VPN Router SCR200-LAN
- 2x Ethernet ports, 1x serial RS232
- Compact, flat housing
- Flexible mounting
- Sleep mode for solar or battery powered applications
- Quick start for DELTA LOGIC Connectivity Service
The professional router SCR200-LAN is a smart, compact and versatile device for your M2M and IoT applications.
Besides an internal and an external LAN port, the user also provides an RS232 interface for connecting serial devices directly to the router and thus integrating them into IP networks. With the integrated icom SmartBox, a Linux environment based on LXC technology, the router provides an operating system-independent platform, for example for local storage and processing of data or executing further programs and scripts (edge computing).
You do not want to set up your router yourself for our DELTA LOGIC Connectivity Service? No problem. We will gladly configure your new router for you. Just send us the completed form for the router configuration with the order.
| Router | |
| Function | Up to 5 IP networks local (LAN) or as WAN, VLAN incl. tags and trunk ports; own DHCP server per IP network, static routing, routing priority configurable; dynamic routing OSPF, BGP, RIP, RIPv2, RIPng; netfilters: DNAT, SNAT, IP/port forwarding, netmapping, DNS relay, dynDNS support |
| Security | OpenVPN (client and server), IPsec, GRE (incl. multi-port), DMVPN, IP filters (stateful firewall) also in VPN tunnel, several VPN tunnels in parallel possible, MAC filters, PPTP server |
| Redundancy | WAN chains: several WAN accesses configurable (prioritised and event-controlled), WAN groups: parallel operation of WAN interfaces or VPNs, several OpenVPN servers |
| Ethernet switch, interfaces |
|
| Ports | 2x RJ45, 10/100 MBit/s, full/half-duplex, auto MDI-X, 1.5 kV isolation voltage |
| Function | Each port can be freely assigned to the IP networks, Link up/down detection, configuration port |
| Events (selection) | Change: input, Ethernet port, WAN chain, profile, supply input, cellular field strength; timer expiry, firewall violation, login attempt detection, pulse sequence at digital input, counter |
| Event-controlled actions (selection) | Messages via e-mail, SMS (only cellular variant), SNMP traps, MCIP; switching profile, switching connection, changing modem state, starting timer, switching output or pulse sequence, activating firmware, reset, restart SmartBox container |
| Serial interface |
|
| RS232 (Serial1) | 1 x RS232 / D-Sub-9 (m) |
| Functions | Serial-Ethernet gateway (incoming and outgoing connections, Modbus TCP/RTU gateway, modem emulation, editable AT answer list, phone number conversion to IP addresses), PPPoE for external ADSL modem |
| Operation | |
| Wizards | Configuration of connection incl. VPN, adding LAN networks, quick start of DELTA LOGIC Connectivity Server – VPN |
| Help | Web interface with inline help texts, online help, FAQ, exemplary profiles, plausibility check |
| Configuration | Local and remote web interface (http, https; with session management), command line interface (CLI), Telnet, SSH, ASCII and binary file (also for backup), configuration management with switchable profiles (event-controlled) |
| Indications (LEDs) | Power, WAN (Internet connection) |
| Authentication | Several users, different user roles and rights, certificate-based authentication with revocation list |
| Diagnosis | SNMP traps and agent, configurable system logs, remote syslog, support packet, help functions Diagnosis tools: ping, tcpdump, traceroute, DNS lookup, AT commands |
| Firmware updates | Incremental, fail-safe, automated via update server (http, ftp, https, ftps) |
| System time | NTP client and server, real-time clock |
| Edge Computing | |
| icom SmartBox | Linux programming environment: creation of LXC containers for programs and scripts (apps), ARMv7 CPU, 448 MB RAM, 7 GB flash memory |
| Supply | |
| Voltage | 12 ... 24 V DC (± 20%) |
| Terminals | 2-pin terminal connectors, rigid/flexible conductors up to 2.5 mm2 |
| Power consumption | typical approx. 2.0 W, max. 3.0 W Sleep mode: typical approx. 55 mW |
| Sleep mode | Sleep mode: Energy conservation mode with event-triggered activation, stopping via timer, reset or re-establishing supply |
| Ambient conditions | |
| Dimensions (WxDxH) | Industrial distribution box (switch cabinet): 41.5 x 105 x 90 mm Building distribution box: 105 x 41.5 x 90 mm |
| Operating temperature | -30...+70 °C, -30...+75 °C under restricted conditions (refer to www.insys-icom.com/restricted) |
| Humidity | 0...95% (non-condensing) |
| Mounting / protection class | Mounting on DIN rail via adapter (part of the scope of delivery) / housing: IP40, terminals: IP30 |
| Approvals & Standards | |
| Certifications | CE, FCC Part 15 Class B, IC |
| EMC | Emission: EN 55032 Class B; Immunity: EN 61000-6-2, EN 55024 |
| Security | IEC 62368-1 |
| Environmental conditions | Temperature tests as per EN 60068-2-1, EN 60068-2-2, EN 60068-2-14, EN 60068-30 |
| Data sheet SCR | ||
| Data_sheet_SCR.pdf | 812 KB | December 19, 2024 |
| Manual SCR | ||
| Manual_SCR.pdf | 1.43 MB | December 19, 2024 |
| Quick Installation Guide VPN routers |
||
| QIG_Router_en.pdf | 1.46 MB | December 12, 2023 |
| DELTA LOGIC Connectivity Service First Steps | ||
| DLCS_First_Steps.pdf | 122 KB | January 08, 2024 |
General
I cannot reach my device via the IP 192.168.1.1.
Have you already tried https://192.168.1.1? The HTTP connection was deactivated by default with firmware version 4.4. Your device should be available via an HTTPS connection.
My device shows that LTE is online, but I have no Internet access.
If you have configured your device, set all firewall rules and no other settings are missing, make sure that you have entered the correct access point name under Interfaces/LTE.
I need to enter the SIM PUK. Where do I have to enter the PUK?
In the new UI under Administration/Debugging, in the classic UI under Help/Debugging. Please select AT command as the tool and enter your PUK and the new PIN in the following format:
AT+CPIN="PUK","NEW PIN"
Here is an example of what this could look like:
AT+CPIN="12345678","0000"
How can I create a support package?
New UI: In the menu under Status/Support package/Create support package
Classic UI: in the menu under Help/Support/Create new support package
I cannot connect to my Siemens HMI panel (KTP1500 Comfort, KTP600 Basic,... ) via VPN in the TIA Portal. Why?
1. With HMI panels only "Advanced online loading" can be used in the TIA Portal, "Advanced online connect" is basically not possible.
2. "PG/PC interface" TAP-Windows Adapter..." must be selected as interface.
3. With some HMI panels (KTP600 Basic) the "PN/IE interface" cannot be used, in these cases the "Ethernet interface" has to be used.
4. For some HMI panels (e.g. TP700 Comfort), the "Display all compatible stations" option must not be active.
OpenVPN
Where can I download the latest Open VPN client?
You can find it here: https://openvpn.net/index.php/open-source/downloads.html
My OpenVPN connection is not going online. I get the error message “UDP link local: (not bound)” ... “Inactivity timeout (-ping-restart), restarting”.
Your firewall is blocking the connection. Make sure that the connection to the VPN server via the required port is not blocked.
My OpenVPN connection is not going online. I receive the error message “Certificate not yet valid”.
This means that the date of your device is set incorrectly. Your certificate is literally not yet valid because your device time is in the past. You can set the correct date and time via Administration/Time.
My OpenVPN connection is not going online. I get the error message “TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)”.
Explanation: There is no response from the server to the client connection within 60 seconds (see timestamp of the marked entries). This results in a timeout. This can have several causes.
This is one of the most common cases. The most common cause is then point 3.
1. Incorrect destination address or destination port in the VPN client: Check whether the correct address of the VPN server and the correct port are set here.
2. No Internet connection: Check whether VPN servers or other services are pingable on the Internet.
3. Firewall blocks the connection establishment: Make sure that the connection establishment via the required port to the VPN server is not blocked.
I see the message “temporary failure in name resolution” in the OpenVPN logs. What does this mean?
This generally means a DNS error. Make sure that the DNS settings of your Insys device are correct and that DNS queries are allowed.
When I start OpenVPN, I get a blue screen error.
This behavior is possibly caused by the TIA Portal from Siemens, which is also responsible for support in this case. DELTA LOGIC has no influence here. However, experience has shown that it can help to switch off the SIMATIC Industrial Ethernet ISO protocol on the OpenVPN network adapter.
Accessory items
