By default, only one network can be remotely accessed: the edge gateway's LAN IP range, also referred to as the machine network. However, some machines contain sections or components that are in different IP ranges. Additional subnets enables you to access multiple networks if you have a 3rd party VLAN-enabled switch that can function as the gateway to those other networks.

• Multiple LAN networks or Additional subnets, what's the difference?
• Required 3rd party hardware
• Configure the managed switch and IXON edge gateway

Multiple LAN networks or Additional subnets, what's the difference?

Multiple LAN networks and additional subnets are both features that enable access to more than one network. The most important differences are outlined below.

Required 3rd party hardware

Additional hardware is required to function as the gateway between the IXON edge gateway's LAN IP range (192.168.140.x in the example below) and the additional IP ranges you wish to remotely access (192.168.141.x, 192.168.142.x, and 192.168.143.x in the example below).

This additional hardware needs to support VLANs and also needs to support routing traffic between the VLANs. The most common hardware capable of this is called a "layer 3 switch" or a "managed switch". Note that your switch may support VLANs, but may not support routing between the VLANs. Make sure that both are supported.

Configure the managed switch and IXON edge gateway

Before you can configure the edge gateway, you'll need to configure the managed switch. For detailed steps please refer to your switch's manual or contact the manufacturer.

1. Configure a port on the managed switch with a unique IP address in the same IP range as the LAN of the edge gateway.
2. Connect that port to an available LAN port of the edge gateway.
3. Configure the other ports of the managed switch for the other IP ranges that you wish to remotely access and connect them to the corresponding devices (PLC, HMI, etc).

Once your managed switch is configured and connected, you can configure the edge gateway. Select one of the configuration methods below.

• IXON Cloud
• Local web interface

IXON Cloud

Once the managed switch is configured, you can continue with the steps below to configure an additional subnet via the IXON Cloud.

4. Go to Fleet Manager > Devices and click on your device name.
5. Go to Network > LAN.
6. At Additional subnets, add an additional subnet.
7. Enter the requested information (details below) and click on Add.
   

   Field	Description
   Network address	The additional subnet's IP range with a 0 as final number (e.g. 192.168.200.0). Make sure that the additional subnet does not conflict with the edge gateway's WAN IP range (company network) to avoid an IP range conflict.
   Network mask	The additional subnet's network mask (usually 255.255.255.0).
   Gateway address	The managed switch's IP address that is in the same IP range and physically connected to the edge gateway.

8. Repeat the previous steps for every IP range you wish to remotely access, excluding the edge gateway's own LAN IP range.

You have now made the changes in the IXON Cloud, but these are not yet active in your device. You will need to push your changes to your device for them to take effect.

9. Click on Push config to device in the top right corner.
10. If you already have a VPN connection to the edge gateway, disconnect and then reconnect to make use of the new settings.

Local web interface

Once the managed switch is configured, you can continue to configure an additional subnet via the local web interface. Select your edge gateway model: