PLCGurus.NET - Stratix 5700 NAT With Layer 3 Routing

This video builds on our previous video covering Inter-VLAN Routing on a Allen-Bradley Stratix 5700 managed switch. Here I show you in explicit detail how to properly implement Layer 3 routing with a downstream Layer 2 NAT switch with multiple machines connected to both.
Like what you see and want to buy me a coffee to keep going...great I could certainly use one! Just use this link here:
paypal.me/plcg...
Become an official PLCGuru.NET supporter and get one of your very own PLCGurus.NET T-Shirt or some other great swag from our swag shop!
plcgurus.net/p...
Also you can support me by becoming a Patron on our Patreon page:
/ plcgurus
You are watching video's from PLCGurus.NET. Check out our blog and forums at plcgurus.net and become an active member in our growing community of professional engineers, technicians and technologists all centered around Industrial Automation. Membership is completely FREE!
If you like this video and want to see more like it, be sure to subscribe to our channel...and while you're at it, give us a "Like" too. Thanks for watching!

[@bantau]

Glad I found you. I need more Stratix knowledge ! Your VLAN video was great ! Bookmarked it and I'll be back to see what else you've got.

[@rajchauhan-kv9rn]

Very informative video .Thanks for explaning briefly.

[@alo_m4772]

Extremely Helpful. I greatly appreciate.

[@tambufra]

Great video! Thanks a lot

[@JohnDoe-hi6bl]

Very good video.....cant wait for more

[@JC-xc8rx]

Great! I appreciate your effort in putting this together.

[@mubarishussain3696]

Better than rockwell manuals. Appreciate your videos. Can you do a live webinar during these times? Love to hear from you

[@InfiniteBrain]

Great video, helped illustrate how to setup the system and also what the end result would look like.

[@rokci100]

Thank you boss

[@luckynumbersevuuun]

super good. would have been good to show arp -a at the cmd

[@PLCGurusNET]

Hi Silviu. The gateway address is needed to cross Vlans. Therefore the gateway address of 192.168.1.1 must be assigned as the gateway address of the machine 20 and 21 PLCs respectively.

[@jameslanders4660]

I think this is the part I'm missing. Followed this and the previous video. Great stuff. We have an existing control network. We are trying to add a NAT'd 5700. Question is: Will assigning the public gateway address to the devices that we would like to NAT break their comms with the other devices on our existing network? (PLC, VFDs, ect) Changing their G/W from what is already established...

[@macp450]

Great video👏. I tried to achieve the same result as your Stratix 5700 with NAT (multiple machines needing NAT on the private side of the switch) in 2016 with a 1783-20BMSCGN but I ran into obstacles and couldn't find good help. Also with Stratix 5700 with NAT we run into the extra effort (vs NAT with an 9300-ENA or 1783-NATR) of having to map the engineering workstation computers and other PLCs public addresses to private addresses because we don't use an OT router. I feel like you show how this could be avoided if we added an OT router with appropriate config. Has anyone asked what models of Stratix switches are referenced in the video?

[@alansosa1681]

Ing excelente video una pregunta si yo quisiera comunicar 2 stratix 5700, bajo una misma vlan, como podria hacerle la ip del segundo switch tendria que estar dentro de la VLAN designada por el primero, o es que hay otro metodo para realizar dicha comunciacion?

[@chandlertrimble2591]

Can you make a similar video using the Stratix 5800? Thank you for the awesome channel and great information.

[@aiautomation695]

This is a great video. I am hoping someone could explain why the first Stratix 5700 is needed and why you could not just set up the VLAN and NAT on a single Stratix 5700. Thank you.

[@juancamiloramirezaponte4827]

It is necesary to have a router to do the nat configuration?

[@thetatto19]

x2

[@omarrivero9895]

did you solve ?

[@juancamiloramirezaponte4827]

@@omarrivero9895 No, at least we used a 1783 NATR because the stratix 5700 didnt work as we expected

[@joew4202]

Are you familiar with DYMEC 3 layer switches ? I learned how to do VLAN on stratix 5700 thinking it could do NAT, but I was wrong. So now I’m trying to do what I learned on the stratix on the DYMEC but it’s not that easy. Can you help ?

[@SiC41]

Great Video! Very informative channel! Could you please tell me what does the 192.168.1.1 represent (used in Gateway Translation)? It is just a random address or is it the ip address of your PLC?

[@rogergibson6666]

Learned lots about Stratix 5700 NAT in these videos. We have over 900 AB PLC's on our network 172.19.x.x mask 255.255.0.0. each has at least 1 HMI and MSG blocks are used to transfer information for Automation. Our current issue is we got a control upgrade for one of our German made machines that uses a PC as the HMI. they are networked on their own LAN (192.168.10.X) and because of their "Security" their IP address can not be changed. We were told a Stratix 5700 NAT would solve our issue but we have been unable to get online with the compact Logic PLC and still have it communicate with the HMI PC. Any Ideas?

[@joew4202]

Have you had any luck with this. I’m in that same situation and trying to set up a NAT switch to combine PLC networks. I learned how to do this on stratix but now I’m using a DYMEC and I can’t figure it out. I would really appreciate some help. Can I do this with only the 3 layer switch ?

[@michaeljburt]

Can Machine 20 and Machine 21 communicate with each other using the public IPs (172.16.2x.10)? I'm wondering about MSG or produced/consumed.

[@PLCGurusNET]

Yes!

[@pdro2209]

Great video. What I have to do if I have 3 plc with the same IP address. But I want to put them in just one vlan? Thanks.

[@PLCGurusNET]

Unfortunately I don't think it will be possible to 3 identical IP's on the same VLAN.

[@pdro2209]

PLCGurus.NET thanks. I mean 3 same IP address before the NAT and after the NAT with 3 different IP address in the same Vlan, is possible ?

[@camiloramirez305]

it is possible do the NAT with only 1 stratix 5700 ?

[@thetatto19]

x2

[@kuuya03]

you have no ip address assigned in vlan management how do they access vlan?

[@Aldo_Carrasco]

My Stratix is not Resuming the nat translation after power-up, If PLC is started before the Stratix, it won't show. If the plc is started after the Stratix everything is working ok. Any suggestions to fix this issue.

[@PLCGurusNET]

That is a strange one. Just wondering if you've found a fix? If so consider sharing over on the forums at the website.

[@ardentdfender4116]

Another great video and well taught. Your a very good instructor. Only someone with a very short attention span could not appreciate this video for complete setup and understanding. One thing that’s a little confusing me is in the network drawing when you have an IP Address like this 192.168.1.10/24 or some variation of that 15/30. While I understand the IP Address and Subnet Mask, I’m getting confused my the address with a forward slash in it. Does 192.168.1.10/24 mean their are a max of 24 addresses in that VLAN?

[@asolchenberger]

192.168.1.10/24 means that ip address with "24" bits set in the subnet mask. Each octet with all 8 bits set would be 255. 24 bits set is 3 x 8 bits or 255.255.255.0. So /24 is just shorthand for subnet mask of 255.255.255.0.

[@chnll8674]

Can they still communicate like normal if they have very different ip addresses like i.e: plc1 192.168.2.3 plc2 192.170.3.4 and the desktop 132.148.2.0?

[@joew4202]

What’s the difference between router and NAT switch. I thought his was one device

[@adamruck]

I wish you had discussed the concept of NAT and the variations of NAT a little more. Big difference between a "one to one" NAT which you did in this video versus a "many to one" NAT using port address translation. I think many people watching this will not realize that the other devices on the 192 range will not be reachable from outside. I think a couple of sentences description how a packet actually goes across the network that you built would have been helpful. E.x. A packet starts from [location] with the source [src] and the destination [dst] and gets sent to the default gateway which is the NAT switch... then the one to one NAT changes the SRC of the packet to [newsrc] and sends the packet out of G1 with the vlan ID of [vlanid], etc, etc. Without describing the process most people have no idea how this stuff actually works, only the steps to set it up.

[@brettyeomans1839]

How come the Stratix has a public address? All the Rockwell manuals show the device to have a private address. Furthermore as soon as a NAT entry is added the IP address of the Stratix is only reachable from the fa ports not the gigs.

[@paolomh3173]

Hi PLCGurus.NET. Why does he ping 172.16.10.10 from my pc 172.16.1.254?

[@이태훈-y4x]

So fucking sound between words

[@SimplifyIt02]

LOL USED THE SAME METHOD & IP CONFLICT TOOK PLACE. ENTIRE PLANT GOT SHUT DOWN.

[@PLCGurusNET]

Always test your configurations before deploying to a production environment. I just responded to your other comment and I suspect that was your issue.