hi Bro,

I want to configure 2 Scalance M876-4 devices to connect together, I followed the instructions in the following document, chapter 6 NETMAP with SCALANCE M-800

https://cache.industry.siemens.com/dl/files/746/78389746/att_858434/v1/GS_SCALANCE-M8x_76.pdf

------------------------------------------------------------------------------------------
Split from SCALANCE M876-4 Compatible Router Advice.

You need to tell us more about your setup.

How do you Identify the responder (ddns, or static IP)?

can you ping the wan interface from another device? not all sim cards have a public IP

Hi alanTi,

Thank you for your concern.

I use 2 normal sim for 2 Scalance M876-4 devices. (sim is Globe in Philippine, IP public dynamic). now I just try to connect first, if possible later I will buy IP static public.

In each Scalance M876-4 devices, I connected to WAN, from both the Scalance M876-4 devices I can ping to google.com .But I cannot ping from Scalance M876-4 device to another and vice versa via IP public dynamic.

Since your public ip is dynamic, you will need a ddns service.

The example in the manual uses a public static IP. You have to replace the static IP 91.19.6.84 with your ddns address (example myrouter.dyndns.org).

In order to test the setup you can use directly the ip assigned to the wan (usb0) by your provider, but it will change, maybe even after every reboot of your scalance.

remember to allow the ipsec protocol in the firewall

ipsec is a point-to-point vpn, it needs direct communication between the 2 devices. try pinging from a scalance the wan ip of the other. if this fails your vpn will not work.

Hi AlanTi,

Thank you for your concern.

now I have 2  Scalance M876-4 and I use 2 sims (Dynamic IP public - for testing). I have described the setup steps to create an IPsec VPN connection between 2 devices (please find the attached file). But it seems they are not working, can you please check if there is any step I might be doing wrong?

Thank you very much.

me

try pinging from a scalance the wan ip of the other. if this fails your vpn will not work.

you need to verify this before setting up the vpn.

instead of pinging google try pinging the public ip of the other scalance.

look at the log tables > security they will tell you what is failing in the vpn connection