Siemens SCALANCE M-800 Series Getting Started page 138

VPN tunnel between SCALANCE M-800 and S612
3.4 Firewall with a VPN connection
Result
If "Auto Firewall Rule" is enabled, the following firewall rules are active.
Action
Allow
Allow
Allow
Allow
With these firewall rules, data traffic between internal network 1 and internal network 2 is
possible without any restrictions.
HTTP-based access to the remote VPN partner is not allowed. The appropriate firewall rule
is created in the section "Creating firewall rules manually (Page 139)".
138
From / to Permitted proto-
cols
VPN tunnel / TCP / UDP /
internal network ICMP
1
VPN tunnel / TCP / UDP /
internal network ICMP
2
internal network TCP / UDP /
2 / VPN tunnel ICMP
internal network TCP / UDP /
1 / VPN tunnel ICMP
For Source IP ad-
dresses
all ports or all ICMP 192.168.100.0/
packet types 24
all ports or all ICMP 192.168.11.0/2
packet types 4
all ports or all ICMP 192.168.11.0/2
packet types 4
all ports or all ICMP 192.168.100.0/
packet types 24
SCALANCE M-800 Getting Started
Getting Started, 06/2015, C79000-G8976-C337-04
Dest. IP
addresses
192.168.11.0
/24
192.168.100.
0/24
192.168.100.
0/24
192.168.11.0
/24