Technical basics
3.8 Security functions
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
51
The new virtual master router adopts the virtual MAC and IP address. This means that
no routing tables or ARP tables need to be updated. The consequences of a device
failure are therefore minimized.
You configure VRRP in "Layer 3 > VRRPv3".
3.7.3
Static routing
The route is entered manually in the routing table. Enter the route in the routing table on
the following page.
•
Layer 3 > Static Routes
3.8
Security functions
3.8.1
Adapting the MTU for IPsec VPN and SINEMA RC
Adapting the MTU (Maximum Transmission Unit)
The MTU specifies the permitted size of a data packet for transmission in the network.
When these data packets are then transferred from the device via the IPsec tunnel or
SINEMA RC, the original data packet becomes larger as a result of the additional header
information and may need to be segmented for further transfer. This depends on the
MTU specifications in the connected network. However, a necessary segmentation may
lead to noticeable losses in performance or cancelation of the data transfer.
Avoid this by adapting the MTU format on the terminal device, which means reducing it
in such a way that the data packets received by the device can be supplemented by the
required additional information without the need for subsequent segmentation. A
reasonable size is in the range of between 1000 and 1400 bytes.
3.8.2
User management
Overview of user management
Access to the device is managed by configurable user settings. Set up users with a
password for authentication. Assign a role with suitable rights to the users.
The authentication of users can either be performed locally by the device or by an
external RADIUS server. You configure how the authentication is handled on the
"Security > AAA > General" page.
Summary of Contents for SIMATIC NET SCALANCE SC-600
Page 68: ......
