Table of Contents
Advertisement
Configuration, programming
4.8 Security
"Activate security features" option enabled
● After logging on, you must enable the "Activate security features" option for both CPs.
The security functions are now available to you for both CPs.
Creating the VPN group and assigning security modules
Note
Current date and current time of day on the security modules
When using secure communication (for example HTTPS, VPN...), make sure that the
security modules involved have the current time of day and the current date. Otherwise the
certificates used will not be evaluated as valid and the secure communication will not work.
1. In the global security settings, select the entry "Firewall" > "VPN groups" > "Add new VPN
group".
2. Double-click on the entry "Add new VPN group", to create a VPN group.
Result: A new VPN group is displayed below the selected entry.
3. In the global security settings, double-click on the entry "VPN groups" > "Assign module
to a VPN group".
4. Assign the security modules between which VPN tunnels will be established to the VPN
group.
Configuring properties of the VPN group
1. Double-click on the newly created VPN group.
Result: The properties of the VPN group are displayed under "Authentication".
2. Enter a name for the VPN group. Configure the settings of the VPN group in the
properties.
In this way, you define the basic properties of the VPN group.
Note
Specifying the VPN properties of the CP
You specify the VPN properties of the required CP in the local properties of the module
("Security" > "Firewall" > "VPN")
Result
You have created a VPN tunnel. The firewalls of the CPs are activated automatically: The
"Activate firewall" option is enabled by default when you create a VPN group. You cannot
disable the option.
● Download the configuration to all modules that belong to the VPN group.
64
Operating Instructions, 12/2019, C79000-G8976-C289-08
CP 1543-1
Advertisement
Table of Contents
