active connections activated via this
account is shown in the menu bar.

Quick Start Guide REX 200/250 3G | LTE 15
Once a VPN connection to the REX 200/250 has been established, all the IPv4
packets that are valid for the applicable LAN network on the system side will be
forwarded. The parameters (port, VPN-IP, LAN-IP, etc.) used for this connection are
also informatively displayed in the bottom status bar.
In order to end the connection of a remote access, please click the the animated orange
connection button and then conrm the disconnection of the remote connection.
Effective immediately, you can very easily view the setup of your Rex router and the
function overview of the myREX24 V2 portal online.
https://youtu.be/8a1Xnu9lJ4g
Video Tutorial (3:22 min.)
Note: Other functions, such as the creation of dashboards or data point servers are
described in the online help.

Quick Start Guide REX 200/250 3G | LTE
16
7. Tips and tricks
7.1 Establishing of connection isn’t working
7.1.1 Check device status
The status page of the REX 200/250’s web interface shows the router’s connection
status and active conguration data. To this purpose, enter the LAN IP address of the
REX 200/250 into the address bar of a browser. The REX 200/250 must be accessible
in LAN to this purpose, meaning that the TCP/IP address of a PC must be set for the
same IP subnet. The authentication information is printed on the back of the device.
The First Start Assistant then opens. You must select “Portal server” for the myREX24
portal conguration described here. The expanded view for the “classic router” is
only to be used for the conguration of own VPN connections via the device web
interface.
Note: For security reasons, it is possible to deactivate the web interface on the routers.
If the interface is not accessible, please check the corresponding setting in the myREX24
portal. Make sure that there are no address space conicts with any other network
interfaces (do not assign the same IP address more than once) in order to be able to
communicate with the REX 200/250 .
To get more information on each step of the router connection, click on the Info
icons in the status elds.

Quick Start Guide REX 200/250 3G | LTE 17
7.1.2 VPN Port
(relevant for Internet access via P1 WAN interface)
The REX 200/250 establishes an outbound TCP connection with the address VPN-V2.
myrex24.net (5.39.123.21).
In order to be able to establish a secure connection to the myREX24-V2 server with
shDIALUP or the REX 200/250, at least one of the following TCP ports (80, 1194, or
443) for the VPN tunnel must be cleared in the customer rewall. As a standard, this
communication takes place via the port 1194, which is also preset.
Please clarify all setting details in advance with the responsible IT department on site.
When necessary, the port in the REX 200/250 can be changed in the VPN settings.
7.1.3 Diagnostics page
In the event of irregularities or interruptions when establishing the connection, the
diagnostics page supports you with troubleshooting. In the event of an error, the
technical support of Helmholz requires the respective result from the individual and
autonomous test functions.

Quick Start Guide REX 200/250 3G | LTE
18
7.1.4 Is a MAC address lter activated in the rewall?
(relevant for Internet access via P1 WAN interface)
It may be necessary to approve the MAC address of the REX 200/250 in the higher
level DSL modem or the rewall. If it should not be possible to establish a connec-
tion, please ask your responsible network administrator whether such a MAC address
lter has been activated.
7.1.5 Is the connection being established via a proxy? (relevant for
Internet access via P1 WAN interface)
In the event that a connection is not successfully established in the customer net-
work, it might be the case that the necessary proxy settings have not been led or
are incorrect. These can be adjusted on the conguration page of the REX 200/250
in the Internet settings.
7.1.6 no or inadequate mobile communications connection
In the event that the connection of your REX 200/250 router with the portal is not
established for mobile communications remote maintenance or is interrupted during
operation, the following parameters, among others, should be checked:
-incorrect SIM PIN stored in the router
-no credit on prepaid SIM cards
-blocked ports (dependent upon provider)
-impaired GSM reception quality due to unfavorable antenna location
-selection of an antenna with inadequate transmission/receiving performance

Quick Start Guide REX 200/250 3G | LTE 19
7.2 Device conguration: Services – NTP server
For purposes of the internal system time of the REX 200/250, this carries out a com-
parison via a time server in the Internet at regular intervals. Where necessary, you
can individually set the preset NTP server entry and the interval.
Note: Various functions in the myREX24 portal require a current time setting in the
REX 200/250.
7.3 Device conguration: Services - Mail settings
(relevant for Internet access via P1 WAN interface)
If you would like to use the function of the REX 200/250 for the automatic sending of
e-mails, port 25 (SMTP) may not be blocked in the rewall of the customer network.
You can also use alternative e-mail servers to send e-mails.

Quick Start Guide REX 200/250 3G | LTE
20
8. Remote maintenance of Ethernet CPUs
Notes:
-The LAN ports are suitable for 100 mbps and full duplex operation, and support
auto-crossover and auto-negotiation. No special PROFINET functions are supported.
-When connecting additional Ethernet participants (PLC/panel) on the REX 200/250,
it must be ensured that the IP addresses of the devices lie within the address range of
the LAN interface of the REX 200/250.
Device settings: Services – Firewall Settings – SNAT
With a REX 200/250, the SNAT function is activated as a default. With this setting,
participants for which no gateway*/router has been entered are reached via the VPN
tunnel. For the CPUs and panels of some manufacturers, it can be the case that you
need to explicitly enter the gateway* and deactivate the SNAT function in order that
a remote connection with the end device is possible.
*Gateway: This refers to the LAN IP address of the REX 200/250.
In order to reach a PLC or a panel via the VPN tunnel, the OpenVPN adapter must be
selected in the corresponding engineering tool as the interface. The virtual network
connection responsible for this is the TAP Windows1Adapter V9.
The setting to be selected in the PG/PC interface module from the SIMATIC STEP 72
software is emphasized in the detail to the right.