hi everyone,

I am trying to achieve communication between two s7-1500 systems located in two different stations, as per attached architecture using SCALANCE M876-4 using SIM cards with Static IPs. 

I am able to ping the station 1 Sim card external static IP address and internal LAN IP address from station 2 Web management "Ping" option and vice versa.

But i am unable to ping the devices on either side of the internal LAN from both station.

did any one faced such issue? i tried NATMAP setting as per manual as well as port forwarding but nothing works.

I have allowed everything in the firewall as well.

Edit: in architecture i have mentioned Scalance M874-2 but i am using Scalance M876-4 physically. 

Hello rosshan

do you have configured any router/gateway address in your devices in the different stations?

Which subnetmasks do you use?

Bye Murof

@murof thank you for the reply,

The communication got established and now i am able to ping the either side of the devices.

i have added 4 set of rules in IP rules section under the firewall.

1st rule- ppp0 to vlan1 - action -accept

2nd rule- vlan1 to ppp0 - action -accept

3rd rule- vlan1 to ipsec(all) -action -accept

4th rule- ipsec(all) to vlan1 -action -accept

Dear rosshan,

Can you show prints of the configuration you made on the m876? and at TIA

Thank you.

Best regards