Siemens SCALANCE S623 User manual

Siemens
Scalance S623

Overview
•Basic Configuration
•Standard mode Firewall
•Advanced Firewall
•Password Management
•Advanced Password Management
•VPN with PreShared Key
•VPN with Certificates
•Gateway-to-Gateway VPN
•VPN with User Authentication

Technology Overview
•User Authentication
oOn-device
oConnection with RADIUS server
•VPN
oIPsec end-to-end

Necessary Software
•Siemens Security Configuration Tool
•Siemens SOFTNET Security Client
•Siemens Automation License Manager
•(Optional) Siemens Primary Setup Tool

Basic Configuration
In this example we set the IP addresses of all 3 interfaces on
the Scalance 623
This will demonstrate configuration steps that will be reused
in every following example

Basic Configuration
1. Setting up the network
2. Making IP settings for the PC
3. Creating a project and security module
4. Downloading the configuration to the security module

Basic Configuration
•Connecting the external interface of the Scalance to the
PC
•Scalance interfaces
oExternal network
Red marking = unprotected network area
oInternal network
Green marking = network protected by Scalance
oDMZ port
Yellow marking = unprotected or protected network
1. Setting up the network

Basic Configuration
•Open Control Panel “Start” > “Control Panel”
•Open “Network and Sharing Center”
2. Making IP settings for the PC
PC
IP
address
Subnet
mask
PC
192.168.10.2
255.255.255.0

Basic Configuration
•Select “Change adapter settings”
•Open the Local Area Connection Properties
Doubleclick “Local Area Connection”, then click
“Properties”
2. Making IP settings for the PC
PC
IP
address
Subnet
mask
PC
192.168.10.2
255.255.255.0

Basic Configuration
•Click the “Properties” button
•Select “Use the following IP”
•Enter the values from the
table in the relevant boxes
•Close the dialogs with “Ok”
and close Control Panel
2. Making IP settings for the PC
PC
IP
address
Subnet
mask
PC
192.168.10.2
255.255.255.0