I've been searching StackExchange and the Internet for a while looking for a solution for my networking question. Some articles I found are here, here and here, but these don't need to deal with a wireless setup. I will try to describe my networking question below. I just know some basic little bit about networking, so I'm absolutely no expert, hence the lack of proper terminilogy;

enter image description here

Working for a machine manufacturer, we produce machines running on devices (PLC's) with static IP addresses. These devices are equipped with RJ45 network connections. We're dealing with about 10 to 15 machines simultaneously at one given time located on the shopfloor spanning about 200m x 200m. Their physical location varies depending on where the shopfloor has room for a new machine to be built. Their static IP addresses are (for the best part of them) always the same and identical. So for example, there's 10 machines with IP address Now I'm looking into a way of reaching all these machines from a single office location in order to gather some data from the devices using a selfmade .NET application.

WiFi is the first obvious criterium in my search considering the locations being variable. So I believe every PLC needs to be hooked up to its own wifi router to get them 'on-air'. Then the wifi side of these routers must be configured to share one big wireless network like a mesh system would do. I'll call this the 'public network'. The computer in the office would be part of this wireless public network either through its own wifi NIC or through a wifi router which could be the 'boss' of the wireless public network bringing the SSID in the air.

Now I have already come to the conclusion that the wifi routers needed can not be simple household-like routers. During my search I have come across wifi routers supporting 'WiFi on WAN', making it possible to make the PLC's have their own private wired network on the LAN side of its own router separating it from the wireless public network. As far as my knowledge goes, this would prevent the duplicate IP addresses in the public network. But for as I can see now, this works fine as long as you are on the private network(s) in this setup. But how to address the correct PLC from the centralized office location? I would need to find a way to tell the WAN side of the router in a machine to connect me to the PLC. I've read about NAT, VLAN, port forwarding, etc, but I can't realy figure out how to bring the right stuff into the equation to select the right type of router.

Am I thinking way too complicated? Could anyone recommend specific routers capable to do what I need?

  • 1
    "But how to address the correct PLC from the centralized office location?" The real point of IP is that each device has a unique IP address. Addressing all the devices with the same address is wrong in so many ways.
    – Ron Maupin
    Aug 1, 2019 at 11:51
  • Euh, yeah, I got that part of IP and networking. But taking that example to a bigger scale; consider 'my' public netwerk the Internet and the PLC's the homes connected to the Internet. All home PC owners can set their computer at, couldn't they? Routers take care of that.
    – Marc
    Aug 1, 2019 at 12:03
  • 2
    @Marc You seem to miss the point that nobody tries to route the ambiguous over the Internet (which simply won't work). Instead, you use unique, public addresses. Generally, you cannot use ambiguous addressing.
    – Zac67
    Aug 1, 2019 at 12:39
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer.
    – Ron Maupin
    Dec 15, 2019 at 5:51
  • The setup I had in mind was abandoned because it wasn't accepted by the company IT department mainly for security reasons. The plan is now to install small industrial PC's locally at every machine to connect the PLC hardwired to it. This PC then runs a small C# app gathering data from the PLC and sending it to a central SQL database over WiFi. This PC security settings can then be managed by the IT depertment.
    – Marc
    Dec 17, 2019 at 13:44

2 Answers 2


To add to @Zac67 and give you the "picture" you want...

You are fundamentally trying to create a mini-clone of The Internet in your shop. How is it not a problem if every Linksys router LAN is set to It's because those LANs aren't directly connected; NAT translates those identical LAN addresses to globally unique WAN address(es). You need something similar in your shop... i.e. "a linksys on every desk." The "WAN" side (company LAN) would have a unique static address NAT-mapped to the PLC address.

(The actual device used could be almost anything. "Linksys" is just for visual reference.)

  • Thanks to all so far. I have a TPlink WR1043NDv1 laying around which has already been flashed to DDWRT in the past. I'll have a go with that next week to figure out how to achieve what I need.
    – Marc
    Aug 2, 2019 at 9:28

Wi-Fi complicates things but it's doable still.

You'll need destination NAT (DNAT) aka port forwarding. With that you access each device using an unambiguous "upper" address scheme - e.g.,, ...

In front of each device sits a NAT router that actually owns that address. Each one translates its "upper" address 192.168.x.101 to the "lower" (DNAT or port forwarding). That requires any halfway decent NAT router and could also work with many consumer-grade (off-topic) devices.

Some NAT routers even support multiple, identical translations. How that is actually done depends heavily on the router in question. With that you could have all translations in one device. The downlinks don't need to be physical: you could use VLAN trunking to a switch and then fan out to the devices there.

Of course you could use a Wi-Fi bridge in each downlink, but that's pretty independent of the actual translation.

  • Hi Zac, thanks for your answer. I'm trying to convert your words into a picture in my mind. In order to keep the multiple PLC addresses off the public network this would still require WAN/LAN separation right? And in that case does it not automatically bring me to the need of a 'wifi as WAN' device?
    – Marc
    Aug 1, 2019 at 9:44
  • Private addresses need to be separated from (public) WAN anyway. I don't know where your need for Wi-Fi originates if that's not a direct requirement. Wi-Fi doesn't simplify anything here, on the contrary.
    – Zac67
    Aug 1, 2019 at 12:34
  • My need for WiFi is the fact that the machines can be anywhere on the shopfloor and don't necessarily have a wallsocket in close vicinity to them.
    – Marc
    Aug 1, 2019 at 12:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.