Lancom Systems 8011 VPN, 7111 VPN manual Configuration protection, Settings for the DSL connection

Page 30

EN

LANCOM 7111 VPN – LANCOM 8011 VPN

Chapter 3: Basic configuration

Enable DHCP server?

Disable the DHCP server function in the LANCOM router if you would like to have a different DHCP server assign the IP addresses in your LAN.

3.1.2Configuration protection

The password for configuration access to the LANCOM router protects the configuration against unauthorized access. The configuration of the router contains a considerable amount of sensitive information such as your Internet access information. We therefore strongly recommend protecting it with a password.

The setup wizard for the basic configuration automatically disables remote configuration access via ISDN, thus protecting your configuration against tampering. ISDN remote configuration access can be enabled at any time

using the security wizard (see ’Have you permitted remote configuration?’ page 69).

3.1.3Settings for the DSL connection

For the WAN connection it may be necessary to enter the transfer protocol being used. The wizard will e.g. automatically enter the correct settings for major DSL providers. You only need to enter the protocol used by your access provider if the wizard does not list your provider.

3.1.4Settings for the ISDN connection

Set up the basic configuration of your ISDN connection if required. You will need the following data:

One or more ISDN MSNs on which the router will accept calls. MSNs are ISDN subscriber numbers that are assigned to you by your telephone pro- vider. They are normally entered without an area code. These numbers are only relevant for the router functions (LAN to LAN coupling, RAS), not for remote configuration and LANCOM VPN Option.

A dialing prefix for access to the public telephone network. This is nor- mally required only when using an ISDN PBX. '0' is the usual prefix. It is used for all outgoing calls.

Finally, you should know whether your telephone provider transmits an ISDN connect-charge pulse. This signal can be used by the LANCOM router for connect-charge budgets and the accounting function.

30

Image 30
Contents Lancom 7111 VPN Lancom 8011 VPN Lancom Systems GmbH, Wuerselen Germany. All rights reserved Security settings PrefaceModel variants This documentation was compiled … Info@lancom.deContents Providing dial-up access Linking two networksSending faxes with Lancapi Troubleshooting AppendixIntroduction Which use does VPN offer?Conventional network infrastructure IsdnNetworking via the Internet Firewall Denial-of-Service Protection Quality-of-Service / Traffic managementWhat does a router do? Areas of deployment for routers Internet access for a LAN e.g. via DSL or IsdnBridgehead to the WAN LAN to LAN coupling via VPN or IsdnRemote access to the company network via VPN or Isdn What can your Lancom router do?Conventional via Isdn Lancom Quality of Service Installation Package contentsSystem preconditions Status displays Access to the LAN via the TCP/IP protocolIntroducing Lancom router Front sideLED remains lit green Online LED indicates the overall status of all WAN portsFlashing Power LED but no connection? LancomConnection status of the WAN connection Data traffic via the WAN connectionConnection status of Isdn S0 connection Connection status of the serial configuration port 7111 VPN, for both Isdn B channels with Lancom 8011 VPNLCD display Hardware installation Back of the unitInstallation Software installation Starting Lancom setupWhich software should you install? Basic configuration 1 TCP/IP settingsWhich information is necessary? Information required for manual TCP/IP configuration New LAN-fully automatic configuration possibleConfigure manually nevertheless? IP address and netmask for the Lancom routerSettings for the Isdn connection Configuration protectionSettings for the DSL connection Enable Dhcp server?LANconfig Instructions for LANconfigStart up LANconfig by clicking Start Programs Lancom Connect charge protectionComplete the configuration with Finish Instructions for WEBconfig Network without Dhcp serverStarting the wizards in WEBconfig Network with Dhcp serverOr with a name as discribed above WEBconfig main menu will be displayed Entering the password in the web browser TCP/IP settings to workstation PCs IP address assignment via the Lancom router defaultIP address assignment via a separate Dhcp server Manual IP address assignmentUser name and password Setting up Internet accessDoes the setup wizard know your Internet provider? Additional information for unknown Internet providersIsdn dial-in number User name and password Additional connection optionsDynamic channel bundling Isdn only LANconfig Quick access to the setup wizards Complete the configuration with ApplyAlways configure both sides Linking two networksSecurity aspects What information is necessary? General informationName of the remote station is needed for its identification Settings for the TCP/IP router Settings for the IPX router DNS access to the remote LANExtranet VPN Settings for NetBIOS routing Perform the configuration on both routers, one at a time Ping quick testing for TCP/IP connections Providing dial-up access Which information is required?Isdn calling line identity CLI Coupling EntrySettings for TCP/IP Settings for IPXWAN Settings for the dial-in computer Dial-up via VPNDial-up via Isdn Instructions for LANconfig Providing dial- up access Sending faxes with Lancapi Installation of the Lancom Capi fax modem Installation of the MS Windows fax service Select the option Printers and Faxes from the control panelSend a fax with the MS Windows fax service Sending a faxSend a fax with any given office application Sending faxes with Lancapi Security settings Security settings wizardWizard for LANconfig Wizard for WEBconfig Firewall wizardSecurity checklist Configuration under WEBconfigRules Have you activated the Firewall? Have you assigned a password for the configuration?Have you permitted remote configuration? Do you make use of a ’Deny All’ Firewall strategy?Have you closed critical ports with filters? No WAN connection is established TroubleshootingProblems with the cabling? DSL data transfer is slowIncreasing the TCP/IP window size under Windows Cable testingUnwanted connections under Windows XP LAN statisticsTroubleshooting Performance data and specifications AppendixRights for up to 16 administrators ISDN-S0interface Contact assignmentDSL interface Pin RJ45 socketEthernet interfaces 10/100Base-T Configuration interface OutbandCE declaration of conformity Pin mini-DIN socketNumerics Connector cable Channel Data compression Dial-innumber InstallationIPX conventions IPX router Settings Connector cable LAN to LAN coupling 14, 15, 30NetBIOS NetBIOS NetBIOS proxy Netmask Network segmentPackage contents Packet size adaption Password Security aspects Server Setup Specify MSNSettings 28 , 32 Temperature Time WEBconfigCheck connection