The OT/LAN port on your edge gateway can be configured as an additional LAN port (default) or as a 2nd WAN port.

The 2nd WAN port can be used to allow communication to your machine from a different network than is connected to the 1st WAN port (Cloud). A common example is an OT network that does not have internet access, but does need to communicate with the machine to keep production running.

The OT/LAN port configuration can be configured using the following methods:

• Configuration file on USB stick
• Local web interface

Configuration file on USB stick

To configure the OT/LAN port of your edge gateway using a USB stick.

1. Create a new text file named ixrouter.conf in any text editor, like Notepad++.
   • You can also use an existing configuration file you created at Fleet Manager > Tools.
2. Copy these lines into the file:
   • If you're using an existing configuration file, you can add these lines anywhere.

   ixrouter.wan.wan2_mode=WAN2
   ixrouter.wan.wan2_ip_use_dhcp=true
   ixrouter.wan.wan2_ip_address=
   ixrouter.wan.wan2_ip_netmask=
   ixrouter.wan.wan2_ipv6=true

3. The above lines will configure your OT/LAN port as a 2nd WAN port. You can change each setting before continuing (details below).
   

   Setting	Description	Syntax
   ixrouter.wan.wan2_mode	This determines whether the port functions as an additional LAN port (LAN) or a 2nd WAN port (WAN2).	LAN WAN2
   ixrouter.wan.wan2_ip_use_dhcp	This determines whether network settings for this port will be handled automatically (true) or not (false). If the port mode is set to LAN, this setting will be ignored.	true false
   ixrouter.wan.wan2_ip_address	If DHCP is set to false, enter a static IP address here. Make sure to always check this network setting with the local IT. If the port mode is set to LAN or if DHCP is set to true, this setting will be ignored.	Example: 192.168.100.10
   ixrouter.wan.wan2_ip_netmask	If DHCP is set to false, enter a static IP address here. Make sure to always check this network setting with the local IT. If the port mode is set to LAN or if DHCP is set to true, this setting will be ignored.	Example: 255.255.255.0
   ixrouter.wan.wan2_ipv6	This determines whether the port uses IPv6 (true) or not (false). If the port mode is set to LAN, this setting will be ignored.	true false

4. Save the file and place it on an empty USB flash drive.
5. Turn off the edge gateway.
6. Insert the USB stick into the edge gateway and power it on.
7. Wait a minute for the configuration to be applied.
8. Remove the USB flash drive from the edge gateway.

Local web interface

To configure the OT/LAN port of your edge gateway via the local web interface.

1. Connect locally to one of the LAN ports of the edge gateway or set up a VPN connection.
   
   • The local web interface is not accessible from the WAN side (Cloud port and also OT/LAN port when it's configured as WAN2).
2. Open a new tab in your browser, enter the edge gateway's LAN IP address, and log in.
   • The default LAN IP address is 192.168.140.1.
   • Make sure that your laptop has an IP address in the same range. You may need to configure this manually. There are many online guides on this if you need a step by step guide.
   • The default username is admin.
   • The default password (PW) is printed on the side of the edge gateway.
   • The number of login attempts is limited per time window, in compliance with cybersecurity standard IEC 62443-4-2. By default, the number of login attempts is limited to 5 per 1 minute, replenishing a login attempt every 1 minute. We recommend you configure this to align with your corporate security policy. Do so by logging in and going to Administration > Authentication.
   • You can change the password by logging in and going to Administration > Change password.
3. Go to Network > WAN2 and change the WAN2 configuration to WAN2 mode.
   • By default, DHCP is used, meaning network settings are handled automatically.
   • If instead you're manually configuring the network settings, make sure to always check all network settings with the local IT. This includes the IP address and network mask.