background image

LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN

 Chapter 6: Providing dial- up access

56

EN

6.1.2

Settings for TCP/IP

Each active RAS user must be assigned an IP address when using the TCP/IP
protocol. 

This IP address can be permanently assigned when setting up a user. However,
it is simpler to let the LANCOM automatically assign free IP addresses to users
when they dial in. In this case you only need to specify the IP address range
that the LANCOM should use for RAS users. 

During both manual and automatic IP address assignment, please ensure that
only free addresses from the address range of your local network are used. In
our example, the IP address '10.0.1.101' will be assigned to the PC when con-
necting.

This IP address makes the computer a fully-fledged member of the LAN: with
the appropriate rights, it can access all of the other devices in the LAN. The
same applies in the other direction as well: computers in the LAN will also be
able to access the remote machine. 

The ISDN calling line identity (CLI)

The ISDN caller ID

also known as CLI (

C

alling 

L

ine 

I

dentity)

this is the telephone number

of the caller which is transmitted to the participant receiving the call. As a rule, it consists of
the country and area codes and an MSN.

The CLI is well-suited for authentication purposes for two reasons: it is very difficult to manip-
ulate, and the number is transferred free of charge via the ISDN control channel (D-channel).

10.0.

1

.100

 (0123) 123456

User: 'SAMPLE'

 (0123) 777888

ISDN adapter

Remote 
workstation
IP: 
10.0.

1.101

LAN of the head office. 
IP: 10.0.

1.0

VPN or ISDN

connection

Summary of Contents for 1621 ADSL/ISDN

Page 1: ...LANCOM 821 ADSL ISDN LANCOM 1621 ADSL ISDN LANCOM 1711 VPN...

Page 2: ...to make any alterations that arise as the result of technical develop ment Trademarks Windows Windows XP and Microsoft are registered trademarks of Microsoft Corp The LANCOM Systems logo and the name...

Page 3: ...tion regarding this topic can be found in chapter Security settings on page 66 We ask you additionally to inform you about technical developments and actual hints to your product on our Web page www...

Page 4: ...the text In the other parts of the documentation all described models have been clas sified under the general term LANCOM This documentation was compiled by several members of our staff from a variet...

Page 5: ...tion for LANCOM Systems support can be found on a separate insert or at the LANCOM Systems website Notes symbols Very important instructions If not followed damage may result Important instruction tha...

Page 6: ...3 1 Status displays 22 2 3 2 The back of the unit 27 2 4 Hardware installation 28 2 5 Software installation 30 2 5 1 Starting LANCOM setup 30 2 5 2 Which software should you install 31 3 Basic config...

Page 7: ...P 56 6 1 3 Settings for IPX 57 6 1 4 Settings for NetBIOS routing 57 6 2 Settings for the dial in computer 58 6 2 1 Dial up via VPN 58 6 2 2 Dial up via ISDN 58 6 3 Instructions for LANconfig 59 6 4 I...

Page 8: ...w 71 9 3 Unwanted connections under Windows XP 72 9 4 Cable testing 72 10 Appendix 74 10 1 Performance data and specifications 74 10 2 Contact assignment 76 10 2 1 ADSL interface 76 10 2 2 Ethernet WA...

Page 9: ...VPN connections to remote sites with dynamic IP addresses 1 1 How does ADSL work For LANCOM 821 ADSL ISDN and LANCOM 1621 ADSL ISDN only Since the late 1980s scientists have been working on the idea o...

Page 10: ...ps upload speed All services via a single cable thanks to the splitter With ADSL all traditional telephony applications telephone fax answering machine PBX can still be used without restrictions So ca...

Page 11: ...one service as well as conven tional analog service POTS Plain Old Telephone Service There are however different technical specifications for the two telephone systems For this reason devices in the L...

Page 12: ...hich use does VPN offer For LANCOM 1711 VPN and LANCOM 1621 ADSL ISDN A VPN Virtual Private Network can be used to set up cost effective public IP networks for example via the ultimate network the Int...

Page 13: ...Service RAS The central LAN has a connection to the Internet so that its users can access the Web and send and receive e mail All connections to the outside world are based on dedicated lines i e swit...

Page 14: ...pecial switching devices or routers for dedicated lines to individual participants are superfluous The subsidiary also has its own connection to the Internet The RAS PCs connect to the headquarters LA...

Page 15: ...ntrusion in your network by permitting only incoming data traffic as reaction to outgoing data traffic The router s IP masquerading func tion hides all workstations of the LAN behind a single public I...

Page 16: ...cation methods of the Firewall e g limitation of subnetworks single workstations or certain services Guaranteed minimum bandwidths give priority to enterprise critical appli cations VoIP PBX installat...

Page 17: ...d from the WAN to the desired recipients in the LAN 1 4 2 Areas of deployment for routers Routers are mainly used for the following applications Internet access for a LAN e g via DSL or ISDN The Inter...

Page 18: ...dent on any definite location the most important factor here is unimpaired access to shared and freely available information Remote Access Service RAS is the magic word here Employees working from hom...

Page 19: ...multi device mode or in point to point mode with automatic D channel protocol identification Supports static and dynamic channel bundling per MLPPP and BACP as well as Stac data compression Hi fn Por...

Page 20: ...terminal mode for Telnet or other terminal programs SNMP interface and TFTP server function Remote configuration via ISDN with ISDN PPP connections e g via Win dows network and dial up connections Ser...

Page 21: ...f anything is missing please contact your retailer or the address stated on the delivery slip of the unit 2 2 System preconditions Computers that connect to a LANCOM must meet the following minimum re...

Page 22: ...utely essential You may therefore skip this sec tion for the time being and go straight forward to Hardware instal lation on page 28 2 3 1 Status displays The front and the rear panels LANCOM 821 ADSL...

Page 23: ...d stay then clearly longer approximately 10x longer switched off Inverse flashing means the opposite The LED lights permanently in the respective colour and is only briefly interrupted Flickering mean...

Page 24: ...e methods available for unlocking Reset connect charge protection Increase the limit that has been reached Completely deactivate the lock that has been triggered set limit to 0 If a time or connect ch...

Page 25: ...nnection green inverse flashing Establishing further connection green At least one connection established red Error establishing the previous connection off not connected green blinking Establishing c...

Page 26: ...LAN 2 LAN 3 LAN 4 Status of the four LAN ports in the integrated switch off Not connected or no S0 voltage no error message green blinking Initializing D channel establishing contact with the connec t...

Page 27: ...821 ADSL ISDN und LANCOM 1621 ADSL ISDN Voltage switch Connection for the included power adapter Reset switch Switch with four 10 100Base Tx connections Serial configuration port ISDN S0 port ADSL por...

Page 28: ...than five seconds All the device s LEDs will light up green and stay on As soon as the reset switch is released the device will restart with factory default settings 2 4 Hardware installation The ins...

Page 29: ...the supplied DSL connector cable dark blue plugs ISDN to connect the LANCOM to the ISDN plug one end of the supplied ISDN connector cable light blue plugs in the ISDN S0 port LANCOM 821 ADSL ISDN and...

Page 30: ...your LANCOM exclusively with computers running operating systems other than Windows 2 5 1 Starting LANCOM setup Place the LANCOM CD in your CD drive The LANCOM setup program will start automatically I...

Page 31: ...CAPI is a special form of the CAPI 2 0 interface that all workstations of the LAN need to get access to office communication functions as fax or EuroFile transfer With LANCAPI Dial Up Networking Suppo...

Page 32: ...ion PCs on page 41 3 1 Which information is necessary The basic configuration wizard will take care of the basic TCP IP configuration of the router protect the device with a configuration password and...

Page 33: ...c TCP IP configuration is optional You may also select man ual configuration instead Make your selection after the following considera tions Choose automatic configuration if you are not familiar with...

Page 34: ...onnection For the WAN connection it may be necessary to enter the transfer protocol being used The wizard will e g automatically enter the correct settings for major DSL providers You only need to ent...

Page 35: ...for connect charge rates through ISDN Any budget can be deactivated by entering the value 0 It is possible to completely turn off connect charge protection 3 2 Instructions for LANconfig Start up LANc...

Page 36: ...te network is also permissible Please note that enabling this will also permit remote configuration via the Internet You should always make sure that the configuration access is protected with a passw...

Page 37: ...its DHCP client mode In this second operating mode the device itself can obtain an IP address from a DHCP server already existing in the LAN Network without DHCP server In a network without DHCP serve...

Page 38: ...hanges the assignment of IP addresses to names with the DHCP server then the device can be accessed by the name LANCOM MAC address e g LANCOM 00a057xxxxxx The MAC address can be found on a label at th...

Page 39: ...than 254 possible hosts net mask 255 255 255 0 please ensure that the IP address x x x 254 is located in your own subnet The WEBconfig main menu will be displayed The setup wizards are tailored precis...

Page 40: ...o permissible Please note that enabling this will also permit remote configuration via the Internet You should always make sure that the configuration access is suitably protected e g with a password...

Page 41: ...dress assignment via the LANCOM default In this operating mode the LANCOM not only assigns IP addresses to the PCs in the LAN it also uses DHCP to specify its own IP address as that of the default gat...

Page 42: ...OM 821 ADSL ISDN LANCOM 1621 ADSL ISDN LANCOM 1711 VPN Chapter 3 Basic configuration 42 EN the network configuration of the workstation computers please refer to the documentation of your operating sy...

Page 43: ...d your Internet service provider on this list you normally will not have to enter any further transfer parameters to configure your Internet access Only the authentication data that are supplied by yo...

Page 44: ...vider When using time based billing you can set the LANCOM to automat ically close existing connections if no data has been transferred within a specified time the so called idle time In addition you...

Page 45: ...your Internet connection The wizard will inform you as soon as the entered information is complete Complete the configuration with Finish 4 2 Instructions for WEBconfig In the main menu select Setup...

Page 46: ...ed Care must be taken to ensure that the configuration information provided matches The following instructions will assume that LANCOM routers are being used on both sides A network interconnection ma...

Page 47: ...f the routers Arrows mark the dependencies between the entries 5 1 1 General information The following details are required for the installation of LAN to LAN couplings The first column indicates whet...

Page 48: ...er the subscriber number of the remote station in the ISDN subscriber number field The complete subscriber number including all necessary area and country codes is required The stated ISDN caller ID i...

Page 49: ...onnections 5 1 2 Settings for the TCP IP router In TCP IP networks addressing has a special significance Please note that two interconnected networks are logically separate from one another Each must...

Page 50: ...o the remote LAN rather they will be hidden behind the VPN gateway s IP address instead Therefore the stations within the remote LAN cannot access IP stations in the other LAN directly For example if...

Page 51: ...other and from all used internal IPX network numbers In addition it may be necessary to enter the frame type binding Specifying the IPX network number and binding used is not necessary if the remote n...

Page 52: ...he wizard will return a message to indicate that it has all the information it needs Close the wizard with Finish After finishing the configuration of both routers you can test the network connection...

Page 53: ...outers you can test the network connection Try to contact a computer in the remote LAN e g with a ping The LANCOM should automatically set up a connection to the remote station and contact the require...

Page 54: ...e the dial up PC an ISDN adapter or an ISDN modem The data transfer protocol is PPP Therefore the support of all usual devices and operating systems is ensured A setup wizard handles the configuration...

Page 55: ...ANCOM uses the optional ISDN caller ID as an additional user authentication This security function should not be used when users dial in from differing locations Please refer to chapter Linking two ne...

Page 56: ...to the PC when con necting This IP address makes the computer a fully fledged member of the LAN with the appropriate rights it can access all of the other devices in the LAN The same applies in the o...

Page 57: ...nal IPX network numbers In addition it may be necessary to enter the frame type binding Specifying the IPX network number and binding used is not necessary if the remote network also contains a Novell...

Page 58: ...COM Advanced VPN Client and a description of its installation can also be found on the CD For configuring a new profile select the option LANCOM Advanced VPN Client in the configuration wizard The wiz...

Page 59: ...ess enabled IP header compression disabled These settings will permit a PC to dial into a remote LAN via ISDN and access its resources in the usual manner 6 3 Instructions for LANconfig Launch the Pro...

Page 60: ...Bconfig yet It can only be set up in the expert configuration For details please refer to the reference manual From the main menu launch the Connect two local networks wizard Follow the wizard s instr...

Page 61: ...ns are supplied via the network without the necessity of additional hardware at each individ ual workstation thus eliminating the costs of equipping the workstations with ISDN adapters or modems All y...

Page 62: ...7 Sending faxes with LANCAPI 62 EN 7 1 Installation of the LANCOM CAPI fax modem Select the entry Install LANCOM software in the setup program of your LANCOM CD Highlight the option CAPI fax modem cl...

Page 63: ...red into the Phone and Modem Options of the control panel 7 2 Installation of the MS Windows fax service Select the option Printers and Faxes from the control panel Select the option Set up faxing fro...

Page 64: ...data file you can send it directly from your respective application If you only want to send a short message select the MS Windows fax service You can use of course any other fax software alternativel...

Page 65: ...ISDN LANCOM 1621 ADSL ISDN LANCOM 1711 VPN Chapter 7 Sending faxes with LANCAPI 65 EN The fax client console will open Select the menu item Send a Fax A wiz ard will assist you through the remaining...

Page 66: ...guration access This protection is already activated during the basic configuration by entering a password The device locks access to its configuration for a specified period of time after a certain n...

Page 67: ...of local and remote net works the MSN for remote configuration via ISDN parameters of configuration lock number of failed log in attempts and duration of the lock 8 2 The firewall wizard The LANCOM i...

Page 68: ...ld be observed when the rule will apply to a data packet The wizard will inform you as soon as the entries are complete Complete the configuration with Finish 8 2 2 Configuration under WEBconfig Under...

Page 69: ...configuration with a password The field for pro tection of the SNMP configuration with a password is also contained in LANconfig in the Management configuration area on the Security tab Have you activ...

Page 70: ...he internal functions The circle of authorized users can be expanded by inputting further entries The filter entries can describe both individual computers and whole networks The access list can be fo...

Page 71: ...en indicating the physical con nection Has the correct transfer protocol been selected The transfer protocol is set along with the basic settings The basic setup wiz ard will enter the correct setting...

Page 72: ...asynchronous connec tions Instructions on how to increase the Windows size can be found in the Knowl edge Base of the support section of the LANCOM web site www lancom de 9 3 Unwanted connections unde...

Page 73: ...tus LAN statis tics Cable test results The results of the cable test for the individual interfaces are show up in a list The following results can occur OK Cable plugged in correctly line ok open with...

Page 74: ...quent upgrade to an SDSL con nection for example The DSLoL conector is connected either to a modem for PPPoE access only or a network terminal router with static IP address ISDN ISDN S0 bus Outband se...

Page 75: ...l SNMP traps and SYSLOG Firewall Stateful packet inspection IP packet filter with port ranges masking NAT PAT of TCP UDP ICMP FTP PPTP H 323 Net meeting IRC and IPSec DNS forwarding inverse masking fo...

Page 76: ...N Option 25channels hardware accelerated max 25 simultaneous connec tions 50 connections configurable for VPN in WAN Art no 60083 Accessories LANCOM Modem Adapter Kit for connecting modems analogue or...

Page 77: ...ter 10 Appendix 77 EN 10 2 2 Ethernet WAN interface LANCOM 1711 VPN 6 pin RJ45 socket 10 2 3 ISDN S0 interface 8 pin RJ45 socket corresponding to ISO 8877 EN 60603 7 Connector Pin IAE 1 T 2 T 3 R 4 5...

Page 78: ...ng to ISO 8877 EN 60603 7 10 2 5 Configuration interface Outband 8 pin mini DIN socket 10 3 CE declaration of conformity The CE declarations of conformity for LANCOM routers are available for down loa...

Page 79: ...1 Configuration access 36 40 Configuration file 70 Configuration interface 20 Connector cable 21 Configuration password 69 Configuration port 27 28 Configuration protection 20 34 Connect charge protec...

Page 80: ...at rate 44 IP address 44 Netmask 44 Internet provider 43 Intrusion Detection 15 IP Filter 70 Lock ports 70 IP address 33 51 IP address of the LANCOM 29 IP masquerading 15 17 19 69 IP router 19 IPoE 44...

Page 81: ...t 44 Plain IP 44 POTS 11 Power adapter 21 27 28 PPP 54 74 PPP client 58 PPPoE 44 PPTP 44 Preshared Key Shared Secret 49 Q Quality of Service 16 R Remote Access Service RAS Configuring the dial in comp...

Page 82: ...nditions 21 T TCP 70 TCP IP 21 58 check connection 53 Settings 32 36 40 Settings to PCs in the LAN 41 Windows size 72 TCP IP configuration Automatic 39 fully automatic 32 33 manual 32 33 TCP IP filter...

Reviews: