background image

LANCOM

 1721+

Scope of features: as of LCOS version 7.8x

USB print server

Print server (USB 2.0)

Host port for connecting USB printers via RAW- IP and LPD; bi- directional data exchange is possible

LAN protocols

IP

ARP, proxy ARP, BOOTP, LANCAPI, DHCP, DNS, HTTP, HTTPS, IP, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RIP- 1, RIP-
2, RTP, SIP, SNMP, TCP, TFTP, UDP, VRRP

WAN protocols

ADSL, Ethernet

PPPoE, PPPoA, IPoA, Multi- PPPoE, ML- PPP, PPTP (PAC or PNS) and plain Ethernet (with or without DHCP), RIP- 1, RIP- 2, VLAN

ISDN

1TR6, DSS1 (Euro- ISDN), PPP, X75, HDLC, ML- PPP, V.110/GSM/HSCSD, CAPI 2.0 via LANCAPI, Stac data compression

Interfaces

WAN: ADSL

ADSL over ISDN compliant with ITU G.992.1 Annex B (compatible to Deutsche Telekom U- R2 connections) or ADSL over POTS 
compliant with ITU G.992.1 Annex A

WAN: ADSL2+

ADSL2+ over ISDN compliant with ITU G.992.3, ITU G.992.5 Annex B (ADSL2+) or ADSL2+ over POTS compliant with ITU G.992.3 
and ITU G.992.5 Annex A (ADSL2+)

Ethernet ports

4 individual 10/100- Mbps Fast Ethernet ports; up to 3 ports can be switched as additional WAN ports with load balancing. 
thernet ports can be electrically disabled within LCOS configuration

-  freely configurable

Each Ethernet port can be freely configured (LAN, DMZ, WAN, monitor port, off). LAN ports can be operated as a switch or 
separately. Additionally, external DSL modems or termination routers can be operated as a WAN port with load balancing and 
policy- based routing. DMZ ports can be operated with their own IP address range without NAT

USB 2.0 host port

USB 2.0 full- speed host port for connecting USB printers (USB print server) or serial devices (COM port server); bi- directional 
data exchange is possible (max. 12 Mbps) 

ISDN

ISDN BRI port (S0 bus)

Serial interface

Serial configuration interface / COM port (8 pin Mini- DIN): 9,600 -  115,000 baud, suitable for optional connection of analog/
GPRS modems

Management

LANconfig

Configuration program for Microsoft Windows, incl. convenient Setup Wizards. Optional group configuration, simultaneous 
remote configuration and management of multiple devices over ISDN dial- in or IP connection (HTTPS, HTTP, TFTP). Configuration 
program properties per project or user. Automatic storage of the current configuration before firmware updates. Exchange of 
configuration files between similar devices, e.g. for migrating existing configurations to new LANCOM products. Detection and 
display of the LANCOM managed switches

LANmonitor

Monitoring application for Microsoft Windows for (remote) surveillance and logging of the status of LANCOM devices and 
connections, incl. PING diagnosis and TRACE with filters and save to file. Search function within TRACE tasks. Wizards for 
standard diagnostics. Export of diagnostic files for support purposes (including bootlog, sysinfo and device configuration 
without passwords). Graphic display of key values (marked with an icon in LANmonitor view) over time as well as table for 
minimum, maximum and average in a separate window, e. g. for Rx, Tx, CPU load, free memory. Monitoring of the LANCOM 
managed switches

Firwall GUI

Graphical user interface for configuring the object- oriented firewall in LANconfig: Tabular presentation with symbols for rapid 
understanding of objects, choice of symbols for objects, objects for actions/Quality of Service/remote sites/services, default 
objects for common scenarios, individual object definition (e.g. for user groups)

WEBconfig

Integrated web server for the configuration of LANCOM devices via Internet browsers with HTTPS or HTTP. Similar to LANconfig 
with a system overview, syslog and events display, symbols in the menu tree, quick access with side tabs. WEBconfig also 
features Wizards for basic configuration, security, Internet access, LAN- LAN coupling. Online help for parameters in LCOS menu 
tree

Device Syslog

Syslog buffer in the RAM (size depending on device memory) to store events for diagnosis. Default set of rules for the event 
protocol in Syslog. The rules can be modified by the administrator. Display and saving of internal Syslog buffer (events) from 
LANCOM devices with LANmonitor, display only with WEBconfig

Access rights

Individual access and function rights for up to 16 administrators

User administration

RADIUS user administration for dial- in access (PPP/PPTP and ISDN CLIP). Support for RADSEC (Secure RADIUS) for secure 
communication with RADIUS servers.

Remote maintenance

Remote configuration with Telnet/SSL, SSH (with password or public key), browser (HTTP/HTTPS), TFTP or SNMP, firmware upload 
via HTTP/HTTPS or TFTP

Support of protocol for authentication, authorization and accounting (AAA) with reliable connections and encrypted 
payload. Authentication and authorization are separated completely. LANCOM access rights are converted to  levels. 
With  access can be granted per parameter, path, command or functionality for LANconfig, WEBconfig or Telnet/SSH. 
Each access and all changes of configuration are logged. Access verification and logging of SNMP Get and Set requests. 
WEBconfig supports the access rights of and choice of  server at login. LANconfig provides a device login 
with the  request conveyed by the addressed device. Authorization to execute scripts and each command within them 
by checking the server’s database. CRON, action- table and script processing can be diverted to avoid  to 
relieve  servers. Redundancy by setting several alternative servers. Configurable option to fall back to local 
user accounts in case of connection drops to the  servers. Compatibility mode to support several free  
implementations

Remote maintenance of 3rd party 
devices

A remote configuration for devices behind der LANCOM can be accomplished (after authentication) via tunneling of arbitrary 
TCP- based protocols, e.g. for HTTP(S) remote maintenance of VoIP phones or printers of the LAN

ISDN remote maintenance

Remote maintenance over ISDN dial- in with calling- number check

TFTP & HTTP(S) client

For downloading firmware and configuration files from a TFTP, HTTP or HTTPS server with variable file names (wildcards for 
name, MAC/IP address, serial number), e.g. for roll- out management. Commands for live Telnet session, scripts or CRON jobs

Summary of Contents for 1721+ VPN

Page 1: ...ntegrated IPsec VPN channels upgradeable to 25 integrated hardware acceleration Supports VLANs and LANCOM Advanced Routing und Forwarding ARF Stateful inspection firewall with intrusion detection deni...

Page 2: ...e accelerator and support of digital certificates More Management The management software LANconfig and LANmonitor are included and offer not only cost effective remote maintenance of entire installat...

Page 3: ...rd protected configuration access can be set for each interface Alerts Alerts via e mail SNMP Traps and SYSLOG Authentication mechanisms PAP CHAP MS CHAP and MS CHAPv2 as PPP authentication mechanism...

Page 4: ...or the VPN connection Specific DNS forwarding DNS forwarding according to DNS domain e g internal names are translated by proprietary DNS servers in the VPN External names are translated by Internet D...

Page 5: ...COM managed switches Firwall GUI Graphical user interface for configuring the object oriented firewall in LANconfig Tabular presentation with symbols for rapid understanding of objects choice of symbo...

Page 6: ...Snapshot function for regular read out of values at the end of a billing period Timed CRON command to reset all counters at once Export Accounting information exportable via LANmonitor and SYSLOG Hard...

Page 7: ...Windows Vista Windows 7 10 licenses item no 61601 VPN Client Software LANCOM Advanced VPN Client for Windows XP Windows Vista Windows 7 25 licenses item no 61602 Item numbers LANCOM 1721 VPN EU 61353...

Reviews: