Technical basics   
3.8 Security functions 
  SCALANCE SC-600 Web Based Management (WBM) 
66  Configuration Manual, 10/2021, C79000-G8976-C475-03 
Options 
The device supports the following options for controlling the VPN tunnel via the digital 
input: 
•  start on DI 
If the event "Digital Input" occurs, the device becomes "active". The device attempts 
to establish a VPN connection (IPsec) to a partner. 
•  wait on DI 
If the event "Digital Input" occurs, the device becomes "passive". The device waits for 
the partner to initiate the connection establishment. 
•  Digital In 
The settings of the SINEMA RC server are ignored. If the event "Digital In" occurs, the 
device becomes "active". The device attempts to establish a VPN connection to the 
SINEMA RC server. 
Notification options 
If the status of the digital input or a VPN tunnel (IPsec, SINEMA RC) changes, the device 
provides several options for notification on the "Events" page. 
 
Type of 
Digital 
VPN tunnel  Behavior if there is a status change 
The device sends an e-mail. The e-mail contains the identification of the 
sending device, a description of the cause of the alarm in plain language, 
and a time stamp. Requirement:  
•  An SMTP server is set up. 
•  In "System > SMTP Client" the function is activated, a receiver and the 
IP address of the SMTP server are configured. 
The device sends an SNMP trap.  
Requirement: 
•  "SNMPv1 traps" is enabled in "System > Configuration". 
•  In "System > Configuration > Traps", a receiver is configured to which 
the device sends the SNMP traps. 
The device writes an entry in the event log table. The content of the event 
log table is displayed in "Information > Log Tables". 
The device writes an entry to the Syslog server. 
Requirement: 
•  A Syslog server has been set up. 
•  In "System > Syslog Client" the function is activated and the IP address 
of the Syslog server is configured.