Use Cases
596
Unrestricted
SICAM A8000 / CP-8000 • CP-8021 • CP-8022 Manual
DC8-037-2.02, Edition 10.2017
E.6.1
Usage as Telecontrol Substation with IPSec VPN via fixed Net-
work
Note
The default gateway under
Local site | VPN client default gateway
must be the external visible
IP address of the router, in this example
192.168.1.151
.
X4
X1
WAN
Office Zone
SICAM
TOOLBOX II
SICAM TOOLBOX II
UDP
IEC 61850
60870-104
https
NTP Server
SNMP Manager
SICAM WEB
SICAM WEB
https
Office Zone
SICAM
TOOLBOX II
UDP
IEC 61850
60870-104
https
NTP Server
SNMP Manager
SICAM WEB
https
IP
se
c V
PN
Tu
nn
el
IP
se
c
V
P
N
T
u
n
n
e
l
CP-8000
CP-8000
E S C
E S C
CP-8021
CP-8022
2 redundant routers
Cisco 1941 (HSRP)
2 redundant routers
Cisco 1941 (HSRP)
Own IP address X4
Subnet mask X4
192.168.5.1
255.255.255.0
IP security - Remote site 2
IP address
192.168.1.152
IP security - Remote site 2
Subnet IP address
Subnet mask
122.33.0.0
255.255.255.0
IP security - Remote site 1
IP address
192.168.1.151
IP security - Local site
VPN client IP address
192.168.1.161
Own IP address X1 VPN0
Subnet mask X1 VPN0
Own IP address X1 VPN1
Subnet mask X1 VPN1
172.16.1.58
255.255.0.0
122.32.1.58
255.255.255.0
IP security - Remote site 1
Subnet IP address
Subnet mask
172.17.0.0
255.255.248.0
IP address
122.33.0.254
Control system or SICAM AK 3
IP address
122.33.0.2
Subnet mask 255.255.255.0
IP address
172.17.0.254
Control system or SICAM AK 3
IP address
172.17.0.22
Subnet mask 255.255.248.0
Substation Zone
Control Center Zone 1
Control Center Zone 2
Summary of Contents for CP-8000
Page 604: ......