When several machines are delivered with the same PLC or HMI address template, each machine needs a unique identity that the central network can route. Renumbering, static address translation, or NAT inside a VPN design can provide that identity, but only if the forward and return paths remain unambiguous. Otherwise, a VPN can be connected while the PLC is unreachable—or, worse, the SCADA system reaches the wrong site.