Siemens S7-1500 Operating Instructions Manual page 38

Configuration, programming
4.4 Security
3. Create the VPN group and assign security modules.
4. Configure properties of the VPN group.
Configure local VPN properties of the two CPs.
You will find a detailed description of the individual steps in the following paragraphs of this
section.
Creating a security user
To create a VPN tunnel, you require appropriate configuration rights. To activate the security
functions, you need to create at least one security user.
1. In the local security settings of the CP, click the "User logon" button.
Result: A new window opens.
2. Enter the user name, password and confirmation of the password.
3. Click the "User login" button.
You have created a new security user. The security functions are now available to you.
With all further logons, log on as user.
Selecting the "Activate security features" check box
● After logging on, select the "Activate security features" check box for both CPs.
You now have the security functions available for both CPs.
Creating the VPN group and assigning security modules
Note
Current date and current time of day on the security modules
When using secure communication (for example HTTPS, VPN...), make sure that the
security modules involved have the current time of day and the current date. Otherwise the
certificates used will not be evaluated as valid and the secure communication will not work.
1. In the global security settings, select the entry "Firewall" > "VPN groups" > "Add new VPN
group".
2. Double-click on the entry "Add new VPN group", to create a VPN group.
Result: A new VPN group is displayed below the selected entry.
3. In the global security settings, double-click on the entry "VPN groups" > "Assign module
to a VPN group".
4. Assign the security modules between which VPN tunnels will be established to the VPN
group.
38
Operating Instructions, 05/2017, C79000-G8976-C289-07
CP 1543-1