Siemens SCALANCE M-800 Series Getting Started page 9

3.4 Firewall with a VPN connection ............................................................................................ 137
3.4.1 Creating firewall rules automatically ..................................................................................... 137
3.4.2 Creating firewall rules manually ............................................................................................ 139
4 VPN tunnel between SCALANCE M-800 and security CPs.................................................................. 143
4.1 Procedure in principle ........................................................................................................... 143
4.2 Secure VPN tunnel with PSK ................................................................................................ 147
4.2.1 Configuring a VPN tunnel with the SCT V3.x ....................................................................... 147
4.2.1.1 Creating project and modules with SCT ............................................................................... 147
4.2.1.2 Configuring a tunnel connection ........................................................................................... 148
4.2.1.3 Downloading the configuration to the CP and saving the M-800 configuration .................... 150
4.2.2 Configuring a VPN tunnel with the SCT V4.x ....................................................................... 152
4.2.2.1 Creating project and modules with SCT ............................................................................... 152
4.2.2.2 Configuring a tunnel connection ........................................................................................... 154
4.2.2.3 Downloading the configuration to the CP and saving the M-800 configuration .................... 156
4.2.3 Configuring SCALANCE M-800 ............................................................................................ 157
4.2.3.1 Activating VPN ...................................................................................................................... 157
4.2.3.2 Configuring the VPN remote end .......................................................................................... 157
4.2.3.3 Configuring a VPN connection .............................................................................................. 158
4.2.3.4 Configuring VPN authentication ............................................................................................ 159
4.2.3.5 Configuring phase 1 and phase 2 ......................................................................................... 160
4.2.3.6 Establishing the VPN connection .......................................................................................... 161
4.3 Secure VPN tunnel with certificates ...................................................................................... 162
4.3.1 Configuring a VPN tunnel with the SCT V3.x ....................................................................... 162
4.3.1.1 Creating project and modules with SCT ............................................................................... 162
4.3.1.2 Configuring a tunnel connection ........................................................................................... 164
4.3.1.3 Downloading the configuration to the CP and saving the M-800 configuration .................... 166
4.3.2 Configuring a VPN tunnel with the SCT V4.x ....................................................................... 168
4.3.2.1 Creating project and modules with SCT ............................................................................... 168
4.3.2.2 Configuring a tunnel connection ........................................................................................... 170
4.3.2.3 Downloading the configuration to the CP and saving the M-800 configuration .................... 172
4.3.3 Configuring SCALANCE M-800 ............................................................................................ 173
4.3.3.1 Loading a certificate .............................................................................................................. 173
4.3.3.2 Activating VPN ...................................................................................................................... 175
4.3.3.3 Configuring the VPN remote end .......................................................................................... 176
4.3.3.4 Configuring a VPN connection .............................................................................................. 176
4.3.3.5 Configuring VPN authentication ............................................................................................ 177
4.3.3.6 Configuring phase 1 and phase 2 ......................................................................................... 178
4.3.3.7 Establishing the VPN connection .......................................................................................... 179
5 VPN tunnel between SCALANCE M87x and SINEMA RC Server ........................................................ 181
5.1 Procedure in principle ........................................................................................................... 181
5.2 Configuring access to the SINEMA RC Server .................................................................... 186
5.2.1 Activating IP masquerading .................................................................................................. 186
5.2.2 Allow access ......................................................................................................................... 186
5.3 Configure a remote connection on the SINEMA RC Server ................................................. 188
5.3.1 Creating node groups ........................................................................................................... 188
5.3.2 Create devices ...................................................................................................................... 190
5.3.3 Configure communications relations ..................................................................................... 192
5.4 Configuring a remote connection on the M87x ..................................................................... 194
SCALANCE M-800 Getting Started
Getting Started, 06/2015, C79000-G8976-C337-04
Table of contents
9