IP Forwarding is available for SV Series Routers.For R Series Routers, please refer to the Firewall in the Web Interface article.

All Sevio Routers include a Firewall that isolates the LAN (automation network) from the WAN (installation site network), providing several benefits:

  • Network segmentation independence between WAN and LAN, allowing the use of the same IP networks without conflicts.
  • Automation network protection from unauthorized IP access and preservation of OEM know-how.
  • Installation network privacy  safeguards privacy for both local and remote connections, restricting LAN access to authorized personnel and Devices.

Sometimes, however, WAN access to the automation network is required. For example, to access production data stored in a PLC or Operator Panel, or when a Device on the automation network needs data from a Workstation on the installation site network.

IP Forwarding facilitates this access without requiring additional tools or modifying existing configurations.

Enabling IP Forwarding exposes Devices on the automation network to the local network (and vice versa). Use this feature cautiously, considering the altered security perimeter and boundaries at the installation site.

  WAN to LAN

This feature allows access to a Device on the installation site (WAN) from the automation network (LAN).

IP Forwarding requires a dedicated IP address on the automation network for each rule, giving the Router two IP addresses on that network.

IP Forwarding WAN to LAN:

  • In the Devices section, select the desired Router.
  • Click Edit and Enable the IP Forwarding.
  • Enter a dedicated Source (WAN) and Destination (LAN) IP address.
  • Save.

  LAN to WAN

This feature allows access to a Device on the automation network (LAN) from the installation site (WAN).

IP Forwarding requires a dedicated IP address on the automation network for each rule, giving the Router two IP addresses on that network.

IP Forwarding LAN to WAN:

  • In the Devices section, select the desired Router.
  • Click Edit and Enable the IP Forwarding.
  • Enter a dedicated Source (LAN) and Destination (WAN) IP address.
  • Save.

The configured IP addresses should be dedicated exclusively to the Device configured for LAN-WAN access. Note that enabling this feature configures a 1:1 mapping of the IP addresses on the Sevio Router.