Configuring with Web Based Management
4.7 "Security" menu
SCALANCE SC-600 Web Based Management (WBM)
326 Configuration Manual, 10/2021, C79000-G8976-C475-03
• Remote Type
Specify the type of remote station address.
– Manual
The address of the partner is known. The device can establish the VPN connection
at this remote end either actively as a VPN client or wait passively for connection
establishment by the partner.
– Any
Accepts the connection from remote stations with any IP address. The device can
only wait for VPN connections at this remote end but cannot establish a VPN
tunnel as the active partner.
• Remote Address
Can only be edited with the remote type "Manual".
– In standard mode, enter the WAN IP address or the DDNS host name of the
partner. The network mask is always /32
– In Roadwarrior mode, you can specify either the address of the partner or enter an
IP range from which connections will be accepted.
• Remote Subnet
– In standard mode, enter the remote subnet of the remote station. Use the CIDR
notation.
Multiple subnets can be used only with IKEv2. In this case, enter the subnets
separated by a comma.
– In Roadwarrior mode, the remote station informs the device of its accessible
subnets and the device learns them.
• Virtual IP Mode
Specify whether or not the remote station is offered a virtual IP address.
The following options are available:
– User defined IPv4
The virtual IP address is from the band specified in "Virtual IP".
– None
No virtual IP address. The VPN tunnel is established dynamically to the internal IP
address of the remote station.
• Virtual IP
Specify the subnet (CIDR) from which the remote station is offered a virtual IP
address.
Can only be edited if "user defined IPv4" is selected in "Virtual IP Mode".
Procedure
Configure VPN standard mode
1. Enter the name of the remote station in "Remote End Name".
2. Click the "Create" button. A new entry is generated in the table.
To Next Page
Loading...
Need help?
General