Ports to be forwarded for CODESYS access

Hello,

I have the following setup:

  • I connect to a projects network via OpenVPN

  • Inside this network there is an intermediate firewall/router

  • This device port-forwards traffic to a WAGO CC-100 PLC

  • The PLC itself is not directly reachable from the VPN network

  • Port forwarding to the PLC web interface works, and the web UI is accessible

My question is:

What is the minimal network and PLC configuration required to allow CODESYS engineering access (login, download, online mode) in such a setup?

Specifically:

  • Which TCP/UDP ports must be forwarded to the PLC?

  • Is TCP 1217 alone sufficient, or are additional ports required?

  • Is there anything that must be enabled or configured on the PLC side (e.g. in the web interface) to allow CODESYS connections when the PLC is accessed via port forwarding behind a VPN?

This is for standard CODESYS programming access (not OPC UA or WebVisu).

Thanks in advance.

This is what I’ve listed in an old tech.doc. with e!Cockpit:

Wago
Software download : 11740-11743/tcp Engineering
Service-port : 6626/tcp Engineering
WBM/WebVisu : 80 Operation

2 Likes

The webserver is running on 443 (https).
By default port 80 is disabled (http)