Siemens CP-8022

Use Cases
596 Unrestricted SICAM A8000 / CP-8000 • CP-8021 • CP-8022 Manual
DC8-037-2.02, Edition 10.2017
E.6.1 Usage as Telecontrol Substation with IPSec VPN via fixed Net-
work
Note
The default gateway under Local site | VPN client default gateway
must be the external visible
IP address of the router, in this example 192.168.1.151.
X4
X1
WAN
Office Zone
SICAM
TOOLBOX II
SICAM TOOLBOX II
UDP
IEC 61850
60870-104
https
NTP Server
SNMP Manager
SICAM WEB
SICAM WEB
https
Office Zone
SICAM
TOOLBOX II
UDP
IEC 61850
60870-104
https
NTP Server
SNMP Manager
SICAM WEB
https
I
P
s
e
c
V
P
N
T
u
n
n
e
l
I
P
s
e
c
V
P
N
T
u
n
n
e
l
CP-8000
CP-8000
ESC
ESC
CP-8021
CP-8022
2 redundant routers
Cisco 1941 (HSRP)
2 redundant routers
Cisco 1941 (HSRP)
Own IP address X4
Subnet mask X4
192.168.5.1
255.255.255.0
IP security - Remote site 2
IP address 192.168.1.152
IP security - Remote site 2
Subnet IP address
Subnet mask
122.33.0.0
255.255.255.0
IP security - Remote site 1
IP address 192.168.1.151
IP security - Local site
VPN client IP address 192.168.1.161
Own IP address X1 VPN0
Subnet mask X1 VPN0
Own IP address X1 VPN1
Subnet mask X1 VPN1
172.16.1.58
255.255.0.0
122.32.1.58
255.255.255.0
IP security - Remote site 1
Subnet IP address
Subnet mask
172.17.0.0
255.255.248.0
IP address 122.33.0.254
Control system or SICAM AK 3
IP address 122.33.0.2
Subnet mask 255.255.255.0
IP address 172.17.0.254
Control system or SICAM AK 3
IP address 172.17.0.22
Subnet mask 255.255.248.0
Substation Zone
Control Center Zone 1 Control Center Zone 2