3.4
Firewall with a VPN connection
You can create firewall rules for IPsec in the following ways:
● Automatic
Here, the firewall rules are created automatically for the specified VPN connection.
● Manual
Here, you define your own firewall rules for the specified VPN connection.
3.4.1
Creating firewall rules automatically
For the example, the VPN tunnel described in the section "Secure VPN tunnel with
certificates (Page 162)" is used. The devices have the following IP address setting:
Internal network 1
Internal network 2
Procedure
1. Click on "Security" > "IPSec VPN" in the navigation area and on the "Phase 2" tab in the
content area. The "Auto Firewall Rules" setting is activated as default.
SCALANCE M-800 Getting Started
Getting Started, 06/2015, C79000-G8976-C337-04
VPN tunnel between SCALANCE M-800 and S612
SCALANCE M-800
S612
3.4 Firewall with a VPN connection
Internal address
192.168.100.1
255.255.255.0
internal port
192.168.11.2
255.255.255.0
137