LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN
© 2005 LANCOM Systems GmbH, Wuerselen (Germany). All rights reserved. While the information in this manual has been compiled with great care, it may not be deemed an assurance of product characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software included with this product is subject to written permission by LANCOM Systems.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Preface Preface Thank you for placing your trust in this LANCOM product. EN With the LANCOM you have chosen a powerful router that possesses integrated DSL respectively ADSL and ISDN interfaces by default as well as an integrated 4-port switch. With this router you can simply and comfortably connect individual PCs or whole local networks to the high-speed Internet.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Preface Virtual Local Networks (VLAN) Wireless networks (WLAN) LANCAPI Further server services (DHCP, DNS, charge management) Model variants EN This user manual applies to the following models of the LANCOM series: LANCOM 821 ADSL/ISDN LANCOM 1621 ADSL/ISDN LANCOM 1711 VPN Model restriction The sections of the documentation that refer only to a range of models are marked either in the corresponding text itself or with approp
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Preface contact information for LANCOM Systems support can be found on a separate insert, or at the LANCOM Systems website. Notes symbols Very important instructions. If not followed, damage may result. EN Important instruction that should be followed. Additional instructions which can be helpful, but are not required.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Contents Contents EN 1 2 3 4 6 Introduction 9 1.1 How does ADSL work? 9 1.2 Which use does VPN offer? 12 1.3 Firewall 15 1.4 What does a router do? 1.4.1 Bridgehead to the WAN 1.4.2 Areas of deployment for routers 16 17 17 1.5 What can your LANCOM do? 18 Installation 21 2.1 Package contents 21 2.2 System preconditions 21 2.3 Introducing LANCOM 2.3.1 Status displays 2.3.2 The back of the unit 22 22 27 2.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Contents 5 6 7 8 Instructions for WEBconfig 45 Linking two networks 46 5.1 What information is necessary? 5.1.1 General information 5.1.2 Settings for the TCP/IP router 5.1.3 Settings for the IPX router 5.1.4 Settings for NetBIOS routing 47 47 49 50 51 5.2 Instructions for LANconfig 52 5.3 Instructions for WEBconfig 52 Providing dial-up access 54 6.1 Which information is required? 6.1.1 General information 6.1.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Contents 8.3 EN 9 10 11 8 The security checklist 68 Troubleshooting 71 9.1 No WAN connection is established 71 9.2 DSL data transfer is slow 71 9.3 Unwanted connections under Windows XP 72 9.4 Cable testing 72 Appendix 74 10.1 Performance data and specifications 74 10.2 Contact assignment 10.2.1 ADSL interface 10.2.2 Ethernet WAN interface (LANCOM 1711 VPN) 10.2.3 ISDN-S0 interface 10.2.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction 1 Introduction The VPN option, which is either integrated already or can be activated subsquently, enables the LANCOM 1621 ADSL/ISDN and LANCOM 1711 VPN to act as powerful Dynamic VPN gateways for external offices or mobile users. The LANCOM models offer each a DSL or ADSL connector and also an ISDN connector.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction Ideal for Internet surfers EN The ADSL version of DSL was designed for applications in which the user receives high volumes of data but only transmits relatively small volumes. A typical example for this would be access to the world wide web (www). Only a few commands (mouse clicks) are required to initiate the download of very large volumes of data such as graphics, texts, audio or video files.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction ISDN). Other models like LANCOM 1711 VPN are connected to the splitter using a separate ADSL modem. Telephone network Telephone Switching node Splitter Internet DSL access multiplexer ADSL provider EN Splitter ADSL modem Router Subscriber The model LANCOM 1711 VPN can also utilize other broadband connections (e.g.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction An 'Annex A' type LANCOM can only be used with ADSL-over-POTS service. Similarly, an 'Annex B' device can only be used with ADSL-over-ISDN service. Retrofitting a device to function with a different telephone system is not possible. EN ADSL-over-ISDN connections also exist that do not operate in conjunction with ISDN, but which use a conventional analog telephone connection.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction Conventional network infrastructure First, let's have a look at a typical network structure that can be found in this form or similar forms in many companies: EN LAN Head Office LAN Workstation in remote access, e.g. homework Internet Subsidiary The corporate network is based on the internal network (LAN) in the headquarters.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction to the original investment costs, ongoing costs are also incurred for the administration and maintenance of this equipment. Networking via the Internet EN The following structure results when using the Internet instead of direct connections : LAN Head Office Internet LAN Subsidiary Workstation in remote access All participants have fixed or dial-up connections to the Internet.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction technologies such as DSL (Digital Subscriber Line). But also a conventional ISDN line can be used. The resulting savings and high flexibility makes the Internet (or any other IP network) an outstanding backbone for a corporate network. 1.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction EN Denial-of-Service Protection Attacks from the Internet can be break-in attempts as well as attacks with the aim of blocking the accessibility and functionality of individual services. Therefore a LANCOM DSL is equipped with appropriate protective mechanisms, which recognize well-known hacker attacks and which guarantee the functionality.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction Connecting a LAN to the Internet does not technically differ from coupling two LANs. The only difference is that it is not just a handful of computers behind the Internet provider's router. Instead, it is the net of the networks the public Internet. 1.4.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction access to the Internet is required on either side of the network interconnection. EN VPN tunnel via the Internet VPN gateways Conventional via ISDN Without VPN, a LAN to LAN interconnection can alternatively be realized via ISDN. In this case, an intelligent line management and sophisticated filter mechanisms keeps connection costs low.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN LANCOM 1711 DSL LANCOM 1621 ADSL LANCOM 821 ADSL Chapter 1: Introduction LAN to LAN coupling via ISDN EN RAS server (via VPN) RAS server (via ISDN) IP router IPX router (via ISDN), e.g. for coupling of Novell networks or dialling into Novell networks NetBIOS proxy for coupling of Microsoft peer-to-peer networks via ISDN DHCP and DNS server (for LAN and WAN) N:N mapping for coupling networks using the same IP address ranges from LCOS 5.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN EN Firewall filters for a selective locking of IP addresses, protocols and ports MAC address filter control e.g. the access of LAN workstations to IP routing functions Configuration protection to block “brute force attacks“ Configuration Configuration with LANconfig or with web browser, additionally terminal mode for Telnet or other terminal programs, SNMP interface and TFTP server function.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation 2 Installation This chapter will assist you to quickly install hardware and software. First, check the package contents and system requirements. The device can be installed and configured quickly and easily if all prerequisites are fulfilled. Package contents LANCOM 1711 DSL LANCOM 1621 ADSL/ISDN LANCOM 821 ADSL/ISDN Please check the package contents for completeness before starting the installation.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation The LANtools and the LANCAPI functions also require a Windows operating system. A web browser is required for access to WEBconfig. 2.3 Introducing LANCOM EN This section introduces your device. We will give you an overview of all status displays, connections and switches. While the information in this section is useful for the installation of the device, it is not absolutely essential.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation Top panel The two LEDs on the top panel provide a convenient overview of the most important status information, especially when the device is installed vertically.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation Flashing Power LED but no connection? There's no need to worry if the Power LED blinks red and you can no longer connect to the WAN. This simply indicates that a preset time or connect-charge limit has been reached. There are three methods available for unlocking: Reset connect charge protection. Increase the limit that has been reached. Completely deactivate the lock that has been triggered (set limit to '0').
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation WAN Status (only LANCOM 1711 VPN) Connection status of the ADSL link: off green flashing Establishing first connection green inverse flashing Establishing further connection green At least one connection established red Error establishing the previous connection Connection status of the WAN connection: off green ADSL Data (only LANCOM 821 ADSL/ISDN and LANCOM 1621 ADSL/ISDN) No active connection not con
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation ISDN status Status of ISDN S0 connection: EN off Not connected or no S0 voltage (no error message) green blinking Initializing D-channel (establishing contact with the connection point) green constantly on D channel ready for use red blinking Error (CRC error, framing error, etc.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation VPN (only LANCOM 1621 ADSL/ISDN and LANCOM 1711 VPN) 2.3.2 SStatus of the firewall. Indicates the status of the security settings and averted attacks to the protected network. green constantly on Security settings ok. Packet filter rules are set. red/ green blinking Insecure configuration red flickering Security alert: data packet filtered by firewall rules Status of a VPN connection.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation LANCOM 1711 VPN AC12V EN LAN4 LAN3 LAN2 LAN1 WAN 10/100Mbit/s ISDN S0 Config(COM) Reset Voltage switch Connection for the included power adapter Switch with four 10/100Base-Tx connections WAN port ISDN/S0 port Serial configuration port Reset switch The reset switch has two different functions depending on the length of time that it is pressed: Restarting the device (soft reset)
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation You should never have more than one unconfigured LANCOM in a network segment at any given time. All unconfigured LANCOM devices use the same IP address (with the final digits '254'), which would result in an address conflict. To avoid problems, always configure multiple LANCOM devices one at a time, immediately assigning each device a unique IP address (one that does not end with '254').
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation Operational? – After a short device self-test the Power LED will be permanently lit. Green LAN LEDs indicate the LAN sockets that have functioning connections.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation EN In Setup select Install LANCOM Software. The following selection menus will appear on the screen: 2.5.2 Which software should you install? LANconfig is the configuration program for all LANCOM routers and Wireless LAN access points. WEBconfig can be used alternatively or in addition via a web browser. LANmonitor lets you monitor on a Windows PC all LANCOM routers and Wireless LAN access points.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration 3 Basic configuration The basic configuration can be performed on a step-by-step basis using a convenient setup wizard to guide you through the setup process and prompt you for the required information. EN First, this chapter will inform you which information is required for the basic configuration. Use this section to assemble the information you will need before launching the wizard.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration New LAN—fully automatic configuration possible If all connected network devices are still unconfigured, the setup wizard will suggest fully automatic TCP/IP configuration. This may be the case in the following situations: Fully automatic TCP/IP configuration will not be available when integrating the LANCOM in an existing TCP/IP LAN.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration Enable DHCP server? Disable the DHCP server function in the LANCOM if you would like to have a different DHCP server assign the IP addresses in your LAN. 3.1.2 Configuration protection EN The password for configuration access to the LANCOM protects the configuration against unauthorized access.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration 3.1.5 Connect charge protection Connect charge protection blocks connections that go beyond a previously set amount, protecting you from unexpectedly high connection costs. EN In LANCOM, there are three independent budgets: For DSL access, you can set a maximum connection time in minutes. In addition to this time budget, there is also a budget for limiting ISDN connection charges.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration mask > '255.255.255.0'), please ensure that the IP address 'x.x.x.254' is located in your own subnet. If you have chosen automatic TCP/IP configuration, please continue with Step . EN If you would like to configure the TCP/IP settings manually, assign an available address from a suitable address range to the LANCOM. Confirm your choice with Next.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration Section ’TCP/IP settings to workstation PCs’ auf Seite 41 will describe the settings required for the individual workstations in the LAN. Instructions for WEBconfig To configure the router with WEBconfig you must know how to address it in the LAN.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration address x.x.x.254 ( “x” stands for the first three blocks in the IP address of the configuration PC). Network with DHCP server EN If a DHCP server is active in the LAN to assign IP addresses, an unconfigured LANCOM device will turn off its own DHCP server. It will change into DHCP client mode and will obtain an IP address from the DHCP server of the LAN. This IP address is not known at first.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration If you cannot access an unconfigured LANCOM, the problem may be due to the netmask of the LAN: with less than 254 possible hosts (netmask > '255.255.255.0'), please ensure that the IP address 'x.x.x.254' is located in your own subnet. EN The WEBconfig main menu will be displayed: The setup wizards are tailored precisely to the functionality of the specific LANCOM.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration If you would like to configure the TCP/IP settings manually, assign an available address from a suitable address range to the LANCOM. Also set whether or not it is to operate as a DHCP server. Confirm your entry with Apply. EN Enter the wireless parameters. Select a network name (SSID) and a radio channel. Turn on if necessary the function for ’closed network’. Confirm your choice with Next.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration The basic setup wizard reports that all the necessary information has been provided. You can end the wizard with Go on. TCP/IP settings to workstation PCs The correct addressing of all devices within a LAN is extremely important for TCP/IP networks.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration EN the network configuration of the workstation computers, please refer to the documentation of your operating system.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 4: Setting up Internet access 4 Setting up Internet access EN All computers in the LAN can take advantage of the central Internet access of the LANCOM. The connection to the Internet provider can be established via any WAN connection. Internet access via ISDN can be used as a backup connection for DSL, for example.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 4: Setting up Internet access EN address), default gateway and DNS server. These values can be received automatically from providers that support DHCP. DSL Protocol: PPPoE, PPTP or Plain Ethernet (IPoE) Additionally for Plain Ethernet: own public IP address with netmask (not to be confused with the private LAN IP address), default gateway and DNS server.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 4: Setting up Internet access 4.1 Instructions for LANconfig EN Highlight the LANCOM in the selection window. From the menu bar, select Tools Setup Wizard. From the menu, select the Setup Internet access wizard and click Next. In the following window select your country and your Internet provider if possible, and enter your access information.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks 5 Linking two networks EN With the network interconnection (also known as LAN to LAN coupling) of the LANCOM, two local networks are linked. The LAN to LAN coupling can be realized in principle in two different ways: Only LANCOM 1621 ADSL/ISDN and LANCOM 1711 VPN VPN: For coupling via VPN, the connection between both LANs is established over a specially secured connection through the public Internet.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks The ISDN call back function cannot be configured using the wizard. It can only be set up in the expert configuration. For details, please see the reference manual. What information is necessary? The wizard will prompt you for the necessary information on a step-by-step basis. If possible, however, you should have it available before launching the wizard.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN EN Chapter 5: Linking two networks Coupling Entry Gateway 1 Gateway 2 VPN IP address of remote station '10.0.2.100' '10.0.1.100' VPN IP network address of the remote network '10.0.2.0' '10.0.1.0' VPN Netmask of the remote network 255.255.255.0 255.255.255.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN The password for the ISDN connection is an alternative to the use of the ISDN caller ID. It is always used to authenticate callers that do not send an ISDN caller ID. The exact same password must be entered on both sides. It is used for calls in both directions. The Shared Secret is the central password for security within the VPN.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks DNS access to the remote LAN Thanks to DNS, it is not only possible to access remote computers in a TCP/IP network via their IP address, but also by using freely defined names. EN For example, the computer with the name 'pc1.branch.company' (IP 10.0.2.10) will not only be able to access the server of the head office via its IP address, but also via its name, 'server.head.company'.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks for the LAN of the branch office for the higher-level WAN The IPX network numbers in the head and branch offices are specified to the respective remote sides. EN IPX internal net: 00020002 WAN IPX network no.: 00000009 VPN or ISDN connection (0123) 123456 LAN of the head office IPX network no.: 00000001 Binding: Ethernet_II (0789) 654321 LAN of the branch office IPX network no.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks Remote Windows workgroups do not appear in the Windows Network Neighbourhood, but can only be contacted directly (e.g. via Find Computers). 5.2 Instructions for LANconfig EN Perform the configuration on both routers, one at a time. Launch the 'Connect two local area networks' wizard. Follow the wizard's instructions and enter the required information.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks From the main menu, launch the 'Connect two local area networks' wizard. Follow the wizard's instructions and enter the required information. After finishing the configuration of both routers, you can test the network connection. Try to contact a computer in the remote LAN (e.g. with a ping). The LANCOM should automatically set up a connection to the remote station and contact the required computer.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access 6 Providing dial-up access EN Your LANCOM supports dial-up connections to permit individual computers full access to your network. This service is also known as RAS (Remote Access Service).
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access General information The following entries are required to set up a RAS connection. The first column indicates whether the information is required for a connection via VPN (standard method using “preshared keys“) and/or ISDN . Further details to RAS connections via VPN using enhanced methods can be found in the LCOS reference manual.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access The ISDN calling line identity (CLI) The ISDN caller ID—also known as CLI (Calling Line Identity)—this is the telephone number of the caller which is transmitted to the participant receiving the call. As a rule, it consists of the country and area codes and an MSN.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access 6.1.3 Settings for IPX Two IPX network numbers must be provided for remote access to an IPX network: the IPX network number of the head office an additional IPX network number for the higher-level WAN WAN IPX network no.: 00000009 VPN or ISDN connection (0123) 123456 LAN of the head office IPX network no.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access puters in the remote network (via Find Computers, not through the Network Neighbourhood). 6.2 6.2.1 Settings for the dial-in computer Dial-up via VPN EN For dialing into a network via VPN a workstation requires: an Internet access a VPN client LANCOM Systems offers a 30 days trial version of the LANCOM Advanced VPN Client on the LANCOM CD.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Terminal adapter or ISDN card set to PPPHDLC PPP selected as the Dial-Up server type, 'Enable software compression' and 'Require data encryption' unchecked Select desired network protocols (TCP/IP, IPX) Additional TCP/IP settings: Assignment of IP address and name server address enabled 'IP header compression' disabled These settings will permit a PC to dial into a remote LAN via ISDN and access its resources in the usual manner.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access 6.4 Instructions for WEBconfig RAS access via VPN cannot be configured using the wizard under WEBconfig yet. It can only be set up in the expert configuration. For details, please refer to the reference manual. EN From the main menu, launch the 'Connect two local networks' wizard. Follow the wizard's instructions and enter the required information.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI 7 Sending faxes with LANCAPI The main advantages of using LANCAPI are economic. LANCAPI provides all Windows workstations integrated in the LAN (local-area network) with unlimited access to office communications functions such as fax machines, answering machines, online banking and eurofile transfer.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI 7.1 Installation of the LANCOM CAPI fax modem Select the entry Install LANCOM software in the setup program of your LANCOM CD. EN Highlight the option CAPI fax modem, click Next and follow the instructions of the installation routine.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI EN When the installation was successful, the LANCOM CAPI fax modem is entered into the Phone and Modem Options of the control panel. 7.2 Installation of the MS Windows fax service Select the option Printers and Faxes from the control panel. Select the option Set up faxing from the window ’Printers and Fax’. Follow, if necessary, the instructions of the installation tool.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI For checking the installation, click with the right mouse button on the fax-icon and select Properties. The LANCOM CAPI fax modem should now be entered into register 'devices'. 7.3 Sending a fax EN After installing all required components, you have several possibilities to send a fax from your workstation PC.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI EN The fax client console will open. Select the menu item Send a Fax. A wizard will assist you through the remaining sending process.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings 8 Security settings Your LANCOM has numerous security functions. You find in this chapter all information you need for an optimal protection. 8.1 The security settings wizard EN Access to the configuration of a device permits not only to read out critical information such as WEP key or Internet password. Rather, also the entire settings of the security functions (e.g. firewall) can be altered then.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings In a next step parameters of the configuration lock like number of failed log-in attempts and the duration of the lock can be adjusted. Now activate Stateful Inspection, ping-blocking and Stealth mode in the the firewall configuration. 8.1.2 EN The wizard will inform you when entries are complete. Complete the configuration with Finish.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings EN Mark your LANCOM in the selection window. Select from the command bar Extras Setup Wizard. Select in the selection menu the setup wizard Configuring Firewall and confirm your choice with Next. In the following windows, select the services/protocols the rule should be related to.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings Have you permitted remote configuration? If you do not require remote configuration, then deactivate it. If you require remote configuration, then be sure to assign a password protection for the configuration (see previous section). The field for deactivating the remote configuration is also contained in LANconfig in the 'Management' configuration area on the 'Security' tab.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings individually for each route in the routing table. The routing table can be found in the LANconfig in the 'IP router' configuration section on the 'Routing' tab. EN Have you excluded certain stations from access to the router? Access to the internal functions of the devices can be restricted using a special filter list.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 9: Troubleshooting 9 Troubleshooting In this chapter, you will find suggestions and assistance for a few common difficulties. No WAN connection is established After start-up the router automatically attempts to connect to the access provider. During this process, the Online LED will blink green. If successful, the LED will switch over to steady green. If, however, the connection can't be established, the Online LED will light up red.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 9: Troubleshooting Numerous other factors involving the Internet itself can also influence the transfer rate. Increasing the TCP/IP window size under Windows If the actual transfer rate of a DSL connection is significantly below the fastest rate listed by the provider, there are only a few possible causes (apart from the above-mentioned external factors) which may involve one's own equipment.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 9: Troubleshooting EN tested (e.g. “DSL1” or “LAN-1”). Pay attention to the correct spelling of the interfaces. Start the test for the specified interface by clicking on Execute. Change then to menu item Expert configuration Status LAN statistics Cable test results. The results of the cable test for the individual interfaces are show up in a list. The following results can occur: OK: Cable plugged in correctly, line ok.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 10: Appendix 10 Appendix 10.1 Performance data and specifications EN LANCOM 821 ADSL/ISDN Connections Ethernet LAN LANCOM 1621 ADSL/ISDN LANCOM 1711 VPN 4x 10/100Base-TX, auto sensing, switch with node/hub auto sensing All ports can be switched into the ’Private Mode’, whereby the ports are concealed from one another. Individual ports can be switched into ’Private Mode’, e.g.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 10: Appendix Transfer rates (maximum) ATM Security LANCOM 1621 ADSL/ISDN LAN 100 Mbit/s, full-duplex mode WAN Downstream 8 Mbit/s, upstream 800 kbit/s Transport Up to 8 ATM AAL-5 PVCs OAM ATM-F4 and F5-Loop-Back LANCOM 1711 VPN PAP, CHAP and MS-CHAP as PPP authentication mechanisms, passwordprotected configuration access for each interface, access control list (IP, MAC and protocol filter) for configuration access and LANC
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 10: Appendix LANCOM 821 ADSL/ISDN Options LANCOM 1621 ADSL/ISDN LANCOM 1711 VPN LANCOM Leased Line Option (Art.No. 00789) EN LANCOM VPN Option 25 channels (max.25 simultaneous connections, 50 connections configurable) for VPN in WAN (Art. no.60083) Accessories LANCOM VPN Option 25 channels (hardware accelerated, max.25 simultaneous connections, 50 connections configurable) for VPN in WAN (Art. no.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 10: Appendix 10.2.2 Ethernet WAN interface (LANCOM 1711 VPN) Connector 10.2.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 10: Appendix 10.2.4 Ethernet interfaces 10/100Base-T 8-pin RJ45 socket, corresponding to ISO 8877, EN 60603-7 Pin Line 1 T+ 2 T- 3 R+ 4 – 5 – 6 R- 7 – 8 – Pin Line EN Connector 10.2.5 Configuration interface (Outband) 8-pin mini-DIN socket Connector 10.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 11: Index Numerics 10/100Base-TX 3-DES 27, 28 46, 54 A Accounting ADSL Connect Connector cable Transfer rate Transmission rates ADSL modem ADSL over ISDN ADSL over POTS ADSL-over-ISDN ADSL-over-POTS AES Annex A Annex B ATM Auth.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN EN Chapter 11: Index provider transfer protocol DSL technologies DSL transfer protocol 36, 40 40 9 36 E Encryption 46, 54 F Fax Filter mechanisms Firewall Firewall filter FirmSafe Flat rate H Hardware installation I ICMP Installation ADSL configuration port DSL ISDN LAN LANtools power adapter Interconnection Security aspects Internet access Authentication data Default gateway DNS server Flat rate IP address Netmask Internet provider Int
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 11: Index M MAC address filter Minimum bandwidth MLPPP MSN 15, 20 16 74 56 N NAT – see IP masquerading NetBIOS NetBIOS proxy Netmask Network segment 51 19 33 29, 51 P Package contents 21 Password 34, 36, 46, 54 PAT – see IP masquerading PBX 10 Phone line 30 Ping 53 Plain Ethernet 44 Plain IP 44 POTS 11 Power adapter 21, 27, 28 PPP 54, 74 PPP client 58 PPPoE PPTP Preshared Key Shared Secret 44 44 49 Q Quality-of-Service 16 R R
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN EN Chapter 11: Index SNMP Protection of the configuration 69 Software installation 30 Splitter 10 SSID 40 Stateful Inspection 15 Stateful Inspection Firewall 67 Status displays 22 ADSL data 25 ADSL link 25 ISDN channel 26 ISDN status 26 LAN 26 Online 24 Power 23, 24 Security 27 VPN 27 WAN data 25 WAN status 25 Switch 27, 28 System preconditions 21 T TCP TCP/IP 21, check connection Settings 32, 36, Settings to PCs in the LAN Windows size TCP
