The two devices should also communicate with each other via a VPN tunnel.
Requirement
● The SCALANCE M-800 is connected to the WAN , refer to "Connecting SCALANCE M-
800 to the WAN (Page 11)".
● The SCALANCE M-800 can be reached via the Admin PC and you are logged in to the
WBM as "admin".
Steps in configuration
The following steps are necessary
1. Creating a VPN connection (Page 217)
2. Creating NETMAP rules (Page 219)
6.3.1
Creating a VPN connection
Procedure
1. Click on "Security" > "IPSec VPN" in the navigation area and on the "General" tab in the
content area.
2. Select "Activate IPSec VPN" and click "Set Values".
3. Click on the "Remote End" tab in the content area and create the VPN partner with the
following settings:
SCALANCE M-800 Getting Started
Getting Started, 06/2015, C79000-G8976-C337-04
Remote network > local network:
The destination IP subnet 192.168.200.0/24 is replaced by 192.168.20.0/24
The source IP subnet 192.168.10.0/24 is replaced by 192.168.100.0/24
On the M816
Remote End Name
M876
Remote Mode
Standard
Remote Typ
manual
Remote Address
Reachable via a dynamic DNS
service, e.g. example.no-ip.com
Remote Subnet
192.168.200.0/24
NETMAP with SCALANCE M-800
6.3 NETMAP for the local and remote network
On the M876
M816
Standard
manual
Fixed IP address (WAN IP address) of
the M816, e.g. 91.19.6.84
192.168.10.0/24
217