background image

LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN

 Chapter 3: Basic configuration

27

EN

Server: The LANCOM VPN Router operates as DHCP server in the net-
work; as a minimum its own IP address and the network mask must
be assigned.

Client: The LANCOM VPN Router obtains its address information from
another DHCP server; no address information is required.

IP address and network mask for the LANCOM VPN Router

Assign the LANCOM VPN Router a free IP address from your LAN's address
range and enter  the network mask.

Gateway address

Enter the gateway's IP address if you have selected 'Off' as the DHCP
mode of operation or if another network device is assuming the role of
gateway in the 'Server' mode of operation.

DNS server

Enter the  IP address of a DNS server to resolve domain names if you have
selected 'Off' as the DHCP mode of operation or if another network device
is assuming the role of DNS server in the 'Server' mode of operation.

3.1.2

Configuration protection

Using a password secures access to the LANCOM VPN Router's configuration
and thus prevents unauthorized modification. The device's configuration con-
tains a great deal of sensitive data such as data for Internet access and should
be protected by a password in all cases.

Multiple administrators can be set up in the configuration of the
LANCOM, each with differing access rights. Up to 16 different admin-
istrators can be set up for a LANCOM VPN Router. Further information
can be found in the LCOS reference manual under “Managing rights
for different administrators”.

3.1.3

Settings for the DSL connection

It may be necessary to enter the transmission protocol used for the DSL con-
nection. The wizard will enter the correct setting for the most important DSL
providers on its own.  Only when the wizard does not list your provider must
the transmission protocol used by your DSL provider be entered. 

The wizard will offer you a universal 'multimode' protocol that works with all
common types of DSL connection.

Содержание 821+

Страница 1: ...com eu Internet www lancom eu LANCOM 821 LANCOM 1711 VPN LANCOM 1721 VPN LANCOM 821 LANCOM 1711 VPN LANCOM 1721 VPN Handbuch Manual c o n n e c t i n g y o u r b u s i n e s s 110642_LC 821plus 1711pl...

Страница 2: ...LANCOM 821 LANCOM 1711 VPN LANCOM 1721 VPN...

Страница 3: ...t at the time of printing Trademarks Windows Windows Vista Windows XP and Microsoft are registered trademarks of Microsoft Corp The LANCOM Systems logo LCOS and the name LANCOM are registered trademar...

Страница 4: ...r with appropriate comments placed beside the text In the other parts of the documentation all described models have been clas sified under the general term LANCOM Router Security settings To maximize...

Страница 5: ...ons LANCAPI Further server services DHCP DNS charge management This documentation was created by several members of our staff from a variety of departments in order to ensure you the best possible sup...

Страница 6: ...OM support please see the enclosed leaf let or the LANCOM Systems website Information symbols Very important instructions Failure to observe this may result in damage Important instruction that should...

Страница 7: ...the software setup 24 2 5 2 Which software should I install 24 3 Basic configuration 25 3 1 What details are necessary 25 3 1 1 TCP IP settings 25 3 1 2 Configuration protection 27 3 1 3 Settings for...

Страница 8: ...TCP IP 51 6 1 3 Settings for IPX 52 6 1 4 Settings for NetBIOS routing 52 6 2 Settings for the dial in computer 53 6 2 1 Dial up via VPN 53 6 2 2 Dial up via ISDN 53 6 3 Instructions for LANconfig 53...

Страница 9: ...Unwanted connections under Windows XP 66 9 4 Cable testing 66 10 Appendix 68 10 1 Performance data and specifications 68 10 2 Contact assignment 69 10 2 1 WAN interface 69 10 2 2 ADSL interface 69 10...

Страница 10: ...st common tech nology for broadband Internet connections Standard and almost ubiquitous telephone lines analog or DSL are the basis for DSL data transfer to the near est telephone exchange From here t...

Страница 11: ...With the additional LANCOM VPN Option VPN support can be extended to 25 active tun nels incl activated hardware accelerator The following structure results when using the Internet instead of direct co...

Страница 12: ...one another as would be the case for conventional direct connections A single Internet access can be used to establish multiple simultaneous logical connections to a variety of remote stations The re...

Страница 13: ...ection for DSL or cable modem Integrated ADSL modem ADSL2 ready ISDN S0 bus in multi device mode or in point to point mode with auto matic D channel protocol identification Supports static and dynamic...

Страница 14: ...additionally terminal mode for Telnet or other terminal programs SNMP interface and TFTP server function Remote configuration via ISDN with ISDN PPP connections e g via Win dows network and dial up c...

Страница 15: ...g the installation In addition to the device itself the package should contain the following accessories If anything is missing please contact your retailer or the address stated on the delivery slip...

Страница 16: ...is switched on or off at regular intervals in the respective indicated colour Flashing means that the LED lights up very briefly in the respective col our and stay then clearly longer approximately 10...

Страница 17: ...t green The power LED flashes red green in alternation until a configuration password has been specified Without a configuration password the configuration data of the LANCOM is insecure Under normal...

Страница 18: ...f a time or connect charge limit has been reached you will be notified in LANmonitor To reset the connect charge protection select Reset Charge and Time Limits in the context menu right mouse click Yo...

Страница 19: ...Inverse flashing Opening an additional connection Green Permanently At least one logical connection is established Green Inverse flickering Data traffic send or receive off not connected green blinki...

Страница 20: ...3 2 Device connectors The connections and switches of the router are located on the back panel off No connection established green Blinking Dialling green Flashing Establishing first connection green...

Страница 21: ...connection Serial configuration port ISDN S0 port ADSL port Reset switch LANCOM 1711 VPN Voltage switch Connection for the included power adapter Switch with four 10 100Base Tx connections WAN port US...

Страница 22: ...is conse quently a risk that the configuration will be deleted by mistake of a co worker presses the reset button too long With the suitable setting the behavior of the reset button can be controlled...

Страница 23: ...r to an individual PC For that purpose plug the included network cable green plugs into the LAN connector of the device and the other end into a free network connecting socket of your local network in...

Страница 24: ...nal WAN line for remote maintenance backup con nections or dynamic VPN Connect to power Connect socket of the unit to a power supply using the included power adapter Use the supplied power supply unit...

Страница 25: ...selection menus will appear on screen 2 5 2 Which software should I install LANconfig is the Windows configuration program for all LANCOM routers and LANCOM access points WEBconfig can be used altern...

Страница 26: ...e computers in the LAN so that they can access the device without prob lem 3 1 What details are necessary The Basic Settings Wizard is used to set the LANCOM VPN Routers basic TCP IP parameters and to...

Страница 27: ...automatic TCP IP configuration is optional Instead of this you can select manual configuration Make this selection after considering the following Select automatic configuration if you are not famili...

Страница 28: ...DNS server in the Server mode of operation 3 1 2 Configuration protection Using a password secures access to the LANCOM VPN Router s configuration and thus prevents unauthorized modification The devic...

Страница 29: ...ction 3 1 5 Charge protection Charge protection prevents DSL connections being established above and beyond a predefined amount and therefore protects you from unexpectedly high connection charges If...

Страница 30: ...password for configuration access Note that the password is case sensitive and ensure that it is sufficiently long at least 6 characters In addition you may specify whether the device may only be conf...

Страница 31: ...sses share the assignment in the LAN of IP addresses to symbolic names Following power on unconfigured LANCOM devices first check whether a DHCP server is already active in the LAN Depending on the si...

Страница 32: ...accessed with address x x x 254 the x s stand for the first three blocks in the IP address of the configuration computer Network with DHCP server If a DHCP server for the assignment of IP addresses i...

Страница 33: ...dress assigned to the LANCOM by DHCP and access the device directly using this IP address Use the serial configuration interface to connect a computer running a terminal program to the device Login Wh...

Страница 34: ...ut ers within the local network DNS server translates network names www lancom de or names of computers www lancom de to actual IP addresses The LANCOM can perform the functions of both a default gate...

Страница 35: ...s it to the PCs in the LAN as the standard gateway In addition the DHCP server should also specify the LANCOM as a DNS server Manual IP address assignment If the IP addresses in the network are assign...

Страница 36: ...en connected to Does the Setup Wizard know your Internet provider The Wizard is preset with access data for the principal Internet providers in your country and offers you a selection list If you find...

Страница 37: ...t you can opt to keep flatrate connections permanently active keep alive In case a connection should fail it is re estab lished automatically Creating a backup connection to the Internet The most comm...

Страница 38: ...up a backup connection Select the corresponding WAN interface to be used for the backup connection and enter the relevant access data for the Internet connection The Wizard then sets up the alternati...

Страница 39: ...inish 4 2 The Firewall Wizard Your LANCOM features a stateful inspection firewall and firewall filter that provides effective protection from the Internet for your LAN The core concept of the stateful...

Страница 40: ...te to In the next step you define the source and destination sta tions that the rule applies to and the actions that are to be carried out by the rule on a data packet Finally the new rule is given a...

Страница 41: ...t the configuration information provided matches The following instructions will assume that LANCOM Router devices are being used on both sides A network interconnection may also be realized with rout...

Страница 42: ...en the entries 5 1 1 General information The following details are required for the installation of LAN to LAN couplings The first column indicates whether the information is required for network coup...

Страница 43: ...r its identification Enter the subscriber number of the remote station in the ISDN subscriber number field The complete subscriber number including all necessary area and country codes is required The...

Страница 44: ...ns 5 1 2 Settings for the TCP IP router In TCP IP networks addressing has a special significance Please note that two interconnected networks are logically separate from one another Each must therefor...

Страница 45: ...hidden behind the VPN gateway s IP address instead Therefore the stations within the remote LAN cannot access IP stations in the other LAN directly For example if a headquarters LAN in Extranet VPN mo...

Страница 46: ...type binding Specifying the IPX network number and binding used is not necessary if the remote network also contains a Novell server It is only necessary to enter the network number for the WAN manual...

Страница 47: ...iguration of both routers you can test the network connection Try to contact a computer in the remote LAN e g with a ping The LANCOM Router should automatically set up a connection to the remote stati...

Страница 48: ...is even possible to simultaneously couple multiple routers to a central network In LANconfig mark the routers at branch offices which are to be coupled to a central router via VPN Use drag drop by mo...

Страница 49: ...vice properties 5 4 Instructions for WEBconfig Under WEBconfig the coupling of networks via VPN cannot be con figured using the wizard It can only be set up in the expert configu ration For details pl...

Страница 50: ...er or an ISDN modem The data transfer protocol is PPP Therefore the support of all usual devices and operating systems is ensured A setup wizard handles the configuration of the dial in connection in...

Страница 51: ...hemselves with this information when dialling in Incoming number The LANCOM Router uses the optional ISDN caller ID as an additional user authentication This security function should not be used when...

Страница 52: ...e addresses from the address range of your local network are used In our example the IP address 10 0 1 101 will be assigned to the PC when con necting This IP address makes the computer a fully fledge...

Страница 53: ...fied network numbers must be distinct from one another and from all used internal IPX network numbers In addition it may be necessary to enter the frame type binding Specifying the IPX network number...

Страница 54: ...er 6 2 2 Dial up via ISDN A number of settings must be configured on the dial in computer These are briefly listed here based on a Windows computer Dial Up Networking or another PPP client must be cor...

Страница 55: ...Setup Wizard and exported to a file This file can then be imported as a profile by the LANCOM Advanced VPN Client All of the information about the LANCOM VPN Router s configuration is also included an...

Страница 56: ...LANCOM VPN Router the internal domain is used here or alternatively a a DynDNS name or IP address VPN IP networks All IP networks defined in the device as type Intranet Preshared key Randomly generat...

Страница 57: ...re supplied via the network without the necessity of additional hardware at each individ ual workstation thus eliminating the costs of equipping the workstations with ISDN adapters or modems All you n...

Страница 58: ...I Faxmodem Select the entry Install LANCOM software in the setup program of your LANCOM CD Highlight the option CAPI Faxmodem click Next and follow the instruc tions of the installation routine When t...

Страница 59: ...with the right mouse button on the fax icon and select Properties The LANCOM CAPI Faxmodem should now be entered into register devices 7 3 Sending a fax After installing all required components you ha...

Страница 60: ...ill guide you through the remaining sending process 7 3 2 Send a fax with the MS Windows fax service Open the window Printers and Faxes from the control panel Double click with the left mouse button t...

Страница 61: ...orized con figuration access endangers not only a single device but the entire network Your LANCOM has a password protection for the configuration access This protection is already activated during th...

Страница 62: ...tocols for the configuration access of local and remote net works parameters of configuration lock number of failed log in attempts and duration of the lock 8 2 The security checklist The following ch...

Страница 63: ...ity mechanisms incl IP masquerading port filters access lists are active only for data connections that are trans mitted via the IP router Direct data connections via the bridge are not protected by t...

Страница 64: ...ess is entered with its associated netmask the filter is activated and only the IP addresses contained in this entry are entitled to make use of internal functions Further entries can be used to exten...

Страница 65: ...l cause the configuration to be deleted The configuration is not written to the non volatile flash memory A loss of power because the device has been relocated will cause the entire confi guration to...

Страница 66: ...n Has the correct transfer protocol been selected The transfer protocol is set along with the basic settings The basic setup wiz ard will enter the correct settings for numerous DSL providers automati...

Страница 67: ...ow to increase the Windows size can be found in the Know ledge Base of the support section of the LANCOM web site www lancom de 9 3 Unwanted connections under Windows XP Windows XP computers attempt t...

Страница 68: ...statis tics Cable test results The results of the cable test for the individual interfaces are show up in a list The following results can occur OK Cable plugged in correctly line ok open with distanc...

Страница 69: ...nal power supply Permitted power supplies NEST 12V 1A DC S Hohlstkr 2 1 5 5mm RoHS LANCOM item no 110524 Type identification on the power supply Type 15 2230S Housing 210 x 143 x 45 mm W x H x D rugge...

Страница 70: ...10 Appendix 69 EN 10 2 Contact assignment 10 2 1 WAN interface Only LANCOM 1711 VPN 8 pin RJ45 socket 10 2 2 ADSL interface Only LANCOM 821 and LANCOM 1721 VPN 6 pin RJ11 socket Connector Pin IAE 1 T...

Страница 71: ...2 3 ISDN S0 interface 8 pin RJ45 socket corresponding to ISO 8877 EN 60603 7 10 2 4 Ethernet interface 10 100Base TX 8 pin RJ45 socket corresponding to ISO 8877 EN 60603 7 Connector Pin Line IAE 1 2 3...

Страница 72: ...declares that the devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995 5 EC directive The CE declarations of conf...

Страница 73: ...le 14 Configuration password 61 Configuration port 20 Configuration protection 13 27 28 Connect charge protection 29 Contact assignment 69 ADSL interface 69 Configutation interface 71 DSL interface 70...

Страница 74: ...Frame type 45 Internal Net Number 52 IPX conventions 45 IPX router 11 Settings 44 ISDN caller ID 42 50 51 Connector cable 14 D channel 51 MSN 28 password for connection 43 S0 port 20 ISDN connection B...

Страница 75: ...nction 9 Routing table 62 S Searching for Windows workgroups 45 Security Firewall wizard 61 Security settings wizard 60 Security checklist 61 Security settings 65 SNMP Configuration protection 62 Soft...

Страница 76: ...LANCOM 821 LANCOM 1711 VPN LANCOM 1721 VPN Index 75 EN W WAN Connector cable 14 WEBconfig 30 System requirements 15...

Отзывы: