VPN tunnel between SCALANCE M-800 and security CPs
4.3 Secure VPN tunnel with certificates
SCALANCE M-800 Getting Started
166 Getting Started, 06/2015, C79000-G8976-C337-04
Downloading the configuration to the CP and saving the M-800 configuration
Downloading the configuration to the CP
1. Close the Security Configuration Tool.
2. In HW Config, select the "Station" > "Save and Compile" menu.
3. Download the new configuration to the security module using the "PLC" > "Download to
Module …" menu.
– For CP 1628: If the download was completed free of errors, the security module
restarts automatically and the new configuration is activated.
– For CP 343-1 Advanced or CP 434-1 Advanced: Restart the S7 CPU following the
download, to activate the new configuration.
Saving the SCALANCE M configuration
1. In the content area, select the "M-800" and select the menu command "Transfer" > "To
module(s) …".
2. Save the configuration file "Projectname.M-800.txt" in your project folder and assign a
password for the private key of the certificate, e.g. Di1S+Xo?.
The following files will be saved in the project directory:
● Configuration file: projectname.M-800.txt
● PKCS12 file: projectname.string.M-800.p12
● Remote certificate: Projectname.group1.CP.cer
The configuration file contains the exported configuration information for the SCALANCE M-
800 including information on the additionally generated certificates.
IPsec VPN > Certificates
Upload Remote Site Certificate: Configuration-
1.group1.CP.cer
Upload PKCS12 File (.p12): Configuration-
1.U800CB3FF@G471C.M-800.p12
System > Load&Save > HTTP > IPSecCert : Load
IPsec VPN > Connections > VPN Standard Mode -
Security > IPSec VPN > Remote End > Remote Mode: Standard
Address of the remote site's VPN gateway:
Security > IPSec VPN > Remote End > Remote Address:
Authentication method: X.509 remote certificate Security > IPSec VPN > Authentication > Authentication: Remote
Remote Certificate: Configuration-1.group1.CP.cer Security > IPSec VPN > Authentication > Remote Certificate: Con-
figuration-1.Gruppe1.CP.cer
To Next Page
Loading...
