Remote Networking: PLC Access & Data Collection

I. What is Remote Networking Technology?

Remote networking technology allows devices in different geographic locations to form a virtual private network over the public internet, enabling them to communicate as if they were on the same local area network (LAN).

For example: your computer connects to the internet via Wi-Fi, and a factory's PLC connects to the internet via a 4G router. While both devices are online, they cannot communicate directly with each other. The role of remote networking technology is to establish a secure and stable communication tunnel between the two, allowing you to access and control remote PLC devices from anywhere.

II. Why is Remote Networking Needed?

In the field of industrial automation, remote networking technology addresses the needs of three primary scenarios:

1. Remote Equipment Operations and Maintenance

After equipment is delivered to a customer, they may request program modifications, or minor bugs in the PLC program or HMI software may need troubleshooting and updates. Since the programming and debugging environment is on the engineer's computer, without remote networking, even small issues require an on-site visit, incurring significant travel costs and time.

With remote networking, engineers can connect directly to remote PLCs from their offices to upload, download, and debug programs online, eliminating the need for travel.

2. Remote Equipment Monitoring and Security Control

For equipment distributed across various locations—such as construction machinery or machine tools sold on installment—enterprises need 24/7 monitoring of equipment location and operating status. Remote networking technology enables real-time data backhaul and, when necessary (e.g., overdue payments), remote locking of the equipment.

3. Multi-Site Data Aggregation

When enterprises have multiple factories, unattended weather stations, or water quality monitoring stations, they need to transmit PLC data, sensor data, or video surveillance feeds from each site to a central headquarters platform in real-time. Remote networking technology enables the unified aggregation of data from multiple sites.

III. Technical Principles of Remote Networking

The core of remote networking technology is building a virtual private network (VPN) over the public internet. Common technical approaches include:

1. SD-WAN-Based Site-to-Site Networking

SD-WAN (Software-Defined Wide Area Network) technology uses a centralized controller to manage and configure network devices across different locations, automatically selecting optimal transmission paths based on real-time traffic conditions. Cloud-based management platforms enable deployment in minutes.

2. Layer 2 Networking Technology

Traditional Layer 3 networking (based on IP address forwarding) enables cross-subnet communication but cannot support device discovery protocols that rely on broadcast traffic. Common industrial PLC discovery protocols (such as Siemens DCP protocol) operate at the data link layer (Layer 2). If the network does not support Layer 2 communication, programming software cannot automatically discover remote PLC devices.

The value of Layer 2 networking technology lies in its ability to allow remote engineers' programming software to automatically discover and connect to remote PLC devices—just as if they were on a local network. This is particularly important for engineers using software like TIA Portal, SoMachine, and others.

3. Encrypted Transmission and Security Mechanisms

Remote networking solutions typically use asymmetric encryption algorithms like RSA/AES to encrypt all data in transit. Based on a zero-trust security framework, the system continuously conducts trust assessments, endpoint security threat detection, and dynamic access control to ensure secure and reliable communication links.

IV. Typical Application Scenarios

Scenario 1: PLC Remote Programming and Debugging

Requirement: An engineer needs to modify programs and perform online monitoring of a PLC at a remote factory from their office.

Solution: Deploy an industrial router on-site and connect the PLC to the router's LAN port. The engineer installs client software on their computer, logs in, and establishes a virtual LAN with the on-site router. Upon opening the programming software (such as TIA Portal), they can upload, download, and monitor the PLC online as if it were local.

Key Point: Layer 2 networking mode must be enabled so that the programming software can discover the PLC device via Layer 2 protocols like DCP.

Scenario 2: SCADA System Remote Monitoring

Requirement: A central headquarters platform needs to collect real-time data from PLCs at multiple remote sites.

Solution: Deploy an industrial router at each site. Routers connect to the internet via 4G or wired networks, and connect to PLCs, sensors, and other equipment downstream. All routers join the same virtual network via a cloud management platform. The SCADA system at the central platform accesses devices at each site using virtual IP addresses, enabling real-time data acquisition and monitoring.

Scenario 3: Remote Equipment Lockout and Management

Requirement: Remotely manage equipment sold on installment, with the ability to lock it remotely in the event of overdue payment.

Solution: Pre-install industrial routers and remote management modules on equipment at the factory. Once the equipment is online, it automatically joins the enterprise's virtual private network. The enterprise can then monitor equipment location and operating status in real-time via a management platform, and send lockout commands when necessary.

V. Key Deployment Considerations

1. Network Access Methods

Industrial routers typically support multiple internet access methods, including wired broadband, 4G/5G cellular networks, and wireless bridging, with intelligent switching capabilities. In scenarios where wired broadband is available, it is used as the primary link; when broadband is unavailable or cabling is difficult, 4G/5G cellular networks are used.

2. Key Considerations for Layer 2 Networking Configuration

To support PLC discovery via Layer 2 protocols, ensure the following:

• The router model supports Layer 2 networking functionality

• Layer 2 networking mode is selected on the cloud management platform

• All members of the network are on the same subnet

• The client software version supports Layer 2 networking

3. Security Policy Configuration

It is recommended to enable encrypted transmission, configure access control policies, regularly update device firmware, and enable anomaly alerts to detect and respond to network issues in a timely manner.

VI. Conclusion

Remote networking technology, through the combination of SD-WAN architecture and Layer 2 networking, effectively addresses the challenges of remote access to industrial equipment and data collection. It not only reduces on-site maintenance costs and shortens fault response times, but also provides a reliable communication foundation for the full lifecycle management of industrial equipment.

In practice, it is recommended to select appropriate networking solutions and device models based on factors such as the number of devices, communication protocol types, and security requirements. Layer 2 networking capability is critical for PLC discovery and communication in industrial control scenarios, and should be a key consideration during the selection process.