SIGMA TEK RAE 100 User manual

REMOTE ACCESS HOW TO
07.10.2021 Page 1
Secure Remote Access
Contents
1Symbols Used..........................................................................4
2Quick Start...............................................................................5
3Remote Access Router Hardware Setup...............................6
3.1 Electrical Connection ...................................................................6
3.1.1 Wiring the RAR ................................................................................... 6
3.1.2 Optional hardware switch for VPN management ................................ 7
3.2 Preparing Hardware with Optional Interfaces............................9
3.2.1 Cellular –3G/4G................................................................................. 9
3.2.2 WIFI.................................................................................................. 10
3.2.3 Using WIFI RAR as an Access Point (AP)........................................ 11
3.3 LED Status Display.....................................................................13
3.3.1 Signal LED................................................................................. 13
3.3.2 ACT Signal LED................................................................................ 14
4Remote Access Embedded Setup .......................................15
4.1Requirements..............................................................................15
4.2 Setup............................................................................................15
5Remote Access Platform (RAP) ...........................................21
5.1 Account Setup.............................................................................21
5.2 RAP Cloud Interface...................................................................23

REMOTE ACCESS HOW TO
Page 2 07.10.2021
5.2.1 Main Menu.........................................................................................24
5.2.2 User Settings.....................................................................................24
5.3 24
5.4 Registering a remote product....................................................25
5.4.1 Factory Reset....................................................................................25
5.4.2 Remote Access Router using ethernet WAN.....................................26
5.4.3 Remote Access Router using WIFI WAN ..........................................29
5.4.4 Remote Access Router with 3G/4G WAN..........................................31
5.4.5 Remote Access Embedded...............................................................32
5.5 Additional network settings (RAR only)...................................33
5.6 Additional network settings (RAE only)...................................36
5.7 Setup of remote services...........................................................37
5.7.1 Establishing a VPN Connection.........................................................37
5.7.2 VNC over VPN...................................................................................39
5.8 Data Acquisition and Retention ................................................43
5.8.1 Setting up Data Sources....................................................................43
5.8.2 Cloud Logging ...................................................................................52
5.8.3 Cloud Notification ..............................................................................59
5.9 User Management.......................................................................63
5.9.1 New Users.........................................................................................63
5.9.2 Assigning user access to a device.....................................................64
6Example Solutions.................................................................65
6.1 Remote Access Router (RAR) Based Solutions......................65
6.1.1 Example 1: RAR wired, single CPU solution .....................................67
6.1.2 Example 2: RAR wired, dual CPU solution........................................68

REMOTE ACCESS HOW TO
07.10.2021 Page 3
6.1.3 Example 3: RAR + WIFI, single CPU solution................................... 69
6.1.4 Example 4: RAR + WIFI, dual CPU solution..................................... 70
6.1.5 Example 5: RAR + cellular, single CPU solution............................... 71
6.1.6 Example 6: RAR + cellular, dual CPU solution ................................. 72
6.2 Remote Access Embedded (RAE) Solutions...........................73
6.2.1 Example 7: RAE100 single CPU solution ......................................... 73
6.2.2 Example 8: RAE100 dual CPU solution............................................ 74
6.2.3 Example 9: RAE100 As Gateway ..................................................... 75

REMOTE ACCESS HOW TO
Page 4 07.10.2021
1 Symbols Used
To make working with the training manual easier and more comfortable, 3 different symbols
are used. These symbols should simplify navigating through the documentation, provide
additional information, highlight important sections, and introduce examples. The meanings
of the 3 symbols are as follows:
Attention
This symbol means that the information directly following
requires your complete attention. The information here is VERY
IMPORTANT and should be NOTED. It is recommended that
the paragraph next to this symbol be thoroughly read.
Tip
The thumb symbol identifies a help tip that explains how
something can be done faster or better.
Example
This symbol indicates the beginning of an example.

REMOTE ACCESS HOW TO
07.10.2021 Page 5
2 Quick Start
The essential steps for remotely connecting a machine using the SIGMATEK Remote
Access Platform (RAP) consists of:
1. Register for an RAP company/user account on first-use, p21
2. Setup the remote product as relevant:
a. RAR hardware, p6
b. RAE application, p15 (not required for RAR)
3. Register the device on first use.
a. RAR using ethernet, p26
b. RAR using WIFI, p29
c. RAR using cellular services 3G/4G, p31
d. RAE application, p32
4. Connect controls to the RAP. Examples are presented:
a. RAR, p65
b. RAE, p73
5. Add remote services:
a. VNC, p39
b. Port forward for IP services, p33
c. Data logging, p43

REMOTE ACCESS HOW TO
Page 6 07.10.2021
3 Remote Access Router Hardware Setup
3.1 Electrical Connection
3.1.1 Wiring the RAR
•The RAR must be supplied with 12-24 V voltage by connecting the supply voltage.
•Shielding should be connected to the protective earth (PE).
•Install cables using ferrules to reduce strain on the wires.
•A digital input is available for hardware-based management of the VPN connection
oBy default, the digital input is not configured and does not need to be wired.
Figure 3.1 Power input connector pin designations.

REMOTE ACCESS HOW TO
07.10.2021 Page 7
Figure 3.2 Diagram of the RAR.
3.1.2 Optional hardware switch for VPN management
The digital input DI1 may be used to disable the VPN; this option must be enabled via the
RAP:
1. Ensure the device electrical wiring is complete (Figure 3.3) and it has been
registered with the RAP. Refer to section 5.3 for registration.
2. On the RAP, select the device to be configured.
3. Locate the WAN settings; click “show more” (Figure 3.4).
4. A new control labelled “digital input” will be displayed (Figure 3.5); select one of the
options:
a. disabled [digital input inactive],
b. disable VPN when [digital] input low,
c. disable VPN when [digital] input high.
5. Store and apply the configuration to the device.

REMOTE ACCESS HOW TO
Page 8 07.10.2021
Figure 3.3 RAR with switch installed on digital input 1.
Figure 3.4 WAN settings in the RAP.

REMOTE ACCESS HOW TO
07.10.2021 Page 9
Figure 3.5 Selecting the action, on the VPN management, of the digital input.
3.2 Preparing Hardware with Optional Interfaces
3.2.1 Cellular –3G/4G
With power off:
1. Insert the SIM card into the SIM card slot (Figure 3.6).
2. Screw the antenna onto the SMA connector marked “MAIN” (Figure 3.7).
Figure 3.6 RAR with sim card marked red.

REMOTE ACCESS HOW TO
Page 10 07.10.2021
Figure 3.7 RAR with cellular option: 3G/4G antenna installed on the SMA
connector for the cellular radio.
3.2.2 WIFI
With power off: connect the WIFI antenna to the RAR using the SMA connector marked “DIV”.
Figure 3.8 RAR with WIFI antenna installed on the SMA connector for the 2.4
GHz radio.

REMOTE ACCESS HOW TO
07.10.2021 Page 11
3.2.3 Using WIFI RAR as an Access Point (AP)
To setup an access point (AP) on the RAR using RAP:
1. Ensure the device electrical wiring is complete (Figure 3.3) and it has been
registered with the RAP. Refer to section 5.3 for registration.
2. On the RAP, select the device to be configured.
3. On the config page, edit the LAN settings.
4. Click on the slide switch labelled “Enable Wi-Fi hotspot”.
5. Assign the SSID and password as required.
6. Click “confirm” to store the settings.
7. Additionally, via the firewall settings it is possible to restrict or permit access to the
internet and/or the host network.
8. Push changes to the router to activate the new configuration.
Figure 3.9 Edit the LAN settings.

REMOTE ACCESS HOW TO
Page 12 07.10.2021
Figure 3.10 LAN settings: enable and configure the wifi hotspot (AP).
Figure 3.11 Edit the firewall settings to configure access via the AP to the
internet and host networks.
Figure 3.12 Configuration changes must always be pushed to the RAR to
take effect.

REMOTE ACCESS HOW TO
07.10.2021 Page 13
3.3 LED Status Display
3.3.1 Signal LED
Blue blinking
Initializing the mobile radio module
Red blinking
1 pulse
No receive or no connection to the
network possible (APN or SSID may
be wrong)
Red blinking
2 pulses
PIN invalid or PUK required
(A phone is required to unlock the SIM
card with PUK)
Red blinking
4 pulses
SIM card is invalid or missing
Constant red
Connected, poor signal
Constant violet
Connected, medium signal
Constant blue
Connected, good signal

REMOTE ACCESS HOW TO
Page 14 07.10.2021
3.3.2 ACT Signal LED
Constant red
Boots (can take 1-2 minutes) or not
yet registered
Red blinking
1 pulse
Waiting for Internet access
Red blinking
3 pulses
LAN/WAN conflict
(conflicting subnets)
Red blinking
4 pulses
Removed from the platform
RAR must be re-configured and
registered
Red blinking
5 pulses
Previously registered at RAP (remove
from RAP and register again)
Blue blinking
1 pulse
Establishing connection with RAP
Blue blinking
2 pulses
Initialising VPN connection
Constant blue
Active VPN connection

REMOTE ACCESS HOW TO
07.10.2021 Page 15
4 Remote Access Embedded Setup
4.1 Requirements
The RAE package was developed especially for the operating system Salamander, which is
the prerequisite for the software solution.
•To install RAE on the SIGMATEK control, the OS version must be:
oSalamander >= 09.03.102.
•The SIGMATEK control on which RAE100 is installed must have a valid IP
configuration with access to the Internet.
4.2 Setup
This process describes the test procedure for preparing a SIGMATEK control with RAE.
The remote product must be registered after setup.
1. Open LASAL Class 2 and establish a connection to the HMI.
2. The IP configuration can be set via LASAL CLASS 2: "Debug →File Transfer →
Edit Autoexec.lsl" as shown in Figure 4.13.
3. Apply settings valid for the current LAN (Figure 4.14):
a. IP address
b. IP subnet
c. IP gateway: IP address of the router used to access the internet
d. IP DNS: IP address of a DNS server reachable from the current location,
some server addresses are given below:
i. Cloudflare 1.1.1.1
ii. Google 4.4.4.4 or 8.8.8.8
4. Using the PLCDiag tool File Commander under "Tools →Advanced Debug Tools
→File Commander" create the folder "C:\lslsys\packages" on the machine if it does
not already exist.
a. To create a folder use "MAKE DIR" (Figure 4.15, Figure 4.16).
b. Copy the RAE to the packages folder. To do this, navigate to the package
on the rightside of the File Commander and click on "COPY"(Figure 4.17).
5. To install RAE, enter the command in the Command Line Interface.
a. Open the Remote CLI under "Tools →Advanced Debug Tools →Remote
CLI" (Figure 4.18).

REMOTE ACCESS HOW TO
Page 16 07.10.2021
b. Enter the command "PACKAGE INSTALL ixagent" in the command line
and press Enter or "Execute" (Figure 4.19). Installation may take some
time. Wait for the return (Figure 4.20).
c. After RAE is installed, it must be enabled with the command "ixagent start"
(Figure 4.19). Wait for the return (Figure 4.20).
d. To check internet connection, via the Remote CLI enter the command
"ping www.google.com" (or a site accessible from your region) in the
command line and press Enter or "Execute". If the machine can reach the
internet a latency value will be reported for the ping command.
e. The RAE application must be started after installation:
i. On-demand the command “ixagent start” may be executed from
the Remote CLI (Figure 4.21).
ii. For automatic start-up with the machine, the same command
“ixagent start” should be appended to the Autoexec.lsl (Figure
4.22).
Figure 4.13 Editing the Autoexec.lsl from Class 2.

REMOTE ACCESS HOW TO
07.10.2021 Page 17
Figure 4.14 Editing the IP configuration.
Figure 4.15 File Commander interface - Make Dir button highlighted.

REMOTE ACCESS HOW TO
Page 18 07.10.2021
Figure 4.16 Packages folder within C:\lslsys
Figure 4.17 Copying the packages to the machine.

REMOTE ACCESS HOW TO
07.10.2021 Page 19
Figure 4.18 Opening the Remote CLI tool.
Figure 4.19 Executing the RAE application install command via the CLI.
Figure 4.20 Installation successful confirmation.
Figure 4.21 Starting the RAE application.

REMOTE ACCESS HOW TO
Page 20 07.10.2021
Figure 4.22 Appending the RAE application start command to the
Autoexec.lsl
Figure 4.23 Confirmation message that the RAE application started
successfully.
Figure 4.24 Executing the PING command against a domain with web server
supporting ICMP echo response.