Remote Access to BECKHOFF PLC
Beckhoff TwinCAT Remote Connection Guide
Hubbox Connect series devices provide secure worldwide access to Beckhoff CX series Industrial PCs, Embedded Controllers, and C6xxx series Industrial Servers. This guide explains how to establish a secure TwinCAT Route and perform remote programming via TwinCAT XAE (Visual Studio).
TwinCAT XAE
Engineering PC
Engineering PC
Hubbox VPN
Tunnel
Tunnel
Beckhoff IPC
(TwinCAT XAR)
(TwinCAT XAR)
EtherCAT
I/O Modules
I/O Modules
Connection and Configuration Steps
- VPN Activation: Launch the Hubbox Desktop Client and establish a connection to your site device. Verify that your PC has received a VPN IP address and can ping the Beckhoff PLC's local IP.
- Static Route Configuration: Open the "Add Route Dialog" in TwinCAT. Since broadcast-based "Broadcast Search" may not pass through VPN tunnels, you must use the "Advanced" tab for manual entry.
- AMS Net ID Setup: Enter the Target Name, the PLC's local IP address, and the AMS Net ID of the remote device.
Note: Typically, the AMS Net ID is the PLC IP followed by ".1.1" (e.g., 192.168.1.50.1.1). - Route Creation: Select "Static" as the route type and provide the PLC credentials (Default: Administrator / 1). Click "Add Route". A blue or green arrow in the route list indicates a successful link.
- Target Selection: In Visual Studio / TwinCAT, click on "Choose Target System", select the newly created route, and click "OK". You can now click "Login" to go online.
Technical Tip: Beckhoff systems require the "Target" (PLC) to know the route back to the "Source" (PC). Ensure the Beckhoff PLC's Default Gateway is set to the Hubbox LAN IP, or a Static Route is added within the PLC's OS pointing to your VPN subnet.
Supported Beckhoff Software and Models
| System Group | Supported Models | Port / Protocol |
|---|---|---|
| TwinCAT 3 (XAE/XAR) | CX5100, CX2000, C6xxx, C7xxx Series | ADS (TCP 48898) |
| TwinCAT 2 (PLC Control) | CX9000, CX1000, CP Series (WinCE/WinXP) | ADS (TCP 48897) |
| Web Visualization | TF1810, TF2000 HMI Server | HTTP / HTTPS (80/443) |
| Remote Desktop | CX Embedded Systems (WinCE / WES7) | RDP (TCP 3389) |
Common Issues and Solutions
If you receive an "Ads-Error 0x7" (Target Port Not Found), check if the TwinCAT Service on the remote PLC is in "Config" or "Run" mode. If the connection times out, verify that the Windows Firewall on the Beckhoff IPC is allowing incoming traffic on ADS ports.
Warning: Always ensure that the "AmsNetId" of your Engineering PC is unique. If your local AmsNetId conflicts with another device already registered on the PLC's route table, the connection will be rejected.