欢迎图片

VPN pass-through?

Last modified by Theodore Xu on 2023/07/07 10:40

Problem

Q: Whether Serial port/Ethernet pass-through and VPN pass-through can be used at the same time?

No. The device can use serial port/Ethernet pass-through or VPN pass-through, but cannot at the same time. 

Q: What are the differences between serial port/Ethernet pass-through and VPN pass-through?

 Serial port/Ethernet pass-throughVPN pass-through
Interaction method

Serial port/Ethernet pass-through are port forwarding, sending data from PC to the device. based on the settings configured in the V-BOX configuration(Using serial port pass-through to set up the serial port communication configuration, using Ethernet pass-through to set up the Ethernet port communication configuration) The device sends the data to the PLC through the serial port/Ethernet, and then receives the data back from the PLC.

VPN pass-through is to put the PC into the LAN where the device is located, so it can be imagined that the PC "replaces" the device(V-Box or HMI) at this moment and the PC can access any PLC on the same LAN.
Communication methodSerial port/EthernetEthernet
Additional configurationPass-through the specified PLC and necessary communication parametersIt can pass-through any PLC inside LAN where the device is, without setting communication parameters.
Networking methodNo special requirementsEthernet required. Optional combinations:
  • Wi-fi+Ethernet
  • 4G+Ethernet
  • Ethernet
Advantages& DisadvantagesDoes not support pass-through for some certain PLCs which is rely on 2nd layer protocol(PLC software desgin does not support pass-through)Support Data Link Layer protocol(OSI 2nd layer), normally as long as PLC support Ethernet communication and Ethernet configuration, then all can use this method to pass-through.

Q: Can one V-NET account log in to multiple Clients?

Yes. Unlike a single account on the V-NET website, where one account can only log in from one end. The account can log in at multiple VPN clients, but the same PC can only log in to one VPN client.

Q: Can I log in to View account?

No. View Account is used only to view the device list.

Q: How to understand Remote LAN IP?

Remote LAN IP is the IP used by the PC to join the LAN of V-BOX/PLC and communication with the PLC and other devices, and it can be simply considered that the PC replaces the V-BOX in the PLC LAN.

Q: Does the PC pass-through affect normal network access?

  • For the public network, such as Baidu, it can be accessed normally.
  • For the local area network, it may be affectted. If the LAN of PC and the LAN of V-BOX/PLC iare in the same segment and the same IP, it may cause IP conflict.

Q: The exception occurs when two PCs on the same network segment pass through two V-BOXs on the same Intranet

There is a PC-A in the 192.168.42.X network segment at location A and a PC-B also in the 192.168.42.X network segment at location B. These two PCs each passthrough the same LAN BOX-A and BOX-B at location C.
Phenomenon: After successful passthrough, neither PC-A nor PC-B can access the devices on the intranet at location C or the access is intermittent, which is due to PC-A and PC-B have the same network segment, and the return packets from the intranet in C do not know whether they should be sent to A or B.
Solution: Two PCs in the same network segment should not passthrough at the same time, or modify the network segment of one of the PCs.

Q: How to manually install Virtual Network interface card (VNIC)?

  • Confirm wvpn toll installed path. For example, the default path is C:\Program Files (x86)\Wecon\WVpn_PCclient.
  • Confrim your windows system.for example windows10 64bits.
  • Run "cmd.exe" as administrator.
  • On the DOS command line, enter the directory where the script for creating the VNIC is located.

If the current computer is 32bit, enter in the DOS command line: 

pushd C:\Program Files (x86)\Wecon\WVpn_PCclient\x86\TAP-Windows
addtap.bat

If The current computer is 64bit, then enter in the DOS command line:

pushd C:\Program Files (x86)\Wecon\WVpn_PCclient\x64\TAP-Windows
addtap.bat

If "Drivers installed successfully." prompts, which means that the virtual NIC is installed successfully.

1620817267991-812.png

 Q: How to uninstall VNIC?

Open the "Control Panel "→" Network and Internet"→" Network Connection"→select "configuration" in the Ethernet properties  and uninstall the previous driver.

1620816731000-674.png

1620816839930-789.png

Q: The error when intalling Siemens software.

1620817398824-267.png

Open the "Control Panel "→" Network and Internet"→" Network Connection", select the network card (VPN network card) of type TAP-WINDOWS ADAPTER V9, right click on the properties, and do not select both the SIMATIC and PROFINET,  and then restart the computer.

image-20220712172218-2.png

Q: V-BOX only have one Ethernet port,new VPN can support?

Yes, only V-BOX online.Follow the VPN user manual to test

Q: If my V-BOX sell to customer side and do not want to configure V-BOX IP.V-BOX can connect with PLC by VPN?

User could use H series V-BOX.

If V-BOX is H series,H series can configure WAN IP(Means V-BOX IP with internet) and Lan IP(Lan IP connect with PLC),WAN IP use DHCP IP as below,customer’s router can arrange a DHCP IP to V-BOX.

LAN IP set a static IP,with the same segment with PLC.Then VPN software can set static IP to connect PLC.

1688696386068-399.png✎Note: if WAN IP choose static IP,please set DNS,in order to connect V-BOX server.DNS is different in different country.It can be search from chrome.WAN IP segment must different with Lan IP segment.

such as Wan IP is 192.168.20.10, LAN IP is 192.168.1.12, In order to avoid network IP conflict

✎Note: if you want to use Lan IP,please set a WAN IP firstly

Q: VPN can support serial port pass-through?

VPN only can support Ethernet port pass-through. If user want to use series Port pass-through.please use the normal pass-through.

Q: Can WECON HMI download project by VPN tool?

Yes. But you have to use PI series HMI,and HMI+ system. HMI+ system is a new system which supports disconnection and reconnection internet function. So if internet is not stable, HMI project also can be download. But if normal PI HMI system, and there is a little interrupt to internet, the download is easy stop and can not reconnect.

Common Errors

Error 1000~1002

Initial failed, refresh failed

  • Reboot VPN Client
  • Check if system resources are sufficient, e.g. if the PC memory is already full

Error 1003~1004, 1008

Start VPN failed, stop VPN failed

  • Please refer to the measures of Error 6004

Error 1005

Unreachable network

  • Check if the network is available or not for local desktop

Error 2003

Failed to access the business server.

  • Please confirm the current PC network status(Connected or the signal strength is weak)
  • Please try to using other connection methods(Such as mobile phone hotspot) to verify whether the current PC network is normal.

Error 2004

Account does not have sufficient permissions.

  • Viewer account does not have pass-through permission.

Error 2008

Invalid server address.

Please confirm whether the files inside the installation path of WVPN tool are complete. If not sure, please reinstall the WVPN tool.

Error 2009

Session expired, please log in again.

If long period without doing any operation will cause session expired. Please log in again.

Error 2016

Check Open Cloud account user type failed.

Please check the login account and password if the Opencloud user type is empty, please check whether the Pass-through tool update to date.

Error 2017

Invalid Opencloud account

Under administration mode, it no need to indicate the admin account. Under End-user mode, it need to indicate the admin account. Please check if the above rules are met.

Error 2020

Invalid username

Please confirm the username whether input correctly. The login account is only allowed to input email address and "0~9","a~z","A~Z" and "_".

Error 2021

Parsing server response failed.

Please upgrade to the latest version of the WVPN tool.

Error 2022~2024

Login failed or timeout

Please refer to Error 1000~1002.

Error 2104~2105

Failed to obtain the local pass-through IP.

Verify that the V-Box is Ethernet enabled and plugged into the network cable. Use the "Network Test" function l to verify that the "Ethernet IP address" can be obtained.

  • If the PC IP's LAN segment is different from V-Box IP's LAN segment, please check if there is unused IP on the V-Box LAN. For example, V-Box LAN segment is 192.168.99.X, then if we want to set the remote LAN IP as 192.168.99.50, whether this IP is unused or not on V-Box LAN.
  • If the PC IP's LAN segment is same as V-Box IP's LAN segment, please check if there is unused IP on both PC LAN and V-Box LAN. For example, V-Box LAN segment and PC LAN segment both are 192.168.99.X, then if want to set the remote LAN IP as 192.168.99.50, whether this IP is unused on V-Box LAN and PC LAN.

Error 4001

Failed to check management server url

Please access the conf folder inside the WVPN Client installation path, find the default-server-xxx.conf(Please select the corresponding file according to user account, asean, cn or eu). Then copy the complete content of default-server-xxx.conf into wvpn.conf. If the file doesn't exist, please manually create the file and repeat the operation above.

WVPN error code4001.png

Error 4002

Failed to check CommName

The machine code of the V-Box to be pass-through is empty. Please refer to Error 1143~1146.

Error 4005

Failed to request available VPN servers.

Possible cause:

  • The current PC already in pass-through.
  • The V-Box to be pass-through already in the pass-thorugh status.
  • The current server could not assign the available VPN server.

Error 4014

Failed to obtain server signature.

  • Please try to disable all the adapter options except the necessary WLAN and TAP-Windows Adapter V9 then try again. 
  • Local PC system time is incorrect, please try to pass-through device after sync or update the system time. 

Error 4016

VPN_ERROR_ILLEGAL_PARAM illegal parameter

Please check the WVPN Client tool is update to the latest.

Error 4017

Invalid signature.

  • Please confirm the current PC network status (is it connected? Whether the signal is poor).
  • Please log out the WVPN and login again.

Error 4018

VPN_ERROR_NO_SERVER no available vpn server

Cannot find the corresponding type server. It is server side issue. Please contact with Wecon technical support for help.

Error 4020

VPN_ERROR_OTHER others server side error

Failed to connect server side to database, failed to encrypt certificate data. It is server side issue. Please contact with Wecon technical support for help.

Error 4031

Failed to check the VPN port and IP

It is server side issue. Please contact with Wecon technical support for help.

Error 4100

Failed to check the path of CRT certificate

Please open the WVPN tool as administrator, so that the tool can create the path of CRT certificate.

Error 4103~4104

Failed to open or unzip the zip file

Please refer to the Error 1143~1146.

Error 4105~4106

Ceritifcate file does not exist

Please refer to the Error 1143~1146.

Error 5000~5001

Invalid driver installation path

The file used to install the WVPN does not exist, please reinstall the WVPN tool.

Error 5002

Network adapter created failed

Please refer to FAQ How to manually install Virtual Network interface card(VNIC)?

Error 5003

Failed to check VPN IP

Please reinstall the WVPN tool or update to the latest.

Error 5004

No available VPN network adapter on local

Please check the network adapter whether exist or not.

Error 5005

Failed to set up the dual IP

Please run the WVPN tool as an administrator.

Error 5006

Failed to set up the dual IP

Please check the network adapter whether exist or not.

Error 5201

Failed to check the path of configuration file pc.ovpn from openvpn

Please check the pc.ovpn file whether exist on the conf folder inside the WVPN tool installation path. If it does not exist, please reinstall or update the latest version WVPN tool.

Error 5202

Invalid VPN server address

Please update the WVPN tool to the latest version. If it still report error after updated, please contact with Wecon technical support for help. 

Error 5203

Detect the empty configuration items

Please reinstall or update the latest version WVPN tool.

Error 5205

VPN is not in running

Please try to reboot the WVPN tool to pass-through again.

Error 6000

No available Network adapter information

Ensure that the Local Network and Network adpator options are normal. Make sure one Network adaptor has available network at least.

Error 6001

Failed to check the Remote LAN IP

Please reinstall or update the latest version WVPN tool.

Error 6002

Failed to pass-through, the openvpn is in initial state.

Please reinstall or update the latest version WVPN tool.

Error 6003

Failed to connect the VPN server from V-Box side

These problems are mainly due to some unexpected situations on the device side.

V-BOX End

  • Please make sure that V-BOX register time is correct. There are certain time requirements for VPN certification: If V-BOX time is much different from the server current time, WVPN pass-through will be failed. Click Update Time to make sure the device time is same to the server time.
  • Please confirm that the V-Box network is connected and stable: Please pay attention to whether the V-Box's LAN has the restriction on the Network access. For example Firewall, Corporate intranet, etc. configured with filter rules.
  • Please confirm whether to run the Lua script and whether the script takes too long time to run.
    • If the Lua script runs for more than 10 seconds at a time, it may affect the VPN penetration.
    • If it is set to execute the script every 1 second, and each execution takes about 500 milliseconds, there is no problem.
    • If it is set to execute the script every 1 second, but the execution exceeds 10 seconds due to an infinite loop or network request somewhere in the script, then VPN passthrough will cause VPN passthrough to fail.
  • Please make sure the V-Box firmware version is updated to the date.

PC side

  1. Open Control Panel →Network and Internet→Network Connect and see if a network card named TAP-Windows Adapter V9 exists. If not please try to install virtual network card (refer to the question 8).
  2. Please ping the VPN server, if very delay,this error is possible to appear.

Error 6004

Failed to open start the local VPN

  • Please refer to the Error 6003.
  • Try to run the WVPN tool as administrator.

Error 6005

Incorrect VPN status

The V-Box to be pass-through is currently being pass-through by someone else. Because the VPN server resource need to preempt, if the V-Box is already pass-through by other client end, in this situation, the pass-through action will be failed at local PC. It need to wait for others to end the pass-through.

Error 6007

ASSIGN_IP for local VPN status error. 

  • Please open the Windows command window as administrator.(Shortcut key is Win+R)
  • Please enter the following two command into cmd.
netsh winsock reset catalog
netsh int ipv4 reset reset.log
  • Restart PC

Error 6006~6017

Local VPN status error
This type of error is mainly due to the fact that the VPN program cannot connect to the VPN service normally due to the local network card, local network, software operating permissions, etc.
Please confirm whether the local network has intranet network restrictions.
If the intranet has restrictions on accessing public network services, the local VPN connection will fail, resulting in an incorrect state. For example, the IP of WECON server is prohibited from being accessed on the intranet, which may result in a constant connection (CONNECTING) state. Consult your network administrator or change the network.

Please confirm whether the local network is stable and the delay is low.
If the network where the machine is located has large fluctuations, for example, using a mobile phone to share the network with a computer may have large network fluctuations, which may cause always in RECONNECTING state. Please change the network.

Please confirm whether the VPN network card is installed normally.
If the VPN network card is not installed properly, it will also cause the local VPN status error. Please manually reinstall the VPN card according to the previous tutorial.

Please confirm the version of the VPN network card.
If other VPN software has been installed, the version of the VPN network card may not be compatible with the VPN network card used by the maintenance and control VPN tools, which will also cause local VPN status is wrong. Please refer to 6003 error to confirm the VPN NIC version.

Please confirm to run the PC-side tool with administrator privileges.
If the maintenance and control VPN tool is not run with administrator rights, the network card cannot be operated, and the local VPN status will be incorrect. Please run VPN tool as an administrator.

Please try restarting the computer.
Because the PC runs for a long time, after adding or deleting some software, it needs to restart to delete the remaining data or registry records. These data may be locked before restarting, which may affect the normal operation of the maintenance control VPN tool. If none of the above methods work, try restarting the computer.

Error 6018

Passthrough timeout
If the penetration fails for a long time, please confirm whether the local network or the device network is normal, stable and with low latency. Large network fluctuations can easily lead to VPN penetration reconnection and penetration timeout.