Secure Access With S615; Requirements For Operation - Siemens SIMATIC NET SCALANCE S615 Configuration Manual

Description

1.3 Requirements for operation

1.2.2

Secure access with S615

Secure remote access and network segmentation with SCALANCE S615
A secure connection for data exchange between an automation plant and remote stations will
be established via the Internet and mobile wireless network. At the same time, a secure
connection will be established when necessary for service purposes. This connection is,
however, restricted to a specific plant section or a specific machine.
In the automation plant, a SCALANCE S615 is connected to the Internet via the ADSL+ router
M812-1. The remote stations will be connected to the Internet via the LTE-CP 1243-7 or the
HSPA+ router SCALANCE M874-3. The devices establish a VPN connection to the
SCALANCE S615 via which data can be exchanged securely.
When necessary, the service technician connects to the Internet. With the SOFTNET Security
Client, he or she establishes a secure VPN connection to the S615. Various IP subnets are
connected to the S615 between which the integrated firewall checks communication. This
allows the communication of the service technician to be restricted to a specific IP subnet.
Automation system
Automation application
Industrial Ethernet
PROFINET
Automation cell 2
Automation cell 1
1.3 Requirements for operation
Power supply
A power supply with a voltage between 12 VDC and 24 VDC that can provide sufficient current.
16
Plant network
SCALANCE
VPN tunnel
S615
PROFINET
SCALANCE
M812-1
PROFINET
Automation cell 3
Configuration Manual, 11/2019, C79000-G8976-C388-08
Remote stations
SIMATIC
S7-1200 with
CP 1243-7 (LTE)
VPN
tunnel
GPRS/UMTS/LTE
Internet
router
Internet
Field PG with
SOFTNET
SCALANCE
M874-3
GPRS/
UMTS/
LTE
SIMATIC S7-1500
with CP 1543-1
SCALANCE S615 Web Based Management
SIMATIC
Security
Client