bridge to connect networks
# general
d
A question about network. I need a "bridge" to connect our IoT-net to the internal net on a machine. For example, the machine have an internal network with 192.168.100.x and our IoT network have 192.168.50.x. On one machine i use an ubiquity edge router and set it up like a bridge with a firewall and portforwarded only the opcua port. Is there any other nice device to accomplish the same thing? Very good it is DIN-compatible so i could mount in the the machine cabinet on the DIN-rails.
j
> On one machine i use an ubiquity edge router and set it up like a bridge with a firewall and portforwarded only the opcua port. we used to to this with an edge device running opnsense
d
Yes. That is one option. I was also looking at siemens iot2050 which has a quite good price and comes with an industrial debian and 2 ethernet cards.
Using that you could run benthos locally and send the data on mqtt on the other lan to have more security.
j
i am big fans of the onlogic ones, as we have found them to be kind reliable with well supported chips in there
this is what we do with UMH Lite 🙂
you can run UMH lite, and it will send out MQTT messages. but you can use it still via the management console
@Athavan kanapuli
d
yes. this is what i was looking at a way back.. Not sure though about the security since you can access the edge device externally.. Most secure would be to close all ports except mqtt.
j
What do you mean you can access the edge device externally? All ports are closed?
Just outgoing connections
d
So you mean that you setup the device first and then you can only reconfigure it from the machine side?
j
no, you can configure the device externally, but still all ports are closed. the device opens a connection to an external server and this is how it does the connectio
for security concerns we have End to end encryption, that only you can do that
d
Ah. yes. i understand. So you can access it only through the mgnt console.
j
Yes!
d
ok. so if you want to update anything on the OS you need to connect from the machine side right?
j
yes! maybe in the future there will be also an SSH feature in the management console, but for now we didn't want to put it in there for security reasons.
d
ok. But you can still deploy a new protocol converter from the mgnt console if you need to add more data to read?