Lancom Systems 8011 VPN, 7111 VPN Name of the remote station is needed for its identification

Page 44

EN

LANCOM 7111 VPN – LANCOM 8011 VPN

Chapter 5: Linking two networks

Coupling

Entry

Gateway 1

 

 

 

Gateway 2

VPN

Netmask of the remote network

255.255.255.0

 

 

 

255.255.255.0

 

 

 

 

 

 

 

VPN

Domain name of the remote network

'head'

 

 

 

'branch'

 

 

 

 

 

 

 

VPN

Hide local stations for access to remote net-

yes/no

 

 

 

yes/no

 

work (Extranet VPN)?

 

 

 

 

 

ISDN

TCP/IP routing for access to remote network

yes/no

 

 

 

yes/no

 

 

 

 

 

 

 

ISDN

IPX routing for access to remote network

yes/no

 

 

 

yes/no

 

 

 

 

 

 

 

VPN + ISDN

NetBIOS routing for access to remote net-

yes/no

 

 

 

yes/no

 

work?

 

 

 

 

 

 

 

 

 

 

 

 

VPN + ISDN

Name of remote workgroup (NetBIOS only)

'workgroup1'

 

 

 

'workgroup2'

 

 

 

 

 

 

 

ISDN

Data compression

on/off

 

 

 

on/off

 

 

 

 

 

 

 

 

 

 

ISDN

Channel bundling

on/off

 

 

 

on/off

 

 

 

 

 

 

 

 

 

 

In case your device has an ISDN connection, the wizard asks whether the remote site has ISDN as well.

The type of IP address must be stated for both sides for VPN connections via the Internet. There are two types of IP addresses: static and dynamic. An explanation of the two IP address types can be found in the reference manual.

Thanks to Dynamic VPN, connections can be enabled not only between gateways with fixed, static IP addresses, but even between gate- ways with dynamic IP addresses. The active initiation of VPN connec- tions towards remote sites with dynamic IP addresses requires ISDN.

If you haven't already named your LANCOM router, the wizard will ask you for a new, unique device name. With this entry, you will rename your LANCOM router. Be sure to give the two devices different names.

The name of the remote station is needed for its identification.

Enter the subscriber number of the remote station in the ISDN subscriber number field. The complete subscriber number including all necessary area and country codes is required.

The stated ISDN caller ID is used to identify and authenticate callers. When a LANCOM router receives a call, it compares the ISDN caller ID entered for the remote station with the actual caller ID transferred via the D channel. An ISDN caller ID generally consists of an area code and an MSN.

44

Image 44
Contents Lancom 7111 VPN Lancom 8011 VPN Lancom Systems GmbH, Wuerselen Germany. All rights reserved Security settings PrefaceModel variants This documentation was compiled … Info@lancom.deContents Sending faxes with Lancapi Providing dial-up accessLinking two networks Troubleshooting AppendixIntroduction Which use does VPN offer?Conventional network infrastructure IsdnNetworking via the Internet Firewall What does a router do? Denial-of-Service ProtectionQuality-of-Service / Traffic management Internet access for a LAN e.g. via DSL or Isdn Bridgehead to the WANAreas of deployment for routers LAN to LAN coupling via VPN or IsdnConventional via Isdn Remote access to the company network via VPN or IsdnWhat can your Lancom router do? Lancom Quality of Service System preconditions InstallationPackage contents Access to the LAN via the TCP/IP protocol Introducing Lancom routerStatus displays Front sideLED remains lit green Online LED indicates the overall status of all WAN portsFlashing Power LED but no connection? LancomConnection status of Isdn S0 connection Connection status of the WAN connectionData traffic via the WAN connection LCD display Connection status of the serial configuration port7111 VPN, for both Isdn B channels with Lancom 8011 VPN Hardware installation Back of the unitInstallation Software installation Starting Lancom setupWhich software should you install? Which information is necessary? Basic configuration1 TCP/IP settings New LAN-fully automatic configuration possible Configure manually nevertheless?Information required for manual TCP/IP configuration IP address and netmask for the Lancom routerConfiguration protection Settings for the DSL connectionSettings for the Isdn connection Enable Dhcp server?Instructions for LANconfig Start up LANconfig by clicking Start Programs LancomLANconfig Connect charge protectionComplete the configuration with Finish Instructions for WEBconfig Network without Dhcp serverOr with a name as discribed above Starting the wizards in WEBconfigNetwork with Dhcp server WEBconfig main menu will be displayed Entering the password in the web browser TCP/IP settings to workstation PCs IP address assignment via the Lancom router defaultIP address assignment via a separate Dhcp server Manual IP address assignmentSetting up Internet access Does the setup wizard know your Internet provider?User name and password Additional information for unknown Internet providersDynamic channel bundling Isdn only Isdn dial-in number User name and passwordAdditional connection options LANconfig Quick access to the setup wizards Complete the configuration with ApplySecurity aspects Always configure both sidesLinking two networks What information is necessary? General informationName of the remote station is needed for its identification Settings for the TCP/IP router Extranet VPN Settings for the IPX routerDNS access to the remote LAN Settings for NetBIOS routing Perform the configuration on both routers, one at a time Ping quick testing for TCP/IP connections Providing dial-up access Which information is required?Isdn calling line identity CLI Coupling EntrySettings for TCP/IP Settings for IPXWAN Dial-up via Isdn Settings for the dial-in computerDial-up via VPN Instructions for LANconfig Providing dial- up access Sending faxes with Lancapi Installation of the Lancom Capi fax modem Installation of the MS Windows fax service Select the option Printers and Faxes from the control panelSend a fax with any given office application Send a fax with the MS Windows fax serviceSending a fax Sending faxes with Lancapi Wizard for LANconfig Security settingsSecurity settings wizard Wizard for WEBconfig Firewall wizardRules Security checklistConfiguration under WEBconfig Have you assigned a password for the configuration? Have you permitted remote configuration?Have you activated the Firewall? Do you make use of a ’Deny All’ Firewall strategy?Have you closed critical ports with filters? Troubleshooting Problems with the cabling?No WAN connection is established DSL data transfer is slowCable testing Unwanted connections under Windows XPIncreasing the TCP/IP window size under Windows LAN statisticsTroubleshooting Performance data and specifications AppendixRights for up to 16 administrators Contact assignment DSL interfaceISDN-S0interface Pin RJ45 socketConfiguration interface Outband CE declaration of conformityEthernet interfaces 10/100Base-T Pin mini-DIN socketNumerics Installation IPX conventions IPX router SettingsConnector cable Channel Data compression Dial-innumber Connector cable LAN to LAN coupling 14, 15, 30NetBIOS NetBIOS proxy Netmask Network segment Package contents Packet size adaption PasswordNetBIOS Security aspects Server Setup Specify MSNCheck connection Settings 28 , 32Temperature Time WEBconfig