Siemens SIMATIC NET SCALANCE SC622-2C User Manual

Configuring with Web Based Management
4.7 "Security" menu
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
327
3. For "Remote Mode", select "Standard".
4. For "Remote Type", select "manual".
5. In "Remote Address", enter the WAN IP address and in "Remote Subnet" the subnet of
the remote station.
6. Click the "Set Values" button.
Configure VPN Roadwarrior mode
1. Enter the name of the remote station in "Remote End Name".
2. Click the "Create" button. A new entry is generated in the table.
3. For "Remote Mode", select "Roadwarrior".
4. For "Remote Type", select "Any".
5. In "Remote Address", enter the IP address of the remote network.
6. In "Virtual IP Mode", specify how the IP address of the VPN gateway is obtained.
7. Click the "Set Values" button.
4.7.6.3 Connections
On the WBM page, you configure the basic settings for the VPN connection. With these
settings, the device (local endpoint) can establish a secure VPN tunnel to the partner.
You specify the security settings on the WBM page "Authentication".
Note
Several IPsec VPN connections via the same VPN
endpoint
If you have created IPsec VPN connections to different remote subnets via the same
VPN endpoint, the first configured VPN connection (lowest index) is the main connection
(parent).
Via the main connection all other IPsec VPN connections (children)
are created and
established. If all VPN tunnels are now established and the main (parent) connection is
terminated all child connections are interrupted. After the DPD timeout has expired, all
IPsec VPN connections are reestablished via the main connectio
n.
If only one child connection is terminated, the parent connection and the other child
connections are retained.
Note
IPsec: Restrictions for phase 2 connections
Create a maximum of 20 phase 2 connections per phase 1 (Remote End).

Siemens SIMATIC NET SCALANCE SC622-2C Specifications

General

Product Type Designation	SCALANCE SC622-2C
Number of SFP Ports	2
Power Supply	24 V DC
Operating Temperature	-40 to +70 °C
Mounting Type	DIN Rail
Protection Class	IP30
MAC Address Table	8000 entries
Weight	500 g
Standards	IEEE 802.3, IEEE 802.3u

Summary

Security recommendations

General

Authentication

Details password policies and user authentication security measures.

Certificates and keys

Manages device security using certificates and cryptographic keys for secure communication.

Physical/remote access

Secures physical access and manages remote access methods.

Interfaces security

Secures network interfaces and protocols against unauthorized access.

Secure/non-secure protocols

Differentiates and guides on using secure protocols effectively.

Description

Security functions

Lists core security features like NAT, Firewall, and VPN.

Technical basics

3.1 IP address

3.6 Redundancy

3.7 Routing function

3.8 Security functions

Details user management, roles, and authentication settings.

Configuring with Web Based Management

4.2 Starting and logging in

Provides procedures for establishing connections and logging into the WBM interface.

Upkeep and maintenance

5.1 Device configuration with PRESET-PLUG

5.2 Firmware update using WBM not possible

Provides solutions for firmware updates via TFTP/SFTP when WBM is unavailable.

5.3 Restoring the factory settings

Exchange of configuration data with STEP7