Remote Access to Schneider Electric PLCs: An Overview of the Product Line
Schneider Electric is one of the world’s leading providers of programmable logic controllers (PLCs). The Modicon product line covers applications ranging from small machines to complex safety-critical processes. Enabling remote access to these PLCs drastically reduces operating costs and response times.
The Modicon product line includes:
- M580: high-end process controller, dual-port native Ethernet, OPC UA, PAC architecture
- M340: versatile controller, widely used in industry, requires a NOE module for advanced Ethernet capabilities
- M262: modern machine controller with native cloud connectivity
- Premium: older generation still widely used, nearing the end of Schneider’s support
- Momentum: compact decentralized controller
Schneider Remote Access Architecture via a 4G VPN Router
The typical architecture of a Schneider remote access system is based on:
- A local OT network with the Modicon PLC connected to an industrial Ethernet switch
- A 4G VPN router (DIN rail, 24 V DC power supply) connected to this switch
- An encrypted VPN tunnel established to a VPN hub (cloud-based or on-premises)
- The engineer’s workstation running EcoStruxure Machine Expert, connected via a VPN client
From EcoStruxure Machine Expert, the PLC is visible at its local IP address (e.g., 192.168.1.10) and can be accessed as if it were on the local network via VPN routing.
Modicon Communication Protocols
Schneider Modicon devices support several protocols, depending on the product line and configuration:
| Protocol | TCP Port | Usage | M580 | M340 |
|---|---|---|---|---|
| Modbus TCP | 502 | SCADA, monitoring, remote data collection | Yes | Yes |
| EtherNet/IP | 44818 | Rockwell integration, MES | Yes | Partial |
| OPC UA | 4840 | Standardized integration | Yes (FW 3.10+) | No |
| Schneider SY/MAX | 1105 | Unity Pro/EcoStruxure programming | Yes | Yes |
For remote programming access, port 1105 (proprietary protocol) must pass through the VPN tunnel. For SCADA monitoring, port 502 (Modbus TCP) is sufficient.
EcoStruxure: Schneider’s Connectivity Ecosystem
EcoStruxure is Schneider Electric’s open IoT platform that facilitates the connectivity of Modicon equipment to the cloud and management systems:
- EcoStruxure Machine Expert: unified programming tool for the M580, M340, and M262
- EcoStruxure Control Expert: direct successor to Unity Pro
- EcoStruxure Plant: integrated monitoring and SCADA
- EcoStruxure Resource Advisor: cloud-based energy management
For remote access, EcoStruxure Machine Expert includes connection management features that simplify multi-site VPN configuration.
Schneider Remote Access Security
Schneider Electric publishes product-specific cybersecurity guides. Key points for remote access:
- Application Protection: Set an application protection password in EcoStruxure to prevent unauthorized modifications
- Network Segmentation: Isolate the Modicon network (OT VLAN) from the office network
- VPN Only: Never expose Modbus port 502 directly to the Internet
- Audit trail: Enable access logs on the 4G router and the VPN
- Firmware updates: Apply Schneider security patches regularly (Schneider PSIRT)
Use Case: Remote Preventive Maintenance on the M580
A typical Schneider Electric remote access scenario:
The maintenance engineer receives a monitoring alert indicating a temperature drift on a production line. From home, he opens his VPN client, connects to the site via the 4G router, launches EcoStruxure Machine Expert, and connects online to the M580. He reviews the diagnostic buffer, checks the real-time values in a monitoring table, identifies a faulty analog sensor, and schedules a targeted service call. Without remote access, a 3-hour round-trip would have been necessary.