background image

LANCOM 3550 Wireless

 Chapter 1: Introduction

16

EN

DHCP and DNS server

Connection to the WAN

WAN connection for DSL or cable modem

UMTS/HSPDA  connection via UMTS card in CardBus slot

Internet access (IP router)

Stateful Inspection Firewall

Firewall filter (address, port)

IP masquerading (NAT, PAT)

Quality of Service

VPN gateway

4

Digital certificates (X.509) incl. PKCS#12 

4

Power supply

12 V via seperate power adapter (AC)

Power-over-Ethernet (PoE) : proprietary PoE solution according to the 
standard draft IEEE 802.3af of PowerDsine

Configuration and firmware

Configuration with LANconfig or with web browser, additionally termi-
nal mode for Telnet or other terminal programs, SNMP interface and 
TFTP server function., SSH connection.

Configuration wizards

FirmSafe with firmware versions for absolutely secure software 
upgrades

Optional software extensions

LANCOM Public Spot Option

LANCOM VPN Option with 25 active tunnels for protection of network 
couplings

Optional hardware extensions

AirLancer Extender antennas for extended range 

AirLancer MC-54 PC card for extension to a second radio cell (dual 
band)

LANCOM 3550 

Wireless

Содержание 3550 Wireless

Страница 1: ...LANCOM 3550 Wireless...

Страница 2: ...ocumentation if they were present at the time of printing Trademarks Windows Windows XP and Microsoft are registered trademarks of Microsoft Corp The LANCOM Systems logo LCOS and the name LANCOM are r...

Страница 3: ...e automatically switches Internet access between HSDPA UMTS andGPRS depending on availability Security settings For a carefree use of your device we recommend to carry out all security set tings e g F...

Страница 4: ...compiled by several members of our staff from a variety of departments in order to ensure you the best possible support when using your LANCOM product In case you encounter any errors or just want to...

Страница 5: ...OM Systems support can be found on a separate insert or at the LANCOM Systems website Notes symbols Very important instructions If not followed damage may result Important instruction that should be f...

Страница 6: ...em preconditions 17 2 3 Status displays interfaces an hardware installation 18 2 3 1 Status display 18 2 4 The back of the unit 21 2 5 Hardware installation 22 2 6 Software installation 23 2 6 1 Start...

Страница 7: ...gs 46 5 3 1 Choosing the mobile telephone network 46 5 3 2 Activate UMTS GPRS profile 47 5 3 3 UMTS HSPDA only or automatic UMTS HSPDA GPRS selection 48 5 3 4 Set up a time limit 49 6 Point to point c...

Страница 8: ...firewall wizard 62 7 4 1 Wizard for LANconfig 63 7 4 2 Configuration under WEBconfig 63 7 5 The security checklist 63 8 Options and accessories 68 8 1 Optional LANCOM Wireless Router antennas 68 8 2 L...

Страница 9: ...il system or to the Internet access The advantages of Wireless LANs are obvious notebooks and PCs can be set up just where they are needed Due to Wireless LANs problems with missing connections or str...

Страница 10: ...WLAN or access to the company network via VPN As a back up connection for site coupling UMTS HSPDA is cheaper and or faster than the conventional alternatives ISDN and Analog Furthermore it is signifi...

Страница 11: ...ut Internet via cable 1 2 2 Mobile conference room The modern business world requires ever increasing mobility from a growing number of employees That means that a constant access to e mails Internet...

Страница 12: ...eadquarters the field staff can also access all of the services in the network of headquarters fileserver mailserver data bases from the mobile office With the LANCOM UMTS VPN Option the VPN support w...

Страница 13: ...the short time of breakdown of a DSL connection the higher connection tariffs for the UMTS HSPDA are not relevant Adding the UMTS HSPDA backup to existing installations is often simply an issue of add...

Страница 14: ...further along in the backup chain should the the backup router also fail Further information to the configuration of backup lines can be found in the LCOS reference manual 1 3 What can your LANCOM Ro...

Страница 15: ...urbo Mode Double the bandwidth at 2 4 GHz and 5 GHz Super AG incl hardware compression and bursting Multi SSID Roaming function 802 11i WPA with hardware AES encryption WEP encryption up to 128 Bit ke...

Страница 16: ...ution according to the standard draft IEEE 802 3af of PowerDsine Configuration and firmware Configuration with LANconfig or with web browser additionally termi nal mode for Telnet or other terminal pr...

Страница 17: ...r or the address stated on the delivery slip of the unit 2 2 System preconditions Computers that connect to a LANCOM Router must meet the following mini mum requirements Operating system that supports...

Страница 18: ...the respective col our and stay then clearly longer approximately 10x longer switched off Inverse flashing means the opposite The LED lights permanently in the respective colour and is only briefly in...

Страница 19: ...the device starts and the LED remains lit green The power LED flashes red green in alternation until a configuration password has been specified Without a configuration password the configuration dat...

Страница 20: ...Increase the limit that has been reached Completely deactivate the lock that has been triggered set limit to 0 If a time or connect charge limit has been reached you will be notified in LANmonitor To...

Страница 21: ...ted transfer rate 100 Mbps orange network device connected transfer rate 100 Mbps The device cannot function as directed since a 10 Mbps fast connection is too slow for a 54 Mbps fast WLAN data transm...

Страница 22: ...d autosensing The LAN connector of the LANCOM 3550 Wireless base station supports the Power over Ethernet standard PoE You find further information about operating with PoE in the info box Power over...

Страница 23: ...matically the transfer rate 10 100 Mbp of the connected network device autosensing For information about the installation of PoE see the info box Power over Ethernet elegant power supply through the L...

Страница 24: ...such network segments in which exclusively PoE capable devices are operating The protection of network devices without PoE support is guaranteed by an intelligent mechanism that tests the network segm...

Страница 25: ...guration program for all LANCOM routers and LANCOM Router base stations WEBconfig can be used alternatively or in addition via a web browser LANmonitor lets you monitor on a Windows PC all LANCOM rout...

Страница 26: ...apter 2 Installation 26 EN With LANCOM Online Documentation you can copy the documenta tion files on your PC Select the appropriate software options and confirm your choice with Next The software is a...

Страница 27: ...ngs that are needed for the LAN s workstations to ensure trouble free access to the router 3 1 Which information is necessary The basic configuration wizard will take care of the basic TCP IP configur...

Страница 28: ...be enabled so that the LANCOM Router can automatically assign IP addresses to the devices in the LAN Configure manually nevertheless The fully automatic TCP IP configuration is optional You may also...

Страница 29: ...different administrators can be set up Further information can be found in the section Managing rights for different administrators in the LCOS reference manual 3 1 3 Settings for the Wireless LAN Th...

Страница 30: ...endix The used channel and frequency range define the operating of the common radio standard in doing so the 5 GHz frequency range correspond to the IEEE 802 11a h standard and the 2 4 GHz frequency r...

Страница 31: ...n the setup wizard starts that will help you make the basic settings of the device or will even do all the work for you provided a suit able network environment exists If the setup wizard does not sta...

Страница 32: ...n for closed network Confirm your choice with Next In the next window select your DSL provider from the list that is displayed If you select My provider is not listed here you must enter the transfer...

Страница 33: ...n through the name LANCOM or by its IP address 172 23 56 254 If the configuration PC does not obtain its IP address from the LANCOM DHCP server figure out the current IP address of this PC with Start...

Страница 34: ...ble tools and contact the device directly with this IP address Use LANconfig Connect a PC with a terminal program via the serial configuration interface to the device Starting the wizards in WEBconfig...

Страница 35: ...automatic TCP IP configuration please continue with Step If you would like to configure the TCP IP settings manually assign an available address from a suitable address range to the LANCOM Router Also...

Страница 36: ...the next window Confirm your choice with Apply Connect charge protection can limit the cost of DSL connections to a pre determined amount if desired Confirm your choice with Apply The basic setup wiza...

Страница 37: ...wn IP address and the IP addresses of the standard gateway and DNS server via DHCP IP address assignment via a separate DHCP server The workstation PCs must be configured so that they automatically ob...

Страница 38: ...authentication data that are supplied by your provider are required Additional information for unknown Internet providers If the setup wizard does not know your Internet provider it will prompt you fo...

Страница 39: ...ss wizard and click Next In the following window select your country and your Internet provider if possible and enter your access information Depending on their availability the wizard will display ad...

Страница 40: ...p Internet access 40 EN Depending on their availability the wizard will display additional options for your Internet connection The wizard will inform you as soon as the entered information is complet...

Страница 41: ...he Inter net Wizard in LANconfig Highlight the LANCOM Router in the selection window From the menu bar select Tools Setup Wizard From the menu select the Setup Internet access wizard and click Next To...

Страница 42: ...conven ient access to the Internet or for VPN site coupling By activating the keep alive function it is very easy to set up for exam ple a mobile conference room that enables Internet access and if n...

Страница 43: ...e home network with which the card is connected to the Internet The display of signal strength an the operating mode is dependent on the UMTS card in use LANmonitor s signal strength display is highly...

Страница 44: ...interface can be used for full blown network coupling This variant may be used for setting up mobile conference rooms To couple two networks via a UMTS interface the initial step is to set up net work...

Страница 45: ...que identities e g unambiguous e mail addresses for the relevant connection in the configuration area VPN tab IKE parameters in the list for IKE key The settings for the aggressive mode must agree for...

Страница 46: ...nitiated from the VPN gateway with the UMTS HSPDA card and must be directed towards the remote VPN gateway The interval times for the polling calls may have to be adjusted depending on the quality of...

Страница 47: ...n Networks or so Setup Interfaces UMTS GPRS parameters Scan Networks 5 3 2 Activate UMTS GPRS profile Operating the LANCOM devices with the UMTS HSPDA function in varying locations or with different U...

Страница 48: ...s setting the data card in the LANCOM will initially attempt to establish a connection via UMTS HSPDA The card will automatically switch to the GPRS network if the UMTS HSPDA signal proves to be too w...

Страница 49: ...he UMTS profile 49 EN 5 3 4 Set up a time limit You can prevent excessive costs from arising from connections over the UMTS interface by setting up a time limit for example under LANconfig in the Man...

Страница 50: ...int operation mode Off The access point only communicates with mobile clients On The access point can communicate with other access points and with mobile clients Exclusive The access point only commu...

Страница 51: ...ated in the ideal line of the transmitting antenna the better is the actual performance and the effective bandwidth If the receiving antenna is outside of this ideal area however significant losses in...

Страница 52: ...MAC addresses from any other interfaces that may be present in the access points You will find the WLAN MAC address on a sticker below the corresponding antenna connector Only use the string that is m...

Страница 53: ...or point to point connections IEEE 802 11i can be used to attain a significant increase in the security of WLAN point to point connections All of the advantages of 802 11i such as the simple configura...

Страница 54: ...m string at least 22 charac ters long corresponding to a cryptographic strength of 128 bits When set as P2P Master the passphrase entered here will be used to check the Slave s authorization to access...

Страница 55: ...come known all other WLAN con nections secured by LEPS remain secure particularly when the ACL is stored on a RADIUS server When using LANconfig for the configuration you enter the passphrases of the...

Страница 56: ...WLAN VPN in combination with external VPN gate way 7 1 1 Closed network Each Wireless LAN according to IEEE 802 11 has its own network name SSID This network name serves as identification and enables...

Страница 57: ...assign an individual passphrase consisting of any 4 to 64 ASCII characters to each MAC address The connection to the access point and the subsequent encryption with IEEE 802 11i or WPA is only possibl...

Страница 58: ...Regularly change the WEP keys in your access points The passphrases for 802 11i or WPA do not have to be changed regularly as new keys are gen erated for each connection anyway This is not the only r...

Страница 59: ...ress on a sticker on the base of the device Only use the number labeled as MAC address that starts with 00A057 The other numbers that may be found are not the LAN MAC address A device with the LAN MAC...

Страница 60: ...Windows 2000 and Windows XP For other operating systems client software from other manufacturers is available The drivers for the LANCOM AirLancer wireless adapter are already equipped with a 802 1x...

Страница 61: ...led log in attempts Both the number of failed attempts and the duration of the lock can be set as needed By default access is locked for a period of five minutes after the fifth failed log in attempt...

Страница 62: ...rd Security settings to control and change the settings The following values are handled password for the device allowed protocols for the configuration access of local and remote net works parameters...

Страница 63: ...be observed when the rule will apply to a data packet The wizard will inform you as soon as the entries are complete Complete the configuration with Finish 7 4 2 Configuration under WEBconfig Under W...

Страница 64: ...figuration by the wireless network then deacti vate it The field for deactivating the configuration by the wireless network is also contained in LANconfig in the Management configuration area on the S...

Страница 65: ...LANconfig The Rules tab under Firewall QoS can assist you to define and change the filter rules Have you excluded certain stations from access to the router Access to the internal functions of the dev...

Страница 66: ...mmediately after configuring the router for the first time With the Access Control List ACL you can permit or prevent the access to your wireless LAN by individual clients The decision is based on the...

Страница 67: ...ief could gain access to a protected network The device s operation can be protected by various means for example it will cease to function if there is an interruption to the power supply or if the de...

Страница 68: ...ennas can be found on the LANCOM web site under www lancom systems com For help with calculating the correct antenna setup for external LANCOM AirLancer Extender antennas or for antennas of other ven...

Страница 69: ...y screwing them out Connect the AirLancer antennas to the antenna connector with the inscription Antenna Main 8 2 LANCOM Public Spot Option Wireless public spots are publicly accessible points at whic...

Страница 70: ...nline time and data volume can be transferred per user and per session to a central RADIUS server Client PCs need only radio card e g AirLancer TCP IP and an Internet browser Additional software is no...

Страница 71: ...mpts most cards are automatically locked and can only be reinstated by entering an additional number depending on the provider PIN2 or PUK Whenever a device is set to automatically establish a connect...

Страница 72: ...PIN number should occur without error After the third attempt with an invalid PIN the SIM card is locked This error is also displayed on LANmonitor The PUK is required In this case you can unlock the...

Страница 73: ...le provided with your device should be used to connect to DSL This cable must be connected to the Ethernet port of your broadband access device The LAN link LED must light green indicating the physica...

Страница 74: ...ipment One common problem occurs when large amounts of data are sent and received simultaneously with a Windows PC using an asynchronous connec tion This can cause a severe decrease in download speed...

Страница 75: ...r Extender antennas and 3 dBi dipol dualband antennas in package contents Please respect the restrictions given in your country when setting up an antenna system For information about calculating the...

Страница 76: ...2 1 LAN interface 10 100base TX 8 pin RJ45 socket as per ISO 8877 EN 60603 7 10 2 2 WAN interface 10 100base TX 8 pin RJ45 socket as per ISO 8877 EN 60603 7 Connector Pin Line 1 T 2 T 3 R 4 PoE G 5 P...

Страница 77: ...es that the devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995 5 EC directive The CE declarations of conformity...

Страница 78: ...ons for WLANs 78 EN 11 Radio channel regulations for WLANs Information about approvals and notifications in various countries and the radio channel regulations can be found in the reference manual or...

Страница 79: ...lt gateway 36 DHCP 37 DHCP server 14 28 29 32 35 37 Diversity antennas 17 DNS DNS server 14 37 Documentation 17 DSL provider 32 36 transfer protocol 36 DSL connection problems establishing the connect...

Страница 80: ...rd 29 32 PAT siehe IP Masquerading PIN for UMTS card 71 Plain Ethernet 38 Point to Point 57 point to point 15 Power adapter 17 22 Power over Ethernet 24 PPPoA 38 Public Spot Option 69 R RADIUS 15 Rela...

Страница 81: ...5 Traffic lock 15 Transfer protocol 73 Turbo Mode 15 U UDP 65 UMTS 41 automatically switch to GPRS 48 Choosing the mobile telephone net work 46 incorrect PIN 71 Internet access 41 mobile conference ro...

Отзывы: