Allow Access - Siemens SCALANCE M-800 Series Getting Started

Connecting SCALANCE M-800 to WAN
1.3 Connecting M826 with SHDSL
M826 in the stations: Configuring routes
1. Click "Layer 3" > "Routes" in the navigation panel.
2. Configure the route to the master station with the following settings:
3. When you have entered the values, click "Create".
4. To update the display, click "Refresh".
Result
The routes have been created. The SCALANCE M826 in the master station can
communicate with the stations.
Using the ping function, the communications connection can be tested. For example, can the
Admin PC in station 1 be reached by the Admin PC in the master station?
1.3.3.11

Allow access

You have the following options for allowing access:
● Allow globally
Here, you use simple, predefined firewall rules. The enabled services are valid for all
nodes on the relevant interfaces. Full access is allowed for the specified direction.
– vlan1: Allows access from the internal network to the device
– vlan2: Allows access from the external network to the device
The firewall rule for the opposite direction is permitted by stateful packet inspection.
● Allow certain services
Here, you define firewall rules that allow individual services for a single node or all
services for the node for access to the station or network.
In this example, configure the firewall rule that only allows the device with IP address
192.168.100.20 access to the device. The service HTTP (TCP port 80) is required for
access.
78
Destination Network
Subnetmask
Gateway
Metric
192.168.100.0
255.255.255.0
192.168.184.2
external IP address of the M826 in the master
station
-1
SCALANCE M-800 Getting Started
Getting Started, 06/2015, C79000-G8976-C337-04