What to know

JMCloud is a VPN-based solution that allows to remotely access HMI and network devices connected to JMCloud Server through an internet connection.
This FAQ explains the basics to setup the HMI Cloud Enabler on eTOP500/600 series HMI.

Introduction

Following requirements needs to be satisfied to follow this FAQ:

• eTOP500/600 series HMI,
• JMobile Suite (Download here),
• JMCloud Connect software (Download here),
• a Superuser account for JMCloud Connect (Learn how-to here).

Network diagram below explain the network configuration we are going to setup on JMCloud:

Steps to do:

1. Creation of gateway/endpoints with JMCloud Connect
2. HMI Cloud Enabler setup on eTOP500/600
3. Connection to gateway/endpoints with JMCloud Connect

1. Creation of gateway/endpoints with JMCloud Connect

Launch the JMCloud Connect software to get access to the JMCloud server,
in the Login page enter Username and Password, then click on the [SIGN IN] button.

Once connected select the DEVICES tab, then click on “Add Gateway” to add a new gateway device.
In this case the Gateway is the eTOP500/600.

Into the Gateway definition interface define:

• Name: must be unique in users, gateways and endpoints
• Organization: select the organization from the combo-box
• Password: must be at least 8 charaters and contain at least one non-alphanumeric character
• Serial number: a license code provided by your local reseller

NOTE: a valid serial number is required to use JMCloud. Any gateway with no serial number will not be accessible

These settings will define the login credentials to be set into the HMI Cloud Enabler on HMI. A description may be added.
In this example the credentials are:

• Username: HMI1@demo
• Password: hmi1123$

The above procedure is enough if we are planning to connect to the HMI only. In this case go to “HMI Cloud Enabler setup on eTOP500/600” chapter.
If we are planning to connect also to the PLC, an additional Endpoint for the PLC must be added.
Select the Endpoints tab, and click on [Add row] button:

then fill the row with:

• a Name for the PLC endpoint,
• the PLC IP Address. In this example PLC have IP 192.168.2.10,
• a description, optional.

To save changes, click on the [Validate] button.
If operation is successfully completed the system will show a “Succesfully validated.” message.
Click then on [Add] button to confirm and save changes to the new Gateway.

2. HMI Cloud Enabler setup on eTOP500/600

The HMI Cloud Enabler allows to setup the JMCloud connection into the operator panel, this function is part of the JMobile Runtime so it is necessary to have it running on the operator panel.
To start the HMI Cloud Enabler press and keep pressed on an empty display area to recall the context menu, then select the HMI Cloud Enabler item.

If this is first time the HMI Cloud Enabler has been started, after some seconds a dialog will be displayed (see image below).
Click on the [Yes] button on the dialog to start the update.
The HMI will be automatically restarted when the update operation succeded.
NOTE: the update does not require an active internet connection on the operator panel.

Once HMI Cloud Enabler has been updated, it is possible to set-up the operator panel for the JMCloud connection.
Select the “Padlock” icon from the toolbar, then enter Username and Password set-up previously in the Gateway configuration.
In this example Username and Password are respectively “HMI1@demo” and “hmi1123$ ”

The above procedure is enough if we are planning to connect only the HMI,
but to have access to the PLC trough JMCloud connection, Sub networks access must be enabled.
Select the “Gear” icon from the toolbar, and touch on the “EMAC1” box; the color will change from blue to orange.
Finally to auto start the HMI Cloud Enabler connection to JMCloud server when HMI boot, check the “Auto start at boot” option.
When this settings are changed, a reboot of the system is required.
An immediate reboot of the HMI may be agreed, or reboot can be manually executed later.

To connect the HMI to the JMCloud Server, select the Globe icon from the toolbar and then press on the VPN blue button.
NOTE: to establish connection HMI must have:

• an active internet connection,
• a valid network configuration including Gateway and DNS.

If the connection to the JMCloud server is estabilished the VPN button will become orange and the VPN Virtual IP address will be displayed as shown in the below image.

Once the operator panel has been connected to the JMCloud server, from JMCloud Connect software it is possible to monitor the Endpoints defined.
Into CONNECTIONS tab will be reported Gateway and its Endpoints with proper IP Address and Status.

To estabilish the VPN tunnel with the HMI, from Actions select the Connect to endpoint command from the apposite drop-down box or click on the symbol.
If the connection is correctly estabilished the status will change into Online-Connected.

To disconnect the Endpoint click on the icon from the Actions column.

Optional: use Real IP instead of Virtual IP

When an Endpoint is connected to the JMCloud server, by default gets a Virtual IP address.
In some cases it may be necessary for the Endpoints to maintain the real IP used into the local network also when reached trough the VPN.
To allow the use of real IP also in VPN the “Do not translate real IPs into virtual IPs (1:1 NAT)” option must be configured when the Endpoint is created.
When this option is selected the real IP of the operator panel and all other Endpoints must be specified into the configuration table as shown in the image below.