Use Cases
SICAM RTUs, User Manual SICAM CMIC 401
DC8-001-2.09, Edition 08.2016
F.5.1 SICAM CMIC as Telecontrol Substation with IPSec VPN via fixed
Network
Note
The default gateway under IP Security | Local Site | VPN client default gateway must be
the external visible IP address of the router, in this example 192.168.1.151
SICAM CMIC
Substation Zone
WAN
Office Zone
Control Center Zone 1
SICAM
TOOLBOX II
SICAM
TOOLBOX II
UDP
IEC 61850
60870-104
https
NTP Server
SNMP Manager
SICAM
WEB
SICAM
WEB
I
P
S
e
c
V
P
N
T
u
n
n
e
l
https
https
NTP Server
SNMP Manager
SICAM
WEB
https
Subnet-mask X4
192.168.5.1
: 255.255.255.0
2 redundant router
Cisco 1941 (HSRP)
IP security - Remote Site 2
IP-Address
: 192.168.1.152
192.168.5.2
IP address: 122.33.0.254
Control system or SICAM AK 3
IP address: 122.33.0.2
Subnet mask: 255.255.255.0
IP security - Remote Site 2
Subnet IP-Address
Subnet mask
:
:
122.33.0.0
255.255.255.0
IP security - Remote Site 1
IP-Address
: 192.168.1.151
IP security - Local site
VPN client IP-address:
192.168.1.161
IP address: 172.17.0.254
Control system or SICAM AK 3
IP address: 172.17.0.22
Subnet mask: 255.255.248.0
Own IP address X1 VPN0:
Subnet-mask X1 VPN0
Own IP address X1 VPN1:
Subnet-mask X1 VPN1
172.16.1.58
: 255.255.0.0
122.32.1.58
: 255.255.255.0
IP security - Remote Site 1
Subnet IP-Address
Subnet mask
:
:
172.17.0.0
255.255.248.0
2 redundant router
Cisco 1941 (HSRP)