WAGO PFC200 G2 + TosiBox VPN

Simple tutorial to show how to setup TosiBox Lock for Container on a WAGO PFC200 G2 controller, which is a VPN client running in a Docker container. This solution also works on the WAGO TouchPanel 600 HMI, following the same steps.

WAGO PN
750-8216 PFC200 G2 - Dual Ethernet, RS232, CAN, ProfBus
750-8212 PFC200 G2 - Dual Ethernet, RS232

TosiBox PN's
TBK2 USB key
TBLFC1 Activation Code for one container

docker run -d --name lock-softx --cap-add=NET_ADMIN --cap-add=SYS_PTRACE --restart always -p 8000:80 -h "LockForContainer" wagoautomation/softx-openwrt:latest

HowTo PDF:

[tomaspuodziukynas]

We have been installing Tosibox in every single automation project since it is huge time saver in first few weeks after launch when systems needs tweaking and bug fixing. And later on 1 service visit on client site would make even on Tosi price.
But we are using physical Tosibox lock 100 as it is plug and play. Pairing is done without softkey, no docker needed etc..

[condor]

is tosibox a competitor to Red Lion or would they compliment each other?

[adaptine]

Thanks for the video. If you want to access other devices on the PFC-network you also have to add a static route in the tosibox interface to the network your want to access. Beware that other network devices wont show up in the tosibox interface, since those are on another network than the docker-container. I've been doing some tests with this tosibox lock for container on the wago pfc 200 but the throughtput isnt in particular very impressing. Due to the deciphering process in the VPN-connection, its hard to achieve anything more than 2-3 Mbit/s depending if you're running a web visualisation or not. Lock for container it self is capable of quite more, its just the CPU in the pfc that is too small. Could possibly choose a simpler VPN chiper to reduce the CPU-load.

[Justinoka]

Kurt, is it possible to use the PFC controller with built in mobile radio as the tosibox connection point (750-8207) instead of using a third party 3G router? If so, would it also be possible to have remote access to the devices connected to the PFC ethernet ports when routed through the built in radio module?