ELSA LANCOM Business LC-4X00, Manual

Page: 45 / 276

Operating modes and functions
ELSA LANCOM Business
35
Security for your LAN
You certainly would not like any outsider to have easy access to or to be able to modify
the data on your company's servers. The
ELSA LANCOM Business offers you various
ways of restricting access from outside:
쮿
Access protection using name, password and call number
쮿
Callback to defined call numbers
쮿
Data packet filtering
쮿
IP masquerading (also known as NAT or PAT)
Security check
The identifier to be used to recognize callers can be set in the 'Communication'
configuration section of the 'Call Accepting' tab or using the
/Setup/WAN-module/
Protect
menu. You have a choice of the following:
쮿
None: Calls are accepted from any remote station.
쮿
Name: Only calls from those remote stations entered in the name list are accepted.
쮿
Number: Only calls from those remote stations entered in the number list are
accepted.
쮿
Name or number: Only calls from those remote stations entered in the name list or
number list are accepted.
It is an obvious requirement for identification that the corresponding information is also
sent by the caller.
Verification of name
The name of the remote station can also be transferred in PPP connections.
This requires a connection to be established first, since the name cannot be transferred
over the D channel.
The routers' response is obvious: Only those calls with recognized names are accepted if
protection by name is set; all others are rejected.
The name sent by the remote station will be checked for its appearance on the PPP list
of user names if the PPP protocol is being used. If the user name is not available, the
device name is accepted and verified as the name of the remote station. The PPP list can
be found in the
ELSA LANconfig in the 'Communication' configuration section on the
'Protocols' tab, or in the
/Setup/WAN-module/PPP List
menu.
No password? The PPP does indeed offer this special option: It is possible to request a
form of protection available specifically to this protocol, that is to say PAP (Password
Authentication Protocol) or CHAP (Challenge Handshake Authentication Protocol). This
is a form of protection which your device demands from the remote station.