EROE Web Server is Not Reachable Over WAN Network – SCADAPack 474i Routing Table configuration

Symptoms seen: Can't connect to EROE webserver from outside local RTU subnet.

EROE Web server not connecting:

Example Network Topology:

Local Connection:

Even though the EROE Web Server PC and the remote device could communicate locally, see Local Connection, remote access failed because the SCADAPack 474i routing table was not configured to return traffic back to the PC network (10.10.10.0/24) as seen in the Example Network Topology.

This caused one‑way communication, which is why:

• The EROE Web Server PC (10.10.10.224) could send packets toward the remote network (192.168.1.x).
• But the SCADAPack 474i or End Device had no route telling it how to return packets back to the 10.10.10.x network.
• As a result, the web server appeared reachable locally but never responded to network clients, making the web interface inaccessible from the remote side.

Resolution

• Add a NETWORK route in the SCADAPack 474i routing table.
• In RemoteConnect, Configuration → IP Communication → Routing Table
• Add IP Route.

After adding this route, the SCADAPack will know how to return traffic to the PC, and the EROE Web Server will be fully accessible across the network.

For additional information, you can connect to the SCADAPack 474i RTU using Telnet and run the command route print to review the routing configuration on the device. Verify the Edge routing entries to confirm that the required networks and gateway paths are correctly defined.

/user>route print

Interface List:

10: ETHERNET 1 IP Address: 192.168.1.110/27

11: ETHERNET 2 IP Address: 172.16.1.200/24

EDGE(ETH3) IP Address: 172.16.1.201/24

EDGE(ETH4) IP Address: 0.0.0.0

13: USB        IP Address: 10.2.3.4/29

RTU Routes:

Type     Destination-IP   Net-mask          Gateway-IP       Interface   Metric

DFLT-GW  0.0.0.0          0.0.0.0           192.168.1.97     10          0

NETWORK  10.2.3.0         255.255.255.248   10.2.3.4         13          0

HOST     10.2.3.4         255.255.255.255   10.2.3.4         13          0

GATEWAY  10.10.10.0       255.255.255.0     172.20.30.97     10          1

HOST     127.0.0.1        255.255.255.255   127.0.0.1         0          0

NETWORK  169.254.254.248  255.255.255.248   169.254.254.249  11          0

HOST     169.254.254.249  255.255.255.255   169.254.254.249  11          0

NETWORK  172.16.1.0       255.255.255.0     172.16.1.200     11          0

HOST     172.16.1.200     255.255.255.255   172.16.1.200     11          0

NETWORK  192.168.1.96     255.255.255.224   192.168.1.110    10          0

HOST     192.168.1.110    255.255.255.255   192.168.1.110    10          0

Route Priority: HOST NETWORK GATEWAY DEFAULT-GW

Edge Routes:

Type     Destination-IP   Net-mask          Gateway-IP       Interface

DFLT-GW  0.0.0.0          0.0.0.0           172.16.1.1       ETH3

NETWORK  10.2.3.0         255.255.255.248   169.254.254.249  EDGE

NETWORK  192.168.1.96     255.255.255.224   169.254.254.249  EDGE

NETWORK  10.10.10.0       255.255.255.0     169.254.254.249  EDGE

RTU NAT Redirections:

Destination-IP   Port   Redirect-IP      Port  Protocol

10.2.3.4         22     169.254.254.250  22    tcp

10.2.3.4         443    169.254.254.250  443   tcp

10.2.3.4         4323   169.254.254.250  4323  tcp

192.168.1.110    22     169.254.254.250  22    tcp

192.168.1.110    443    169.254.254.250  443   tcp

192.168.1.110    4323   169.254.254.250  4323  tcp

172.16.1.200     22     169.254.254.250  22    tcp

172.16.1.200     443    169.254.254.250  443   tcp

172.16.1.200     4323   169.254.254.250  4323  tcp

Released for: Schneider Electric Netherlands