The icom Connectivity Suite – VPN is a service of INSYS icom for the simple and secure network connection of locations, plants, control centers and mobile devices via a Virtual Private Network (VPN). [1]

The individual VPN participants must be added as a device first. It will be differentiated between INSYS icom routers with icom OS, with INSYS OS and other third-party devices. These can be PCs, controls, cameras, other routers, etc. that support OpenVPN and referred to as PC in summary in the icom Connectivity Suite – VPN.

This Configuration Guide only applies to INSYS Smart Devices running INSYS OS. These include the router series MoRoS, IMON, EBW, RSM and QLM.

Situation

You need to add an INSYS router with INSYS OS as a device in the icom Connectivity Suite – VPN.

Solution

It is prerequisite that you have Internet access. It is also prerequisite that you have an icom Connectivity Suite account. Refer to this Configuration Guide to find out how to register an account.

  1. Open the web interface of the icom Connectivity Suite using a browser:

  2. Select the Devices tab.

  3. Click on Add a device and enter the following information:

    • Device type: select INSYS OS router

    • Device name: enter a name that allows to distinguish the device clearly from other devices

    • Device serial: enter the serial number of the device printed on the label on the device or indicated in the web interface in the StatusDevice info menu

    • Device code: the device code is used for configuring the router using the startup wizard; if no device code is specified here, the default code will be used (configurable under the My VPN Hub tab) [2]

    • Group: assign the device to a group that combines devices with similar functions that share common communication rules [3]

    • Licence: select the licence to be used

    • Default monitoring: check this if the availability of the device is to be monitored [4]

    • Select whether the router shall be directly accessible or accessible by netmapping

      • directly accessible:

        • Accessible local IP address: the router (and other local devices) will be accessible under this optional address; it will be assigned to the router using the router configuration [5]

        • Net mask: enter the netmask for the IP address [6]

      • accessible by netmapping:

        • Accessible netmapping address: the router (and other local devices) will be accessible under this address; this address will be assigned to the router using the router configuration

        • local IP address: the router will not be accessible under this optional address; however, this address will be assigned to the router using the router configuration. [7]

        • Net mask: enter the netmask for the IP address [8]

    • additional routes: check this to show the configuration of additional routes

  4. Click on OK to save your settings.

  5. Commission your device using the Quick start wizard as described in the Quick Installation Guide and enter your _Customer name and Device code in the icom Connectivity Suite – VPN section. [9]

Troubleshooting

  • You can verify a successful connection when the state changes to online on the Devices tab of the icom Connectivity Suite – VPN.

  • Refer to the icom Connectivity Suite manual for more information.


1. A VPN is a communications environment in which access is controlled to permit peer connections only within a defined community of interest, and is constructed though some form of partitioning of a common underlying communications medium, where this underlying communications medium provides services to the network on a non-exclusive basis.
2. This code will also be used as password for accessing the router via a web proxy.
3. Groups can be added on the Groups tab. If no groups are entered yet, only the standard group is available.
4. Refer to this Configuration Guide or the icom Connectivity Suite – VPN manual for more information about this functionality.
5. Note that the router will not be accessible any more under its old IP address after it has applied this setting.
6. The Netmask determines the size of the network that is made known around the local IP address via routing. It can be entered in long form (255.255.255.0) or CIDR format (/24). If a netmask that differs from the standard (255.255.255.0) is entered, the DHCP server in the device will be disabled.
7. Note that the router will not be accessible any more under its old IP address after it has applied this setting.
8. The Netmask determines the size of the network that is made known around the local IP address via routing. It can be entered in long form (255.255.255.0) or CIDR format (/24). If a netmask that differs from the standard (255.255.255.0) is entered, the DHCP server in the device will be disabled.
9. The Customer name is also shown in the My VPN Hub tab. See footnote above for the Device code.