Siemens SCALANCE M-800 Series Getting Started page 140

VPN tunnel between SCALANCE M-800 and S612
3.4 Firewall with a VPN connection
Allow HTTP-based access through the VPN tunnel for a specific device
1. Click on "Security" > "Firewall" in the navigation area and on the "IP Services" tab in the
content area.
2. As "Service Name", enter "TCP all" and click "Create". A new entry is created in the table.
3. Configure the service with the following setting:
4. Click "Set Values".
5. Click on "Security" > "Firewall" in the navigation area and on the "IP Rules" tab in the
content area.
6. Click "Create". A new entry is created in the table.
7. Configure the firewall rule with the following settings:
8. Click "Create". A new entry is created in the table.
140
Transport
Action
From
To
Source (Range)
Destination (Range)
Service
TCP
Accept
Internal
IPsec tunnel
192.168.100.10
(only this device is allowed to communicate from internal net-
work 1 through the VPN tunnel with TCP)
0.0.0.0/0 (to all addresses)
TCP all
Getting Started, 06/2015, C79000-G8976-C337-04
SCALANCE M-800 Getting Started