By default, only one network can be remotely accessed: the edge gateway's LAN IP range, also referred to as the machine network. However, some machines contain sections or components that are in different IP ranges. Multiple LAN enables you to configure multiple LAN networks to make entire machines or individual components from different networks accessible. They no longer all need to be in the same network.

For frequently asked questions, see Multiple LAN networks FAQ.

• Multiple LAN networks or Additional subnets, what's the difference?
• Overview of supported features
• Configure multiple LAN networks

Multiple LAN networks or Additional subnets, what's the difference?

Multiple LAN networks and additional subnets are both features that enable access to more than one network. The most important differences are outlined below.

Overview of supported features

Below is an overview of features that work with additional LAN networks. Listed features that do not work yet will be supported at a later date, at which point this article will be updated. Keep an eye on this article or subscribe to the release notes to stay up to date.

Configure multiple LAN networks

Follow the steps below to configure additional LAN networks. The default LAN network is always available and cannot be removed.

1. Connect locally to one of the LAN ports of the edge gateway or set up a VPN connection.
   
   • The local web interface is not accessible from the WAN side (Cloud port and also OT/LAN port when it's configured as WAN2).
2. Open a new tab in your browser, enter the edge gateway's LAN IP address, and log in with the password listed on the side of the edge gateway.
   • The default LAN IP address is 192.168.140.1.
   • Make sure that your laptop has an IP address in the same range. You may need to configure this manually. There are many online guides on this if you need a step by step guide.
   • The default username is admin.
   • The default password (PW) is printed on the side of the edge gateway.
   • The number of login attempts is limited per time window, in compliance with cybersecurity standard IEC 62443-4-2. By default, the number of login attempts is limited to 5 per 1 minute, replenishing a login attempt every 1 minute. We recommend you configure this to align with your corporate security policy. Do so by logging in and going to Administration > Authentication.
   • You can change the password by logging in and going to Administration > Change password.
3. Go to Network > LAN.
4. At the top, clickAdd LAN network. Enter the requested information (details below) and click on Submit changes.

   Field	Description
   Name	Enter a name for the network. It is not possible to change the name once the network has been created.
   IP address	Enter a LAN IP address in the same IP range as other hardware in the network (e.g. 192.168.200.1). Make sure that the LAN IP address is unique and not the exact same as other hardware in the network. Make sure that the LAN IP range is different from the WAN IP range (company / cellular network), other LAN networks' IP ranges, your own office IP range, and our VPN range (10.187.x.y) to avoid an IP range conflict. It is NOT recommended to use 192.168.0.x, 192.168.1.x, or 192.168.178.x. These are very common IP ranges, which increases the chance for an IP range conflict. If you're using a SecureEdge Pro, do NOT use 172.17.x.y or 10.188.x.y. These IP ranges are in use by Docker, which will cause an IP range conflict resulting in LAN communication issues.
   Network mask	Enter the network mask (usually 255.255.255.0).
   DHCP server	The DHCP server automatically assigns an IP address, and other necessary network parameters, to devices connected to this network if they do not have a static IP address configured.
   Address reservations	Address reservations enable you to always assign a specific IP address to devices connected to this network if they do not have a static IP address configured. This ensures those devices will always receive the same IP address. It is especially useful for devices where you are unable to configure a static IP address. Make sure that the DHCP server is enabled and a DHCP range is configured. Make sure that the address reservation is outside of the DHCP server's range.
   Port assignment	Select the physical port you'd like to assign to this network. You can select zero, one, or more LAN ports. If a selected port is already assigned to another network, you have the option to move the assignment over to this network. If the OT/LAN port is unavailable, also called LAN5, that means it is configured as a 2nd WAN port under Network > WAN2. Not assigning a LAN port can be useful for future use. This enables you to more easily switch between LAN network configurations later.

5. Click on Submit changes.
6. Repeat the previous steps for every LAN network you wish to add.
7. Make sure to reboot any devices that were already connected to the port(s) you assigned to the new LAN network. You can skip this step for devices that have a static IP address configured.
   • A restart is needed to receive an IP address in the new LAN network's IP range.

You have now made the changes in the edge gateway, but these are not yet present in the IXON Cloud. You will need to import these changes to the IXON Cloud to avoid unwanted configuration changes later on.

8. Wait a moment for the edge gateway to report its new configuration to the IXON Cloud. This usually takes less than a minute.
9. Go to Fleet Manager > Devices and click on your device name.
10. Open the sync optionsand select Import config from device.