Ewon Cosy+ 4G LTE EU / Ethernet router

The Ewon Cosy+ 4G EU is an industrial router for the remote management of PLCs, HMI panels, computers or IP cameras via the 4G EU mobile network or a fixed Ethernet WAN port. It is a direct and fully compatible replacement for the previous Ewon COSY 131 4G EU, with order number EC6133G_00MA.

How to choose an Ewon Cosy+ variant?

Why choose the Ewon Cosy+ 4G?

• Remote access to machines for diagnostics, monitoring and configuration of PLCs, HMIs and other devices - just as with a local connection.
• Reduced downtime and lower costs thanks to interventions that do not require on-site service visits.
• Operation without a public IP address and without opening incoming ports to the machine network.
• Secure communication via an encrypted Talk2M VPN connection with controlled user access.
• Connection via 4G LTE even in areas without a fixed network, including mobile machinery.

Typical applications

• Machine manufacturers - remote management of equipment installed at customers’ premises.
• System integrators - remote servicing, diagnostics and modifications.
• PLC programmers and maintenance - rapid troubleshooting without the need for on-site visits.

Key features of the Ewon Cosy+

• 1× WAN port for connecting to the internet.
• 3× LAN ports for PLCs, HMIs, IP cameras, Ethernet switches and other devices.
• 2× digital inputs / 1× digital output for monitoring and controlling external devices.
• Plug & Route for easy access to devices behind the router.
• 24 VDC power supply and DIN rail mounting.

How Ewon Cosy+ works

The router connects to the cloud service Talk2M, through which it is subsequently available to registered users worldwide. Remote access takes place via a secure VPN tunnel, so devices can be operated in much the same way as on a local network.

Once connected, it is possible to remotely programme the PLC, carry out diagnostics, back up data from HMI panels or monitor the production line via an IP camera. Devices behind the router connect via Ethernet ports or USB.

Principles of communication

Connection to the internet and the Talk2M cloud service is via an Ethernet WAN port, a 2.4 GHz Wi-Fi network or an LTE mobile network, depending on the selected Ewon variant. The router establishes an outbound connection, typically via port 443 (HTTPS) or 1194 (UDP), so there is no need for a public IP address or any changes to the company network. All communication between the user and the device takes place via a secure VPN tunnel.

Practical application

The router is installed directly into the machine’s control cabinet. Machine manufacturers and system integrators can then connect to the equipment at customers’ sites, monitor operations, make programme adjustments, carry out diagnostics or download backups - without having to be physically present at the equipment.

Practical access control

Remote access can be enabled or disabled via a digital input, for example using a key switch on the control cabinet door. The second input can be used for a door contact or the status of a PLC. The digital output can signal an active VPN connection, for example via an Andon light.

Integration into an existing network

Ethernet ports are available for PLCs, HMI panels, IP cameras or switches. For older SIMATIC S7-300/400 PLCs with MPI or PROFIBUS, we recommend an adapter ACCON NetLink PRO Compact, which converts the communication to Ethernet.

Security and access control

The router uses a cloud service Talk2M and a secure VPN connection for remote access to devices from any computer, mobile phone or tablet connected to the internet. Communication is encrypted and access can be controlled according to the users and devices to which they are authorised. Cosy+ also uses a hardware component Secure Element to protect sensitive security data.

Connection does not imply automatic access to the entire network. Within Talk2M, it is possible to precisely define which IP addresses and ports a user should have access to. This allows service access to be separated from the rest of the corporate network.

Overview of security features:

• Device protection via a built-in firewall and access control (protection against botnets, DDoS attacks and malware).
• Control user access to specific devices, IP addresses, ports or protocols.
• Two-factor authentication and password rules: minimum length, complexity and expiry.
• Option to enforce a password change for remote users upon their first login to Talk2M.
• The router’s digital output can be used to signal that someone has connected remotely to Ewon.
• Access section - a remote user has access only to the LAN, not to the WAN.
• Manage routers in Groups / Pools with different permissions, users and roles.
• Remote and bulk firmware updates as part of device management, available only with the Talk2M Pro plan.
• Access logging on the router with the option to export to CSV and PDF.
• Firewall with multiple security levels: Standard, High, High + ports, Enforced and Ultra.

Communication between the remote user and the router is encrypted using SSL/TLS. Both users and routers are authenticated using X.509 certificates. The router supports IP filtering and redirection, NAT, port forwarding, proxy, routing tables and DHCP client/server.

Cloud Talk2M

Talk2M is an industrial cloud service from Ewon / HMS Networks for the secure connection of remote technicians and machines. It offers a redundant global server infrastructure and centralised management of connections, devices and users.

Configuration and rapid deployment

Basic setup is carried out via the built-in web interface with configuration wizards; no additional configuration software is required. The wizard will assist with IP addressing, internet connection, WAN port functionality and registration with Talk2M.

The SD card is used for firmware updates, backing up and restoring configurations, or automatic registration with Talk2M using the GRK - Global Registration Key. This facilitates the bulk deployment of routers and the rapid replacement of devices in operation.

Clear dashboard and eCatcher

The router’s dashboard provides an overview of connections, IP addresses, connection time to Talk2M, gateway functionality and firmware version. The eCatcher app and a Talk2M account are used for remote connection. Once a VPN connection has been established, the available devices behave in much the same way as they would on a local network.

Technical specifications of the Ewon Cosy+ 4G EU

Frequently Asked Questions

Links and technical support

• Ewon Technical Support Portal - installation, configuration, firmware and troubleshooting guides.
• TIA Portal / Talk2M integration - remote uploading of a project to a Siemens device.
• Talk2M service status - current availability and planned outages.
• E-learning Ewon - training materials for working with Ewon routers.

Talk2M service options

You can get the Talk2M service free of charge with the router in the free, which is sufficient for routine maintenance and is limited to 12 months from the first registration of the router to the Talk2M account. Once this period has expired, you will need to choose a paid option light or pro, or register a new Ewon router and use the service free of charge for a further 12 months.

• Talk2M Free - one user at a time per router.
• Talk2M Light - up to 2 users simultaneously within a single account, access to multiple routers.
• Talk2M pro - multiple simultaneous users, advanced access control, user management and enhanced security features.

Configuration of digital inputs

In the final step of the wizard, you can configure the function of the two digital inputs. Most commonly, these are connected to a switch for activating access via Talk2M, a digital output from a PLC for signalling the device’s status (such as STOP mode), or a door contact or relay for detecting when a control cabinet is opened, with an alert sent via email or SMS.

Firmware version v11 or higher is required to use registration via GRK. A backup of the configuration can also be transferred via a USB flash drive.

Further resources for Ewon

• Firmware and upgrade procedures - an overview of current versions and recommended updates.
• Software and tools for Ewon - eCatcher, eBuddy and other device management tools.
• Ewon Cosy / Cosy+ documentation - manuals and technical documentation for specific models.
• General Ewon documentation - manuals, troubleshooting guides and technical articles.
• HMS Forum - Ewon Support - sharing experiences and solving real-world problems.