Sicam Ak 3 As Telecontrol Substation With Ipsec Vpn Via Gprs Network256 - Siemens SICAM RTU User Manual

Automation Units and Automation Networks
6.4.3 SICAM AK 3 as Telecontrol Substation with IPSec VPN via GPRS
Network
Office Zone
Control Center Zone
SICAM SICAM
WEB TOOLBOX II
https
https
GSM/GPRS
Substation Zone
protected
SICAM AK 3
S I C A M A K S I C A M A K
Hint
You must enter the extern visible IP-address of the GPRS router as default gateway in parameter
work settings| IP address
256
Control system
NTP Server
IP address:
SNMP Manager
Subnet mask: 255.255.248.0
IEC 61850
UDP
-5-104
IPSec VPN tunnel remote PEER subnet
172.17.0.0
IPSec VPN tunnel remote PEER subnet mask
255.255.248.0
IP address: 172.17.0.254
Router Cisco 1941
IPSec VPN tunnel remote gateway IP address
192.168.1.151
GPRS Modem
Siemens Scalance M874-2 2.5G-Router
static IP address: 90.90.90.81 (GPRS-VPN)
GPRS Modem
Siemens Scalance M874-2 2.5G-Router
static IP address: 90.90.90.82 (GPRS-VPN)
internal 2nd IP address: 192.168.1.2
CP-2016 or CP-2019
C P - 2016
, in this example 192.168.1.2
172.17.0.22
Possible interface conigurations:
X0 (PRE0): ET24 on CPCX26 or PCCX26
X1 (PRE1): ET24 on CPCX26 or PCCX26
X3 (PRE3): SM-2558/ETA4 on BSE
................
Own IP address
.....................
Subnet mask
.............
Default gateway
IPSec VPN own
.........
tunnel IP address
IPSec VPN own
......
tunnel subnet mask
SICAM RTUs, SICAM AK 3 User Manual
Edition 07.2016, DC2-028-2.03
:
:
:
172.16.0.3
255.255.0.0
192.168.1.151
192.168.1.161
255.255.255.0
Net-