Lancom Systems 7111 VPN, 8011 VPN manual Networking via the Internet

Page 11

LANCOM 7111 VPN – LANCOM 8011 VPN

Chapter 1: Introduction

to the original investment costs, ongoing costs are also incurred for the administration and maintenance of this equipment.

Networking via the Internet

The following structure results when using the Internet instead of direct con- nections :

 

EN

 

LAN

Head Office

 

LAN

Internet

 

 

Workstation in remote

Subsidiary

access

 

All participants have fixed or dial-up connections to the Internet. Expensive dedicated lines are no longer needed.

All that is required is the Internet connection of the LAN in the headquar- ters. Special switching devices or routers for dedicated lines to individual participants are superfluous.

The subsidiary also has its own connection to the Internet.

The RAS PCs connect to the headquarters LAN via the Internet.

The Internet is available virtually everywhere and typically has low access costs. Significant savings can thus be achieved in relation to switched or ded- icated connections, especially over long distances.

The physical connection no longer exists directly between two participants; instead, the participants rely on their connection to the Internet. The access technology used is not relevant in this case: ideally is the use of broadband

11

Image 11
Contents Lancom 7111 VPN Lancom 8011 VPN Lancom Systems GmbH, Wuerselen Germany. All rights reserved Preface Security settingsModel variants Info@lancom.de This documentation was compiled …Contents Sending faxes with Lancapi Providing dial-up accessLinking two networks Appendix TroubleshootingWhich use does VPN offer? IntroductionIsdn Conventional network infrastructureNetworking via the Internet Firewall What does a router do? Denial-of-Service ProtectionQuality-of-Service / Traffic management LAN to LAN coupling via VPN or Isdn Internet access for a LAN e.g. via DSL or IsdnBridgehead to the WAN Areas of deployment for routersConventional via Isdn Remote access to the company network via VPN or IsdnWhat can your Lancom router do? Lancom Quality of Service System preconditions InstallationPackage contents Front side Access to the LAN via the TCP/IP protocolIntroducing Lancom router Status displaysOnline LED indicates the overall status of all WAN ports LED remains lit greenLancom Flashing Power LED but no connection?Connection status of Isdn S0 connection Connection status of the WAN connectionData traffic via the WAN connection LCD display Connection status of the serial configuration port7111 VPN, for both Isdn B channels with Lancom 8011 VPN Back of the unit Hardware installationInstallation Starting Lancom setup Software installationWhich software should you install? Which information is necessary? Basic configuration1 TCP/IP settings IP address and netmask for the Lancom router New LAN-fully automatic configuration possibleConfigure manually nevertheless? Information required for manual TCP/IP configurationEnable Dhcp server? Configuration protectionSettings for the DSL connection Settings for the Isdn connectionConnect charge protection Instructions for LANconfigStart up LANconfig by clicking Start Programs Lancom LANconfigComplete the configuration with Finish Network without Dhcp server Instructions for WEBconfigOr with a name as discribed above Starting the wizards in WEBconfigNetwork with Dhcp server WEBconfig main menu will be displayed Entering the password in the web browser IP address assignment via the Lancom router default TCP/IP settings to workstation PCsManual IP address assignment IP address assignment via a separate Dhcp serverAdditional information for unknown Internet providers Setting up Internet accessDoes the setup wizard know your Internet provider? User name and passwordDynamic channel bundling Isdn only Isdn dial-in number User name and passwordAdditional connection options Complete the configuration with Apply LANconfig Quick access to the setup wizardsSecurity aspects Always configure both sidesLinking two networks General information What information is necessary?Name of the remote station is needed for its identification Settings for the TCP/IP router Extranet VPN Settings for the IPX routerDNS access to the remote LAN Settings for NetBIOS routing Perform the configuration on both routers, one at a time Ping quick testing for TCP/IP connections Which information is required? Providing dial-up accessCoupling Entry Isdn calling line identity CLISettings for IPX Settings for TCP/IPWAN Dial-up via Isdn Settings for the dial-in computerDial-up via VPN Instructions for LANconfig Providing dial- up access Sending faxes with Lancapi Installation of the Lancom Capi fax modem Select the option Printers and Faxes from the control panel Installation of the MS Windows fax serviceSend a fax with any given office application Send a fax with the MS Windows fax serviceSending a fax Sending faxes with Lancapi Wizard for LANconfig Security settingsSecurity settings wizard Firewall wizard Wizard for WEBconfigRules Security checklistConfiguration under WEBconfig Do you make use of a ’Deny All’ Firewall strategy? Have you assigned a password for the configuration?Have you permitted remote configuration? Have you activated the Firewall?Have you closed critical ports with filters? DSL data transfer is slow TroubleshootingProblems with the cabling? No WAN connection is establishedLAN statistics Cable testingUnwanted connections under Windows XP Increasing the TCP/IP window size under WindowsTroubleshooting Appendix Performance data and specificationsRights for up to 16 administrators Pin RJ45 socket Contact assignmentDSL interface ISDN-S0interfacePin mini-DIN socket Configuration interface OutbandCE declaration of conformity Ethernet interfaces 10/100Base-TNumerics Connector cable LAN to LAN coupling 14, 15, 30 InstallationIPX conventions IPX router Settings Connector cable Channel Data compression Dial-innumberSecurity aspects Server Setup Specify MSN NetBIOS NetBIOS proxy Netmask Network segmentPackage contents Packet size adaption Password NetBIOSCheck connection Settings 28 , 32Temperature Time WEBconfig