Hi Crossbow,
Opposite way around, so the NX1P2 is the slave and the BMS is polling it for information. Basically its a new hospital build and the PLC is controlling some fuel pumps, the BMS monitors the whole building and thus wants information from the PLC.
As for IP address it only has the factory one that I haven't changed yet.