PLCnext in water management: remote access and OPC UA
Last updated on 22 September 2026
A water installation using PLCnext can provide useful diagnostic and process data. Separate engineering access from an OPC UA connection that reads only selected data.
Identify the data exposed by the PLC
Phoenix Contact describes OPC UA for PLCnext and water-automation applications. This does not define the variables exposed by your project. Obtain the controller model, firmware, endpoint details and variables approved by the project owner.
Design a restricted service route
Connect ServiceGate to the agreed OT segment and configure location and user permissions in the Remote Portal. Approved laptop software may use VPN for engineering. A data logger need not have the same broad access; restrict its destination and permissions separately.
Check OPC UA before building the dashboard
Document endpoint, security settings, certificate trust and user role. Use a read account where supported. Check NodeId, namespace, data type, unit and quality code. A project change may alter the mapping; include this in change management.
Preserve the meaning of measurements
Level, flow or pump state needs measurement time and quality information. Agree how invalid or missing readings are handled. Do not silently present an old value as a normal current measurement. Dashboards and alarms belong to the agreed data service, not automatically to every VPN session.
Acceptance in controlled conditions
- Compare a small point set with local visualisation.
- Test revoked permissions and an untrusted certificate in a safe test environment.
- Check disconnection and recovery behaviour.
- Confirm that no control function has become dependent on external connectivity.
Continue with your project
Provide the service operations and data points you need. We assess ServiceGate configuration and additional software where necessary. A brand’s OPC UA support does not guarantee every project, method or controller variant.
Access, data and ongoing management
All ServiceGate routers support remote access and data logging/monitoring. Available data and services depend on equipment and configuration. Manage locations, users and groups through the Remote Portal. Segmentation and suitable firewall rules limit access but do not replace security updates for the router and installation.
Sources and scope
Editorial: Remote Engineer · 22 September 2026. This guide describes a design approach based on the cited documentation and the stated Remote Engineer functionality. Examples are illustrative: no completed customer test, partnership or certification is claimed. Confirm compatibility, safety boundaries and settings for the exact model and project.
Continue in the knowledge base
Remote Engineer has worked on remote access and control-system solutions since 2008. Share your application and documentation with our team. We assess standard configuration and custom work. Contact us for pricing.
In this article
