How to configure the Scalance S615

1/ We have a machine with IP-adresses from192.168.0.1 to 192.169.0.30
CPU = Siemens 1511-1PN (192.168.0.1)
Router CPU is on 192.168.0.20

2/ We have a WINCC-station 10.132.127.41 where we want to read data from the 1511-CPU

For this, we installed a S615 to use the NAT-function.
But, unfortunately no succes yet.
We have done this:
Internal adres: vlan1: 192.168.0.20 (router-adres of the PLC)
External adres: vlan2: 10.132.127.33 (range WINCC)

NAT:
source interfave=vlan1
Destination interface=vlan2
Source IP adress=192.168.0.20/24
Use interface IP
Translated source IP adress=10.132.127.33
Destination IP Adress=10.132.127.41/24

Firewall:
Accept From vlan1 to vlan2
Source(Range)=192.168.0.20/24
Destination (Range)=10.132.127.33/24
Service: all

Anyone who sees what we did wrong?
On the wincc-pc we can ping to the 10.132.127.33 but not to the 192.168.0.20

Thanks!

Firewall accepts now communication from PLC to PC, but anotther way


You need another firewall rule vlan2 to vlan1, try that



https://cache.industry.siemens.com/..._928818/v1/109744660_S615_NAT_DOKU_V11_en.pdf

Still not succesfull...
Even if I open totally the firewall (see in attachment).

From my WINCC-station I can ping 10.132.127.33 but not the 192.168.0.20 (or 192.168.0.1).
Normaly it would also be possible to ping these IP's??

Solution:
Destination NAT in stead of Source NAT:
- Destination NAT from VLAN2 to VLAN1
- Source IP 10.132.127.46/32
- Destination IP 10.132.127.33/32
- Translated IP 192.168.0.1/32

Firewall:
Accept from vlan2 to vlan1:
- Source IP 10.132.127.46/32
- Destination IP 192.168.0.1/32

I'm having the same problems as it seems you had.

Translated ip was the address from the plc?
Destination ip was an IP assigned into s615 vlan2
Sourcse ip, what was this?

Have you a screenshot of what you set, was this in the NETMAP or Source NAT tab?

Cheers
Ant

I'm currently facing the same issue, any updates?

best regards
Florian