Can you show me the settings in KEPWARE of the PLC object and the parent object (need to see port numbers and network numbers used etc)
NOTE: this will show us an already existing connection & we shouldnt use the same port - but it may give us some clues.
Also, do you know the PLC model? Q series? A Series? QnA series? iQR series?
Ideally, you would connect to the PLC using GX-Programmer or GX-Works to determine the PLC settings - do you have these?
If not, you could cross your fingers and hope the integrator opened some UDP (or TCP) ports on the PLC. You can scan with a port scanner (nmap can scan UDP and TCP)
e.g: find open UDP ports...
nmap -sUV -T4 -p1000-5012 --version-intensity 0 192.168.0.253
e.g: find open TCP ports...
nmap -sSV -T4 -p1000-5012 192.168.0.253
