Siemens SIMATIC NET SCALANCE S615 Configuration Manual page 287

Description
This table contains the following columns:
● Name
Shows the name of the VPN connection to which the settings relate.
● Authentication
Select the authentication method. For the VPN connection, it is essential that the partner
uses the same authentication method.
– Disabled
– Remote Cert
– CA Cert
– PSK
● CA Certificate
Select the certificate. Only loaded certificates can be selected.
● Local Certificate
Select the machine certificate.
You load the certificates on the device with "System > Load&Save". The loaded certificates
and key files are shown on the WBM page "Security > Certificates".
● Local ID
Enter the local ID from the partner certificate. Only when you use the partner certificate can
you leave the box empty. The box is automatically filled with the value from the partner
certificate.
● Remote Certificate
Select the remote station certificate. Only loaded remote certificates can be selected.
You load the certificates on the device with "System > Load&Save". The loaded certificates
and key files are shown on the WBM page "Security > Certificates".
● Remote ID
Enter the "Distinguished Name" or "Alternate Name" from the partner certificate. Only when
you use the partner certificate can you leave the box empty. The box is automatically filled
with the value from the partner certificate.
● PSK
Enter the key.
● PSK Confirmation
Repeat the key.
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08
No authentication method is selected. Connection establishment is not possible.
The remote certificate is used for authentication. You specify the certificate in "Remote
Certificate"
The certificate of the certification authority is used for authentication. You specify the
certificate in "CA Certificate".
A key is used for authentication. You configure the key in "PSK".
Note
For this "PSK" authentication method, specify the "Local ID" and "Remote ID". If the
entries remain empty, IPSec uses the IP address of the interface as the ID and prevents
the VPN tunnel from being set up.
Configuring with Web Based Management
4.9 "Security" menu
287