S7-1500 Remote access over vpn

[cottagewood]

Could anybody offer any advice on this
I have an S7-1500 on a site which I need to connect to remotely with TIA portal.
My VPN access is via cisco vendor vpn, I can access and ping PC's on the site but I can't ping the PLC.
The IT assure me that all the ports are open and there should be no reason I can't connect to it and they of course are blaming the PLC.
The IP , Subnet mask and default gateway are configured and I can ping it and access it if I'm on site,
I'm sure it's an IT issue but it's controlled by a big corporate and the IT guys don't understand devices other than desktops
anybody got any Ideas?

 

[JesperMP]

Is the gateway on the PLC set to the IP of the Router that provides the VPN connection ?
Is port 102 open in the Router ?

 

[cottagewood]

Is the gateway on the PLC set to the IP of the Router that provides the VPN connection ?
Is port 102 open in the Router ?

Thanks for the reply, yes

 

[cottagewood]

I knew it, the network switch into the site was blocking it although no-one knows why, I traced the routing and it was stopping at the sites switch.
I by-passed it and went straight from the router and it works fine

 

[JesperMP]

And the PCs that you can ping are on the same network, in the same subnet ?

- Ah OK, you got it working.

 

[JesperMP]

Is the switch a managed switch ?

 

[Lare]

Is the switch a managed switch ?

And is it Siemens or non-siemens switch?
(althought this is CPU online connection and not IO-connection)