Remote access

[ALEJANDRO]

Good morning,

We have installed a BMS for remote access. The BMS consists of two Logic Machine 5s with IP addresses 192.168.0.11 and 192.168.0.12. We have also installed a router with a LAN IP address of 192.168.0.1.

However, the person responsible for verifying the installation is unable to connect to the SCADA system remotely or via BACnet.

I am unsure how to properly configure remote access. I have enabled BACnet settings, entered a username and password, and left the port at its default settings.

[Daniel]

Can you drow some architecture? It is not clear for us what is the problem.

[ALEJANDRO]

Okay, as I mentioned, I have two Logic Machines connected with UTP cables to a router we installed in an apartment building. The IP addresses of these Logic Machines are 192.168.0.11 and 192.168.0.12. The router has a LAN IP address of 192.168.0.1, but when I check my public IP address on https://whatismyip.com, it shows My IPv4: 95.124.88.24. I understand they're not the same, and I'm behind the CGNAT.

The problem is that I need someone in another city to connect to the Logic Machine 5 with IP address 192.168.0.11. I've created a user account with a password in the BACnet settings, and the port is the default: 47808.

When I go to the app store, I discover that the Logic Machine doesn't have internet access.

[Daniel]

Well there are few problems here.
1. LM will not allow you to connect via bacnet from a public IP. Bancet has zero security and anyone in the world can control your instalation without restrictions.
2. For bacnet to work over different network BBMD server is needed.
3. If you have no internet access in LM, then most likely the gateway is not set in the IP interface in system.
I stronglu suggest to you to completly forget this idea and use more modern and secure way of communication over the internet. Use MQTT, see this example.
https://kb.logicmachine.net/integration/mqtt-cloud/

[ALEJANDRO]

I have managed to get the logic machines connected to the internet through the router.


I think your solution is complex; the idea is to do a remote test, and the company that will maintain the building will create its own VPN afterwards.

[Daniel]

Still due to point 1 and 2 this will not work.  If you use VPN and use priate IP range then it will work if the other side has BBMD server.

And this solution is super simple, you only need LM on the other end.

[ALEJANDRO]

I need to get back to this issue; I'll explain my problem again. I have two logic machines installed in a building. The purpose of this SCADA system is for a company to control it remotely through their systems.

They've asked us to install a router with a SIM card so they can connect remotely, but we haven't been able to do it yet. I need a solution.

[admin]

If you want to use BACnet/IP in different networks you must use a Broadcast Management Device (BBMD). It acts as a router between different networks.

Explain what exactly you need to control remotely and which protocols are supported by the SCADA system.

[ALEJANDRO]

SCADA systems are logic machines; they are designed to receive data and issue commands.

---

SCADA systems are logic machines; they want to be able to receive data and give commands via BACnet.

[Daniel]

LogicMachine does not have BBMD server so this will never work, You better re-consider my earlier proposal.

[ALEJANDRO]

Can you remind me of your proposal?

[Daniel]

https://kb.logicmachine.net/integration/mqtt-cloud/

[ALEJANDRO]

Okay, I've tried the system, but what you're telling me is that I have to send the other person backups of the logic machines, have them install them on their logic machines, and then we configure the HiveMQ file with their logic machines and mine?

[Daniel]

Backup is not needed just the objects which you want to exchange the data must be the same on both LMs. On both you must configure the MQTT cloud app. You must tag all objects you want the data to be send and use it in the MQTT cloud app.

[ALEJANDRO]

Okay, for some reason, it won't let me connect a third logic machine.

[Daniel]

just maybe you didn't configure IP interface correctly for it to have internet access?

[ALEJANDRO]

I have internet access