Lancom 7111 VPN Скачать руководство пользователя страница 17

Страница: 17 / 77

LANCOM 7111 VPN – LANCOM 8011 VPN

Chapter 1: Introduction

Quality of Service

Dynamic bandwidth management / IP-Traffic Shaping

Bandwidth limiting with absolute or per connection transfer limits,
separated from send or receive site

TOS or DiffServ priority queuing

Automatic packet size adaption incl. PMTU adjustment or fragmenta-
tion.

Configuration

Configuration with LANconfig or with web browser, additionally termi-
nal mode for Telnet or other terminal programs, SNMP interface and
TFTP server function.

Remote configuration via ISDN (with ISDN-PPP connections e.g. via
Windows network and dial-up connections)

Serial configuration interface

Callback function with PPP authentication mechanisms for restriction
to fixed ISDN telephone numbers

FirmSafe with firmware versions for absolutely secure software
upgrades

Optional software extensions

LANCOM Service-Option

LANCOM VPN Option with 500 or 1000 tunnel

LANCOM 7111

VPN

LANCOM 8011

VPN

Содержание 7111 VPN

Страница 1: ...LANCOM 7111 VPN LANCOM 8011 VPN...

Страница 2: ...o make any alterations that arise as the result of technical develop ment Trademarks Windows Windows XP and Microsoft are registered trademarks of Microsoft Corp The LANCOM Systems logo and the name L...

Страница 3: ...ce functions provide dynamic bandwidth manage ment in particular for Voice over IP telephone systems for critical appli cations or for certain user groups Due to its N N IP address mapping also existi...

Страница 4: ...CD as an Acrobat PDF document It is designed as a supplement to the user manual and goes into detail on top ics that apply to a variety of devices These include for example Systems design of the LCOS...

Страница 5: ...do not hesitate to send an email directly to info lancom de Our online services www lancom de are available to you around the clock should you have any queries regarding the topics discussed in this m...

Страница 6: ...k of the unit 24 2 4 Hardware installation 24 2 5 Software installation 26 2 5 1 Starting LANCOM setup 26 2 5 2 Which software should you install 27 3 Basic configuration 28 3 1 Which information is n...

Страница 7: ...for NetBIOS routing 53 6 2 Settings for the dial in computer 54 6 2 1 Dial up via VPN 54 6 2 2 Dial up via ISDN 54 6 3 Instructions for LANconfig 55 6 4 Instructions for WEBconfig 55 7 Sending faxes...

Страница 8: ...9 3 Unwanted connections under Windows XP 68 9 4 Cable testing 68 10 Appendix 70 10 1 Performance data and specifications 70 10 2 Contact assignment 72 10 2 1 DSL interface 72 10 2 2 ISDN S0 interfac...

Страница 9: ...amic VPN connections to remote sites with dynamic IP addresses 1 1 Which use does VPN offer A VPN Virtual Private Network can be used to set up cost effective public IP networks for example via the ul...

Страница 10: ...tral LAN has a connection to the Internet so that its users can access the Web and send and receive e mail All connections to the outside world are based on dedicated lines i e switched or leased line...

Страница 11: ...ng devices or routers for dedicated lines to individual participants are superfluous The subsidiary also has its own connection to the Internet The RAS PCs connect to the headquarters LAN via the Inte...

Страница 12: ...sion in your network by permitting only incoming data traffic as reaction to outgoing data traffic The router s IP masquerading func tion hides all workstations of the LAN behind a single public IP ad...

Страница 13: ...of the Firewall e g limitation of subnetworks single workstations or certain services Guaranteed minimum bandwidths give priority to enterprise critical appli cations VoIP PBX installations or certain...

Страница 14: ...to the desired recipients in the LAN 1 3 2 Areas of deployment for routers Routers are mainly used for the following applications Internet access for a LAN e g via DSL or ISDN The Internet consists o...

Страница 15: ...tant factor here is unimpaired access to shared and freely available information Remote Access Service RAS is the magic word here Employees working from home or field staff can dial into the company n...

Страница 16: ...N interface ISDN leased lines WAN connection Fast Ethernet ISDN S0 for establishing Danymic VPN connections to remote sites with dynamic IP addresses LAN connection 4 individual Fast Ethernet LAN port...

Страница 17: ...ANconfig or with web browser additionally termi nal mode for Telnet or other terminal programs SNMP interface and TFTP server function Remote configuration via ISDN with ISDN PPP connections e g via W...

Страница 18: ...tallation In addition to the device itself the package should contain the following accessories If anything is missing please contact your retailer or the address stated on the delivery slip of the un...

Страница 19: ...utely essential You may therefore skip this sec tion for the time being and go straight forward to Hardware installa tion page 24 2 3 1 Status displays The front panel of the unit feature a series of...

Страница 20: ...until a configuration password has been specified Without a configuration password the configuration data of the LANCOM is insecure Under normal circum stances you would assign a configuration passwor...

Страница 21: ...he connect charge protection select Reset Charge and Time Limits in the context menu right mouse click You can configure the connect charge settings in LANconfig under Management Costs you will only b...

Страница 22: ...work device connected green constantly on Connection to network device no data traffic green flickering Data traffic red flickering Collision of packets off Not connected green blinking Establishing f...

Страница 23: ...on in two lines with 16 characters in revolving alternation Device name Firmware version Temperature Date and time CPU usage Memory usage Number of VPN channels Data transfer downstream Data transfer...

Страница 24: ...installation of the LANCOM router base station takes place in the follow ing steps Mounting If desired mount the device into a free slot of a 19 rack LANCOM 8011 VPN WAN ISDN COM ETH4 ETH3 ETH2 ETH1...

Страница 25: ...a time immediately assigning each device a unique IP address one that does not end with 254 WAN connect the WAN port with the included connector cable dark blue plug e g with the ethernet port of a D...

Страница 26: ...LANCOM router exclusively with computers running operating systems other than Windows 2 5 1 Starting LANCOM setup Place the LANCOM CD in your CD drive The LANCOM setup program will start automaticall...

Страница 27: ...ial form of the CAPI 2 0 interface that all workstations of the LAN need to get access to office communication functions as fax or EuroFile transfer With LANCAPI Dial Up Networking Support single work...

Страница 28: ...37 3 1 Which information is necessary The basic configuration wizard will take care of the basic TCP IP configuration of the router protect the device with a configuration password and will set up th...

Страница 29: ...ration is optional You may also select man ual configuration instead Make your selection after the following considera tions Choose automatic configuration if you are not familiar with networks and IP...

Страница 30: ...he WAN connection it may be necessary to enter the transfer protocol being used The wizard will e g automatically enter the correct settings for major DSL providers You only need to enter the protocol...

Страница 31: ...rge rates through ISDN Any budget can be deactivated by entering the value 0 It is possible to completely turn off connect charge protection 3 2 Instructions for LANconfig Start up LANconfig by clicki...

Страница 32: ...work is also permissible Please note that enabling this will also permit remote configuration via the Internet You should always make sure that the configuration access is protected with a password In...

Страница 33: ...mode In this second operating mode the device itself can obtain an IP address from a DHCP server already existing in the LAN Network without DHCP server In a network without DHCP server unconfigured...

Страница 34: ...ment of IP addresses to names with the DHCP server then the device can be accessed by the name LANCOM MAC address e g LANCOM 00a057xxxxxx The MAC address can be found on a label at the bottom of the d...

Страница 35: ...config main menu will be displayed The setup wizards are tailored precisely to the functionality of the spe cific LANCOM router As a result your device may offer different wiz ards than those shown he...

Страница 36: ...ter for example using Windows Dial Up Networking ISDN remote configuration can be enabled by specifying an MSN terminal device selection digit for it In this case the LANCOM router will accept calls o...

Страница 37: ...h Go on 3 4 TCP IP settings to workstation PCs The correct addressing of all devices within a LAN is extremely important for TCP IP networks In addition all computers must know the IP addresses of two...

Страница 38: ...Cs in the LAN as the standard gateway In addition the DHCP server should also specify the LANCOM router as a DNS server Manual IP address assignment If the IP addresses in the network are assigned sta...

Страница 39: ...ternet service provider on this list you normally will not have to enter any further transfer parameters to configure your Internet access Only the authentication data that are supplied by your provid...

Страница 40: ...onitor that identifies inactive remote stations faster and therefore can close the connection before the idle time has elapsed Active line monitoring can also be used with flat rate billing to con tin...

Страница 41: ...rnet connection The wizard will inform you as soon as the entered information is complete Complete the configuration with Finish 4 2 Instructions for WEBconfig In the main menu select Setup Internet a...

Страница 42: ...configuration information provided matches The following instructions will assume that LANCOM router routers are being used on both sides A network interconnection may also be realized with routers f...

Страница 43: ...ch of the routers Arrows mark the dependencies between the entries 5 1 1 General information The following details are required for the installation of LAN to LAN couplings The first column indicates...

Страница 44: ...emote station is needed for its identification Enter the subscriber number of the remote station in the ISDN subscriber number field The complete subscriber number including all necessary area and cou...

Страница 45: ...1 2 Settings for the TCP IP router In TCP IP networks addressing has a special significance Please note that two interconnected networks are logically separate from one another Each must therefore hav...

Страница 46: ...ress to the remote LAN rather they will be hidden behind the VPN gateway s IP address instead Therefore the stations within the remote LAN cannot access IP stations in the other LAN directly For examp...

Страница 47: ...another and from all used internal IPX network numbers In addition it may be necessary to enter the frame type binding Specifying the IPX network number and binding used is not necessary if the remote...

Страница 48: ...turn a message to indicate that it has all the information it needs Close the wizard with Finish After finishing the configuration of both routers you can test the network connection Try to contact a...

Страница 49: ...st the network connection Try to contact a computer in the remote LAN e g with a ping The LANCOM router should automatically set up a connection to the remote station and contact the required computer...

Страница 50: ...an ISDN modem The data transfer protocol is PPP Therefore the support of all usual devices and operating systems is ensured A setup wizard handles the configuration of the dial up connection in the us...

Страница 51: ...Entry VPN ISDN User name VPN ISDN Password VPN Shared secret for encryption VPN Hide local stations for access to remote network Extranet VPN ISDN Incoming number of remote station ISDN TCP IP routing...

Страница 52: ...sses from the address range of your local network are used In our example the IP address 10 0 1 101 will be assigned to the PC when con necting This IP address makes the computer a fully fledged membe...

Страница 53: ...he remote network also contains a Novell server A network number for the WAN must also be entered manually in this case however 6 1 4 Settings for NetBIOS routing All that is required to use NetBIOS i...

Страница 54: ...Remote Access IPSec over PPTP in the LANCOM VPN Client configuration wizard The wizard asks then for the values that have been defined during the instal lation of the RAS access in the LANCOM router 6...

Страница 55: ...h the Provide Dial In access RAS wizard Follow the wizard s instructions and enter the required information The wizard will return a message to indicate that it has all the information it needs Close...

Страница 56: ...the main menu launch the Connect two local networks wizard Follow the wizard s instructions and enter the required information Configure Dial Up Networking access on the dial in PC as described Next t...

Страница 57: ...plied via the network without the necessity of additional hardware at each individ ual workstation thus eliminating the costs of equipping the workstations with ISDN adapters or modems All you need do...

Страница 58: ...xes with LANCAPI 58 EN 7 1 Installation of the LANCOM CAPI fax modem Select the entry Install LANCOM software in the setup program of your LANCOM CD Highlight the option CAPI fax modem click Next and...

Страница 59: ...Phone and Modem Options of the control panel 7 2 Installation of the MS Windows fax service Select the option Printers and Faxes from the control panel Select the option Set up faxing from the window...

Страница 60: ...can send it directly from your respective application If you only want to send a short message select the MS Windows fax service You can use of course any other fax software alternatively 7 3 1 Send...

Страница 61: ...NCOM 7111 VPN LANCOM 8011 VPN Chapter 7 Sending faxes with LANCAPI 61 EN The fax client console will open Select the menu item Send a Fax A wiz ard will assist you through the remaining sending proces...

Страница 62: ...ccess This protection is already activated during the basic configuration by entering a password The device locks access to its configuration for a specified period of time after a certain number of f...

Страница 63: ...net works the MSN for remote configuration via ISDN parameters of configuration lock number of failed log in attempts and duration of the lock 8 2 The firewall wizard The LANCOM router incorporates an...

Страница 64: ...rved when the rule will apply to a data packet The wizard will inform you as soon as the entries are complete Complete the configuration with Finish 8 2 2 Configuration under WEBconfig Under WEBconfig...

Страница 65: ...with a password The field for pro tection of the SNMP configuration with a password is also contained in LANconfig in the Management configuration area on the Security tab Have you activated the Firew...

Страница 66: ...s The circle of authorized users can be expanded by inputting further entries The filter entries can describe both individual computers and whole networks The access list can be found in LANconfig in...

Страница 67: ...the physical con nection Has the correct transfer protocol been selected The transfer protocol is set along with the basic settings The basic setup wiz ard will enter the correct settings for numerou...

Страница 68: ...chronous connec tions Instructions on how to increase the Windows size can be found in the Knowl edge Base of the support section of the LANCOM web site www lancom de 9 3 Unwanted connections under Wi...

Страница 69: ...tics Cable test results The results of the cable test for the individual interfaces are show up in a list The following results can occur OK Cable plugged in correctly line ok open with distance 0m N...

Страница 70: ...ware upgrades VPN IPSec 100 IPSec sessions parallel 200 IPSec sessions parallel Can be upgraded to 500 or 1000 channels Encryption methods AES and 3 DES for LANCOM 8011 VPN with hardware accelera tion...

Страница 71: ...tensive Ethernet IP and DNS statistics SYSLOG error counter connecting and online time as well as transfer quantity per station accounting information exportable via LANmonitor and SYSLOG Diagnosis Ve...

Страница 72: ...ix 72 EN 10 2 Contact assignment 10 2 1 DSL interface 6 pin RJ45 socket 10 2 2 ISDN S0 interface 8 pin RJ45 socket corresponding to ISO 8877 EN 60603 7 Connector Pin IAE 1 T 2 T 3 R 4 5 6 R Connector...

Страница 73: ...7 EN 60603 7 10 2 4 Configuration interface Outband 8 pin mini DIN socket 10 3 CE declaration of conformity The CE declarations of conformity for LANCOM routers are available for down load on the LANC...

Страница 74: ...37 Connect charge protection 31 32 37 Connect charge budget 30 Connect charge metering 30 Contact assignment 72 Configuration interface 73 DSL interface 72 Ethernet interface 73 ISDN S0 interface 72...

Страница 75: ...er 47 53 Frame type 47 Internal Net Number 53 IPX conventions 47 IPX router 16 Settings 46 ISDN 14 Basic configuration 37 caller ID 44 51 Connect charge information 32 Connector cable 18 D channel 51...

Страница 76: ...ws workgroups 53 Security aspects 50 Server 16 setup 50 specify MSN 30 TCP IP 52 User name 51 Remote configuration 32 36 Remote configuration access 30 Remote configuration via ISDN 17 Reset connect c...

Страница 77: ...29 manual 28 29 TCP IP filter 12 16 66 TCP IP router Settings 45 Temperature 23 time 23 TOS 17 Traffic Shaping 17 Transfer protocol 67 U UDP 66 V Virtual Private Network VPN 14 15 Voltage switch 24 V...

Результаты поиска

Содержание 7111 VPN

Отзывы:

Похожие инструкции для 7111 VPN

Бренды по названию

Популярные бренды

Lancom 7111 VPN, Руководство пользователя

Результаты поиска

Содержание 7111 VPN

Отзывы:

Похожие инструкции для 7111 VPN

Бренды по названию

Популярные бренды