Use Cases
600
Unrestricted
SICAM A8000 / CP-8000 • CP-8021 • CP-8022 Manual
DC8-037-2.02, Edition 10.2017
E.7.1
GPRS Communication without IPSec VPN
CP-8022 does not establish a VPN tunnel with this application. The advantage of this applica-
tion is that with deployment of multiple CP-8022 substations the VPN gateway router does not
have to maintain a VPN tunnel to each CP-8022 substation.
Disadvantage is that this application is based on a relatively weak authentication and encryp-
tion of the mobile network. Further, a special contract with the mobile radio provider or service
provider is necessary and a transitional security does not exist.
Note
Siemens recommends with this configuration the parameterization of an IP address for the local LAN
interfaces X1/X4 as a precaution. Thereby you can prevent a “lockout” due to an erroneous GPRS config-
uration.
When GPRS is activated, the local LAN interfaces X1 and X4 are operated in switch mode.
The static private IP address (from the mobile radio provider) must be parameterized also in the device
(parameter
Own IP address GPRS
).
Office Zone
SICAM TOOLBOX II
UDP
IEC 61850
60870-104
https
NTP Server
SNMP Manager
SICAM WEB
https
CP-8022
IPsec VPN Tunnel
GGSN
(Gateway GPRS Support Node)
Router
X1/X4
X7
X1/X4
GPRS antenna
Own IP address X1/X4
Subnet mask X1/X4
192.168.0.5
255.255.0.0
Mobile n
private APN
Public fixed IP network
Own IP address GPRS
Subnet mask GPRS
172.16.0.3
255.255.255.0
(This is an example! The IP address is
assigned from the GPRS network. Due
to the own APN for the SIM card it is a
static IP address)
IP address:
172.17.0.254
Control system or SICAM AK 3
IP address
172.17.0.22
Subnet mask 255.255.248.0
Subnet IP address
Subnet mask
172.17.0.0
255.255.248.0
Process
Substation Zone
Control Center Zone 1
Summary of Contents for CP-8000
Page 604: ......