Success Story
Convenient Machine Communication
Remote access to Ethernet systems via a secure VPN tunnel has become widespread. However, many details determine how good and how practicable a corresponding solution actually is.
Secure remote maintenance of machines and systems
The issue of remote access is very important to Wickert, if only because of the distances involved, as it means that time-consuming and cost-intensive on-site visits by technicians can be avoided. However, many companies have specific requirements in terms of IT security and system requirements.
Wickert can meet these with the partnership support of Helmholz via virtual servers that physically run on its own appropriately secured server at the Landau site. "We do this because we have the claim to map our customers' entire portfolio of requirements," says Marius Damm, deputy head of electrical engineering at Wickert, explaining this procedure. However, he also admits: "In practice this is often very cumbersome." Since 2014, Wickert has therefore been offering a remote solution - deviating from the usual paths - which meets the same high safety standards, but is significantly more flexible, easier to operate and altogether more convenient.
The complete parameterisation and remote maintenance is carried out through the perfect interaction with the myREX24 V2 portal.
Receive alarm messages via SMS, e-mail, voice calls or simply via the integrated messaging system.
Simple data transmission via industrial router and VPN tunnel
REX industrial routers from Helmholz are used in combination with the "myREX24.net" portal. Data transmission is generally encrypted via a VPN tunnel. The basis for this is the secure OpenVPN protocol. This technology ensures a very high level of security for the communication path between the system and the maintenance PC. Normally, the REX router sits behind the customer's firewall. And the PC from which remote access is to be made is also protected by a firewall. Accordingly, in the past, cumbersome solutions were needed to process the constantly newly assigned IP addresses of the subscribers, for example. With "myREX24.net", Helmholz has therefore been offering an equally secure and simple contemporary alternative since 2012: The portal serves as an exchange for VPN communication between the remote maintainer and the customer system: Both sides can use it to establish the VPN tunnel as an outgoing connection. Firewalls or limitations of services or mobile network operators are no longer an issue. Because these only restrict data traffic into the network, but not out of the network. The outgoing connections then remain on hold for a short time until the VPN tunnel is established. This is where the actual communication takes place.
The decision in favour of the REX industrial routers and the portal "myREX24.net" was made at Wickert after a comprehensive benchmark process. Several reasons spoke in favour of the Helmholz system. "The routers are very scalable," Marius Damm cites as the first argument and adds: "Unlike other providers, I can cover all transmission standards such as WAN or GSM with a single REX device."
Initially, the first model series REX 300, designed for integration in S7 and PROFI-BUS environments, was used from 2014. Since 2017, the compact REX 100 has supplemented the Wickert range as an additional option. Its range of functions is concentrated on the essential core features, but has digital inputs. In addition, the device, which is only the size of a hand, can be snapped onto any standard top-hat rail, regardless of the manufacturer. Finally, since 2019 the new REX 250 has replaced the REX 300 series at Wickert. In addition to the previous functions, the new model also has an integrated MPI-PROFIBUS interface, among other things.
The configuration is created directly in the portal
Marius Damm cites the "myREX24.net" portal as a second argument: "As a cloud solution, the system makes it possible to work from any location, for example, even from the home office." The only requirements are an Internet connection and an access account that is created once in the portal. This means that even in times of travel restrictions, operational security can be maintained at the customer's site at all times. "Moreover, acceptance among employees is high," Damms observes, "because they appreciate the flexibility the portal offers them."
The configuration is also created in the portal and can then be easily loaded onto the REX router via USB stick, for example. Other advantages of the portal include detailed reports and differentiated machine management. Thus, all machines can be managed online via different authorization levels. At the same time, the system ensures that the current status is visible to all operators in real time. Wickert is already using the new V2 version. This enables, for example, even simpler parameterization and easier categorization of projects.
Last but not least, as a third argument, Helmholz itself scored points in the selection of the supplier: They had already had good experience with each other beforehand. For example, Helmholz has long supplied IO modules and memory cards for Wickert machines. "These positive experiences also continued with the good support during the introduction of the new technology," Marius Damm looks back.
Practical experience
For Wickert, the decision made at the time has now proven itself many times over: Six years after the introduction of the first REX industrial routers, two thirds of new machine customers now opt for such a remote solution. In total, more than 250 machines have already been equipped with REX industrial routers. "And I can't remember a single defective device," sums up Marius Damm.
