A VPN mapping method and system

Abstract

The present invention belongs to the technical field of technology control, and provides a VPN mapping method, comprising the steps of: mapping the original network communication data of the debugging host to the machine tool controller through the PBOX, the PBOX and the debugging host are connected to the same VPN network; forwarding the UDP data and TCP data of the machine tool controller to the VPN network through the PBOX, and forwarding the data fed back by the VPN network to the machine tool controller. The forwarding of the present invention does not require knowing the port number in advance, supports dynamic ports, and the port number will not change.

Description

Technical Field

[0001] The present invention relates to the field of control technology, and in particular to a VPN mapping method and system. Background Art

[0002] When machine tool end users report some machine tool failures, sometimes the machine tool manufacturer needs to handle them. Some problems can be solved by simple parameter modification or program update. Some third-party controllers or control units are used inside the machine tool. For some machine tool controller parameter modification, the corresponding machine tool controller debugging software tool is required. The debugging software tools of these controller brands have different ways of connecting to the corresponding controllers and are basically impossible to modify.

[0003] For example, in terms of connection methods, most debugging tools actively establish a TCP connection to the IP of the target controller, such as Siemens. In addition, when the software establishes a connection, it first broadcasts UDP information. After the machine tool controller receives the broadcast information, it actively initiates a TCP connection to the software, such as Mitsubishi. In terms of connection ports, most connection TCP ports are fixed, while some brands of TCP ports are dynamically changed. However, the products on the market are not compatible with the connection methods of debugging software tools and controllers of various brands. Summary of the invention

[0004] In order to solve the above problems, the present invention is achieved by the following technologies:

[0005] A VPN mapping method comprises the following steps:

[0006] Mapping the original network communication data of the debugging host to the machine tool controller through the PBOX, and the PBOX and the debugging host are connected to the same VPN network;

[0007] The UDP data and TCP data of the machine tool controller are forwarded to the VPN network through the PBOX, and the data fed back by the VPN network are forwarded to the machine tool controller.

[0008] In some embodiments, including:

[0009] The debugging host is connected to the VPN network to receive UDP data and TCP data of the machine tool controller to debug the machine tool controller.

[0010] In some embodiments, including:

[0011] Connect a machine tool controller via PBOX and wirelessly connect to the VPN network.

[0012] In some embodiments, it includes: when the PBOX forwards the UDP data and the TCP data, the port numbers of the UDP and the TCP remain unchanged.

[0013] In some embodiments, including:

[0014] A network switch is connected via the PBOX, and a plurality of the machine tool controllers are connected to the network switch;

[0015] Mapping the original network communication data of the debugging host to the first machine tool controller of the network switch through the PBOX;

[0016] After the currently mapped first machine tool controller is closed, the second machine tool controller is switched to and the original network communication data of the debugging host is mapped to the second machine tool controller.

[0017] A VPN mapping system, comprising:

[0018] PBOX, used for mapping the original network communication data of the debugging host to the machine tool controller through the PBOX, wherein the PBOX and the debugging host are connected to the same VPN network;

[0019] The PBOX is also used to forward the UDP data and TCP data of the machine tool controller to the VPN network through the PBOX, and forward the data fed back by the VPN network to the machine tool controller.

[0020] In some embodiments, including:

[0021] The debugging host is connected to the VPN network to receive UDP data and TCP data of the machine tool controller to debug the machine tool controller.

[0022] In some embodiments, including:

[0023] Connect a machine tool controller via PBOX wiredly, and connect to the VPN network wirelessly.

[0024] In some embodiments, it includes: when the PBOX forwards the UDP data and the TCP data, the port numbers of the UDP and the TCP remain unchanged.

[0025] In some embodiments, including:

[0026] A network switch, used to connect the PBOX and a plurality of the machine tool controllers;

[0027] Among them, the network communication original data of the debugging host is mapped to the first machine tool controller of the network switch through the PBOX; when the currently mapped first machine tool controller is closed, it switches to the second machine tool controller and maps the network communication original data of the debugging host to the second machine tool controller.

[0028] The VPN mapping method and system provided by the present invention have at least the following beneficial effects:

[0029] The forwarding of the present invention does not require knowing the port number in advance, supports dynamic ports, and the port number will not change. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The preferred implementation mode will be described below in a clear and understandable manner in conjunction with the accompanying drawings to further illustrate the above characteristics, technical features, advantages and implementation methods of a VPN mapping method.

[0031] Figure 1 It is a schematic diagram of an embodiment of a VPN mapping method in the present invention;

[0032] Figure 2 It is a schematic diagram of an embodiment of a VPN mapping system in the present invention. DETAILED DESCRIPTION

[0033] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0034] It should be understood that when used in this specification and the appended claims, the term "comprising" indicates the presence of the described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or collections.

[0035] In order to simplify the drawings, only the parts related to the present invention are schematically shown in each figure, and they do not represent the actual structure of the product. In addition, in order to simplify the drawings and facilitate understanding, in some figures, only one of the parts with the same structure or function is schematically drawn or marked. In this article, "one" not only means "only one", but also means "more than one".

[0036] It should be further understood that the term “and / or” used in the specification and appended claims refers to any combination and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0037] In addition, in the description of the present application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0038] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the specific implementation methods of the present invention will be described below with reference to the accompanying drawings. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings and other implementation methods can be obtained based on these drawings without creative work.

[0039] In one embodiment, Figure 1 As shown, the present invention provides a VPN mapping method, comprising:

[0040] S101 maps the original network communication data of the debugging host to the machine tool controller through the PBOX, and the PBOX and the debugging host are connected to the same VPN network.

[0041] In this embodiment, 1. The Pbox is connected to the machine tool by wire and to the VPN network by wireless. 2. The debugging computer of the machine tool manufacturer's engineer is connected to the same VPN network.

[0042] Among them, the debugging host is an IP host, that is, the debugging computer of the machine tool manufacturer and other terminal devices that can operate the debugging process.

[0043] Exemplarily, the PBOX box forwards the original data packet of the network communication to the machine tool controller.

[0044] Among them, PBOX box refers to the collection gateway, or gateway, DTU, 4G / 5G router box, etc.

[0045] S102 forwards the UDP data and TCP data of the machine tool controller to the VPN network through the PBOX, and forwards the data fed back by the VPN network to the machine tool controller.

[0046] Pbox forwards the TCP and UDP data transmitted by the debugging host in the VPN network to the machine tool controller through DMZ, realizing two-way communication between the machine tool controller and the debugging host.

[0047] Specifically, Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) are protocols defined by the TCP / IP protocol at the transport layer.

[0048] The forwarding of the present invention does not need to know the port number in advance, supports dynamic ports, and the port number will not change. For example, port 102 of the Pbox corresponds to port 102 of the controller.

[0049] Specifically, in this embodiment, the mapping scheme used in the port mapping scheme is a scheme that combines DMZ and VPN, and a Pbox is connected to a machine tool controller using a network cable. The existing remote operation and maintenance method is a port mapping + VPN scheme, which has the advantage that a Pbox can map multiple network devices at the same time, but has the disadvantage that the port will change and does not support UDP. The advantage of the port mapping scheme in this embodiment is that the port will not change and UDP is also supported, but the disadvantage is that a PBOX can only map one network device.

[0050] In one embodiment, it includes:

[0051] The debugging host is connected to the VPN network to receive UDP data and TCP data of the machine tool controller to debug the machine tool controller.

[0052] In this embodiment, the debugging host can directly receive UDP data and TCP data from the machine tool controller through the VPN network. This process does not require database parameters and all occurs during the network communication process.

[0053] In one embodiment, it includes:

[0054] Connect a machine tool controller via PBOX and wirelessly connect to the VPN network.

[0055] In one embodiment, the method includes: when the PBOX forwards the UDP data and the TCP data, the port numbers of the UDP and the TCP remain unchanged.

[0056] Specifically, the ports set by the box program remain consistent so that the UDP port and TCP port remain unchanged.

[0057] In this embodiment, the DMZ host technology used is used to achieve port consistency. In this embodiment, the IP obtained by the VPN is used as the IP of the DMZ.

[0058] After the VPN client in the Pbox connects to the VPN server, the server assigns a dynamic IP address to the client. "DMZ host" is a solution for external network to access the internal network. The VPN network is equivalent to the "external network", the network of the Pbox and the machine tool controller is equivalent to the "intranet", and the "DMZ host" is a network host.

[0059] In one embodiment, it further includes:

[0060] A network switch is connected via the PBOX, and a plurality of the machine tool controllers are connected to the network switch;

[0061] Mapping the original network communication data of the debugging host to the first machine tool controller of the network switch through the PBOX;

[0062] After the currently mapped first machine tool controller is closed, the second machine tool controller is switched to and the original network communication data of the debugging host is mapped to the second machine tool controller.

[0063] In one embodiment, a Pbox is connected to a network switch via a network cable. There are multiple machine tool controllers on the network switch. When the host is mapped, only one machine tool controller can be mapped at the same time. After closing the current mapping, switch to another machine tool controller for mapping.

[0064] In one embodiment, the present invention further provides a VPN mapping system, comprising:

[0065] PBOX, used for mapping the original network communication data of the debugging host to the machine tool controller through the PBOX, wherein the PBOX and the debugging host are connected to the same VPN network;

[0066] The PBOX is also used to forward the UDP data and TCP data of the machine tool controller to the VPN network through the PBOX, and forward the data fed back by the VPN network to the machine tool controller.

[0067] In one embodiment, it includes:

[0068] The debugging host is connected to the VPN network to receive UDP data and TCP data of the machine tool controller to debug the machine tool controller.

[0069] For example, the machine tool manufacturer performs debugging according to business needs, such as updating machine tool parameters, certain parts of the program, problem diagnosis, etc., to solve problems or upgrade functions.

[0070] In one embodiment, it includes:

[0071] Connect a machine tool controller via PBOX and wirelessly connect to the VPN network.

[0072] In one embodiment, the method includes: when the PBOX forwards the UDP data and the TCP data, the port numbers of the UDP and the TCP remain unchanged.

[0073] In one embodiment, the method includes: when the PBOX forwards the UDP data and the TCP data, the port numbers of the UDP and the TCP remain unchanged.

[0074] Specifically, the ports set by the box program remain consistent so that the UDP port and TCP port remain unchanged.

[0075] In this embodiment, the DMZ host technology used is used to achieve port consistency. In this embodiment, the IP obtained by the VPN is used as the IP of the DMZ.

[0076] In one embodiment, it further includes:

[0077] A network switch is connected via the PBOX, and a plurality of the machine tool controllers are connected to the network switch;

[0078] Mapping the original network communication data of the debugging host to the first machine tool controller of the network switch through the PBOX;

[0079] After the currently mapped first machine tool controller is closed, the second machine tool controller is switched to and the original network communication data of the debugging host is mapped to the second machine tool controller.

[0080] In one embodiment, a Pbox is connected to a network switch via a network cable. There are multiple machine tool controllers on the network switch. When the host is mapped, only one machine tool controller can be mapped at the same time. After closing the current mapping, switch to another machine tool controller for mapping.

[0081] Those skilled in the art can clearly understand that, for the convenience and simplicity of description, only the division of the above-mentioned program modules is used as an example for illustration. In actual applications, the above-mentioned functions can be assigned to different program modules as needed, that is, the internal structure of the device can be divided into different program units or modules to complete all or part of the functions described above. The program modules in the embodiment can be integrated into a processing unit, or each unit can exist physically separately, or two or more units can be integrated into a processing unit, and the above-mentioned integrated unit can be implemented in the form of hardware or in the form of software program units. In addition, the specific names of the program modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application.

[0082] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0083] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented with electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed with hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0084] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. Exemplarily, the device embodiments described above are merely schematic. Exemplarily, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation. Exemplarily, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the device or unit can be electrical, mechanical or other forms.

[0085] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0086] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0087] It should be noted that the above embodiments can be freely combined as needed. The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered as the protection scope of the present invention.

Claims

1. A VPN mapping method, characterized in that: Includes steps: The original network communication data of the debugging host is mapped to the machine tool controller through the PBOX, and the PBOX and the debugging host are connected to the same VPN network; the debugging host is a terminal device of the machine tool manufacturer and is used to operate the debugging process; The PBOX forwards the UDP data and TCP data of the machine tool controller to the VPN network, and forwards the data fed back by the VPN network to the machine tool controller; the PBOX forwards the TCP data and UDP data transmitted by the debugging host in the VPN network to the machine tool controller through the DMZ; when the PBOX forwards the UDP data and the TCP data, the port numbers of the UDP and the TCP remain unchanged; The method of mapping the original network communication data of the debugging host to the machine tool controller through the PBOX includes: A network switch is connected via the PBOX, and a plurality of the machine tool controllers are connected to the network switch; Mapping the network communication raw data of the debugging host to the first machine tool controller of the network switch through the PBOX; After the currently mapped first machine tool controller is closed, the second machine tool controller is switched to and the network communication original data of the debugging host is mapped to the second machine tool controller.

2. The VPN mapping method according to claim 1, characterized in that: include: The debugging host is connected to the VPN network to receive UDP data and TCP data of the machine tool controller to debug the machine tool controller.

3. The VPN mapping method according to claim 1, characterized in that: include: Connect a machine tool controller via PBOX and wirelessly connect to the VPN network.

4. A VPN mapping system, characterized in that: include: PBOX, used to map the original network communication data of the debugging host to the machine tool controller through the PBOX, the PBOX and the debugging host are connected to the same VPN network; the debugging host is a terminal device of the machine tool manufacturer and is used to operate the debugging process; The PBOX is further used to forward the UDP data and TCP data of the machine tool controller to the VPN network through the PBOX, and forward the data fed back by the VPN network to the machine tool controller; the PBOX forwards the TCP data and UDP data transmitted by the debugging host in the VPN network to the machine tool controller through the DMZ; when the PBOX forwards the UDP data and the TCP data, the port numbers of the UDP and the TCP remain unchanged; A network switch, used to connect the PBOX and a plurality of the machine tool controllers; Among them, the network communication original data of the debugging host is mapped to the first machine tool controller of the network switch through the PBOX; when the currently mapped first machine tool controller is closed, it switches to the second machine tool controller and maps the network communication original data of the debugging host to the second machine tool controller.

5. The VPN mapping system according to claim 4, characterized in that: include: The debugging host is connected to the VPN network to receive UDP data and TCP data of the machine tool controller to debug the machine tool controller.

6. The VPN mapping system according to claim 4, characterized in that: include: Connect a machine tool controller via PBOX and wirelessly connect to the VPN network.

Images