Lancom 7111 VPN Manual Download Page 1

Page: 1 / 77

LANCOM 7111 VPN
LANCOM 8011 VPN

Summary of Contents for 7111 VPN

Page 1: ...LANCOM 7111 VPN LANCOM 8011 VPN...

Page 2: ...o make any alterations that arise as the result of technical develop ment Trademarks Windows Windows XP and Microsoft are registered trademarks of Microsoft Corp The LANCOM Systems logo and the name L...

Page 3: ...ce functions provide dynamic bandwidth manage ment in particular for Voice over IP telephone systems for critical appli cations or for certain user groups Due to its N N IP address mapping also existi...

Page 4: ...CD as an Acrobat PDF document It is designed as a supplement to the user manual and goes into detail on top ics that apply to a variety of devices These include for example Systems design of the LCOS...

Page 5: ...do not hesitate to send an email directly to info lancom de Our online services www lancom de are available to you around the clock should you have any queries regarding the topics discussed in this m...

Page 6: ...k of the unit 24 2 4 Hardware installation 24 2 5 Software installation 26 2 5 1 Starting LANCOM setup 26 2 5 2 Which software should you install 27 3 Basic configuration 28 3 1 Which information is n...

Page 7: ...for NetBIOS routing 53 6 2 Settings for the dial in computer 54 6 2 1 Dial up via VPN 54 6 2 2 Dial up via ISDN 54 6 3 Instructions for LANconfig 55 6 4 Instructions for WEBconfig 55 7 Sending faxes...

Page 8: ...9 3 Unwanted connections under Windows XP 68 9 4 Cable testing 68 10 Appendix 70 10 1 Performance data and specifications 70 10 2 Contact assignment 72 10 2 1 DSL interface 72 10 2 2 ISDN S0 interfac...

Page 9: ...amic VPN connections to remote sites with dynamic IP addresses 1 1 Which use does VPN offer A VPN Virtual Private Network can be used to set up cost effective public IP networks for example via the ul...

Page 10: ...tral LAN has a connection to the Internet so that its users can access the Web and send and receive e mail All connections to the outside world are based on dedicated lines i e switched or leased line...

Page 11: ...ng devices or routers for dedicated lines to individual participants are superfluous The subsidiary also has its own connection to the Internet The RAS PCs connect to the headquarters LAN via the Inte...

Page 12: ...sion in your network by permitting only incoming data traffic as reaction to outgoing data traffic The router s IP masquerading func tion hides all workstations of the LAN behind a single public IP ad...

Page 13: ...of the Firewall e g limitation of subnetworks single workstations or certain services Guaranteed minimum bandwidths give priority to enterprise critical appli cations VoIP PBX installations or certain...

Page 14: ...to the desired recipients in the LAN 1 3 2 Areas of deployment for routers Routers are mainly used for the following applications Internet access for a LAN e g via DSL or ISDN The Internet consists o...

Page 15: ...tant factor here is unimpaired access to shared and freely available information Remote Access Service RAS is the magic word here Employees working from home or field staff can dial into the company n...

Page 16: ...N interface ISDN leased lines WAN connection Fast Ethernet ISDN S0 for establishing Danymic VPN connections to remote sites with dynamic IP addresses LAN connection 4 individual Fast Ethernet LAN port...

Page 17: ...ANconfig or with web browser additionally termi nal mode for Telnet or other terminal programs SNMP interface and TFTP server function Remote configuration via ISDN with ISDN PPP connections e g via W...

Page 18: ...tallation In addition to the device itself the package should contain the following accessories If anything is missing please contact your retailer or the address stated on the delivery slip of the un...

Page 19: ...utely essential You may therefore skip this sec tion for the time being and go straight forward to Hardware installa tion page 24 2 3 1 Status displays The front panel of the unit feature a series of...

Page 20: ...until a configuration password has been specified Without a configuration password the configuration data of the LANCOM is insecure Under normal circum stances you would assign a configuration passwor...

Page 21: ...he connect charge protection select Reset Charge and Time Limits in the context menu right mouse click You can configure the connect charge settings in LANconfig under Management Costs you will only b...

Page 22: ...work device connected green constantly on Connection to network device no data traffic green flickering Data traffic red flickering Collision of packets off Not connected green blinking Establishing f...

Page 23: ...on in two lines with 16 characters in revolving alternation Device name Firmware version Temperature Date and time CPU usage Memory usage Number of VPN channels Data transfer downstream Data transfer...

Page 24: ...installation of the LANCOM router base station takes place in the follow ing steps Mounting If desired mount the device into a free slot of a 19 rack LANCOM 8011 VPN WAN ISDN COM ETH4 ETH3 ETH2 ETH1...

Page 25: ...a time immediately assigning each device a unique IP address one that does not end with 254 WAN connect the WAN port with the included connector cable dark blue plug e g with the ethernet port of a D...

Page 26: ...LANCOM router exclusively with computers running operating systems other than Windows 2 5 1 Starting LANCOM setup Place the LANCOM CD in your CD drive The LANCOM setup program will start automaticall...

Page 27: ...ial form of the CAPI 2 0 interface that all workstations of the LAN need to get access to office communication functions as fax or EuroFile transfer With LANCAPI Dial Up Networking Support single work...

Page 28: ...37 3 1 Which information is necessary The basic configuration wizard will take care of the basic TCP IP configuration of the router protect the device with a configuration password and will set up th...

Page 29: ...ration is optional You may also select man ual configuration instead Make your selection after the following considera tions Choose automatic configuration if you are not familiar with networks and IP...

Page 30: ...he WAN connection it may be necessary to enter the transfer protocol being used The wizard will e g automatically enter the correct settings for major DSL providers You only need to enter the protocol...

Page 31: ...rge rates through ISDN Any budget can be deactivated by entering the value 0 It is possible to completely turn off connect charge protection 3 2 Instructions for LANconfig Start up LANconfig by clicki...

Page 32: ...work is also permissible Please note that enabling this will also permit remote configuration via the Internet You should always make sure that the configuration access is protected with a password In...

Page 33: ...mode In this second operating mode the device itself can obtain an IP address from a DHCP server already existing in the LAN Network without DHCP server In a network without DHCP server unconfigured...

Page 34: ...ment of IP addresses to names with the DHCP server then the device can be accessed by the name LANCOM MAC address e g LANCOM 00a057xxxxxx The MAC address can be found on a label at the bottom of the d...

Page 35: ...config main menu will be displayed The setup wizards are tailored precisely to the functionality of the spe cific LANCOM router As a result your device may offer different wiz ards than those shown he...

Page 36: ...ter for example using Windows Dial Up Networking ISDN remote configuration can be enabled by specifying an MSN terminal device selection digit for it In this case the LANCOM router will accept calls o...

Page 37: ...h Go on 3 4 TCP IP settings to workstation PCs The correct addressing of all devices within a LAN is extremely important for TCP IP networks In addition all computers must know the IP addresses of two...

Page 38: ...Cs in the LAN as the standard gateway In addition the DHCP server should also specify the LANCOM router as a DNS server Manual IP address assignment If the IP addresses in the network are assigned sta...

Page 39: ...ternet service provider on this list you normally will not have to enter any further transfer parameters to configure your Internet access Only the authentication data that are supplied by your provid...

Page 40: ...onitor that identifies inactive remote stations faster and therefore can close the connection before the idle time has elapsed Active line monitoring can also be used with flat rate billing to con tin...

Page 41: ...rnet connection The wizard will inform you as soon as the entered information is complete Complete the configuration with Finish 4 2 Instructions for WEBconfig In the main menu select Setup Internet a...

Page 42: ...configuration information provided matches The following instructions will assume that LANCOM router routers are being used on both sides A network interconnection may also be realized with routers f...

Page 43: ...ch of the routers Arrows mark the dependencies between the entries 5 1 1 General information The following details are required for the installation of LAN to LAN couplings The first column indicates...

Page 44: ...emote station is needed for its identification Enter the subscriber number of the remote station in the ISDN subscriber number field The complete subscriber number including all necessary area and cou...

Page 45: ...1 2 Settings for the TCP IP router In TCP IP networks addressing has a special significance Please note that two interconnected networks are logically separate from one another Each must therefore hav...

Page 46: ...ress to the remote LAN rather they will be hidden behind the VPN gateway s IP address instead Therefore the stations within the remote LAN cannot access IP stations in the other LAN directly For examp...

Page 47: ...another and from all used internal IPX network numbers In addition it may be necessary to enter the frame type binding Specifying the IPX network number and binding used is not necessary if the remote...

Page 48: ...turn a message to indicate that it has all the information it needs Close the wizard with Finish After finishing the configuration of both routers you can test the network connection Try to contact a...

Page 49: ...st the network connection Try to contact a computer in the remote LAN e g with a ping The LANCOM router should automatically set up a connection to the remote station and contact the required computer...

Page 50: ...an ISDN modem The data transfer protocol is PPP Therefore the support of all usual devices and operating systems is ensured A setup wizard handles the configuration of the dial up connection in the us...

Page 51: ...Entry VPN ISDN User name VPN ISDN Password VPN Shared secret for encryption VPN Hide local stations for access to remote network Extranet VPN ISDN Incoming number of remote station ISDN TCP IP routing...

Page 52: ...sses from the address range of your local network are used In our example the IP address 10 0 1 101 will be assigned to the PC when con necting This IP address makes the computer a fully fledged membe...

Page 53: ...he remote network also contains a Novell server A network number for the WAN must also be entered manually in this case however 6 1 4 Settings for NetBIOS routing All that is required to use NetBIOS i...

Page 54: ...Remote Access IPSec over PPTP in the LANCOM VPN Client configuration wizard The wizard asks then for the values that have been defined during the instal lation of the RAS access in the LANCOM router 6...

Page 55: ...h the Provide Dial In access RAS wizard Follow the wizard s instructions and enter the required information The wizard will return a message to indicate that it has all the information it needs Close...

Page 56: ...the main menu launch the Connect two local networks wizard Follow the wizard s instructions and enter the required information Configure Dial Up Networking access on the dial in PC as described Next t...

Page 57: ...plied via the network without the necessity of additional hardware at each individ ual workstation thus eliminating the costs of equipping the workstations with ISDN adapters or modems All you need do...

Page 58: ...xes with LANCAPI 58 EN 7 1 Installation of the LANCOM CAPI fax modem Select the entry Install LANCOM software in the setup program of your LANCOM CD Highlight the option CAPI fax modem click Next and...

Page 59: ...Phone and Modem Options of the control panel 7 2 Installation of the MS Windows fax service Select the option Printers and Faxes from the control panel Select the option Set up faxing from the window...

Page 60: ...can send it directly from your respective application If you only want to send a short message select the MS Windows fax service You can use of course any other fax software alternatively 7 3 1 Send...

Page 61: ...NCOM 7111 VPN LANCOM 8011 VPN Chapter 7 Sending faxes with LANCAPI 61 EN The fax client console will open Select the menu item Send a Fax A wiz ard will assist you through the remaining sending proces...

Page 62: ...ccess This protection is already activated during the basic configuration by entering a password The device locks access to its configuration for a specified period of time after a certain number of f...

Page 63: ...net works the MSN for remote configuration via ISDN parameters of configuration lock number of failed log in attempts and duration of the lock 8 2 The firewall wizard The LANCOM router incorporates an...

Page 64: ...rved when the rule will apply to a data packet The wizard will inform you as soon as the entries are complete Complete the configuration with Finish 8 2 2 Configuration under WEBconfig Under WEBconfig...

Page 65: ...with a password The field for pro tection of the SNMP configuration with a password is also contained in LANconfig in the Management configuration area on the Security tab Have you activated the Firew...

Page 66: ...s The circle of authorized users can be expanded by inputting further entries The filter entries can describe both individual computers and whole networks The access list can be found in LANconfig in...

Page 67: ...the physical con nection Has the correct transfer protocol been selected The transfer protocol is set along with the basic settings The basic setup wiz ard will enter the correct settings for numerou...

Page 68: ...chronous connec tions Instructions on how to increase the Windows size can be found in the Knowl edge Base of the support section of the LANCOM web site www lancom de 9 3 Unwanted connections under Wi...

Page 69: ...tics Cable test results The results of the cable test for the individual interfaces are show up in a list The following results can occur OK Cable plugged in correctly line ok open with distance 0m N...

Page 70: ...ware upgrades VPN IPSec 100 IPSec sessions parallel 200 IPSec sessions parallel Can be upgraded to 500 or 1000 channels Encryption methods AES and 3 DES for LANCOM 8011 VPN with hardware accelera tion...

Page 71: ...tensive Ethernet IP and DNS statistics SYSLOG error counter connecting and online time as well as transfer quantity per station accounting information exportable via LANmonitor and SYSLOG Diagnosis Ve...

Page 72: ...ix 72 EN 10 2 Contact assignment 10 2 1 DSL interface 6 pin RJ45 socket 10 2 2 ISDN S0 interface 8 pin RJ45 socket corresponding to ISO 8877 EN 60603 7 Connector Pin IAE 1 T 2 T 3 R 4 5 6 R Connector...

Page 73: ...7 EN 60603 7 10 2 4 Configuration interface Outband 8 pin mini DIN socket 10 3 CE declaration of conformity The CE declarations of conformity for LANCOM routers are available for down load on the LANC...

Page 74: ...37 Connect charge protection 31 32 37 Connect charge budget 30 Connect charge metering 30 Contact assignment 72 Configuration interface 73 DSL interface 72 Ethernet interface 73 ISDN S0 interface 72...

Page 75: ...er 47 53 Frame type 47 Internal Net Number 53 IPX conventions 47 IPX router 16 Settings 46 ISDN 14 Basic configuration 37 caller ID 44 51 Connect charge information 32 Connector cable 18 D channel 51...

Page 76: ...ws workgroups 53 Security aspects 50 Server 16 setup 50 specify MSN 30 TCP IP 52 User name 51 Remote configuration 32 36 Remote configuration access 30 Remote configuration via ISDN 17 Reset connect c...

Page 77: ...29 manual 28 29 TCP IP filter 12 16 66 TCP IP router Settings 45 Temperature 23 time 23 TOS 17 Traffic Shaping 17 Transfer protocol 67 U UDP 66 V Virtual Private Network VPN 14 15 Voltage switch 24 V...

Search results

Summary of Contents for 7111 VPN

Reviews:

Related manuals for 7111 VPN

Brands by name

Popular brands

Lancom 7111 VPN, Manual

Search results

Summary of Contents for 7111 VPN

Reviews:

Related manuals for 7111 VPN

Brands by name

Popular brands