Network & access
Service laptop on site
Checklist for connecting a service laptop to a crane: right port, right VLAN, what you can reach and what you must never do.
Before you plug in
- Find the managed switch in the e-house cabinet. The service port is port 12, marked yellow.
- Set your laptop NIC to DHCP. You will receive a
192.168.99.xaddress (VLAN 99). - Disable Wi-Fi / mobile tethering while connected — a laptop with two networks bridges VLANs and breaks the segregation rule.
- Fetch what you need from Vault before going into the e-house:
lh/maxedge/ssh,lh/maxedge/dashboard,lh/maxedge/proxmox.
What you can reach from VLAN 99
| Target | Address | Protocol | Credentials |
|---|---|---|---|
| Maxedge dashboard | http://192.168.30.111:8080 | HTTP | Vault lh/maxedge/dashboard |
| Maxedge SSH | 192.168.30.111:22 | SSH (key) | Vault lh/maxedge/ssh |
| Proxmox UI | https://192.168.30.110:8006 | HTTPS | Vault lh/maxedge/proxmox |
| Switch management | 192.168.10.2 | HTTPS / SSH | Vault lh/crane/switch (IT / OT security only) |
| PLC test interface (ATT) | 192.168.30.20:102 | via firewall rule | ATT session |
Never
Never plug into ports 1–4 (OT), never set a static 192.168.30.x address on your laptop, and never patch a customer cable into anything but ports 9–10. Access on VLAN 99 is time-limited by the firewall; if it stops working after a few hours, unplug and reconnect.