Siemens SCALANCE M874-3 - Page 140

VPN tunnel between SCALANCE M-800 and S612
3.4 Firewall with a VPN connection
SCALANCE M-800 Getting Started
140 Getting Started, 06/2015, C79000-G8976-C337-04
Allow HTTP-based access through the VPN tunnel for a specific device
1. Click on "Security" > "Firewall" in the navigation area and on the "IP Services" tab in the
content area.
2. As "Service Name", enter "TCP all" and click "Create". A new entry is created in the table.
3. Configure the service with the following setting:
Transport
TCP
4. Click "Set Values".
5. Click on "Security" > "Firewall" in the navigation area and on the "IP Rules" tab in the
content area.
6. Click "Create". A new entry is created in the table.
7. Configure the firewall rule with the following settings:
Action
Accept
From
Internal
To
IPsec tunnel
Source (Range) 192.168.100.10
(only this device is allowed to communicate from internal net-
work 1 through the VPN tunnel with TCP)
Destination (Range)
0.0.0.0/0 (to all addresses)
Service
TCP all
8. Click "Create". A new entry is created in the table.