Lancom 9100 VPN Manual Download Page 1

110644/0409

LANCOM Systems GmbH

Adenauerstr. 20/B2

52146 Würselen

Germany

E-Mail: [email protected]

Internet www.lancom.eu

LANCOM

 9100 VPN

LANCOM

 9100 VPN Wir

eless

쮿

  

Handbuch

쮿

  

Manual

.

.

.

c

o

n

n

e

c

t

i

n

g  

y

o

u

r  

b

u

s

i

n

e

s

s

110644_LC-9100-MANUAL_cover.indd1   1

110644_LC-9100-MANUAL_cover.indd1   1

01.04.2009   18:12:57

01.04.2009   18:12:57

Summary of Contents for 9100 VPN

Page 1: ...Germany E Mail info lancom eu Internet www lancom eu LANCOM 9100 VPN LANCOM 9100 VPN Wireless Handbuch Manual c o n n e c t i n g y o u r b u s i n e s s 110644_LC 9100 MANUAL_cover indd1 1 110644_LC...

Page 2: ...LANCOM 9100 VPN...

Page 3: ...trademarks of Microsoft Corp The LANCOM Systems logo LCOS and the name LANCOM are registered trademarks of LANCOM Systems GmbH All other names or descriptions used may be trademarks or registered tra...

Page 4: ...t The LANconfig Wizard Security Settings will help you with this task Further infor mation is also available in the chapter Security settings We would additionally like to ask you to refer to our Inte...

Page 5: ...e CD supplied describes all of the parameters in LCOS the operating system used by LANCOM products This guide is an aid to users during the configu ration of devices by means of WEBconfig or the telne...

Page 6: ...ftware installation 21 2 5 1 Starting the software setup 21 2 5 2 Which software should I install 22 3 Basic configuration 23 3 1 What details are necessary 23 3 1 1 TCP IP settings 23 3 1 2 Configura...

Page 7: ...ting 47 6 2 Settings on the dial in computer 48 6 2 1 Dialing in via VPN 48 6 2 2 Dialing in via ISDN 48 6 3 Instructions for LANconfig 49 6 4 1 Click VPN for LANCOM Advanced VPN Client 49 6 5 Instruc...

Page 8: ...smission 61 9 3 Unwanted connections under Windows XP 62 10 Appendix 63 10 1 Performance and characteristics 63 10 2 Connector wiring 64 10 2 1 LAN WAN interface 10 100 1000Base TX DSL interface 64 10...

Page 9: ...h security functions such as stateful inspection intrusion detection and denial of service protection is supplemented by dynamic bandwidth management and comprehensive backup high availability and red...

Page 10: ...VPN Virtual Private Network can be used to set up secure data communi cations over the Internet The following structure results when using the Internet instead of direct con nections All participants...

Page 11: ...e case for conventional direct connections A single Internet access can be used to establish multiple simultaneous logical connections to a variety of remote sites The resulting savings and high flexi...

Page 12: ...es with dynamic IP addresses LAN connection Individual Gigabit Ethernet LAN ports Alternatively switchable as a WAN interface for connecting SDSL modems 4 USB connector USB 2 0 host port high speed 12...

Page 13: ...Remote configuration via ISDN with ISDN PPP connections e g via Windows Dial Up Networking Serial configuration interface Call back function with PPP authentication mechanisms allowing only predefined...

Page 14: ...missing please take up immediate contact to your dealer or to the address on the delivery note supplied with your device 2 2 System requirements Computers that connect to a LANCOM must meet the follow...

Page 15: ...shing means that the LED lights up very briefly in the respective colour and stay then clearly longer approximately 10x longer switched off Inverse flashing means the opposite The LED lights permanent...

Page 16: ...linking and no connection can be made If the power LED blinks red and no WAN connections can be established there is no cause for concern This merely means that a pre set charge or time limit has been...

Page 17: ...tly CPU temperature 55 Red blinking Hardware failure of the fan or CPU temperature 60 addi tional acoustic signal Off No session logged on Green On perma nently Serial configuration session logged on...

Page 18: ...RRP aktive or VRRP active an one virtual router defined in the device is in the Master state Red On perma nently All virtual routers defined in the device are deactivated A virtual router is deactivat...

Page 19: ...nnector USB host LANCOM 9100 VPN ISDN COM ETH1 ETH2 ETH3 ETH4 USB Green Off No networking device attached Green On perma nently Connection to network device operational not data traffic Green Flickeri...

Page 20: ...art only however long it is held down Reset or boot standard setting Press the button briefly to re start the device Pressing the button for 5 seconds or longer restarts the device and resets the conf...

Page 21: ...If necessary fix the rubber pads to the underside of the device to prevent any scratching to other equipment LAN first of all connect your LANCOM Router to the LAN or to an indi vidual PC Plug one en...

Page 22: ...ISDN cable light blue connectors to the ISDN S0 interface on the router and the other end to an ISDN S0 point to point or point to multipoint connection Configuration interface optionally the router c...

Page 23: ...is the Windows configuration program for all LANCOM rou ters and LANCOM access points WEBconfig can be used alternatively or in addition via a web browser With LANmonitor you can use a Windows compute...

Page 24: ...the LAN so that they can access the device without pro blem 3 1 What details are necessary The Basic Settings Wizard is used to set the LANCOM VPN Routers basic TCP IP parameters and to protect the d...

Page 25: ...IP configuration is optional Instead of this you can select manual configuration Make this selection after considering the following Select automatic configuration if you are not familiar with networ...

Page 26: ...he role of DNS server in the Server mode of operation 3 1 2 Configuration protection Using a password secures access to the LANCOM VPN Router s configuration and thus prevents unauthorized modificatio...

Page 27: ...ehalf assuming that the appropriate networking environment exists If the Setup Wizard does not start automatically you can manually search for new devices at all interfaces if the LANCOM VPN Router is...

Page 28: ...component of the LANCOM A Web browser is all that is required to access WEBconfig WEBconfig offers similar Setup Wizards to LANconfig and hence provides the perfect conditions for easy con figuration...

Page 29: ...on and assign IP addresses information on gateways etc to other computers in the LAN provided they are set to automatic retrieval of IP addresses auto DHCP In this constella tion the device can be ac...

Page 30: ...is communi cates the IP address name assignment to the DHCP server the device can be reached under name LANCOM MAC address e g LANCOM 00a057xxxxxx The MAC address on a sticker on the base of the devic...

Page 31: ...alog provides a link for an encrypted connection over HTTPS Always use the HTTPS connection for increa sed security whenever possible Setup Wizards The setup Wizards allow quick and easy configuration...

Page 32: ...vices with a radio module but it also communicates its own IP address as the standard gateway and DNS server For this reason the PCs have to be set up to automatically retrieve their own IP address an...

Page 33: ...odem first has to be connected to one of the device s ETH ports When set ting up the Internet access you define which ETH port the ADLS modem has been connected to Does the Setup Wizard know your Inte...

Page 34: ...o monitor the function of the remote site Apart from that you can opt to keep flatrate connections permanently active keep alive In case a connection should fail it is re estab lished automatically Cr...

Page 35: ...onnection Select the corresponding WAN interface to be used for the backup connection and enter the relevant access data for the Internet connection The Wizard then sets up the alternative Internet ac...

Page 36: ...from the main menu In the following windows you select your country your Internet provider if possible and you enter your access data Depending on availability the Wizard provides further options for...

Page 37: ...configured Note that the configuration information at both ends must match The following instructions assume that LANCOM Routers are being operated at both ends It is possible to set up network conne...

Page 38: ...via VPN simple method with pre shared keys and or via ISDN For further information on VPN based network connectivity by other methods refer to the LANCOM Reference Manual Connecti vity Entry Gateway 1...

Page 39: ...ard will ask you to enter a new name for your device Entering a name will cause your LANCOM to be renamed Ensure that you give different names to the two remote devices The name of the remote site is...

Page 40: ...es transmission speeds without incurring extra costs This is the completely different to the bundling of two ISDN chan nels by MLPPP MultiLink PPP This doubles the bandwidth although this generally do...

Page 41: ...he case of LAN LAN connectivity via VPN you can mask the individual computers behind another IP address The operating mode referred to as extranet VPN enables computers to be made visible from the rem...

Page 42: ...ANconfig Carry out the configuration on both routers one after the other Launch the Wizard Connect two local area networks Follow the Wizard s instructions and enter the necessary data The Wizard will...

Page 43: ...uple multiple routers to a central network In LANconfig mark the routers at branch offices which are to be coupled to a central router via VPN Use drag drop by mouse to place the devices onto the entr...

Page 44: ...icate The INTRANET at headquarters only is to be provided to the branch offices All private networks at the branch offices can also be connected to one another via headquarters All entries for the cen...

Page 45: ...mplete You can then close the Wizard with Next Once you have completed the set up of both routers you can start testing the network connection Try to communicate with a computer in the remote LAN e g...

Page 46: ...omputer needs an ISDN adapter or an ISDN modem The protocol of data transfer is PPP This ensures that all normal devices and operating systems are supported Setting up dial in access is carried out wi...

Page 47: ...ISDN calling line ID is used by the LANCOM Router for additional user authentication This security function should not be employed if the user will be dialing in from various ISDN connections Connect...

Page 48: ...le the PC is assigned with the IP address 10 0 1 101 when it dials in This IP address allows the PC to fully participate in the LAN With the appro priate rights it can access any other device in the L...

Page 49: ...r of settings are required by the dial in computer This example is based on a Windows computer Dial Up Networking or any other PPP client installed correctly Network protocol TCP IP IPX installed and...

Page 50: ...loyees who dial into the network with the LANCOM Advanced VPN Client are very easy to set up with the Setup Wizard and expor ted to a file This file can then be imported as a profile by the LANCOM Adv...

Page 51: ...of the name of the connection a sequential number and the internal domain in the LANCOM VPN Router Domain If defined in the LANCOM VPN Router the internal domain is used here or alternatively a a DynD...

Page 52: ...ring machine online banking and Eurofile transfer Without any additional hardware every workstation can make use of the full range of ISDN functions provided via the network This completely dispenses...

Page 53: ...r deals with installing and configuring the LANCOM CAPI Faxmodem and MS Windows Fax Service 7 1 Installing the LANCOM CAPI Faxmodem From the setup program on your LANCOM CD select the entry LANCOM sof...

Page 54: ...to the Control Panel and select the option Printers and faxes In the Printers and faxes window select the option Install a local fax printer Then follow the instructions provided by the installation t...

Page 55: ...se the MS Windows Fax Service itself Alternatively you can use any fax program 7 3 1 Sending faxes from an office application Open your document in the usual manner with your office application and se...

Page 56: ...LANCOM 9100 VPN Chapter 7 Fax transmission with LANCAPI 55 EN The fax client console opens up Select the menu item Send file fax A Wizard guides you through the remaining procedure...

Page 57: ...haracters Keys that are normal words are not secure If you suspect anything change the key immediately When an employee with access to a key leaves the company then it is high time to change the wirel...

Page 58: ...emote networks In a subsequent step you can set parameters for locking the configuration such as the number of incorrect password entries and the duration of the lock For the firewall you can activate...

Page 59: ...mote configuration If you do not require remote configuration please ensure to switch it off If you need to make use of remote configuration ensure that you do not fail to password protect the configu...

Page 60: ...g tab Have you used filters to close critical ports The firewall filters in LANCOM devices offer filter functions for individual computers or entire networks It is possible to set up source and destin...

Page 61: ...peration can be protected by various means for example it will cease to function if there is an interruption to the power supply or if the device is switched on in another location The scripting funct...

Page 62: ...d Is the correct transmission protocol selected The transmission protocol is defined with the basic settings The Basic Settings Wizard actually sets the correct protocol for a wide variety of DSL prov...

Page 63: ...cause of this is the RCP IP receive windows size as defined in the Windows operating system The default value is too small for asynchronous connections Instructions for increasing the windows size are...

Page 64: ...m with removable moun ting brackets network connectors on the front Conformity CE conformity to EN 300 328 EN 301 893 EN 55024 EN 55022 EN 55011 EN 50081 EN 60950 ES 59005 EN 60950 Approvals Notified...

Page 65: ...ockets ISO 8877 EN 60603 7 BI_DA stands for bi directional pair A 10 2 2 ISDN S0 interface 8 pin RJ45 socket ISO 8877 EN 60603 7 Connector Pin Fast Ethernet Gigabit Ethernet 1 T BI_DA 2 T BI_DA 3 R BI...

Page 66: ...the devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995 5 EC directive The CE declarations of conformity for you...

Page 67: ...nfiguration protection 12 25 Connector wiring 64 Configuration port 65 ISDN S0 interface 64 LAN interface 64 Outband 65 CPU load 17 D Date 17 Default gateway 59 Device name 17 DHCP 31 DHCP server 10 2...

Page 68: ...roxy 10 Netmask 24 Network connectivity 36 Security aspects 36 45 Network mask 25 59 Network segment 21 Number of VPN tunnels 17 P Package content 13 Password 25 26 36 45 Password for the ISDN connect...

Page 69: ...TCP IP filter 11 59 TCP IP router Settings 39 TCP IP windows size 62 Telnet 59 Temperature 17 TFTP 59 Time 17 Transmission protocol 61 U UDP 59 USB connector 18 V Virtual Private Network 9 Virtual Pr...

Page 70: ...LANCOM 9100 VPN Index 69 EN...

Reviews: