Vpn Connection Establishment - Siemens SIMATIC NET SCALANCE S615 Configuration Manual

Technical basics
3.5 Security functions
3.5.6.3

VPN connection establishment

The device supports the following options for establishing a VPN connection.
● OpenVPN: Security > OpenVPN > Connections (Page 293)
● IPsec VPN: Security > IPsec VPN > Connections (Page 284)
● SINEMA RC: System > SINEMA RC (Page 202)
Options
start
wait
on demand
start on DI
Wait on DI
Auto
Permanent
For SCALANCE S615: KEY-PLUG SINEMA REMOTE CONNECT required
1)
54
Use Description
Ope IP‐ SINE‐
nVP sec MA
N VPN RC
1)
x x - The device is "active", in other words, it attempts to establish a
connection to a partner. The partner is addressed using its con‐
figured WAN IP address or the configured FQDN.
- x - The device is "passive", in other words, it waits for the partner to
initiate the connection.
- x - The device attempts to establish a connection to a partner when
necessary. The receipt of requests for VPN connection estab‐
lishment is also possible.
For the configured local and remote subnets, an entry is created
in the routing table. If a node attempts to send data packets via
the VPN tunnel from one of the networks, the VPN connection is
established. The settable timeout has the effect that after this
time without any further data packets the VPN tunnel is termi‐
nated again.
x x x Connection establishment is controlled via the digital input (DI).
- x -
- - x The device adopts the settings of the SINEMA RC server. You
configure the settings on the SINEMA RC Server in "Remote
Connections > Devices". You will find further information on this
topic in the operating instructions "SINEMA RC Server".
- - x The device establishes a VPN connection to the SINEMA RC
Server. The VPN tunnel is established permanently
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08