IoT Guide

Remote Access to Schneider Electric PLCs via 4G VPN

Connect your Schneider Modicon M580, M340, and Premium PLCs remotely via 4G VPN.

Quick answer
Remote access to a Schneider Electric PLC (Modicon M580, M340, Premium) is provided via an industrial 4G router with a VPN tunnel and the Modbus TCP or EtherNet/IP protocol. EcoStruxure Machine Expert (Unity Pro) connects to the PLC via the remote IP address exposed within the tunnel, enabling programming, diagnostics, and monitoring without the need for on-site presence.

Remote Access to Schneider Electric PLCs: An Overview of the Product Line

Schneider Electric is one of the world’s leading providers of programmable logic controllers (PLCs). The Modicon product line covers applications ranging from small machines to complex safety-critical processes. Enabling remote access to these PLCs drastically reduces operating costs and response times.

The Modicon product line includes:

  • M580: high-end process controller, dual-port native Ethernet, OPC UA, PAC architecture
  • M340: versatile controller, widely used in industry, requires a NOE module for advanced Ethernet capabilities
  • M262: modern machine controller with native cloud connectivity
  • Premium: older generation still widely used, nearing the end of Schneider’s support
  • Momentum: compact decentralized controller

Schneider Remote Access Architecture via a 4G VPN Router

The typical architecture of a Schneider remote access system is based on:

  1. A local OT network with the Modicon PLC connected to an industrial Ethernet switch
  2. A 4G VPN router (DIN rail, 24 V DC power supply) connected to this switch
  3. An encrypted VPN tunnel established to a VPN hub (cloud-based or on-premises)
  4. The engineer’s workstation running EcoStruxure Machine Expert, connected via a VPN client

From EcoStruxure Machine Expert, the PLC is visible at its local IP address (e.g., 192.168.1.10) and can be accessed as if it were on the local network via VPN routing.

Modicon Communication Protocols

Schneider Modicon devices support several protocols, depending on the product line and configuration:

ProtocolTCP PortUsageM580M340
Modbus TCP502SCADA, monitoring, remote data collectionYesYes
EtherNet/IP44818Rockwell integration, MESYesPartial
OPC UA4840Standardized integrationYes (FW 3.10+)No
Schneider SY/MAX1105Unity Pro/EcoStruxure programmingYesYes

For remote programming access, port 1105 (proprietary protocol) must pass through the VPN tunnel. For SCADA monitoring, port 502 (Modbus TCP) is sufficient.

EcoStruxure: Schneider’s Connectivity Ecosystem

EcoStruxure is Schneider Electric’s open IoT platform that facilitates the connectivity of Modicon equipment to the cloud and management systems:

  • EcoStruxure Machine Expert: unified programming tool for the M580, M340, and M262
  • EcoStruxure Control Expert: direct successor to Unity Pro
  • EcoStruxure Plant: integrated monitoring and SCADA
  • EcoStruxure Resource Advisor: cloud-based energy management

For remote access, EcoStruxure Machine Expert includes connection management features that simplify multi-site VPN configuration.

Schneider Remote Access Security

Schneider Electric publishes product-specific cybersecurity guides. Key points for remote access:

  • Application Protection: Set an application protection password in EcoStruxure to prevent unauthorized modifications
  • Network Segmentation: Isolate the Modicon network (OT VLAN) from the office network
  • VPN Only: Never expose Modbus port 502 directly to the Internet
  • Audit trail: Enable access logs on the 4G router and the VPN
  • Firmware updates: Apply Schneider security patches regularly (Schneider PSIRT)

Use Case: Remote Preventive Maintenance on the M580

A typical Schneider Electric remote access scenario:

The maintenance engineer receives a monitoring alert indicating a temperature drift on a production line. From home, he opens his VPN client, connects to the site via the 4G router, launches EcoStruxure Machine Expert, and connects online to the M580. He reviews the diagnostic buffer, checks the real-time values in a monitoring table, identifies a faulty analog sensor, and schedules a targeted service call. Without remote access, a 3-hour round-trip would have been necessary.

Frequently Asked Questions

You might also like