E.6.2 Usage As Telecontrol Substation With Ipsec Vpn Via Gprs Router And Adsl Network - Siemens CP-8000 User Manual

E.6.2 Usage as Telecontrol Substation with IPSec VPN via GPRS Rout-
er and ADSL Network
Office Zone
Control Center Zone 1
SICAM WEB
SICAM
https
TOOLBOX II
IEC 61850
60870-104
https
UDP
NTP Server
IP address
SNMP Manager
Substation Zone
CP-8000
CP-8021
E S C
Note
The default gateway under
IP address (=2
SICAM A8000 / CP-8000 • CP-8021 • CP-8022 Manual
DC8-037-2.02, Edition 10.2017
Control system or SICAM AK 3
IP address 172.17.0.22
Subnet mask 255.255.248.0
IP security - Remote site 1
172.17.0.0
Subnet IP address
255.255.248.0
Subnet mask
172.17.0.254
2 redundant routers
Cisco 1941 (HSRP)
IP security - Remote site 1
40.40.40.83
IP address
ADSL router
static IP address 40.40.40.82
(public)
ADSL
GSM/GPRS
IP security - Local site
VPN client IP address
Own IP address X1 VPN0
X1
Subnet mask X1 VPN0
Own IP address X1 VPN1
Subnet mask X1 VPN1
Own IP address X4
X4
Subnet mask X4
SICAM WEB
Local site | VPN client default gateway
nd
IP address) of the GPRS router, in this example 192.168.1.2.
Office Zone
Control Center Zone 2
SICAM WEB
SICAM
https
TOOLBOX II
IEC 61850
60870-104
https
UDP
NTP Server
IP address
SNMP Manager
ADSL router
static IP address
(public)
GPRS Modem
Siemens Scalance M874-2 2.5G Router
dynamic IP address 90.90.90.82
internal 2 nd IP address 192.168.1.2
192.168.1.161
172.16.1.58
255.255.0.0
122.32.1.58
255.255.255.0
192.168.5.1
255.255.255.0
SICAM TOOLBOX II
Unrestricted
Use Cases
Control system or SICAM AK 3
IP address 122.33.0.2
Subnet mask 255.255.255.0
IP security - Remote site 2
122.33.0.0
Subnet IP address
255.255.255.0
Subnet mask
122.33.0.254
2 redundant routers
Cisco 1941 (HSRP)
IP security - Remote site 2
50.50.50.83
IP address
50.50.50.82
(public)
CP-8000
E SC
192.168.5.2
must be the external visible
597