Siemens SCALANCE M874-3 - Firewall with a VPN Connection; Creating Firewall Rules Automatically

VPN tunnel between SCALANCE M-800 and S612
3.4 Firewall with a VPN connection
SCALANCE M-800 Getting Started
Getting Started, 06/2015, C79000-G8976-C337-04
137
3.4
Firewall with a VPN connection
You can create firewall rules for IPsec in the following ways:
● Automatic
Here, the firewall rules are created automatically for the specified VPN connection.
● Manual
Here, you define your own firewall rules for the specified VPN connection.
3.4.1
Creating firewall rules automatically
For the example, the VPN tunnel described in the section "Secure VPN tunnel with
certificates (Page 162)" is used. The devices have the following IP address setting:
Internal address
Internal network 1 SCALANCE M-800 192.168.100.1
255.255.255.0
Internal network 2 S612 internal port
192.168.11.2
255.255.255.0
Procedure
1. Click on "Security" > "IPSec VPN" in the navigation area and on the "Phase 2" tab in the
content area. The "Auto Firewall Rules" setting is activated as default.