E.7.3 Gprs Communication With 2 Ipsec Vpn Tunnel - Siemens CP-8000 User Manual

Use Cases
E.7.3 GPRS Communication with 2 IPSec VPN Tunnel
Office Zone
Control Center Zone 1
NTP Server
SNMP Manager
UDP
SICAM
IEC 61850
WEB
60870-104
https
SICAM
TOOLBOX II
https
IPsec VPN Tunnel 1
Substation Zone
IP security - Local site
Identifier (Local ID)
(The local site IP address is the address
from the GPRS network)
Note
Siemens recommends with this configuration the parameterization of an IP address for the local LAN
interfaces X1/X4 as a precaution. Thereby you can prevent a "lockout" due to an erroneous GPRS config-
uration.
When GPRS is activated, the local LAN interfaces X1 and X4 are operated in switch mode.
602
Unrestricted
Control system or SICAM AK 3
IP address 172.17.0.22
Subnet mask 255.255.248.0
IP Security - Remote site 1
remote-id1
Identifier (Remote ID)
172.17.0.0
Subnet IP address
255.255.248.0
Subnet mask
IP address 172.17.0.254
Router
IP security - Remote site 1
192.168.1.151
IP address
Public fixed IP network
Router
Public mobile network
CP-8022
GPRS antenna
local-id
Process
Office Zone
Control Center Zone 2
Control system or SICAM AK 3
NTP Server
IP address
SNMP Manager
Subnet mask 255.255.255.0
UDP
SICAM
IEC 61850
WEB
60870-104
IP Security - Remote site 2
Identifier (Remote ID)
https
Subnet IP address
Subnet mask
SICAM
TOOLBOX II
IP address
https
Router
IP security - Remote site 2
IP address
Router
IPsec VPN Tunnel 2
X1/X4
Own IP address X1/X4
Subnet mask X1/X4
X7
Own IP address GPRS VPN0
Subnet mask GPRS VPN0
Own IP address GPRS VPN1
Subnet mask GPRS VPN1
SICAM A8000 / CP-8000 • CP-8021 • CP-8022 Manual
DC8-037-2.02, Edition 10.2017
122.33.0.2
remote-id2
122.33.0.0
255.255.255.0
122.33.0.254
192.168.1.152
192.168.0.5
255.255.0.0
172.16.0.3
255.255.255.0
122.32.1.58
255.255.255.0