E.7.1 Gprs Communication Without Ipsec Vpn - Siemens CP-8000 User Manual

Use Cases
E.7.1 GPRS Communication without IPSec VPN
CP-8022 does not establish a VPN tunnel with this application. The advantage of this applica-
tion is that with deployment of multiple CP-8022 substations the VPN gateway router does not
have to maintain a VPN tunnel to each CP-8022 substation.
Disadvantage is that this application is based on a relatively weak authentication and encryp-
tion of the mobile network. Further, a special contract with the mobile radio provider or service
provider is necessary and a transitional security does not exist.
Office Zone
Control Center Zone 1
SICAM TOOLBOX II
IPsec VPN Tunnel
Substation Zone
X7
Own IP address GPRS
172.16.0.3
Subnet mask GPRS
255.255.255.0
(This is an example! The IP address is
assigned from the GPRS network. Due
to the own APN for the SIM card it is a
static IP address)
Note
Siemens recommends with this configuration the parameterization of an IP address for the local LAN
interfaces X1/X4 as a precaution. Thereby you can prevent a "lockout" due to an erroneous GPRS config-
uration.
When GPRS is activated, the local LAN interfaces X1 and X4 are operated in switch mode.
The static private IP address (from the mobile radio provider) must be parameterized also in the device
(parameter
Own IP address
600
Unrestricted
SNMP Manager
SICAM WEB
https
https
IP address:
Router
Public fixed IP network
GGSN
(Gateway GPRS Support Node)
Mobile network +
private APN
GPRS antenna
Process
GPRS).
Control system or SICAM AK 3
IP address
NTP Server
Subnet mask 255.255.248.0
IEC 61850
UDP
60870-104
Subnet IP address
Subnet mask
172.17.0.254
CP-8022
X1/X4 X1/X4
Own IP address X1/X4
Subnet mask X1/X4
SICAM A8000 / CP-8000 • CP-8021 • CP-8022 Manual
172.17.0.22
172.17.0.0
255.255.248.0
192.168.0.5
255.255.0.0
DC8-037-2.02, Edition 10.2017