Siemens SIMATIC NET SCALANCE SC-600 Configuration Manual page 326

Configuring with Web Based Management
4.7 "Security" menu
• Remote Type
Specify the type of remote station address.
– Manual
– Any
• Remote Address
Can only be edited with the remote type "Manual".
– In standard mode, enter the WAN IP address or the DDNS host name of the
– In Roadwarrior mode, you can specify either the address of the partner or enter an
• Remote Subnet
– In standard mode, enter the remote subnet of the remote station. Use the CIDR
– In Roadwarrior mode, the remote station informs the device of its accessible
• Virtual IP Mode
Specify whether or not the remote station is offered a virtual IP address.
The following options are available:
– User defined IPv4
– None
• Virtual IP
Specify the subnet (CIDR) from which the remote station is offered a virtual IP
address.
Can only be edited if "user defined IPv4" is selected in "Virtual IP Mode".
Procedure
Configure VPN standard mode
1. Enter the name of the remote station in "Remote End Name".
2. Click the "Create" button. A new entry is generated in the table.
326
The address of the partner is known. The device can establish the VPN connection
at this remote end either actively as a VPN client or wait passively for connection
establishment by the partner.
Accepts the connection from remote stations with any IP address. The device can
only wait for VPN connections at this remote end but cannot establish a VPN
tunnel as the active partner.
partner. The network mask is always /32
IP range from which connections will be accepted.
notation.
Multiple subnets can be used only with IKEv2. In this case, enter the subnets
separated by a comma.
subnets and the device learns them.
The virtual IP address is from the band specified in "Virtual IP".
No virtual IP address. The VPN tunnel is established dynamically to the internal IP
address of the remote station.
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03