Remote Access to BECKHOFF PLC

Beckhoff TwinCAT Remote Connection Guide

Hubbox Connect series devices provide secure worldwide access to Beckhoff CX series Industrial PCs, Embedded Controllers, and C6xxx series Industrial Servers. This guide explains how to establish a secure TwinCAT Route and perform remote programming via TwinCAT XAE (Visual Studio).

TwinCAT XAE
Engineering PC
 
Hubbox VPN
Tunnel
 
Beckhoff IPC
(TwinCAT XAR)
 
EtherCAT
I/O Modules

Connection and Configuration Steps

  • VPN Activation: Launch the Hubbox Desktop Client and establish a connection to your site device. Verify that your PC has received a VPN IP address and can ping the Beckhoff PLC's local IP.
  • Static Route Configuration: Open the "Add Route Dialog" in TwinCAT. Since broadcast-based "Broadcast Search" may not pass through VPN tunnels, you must use the "Advanced" tab for manual entry.
  • AMS Net ID Setup: Enter the Target Name, the PLC's local IP address, and the AMS Net ID of the remote device.
    Note: Typically, the AMS Net ID is the PLC IP followed by ".1.1" (e.g., 192.168.1.50.1.1).
  • Route Creation: Select "Static" as the route type and provide the PLC credentials (Default: Administrator / 1). Click "Add Route". A blue or green arrow in the route list indicates a successful link.
  • Target Selection: In Visual Studio / TwinCAT, click on "Choose Target System", select the newly created route, and click "OK". You can now click "Login" to go online.
Technical Tip: Beckhoff systems require the "Target" (PLC) to know the route back to the "Source" (PC). Ensure the Beckhoff PLC's Default Gateway is set to the Hubbox LAN IP, or a Static Route is added within the PLC's OS pointing to your VPN subnet.

Supported Beckhoff Software and Models

System Group Supported Models Port / Protocol
TwinCAT 3 (XAE/XAR) CX5100, CX2000, C6xxx, C7xxx Series ADS (TCP 48898)
TwinCAT 2 (PLC Control) CX9000, CX1000, CP Series (WinCE/WinXP) ADS (TCP 48897)
Web Visualization TF1810, TF2000 HMI Server HTTP / HTTPS (80/443)
Remote Desktop CX Embedded Systems (WinCE / WES7) RDP (TCP 3389)

Common Issues and Solutions

If you receive an "Ads-Error 0x7" (Target Port Not Found), check if the TwinCAT Service on the remote PLC is in "Config" or "Run" mode. If the connection times out, verify that the Windows Firewall on the Beckhoff IPC is allowing incoming traffic on ADS ports.

Warning: Always ensure that the "AmsNetId" of your Engineering PC is unique. If your local AmsNetId conflicts with another device already registered on the PLC's route table, the connection will be rejected.