Lancom Systems 7111 VPN, 8011 VPN manual Isdn calling line identity CLI, Coupling Entry

Page 51

LANCOM 7111 VPN – LANCOM 8011 VPN

Chapter 6: Providing dial- up access

6.1.1General information

The following entries are required to set up a RAS connection. The first column indicates whether the information is required for a VPN and/or an ISDN con- nection. .

	Coupling	Entry
	VPN + ISDN	User name
	VPN + ISDN	User name		EN

	VPN + ISDN	Password



	VPN	Shared secret for encryption

	VPN	Hide local stations for access to remote network (Extranet VPN)?

	ISDN	Incoming number of remote station

	ISDN	TCP/IP routing for access to remote network

	ISDN	IPX routing for access to remote network

	VPN + ISDN	IP addresses for the dial-up PCs: static or dynamic by address range (IP
		address pool)

	VPN + ISDN	NetBIOS routing for access to remote network?

	VPN + ISDN	Name of remote workgroup (NetBIOS only)

Notes to the individual values:

User name and password: Users authenticate themselves with this information when dialling in.

Incoming number: The LANCOM router uses the optional ISDN caller ID as an additional user authentication. This security function should not be used when users dial in from differing locations.

Please refer to chapter ’Linking two networks’ →page 42 for advice about the other values required for the installation of a RAS access.

The ISDN calling line identity (CLI)

The ISDN caller ID—also known as CLI (Calling Line Identity)—this is the telephone number of the caller which is transmitted to the participant receiving the call. As a rule, it consists of the country and area codes and an MSN.

The CLI is well-suited for authentication purposes for two reasons: it is very difficult to manip- ulate, and the number is transferred free of charge via the ISDN control channel (D-channel).

51

Image 51

Contents Lancom 7111 VPN Lancom 8011 VPN Lancom Systems GmbH, Wuerselen Germany. All rights reserved Preface Security settingsModel variants Info@lancom.de This documentation was compiled …Contents Providing dial-up access Linking two networksSending faxes with Lancapi Appendix TroubleshootingWhich use does VPN offer? IntroductionIsdn Conventional network infrastructureNetworking via the Internet Firewall Denial-of-Service Protection Quality-of-Service / Traffic managementWhat does a router do? LAN to LAN coupling via VPN or Isdn Internet access for a LAN e.g. via DSL or IsdnBridgehead to the WAN Areas of deployment for routersRemote access to the company network via VPN or Isdn What can your Lancom router do?Conventional via Isdn Lancom Quality of Service Installation Package contentsSystem preconditions Front side Access to the LAN via the TCP/IP protocolIntroducing Lancom router Status displaysOnline LED indicates the overall status of all WAN ports LED remains lit greenLancom Flashing Power LED but no connection?Connection status of the WAN connection Data traffic via the WAN connectionConnection status of Isdn S0 connection Connection status of the serial configuration port 7111 VPN, for both Isdn B channels with Lancom 8011 VPNLCD display Back of the unit Hardware installationInstallation Starting Lancom setup Software installationWhich software should you install? Basic configuration 1 TCP/IP settingsWhich information is necessary? IP address and netmask for the Lancom router New LAN-fully automatic configuration possibleConfigure manually nevertheless? Information required for manual TCP/IP configurationEnable Dhcp server? Configuration protectionSettings for the DSL connection Settings for the Isdn connectionConnect charge protection Instructions for LANconfigStart up LANconfig by clicking Start Programs Lancom LANconfigComplete the configuration with Finish Network without Dhcp server Instructions for WEBconfigStarting the wizards in WEBconfig Network with Dhcp serverOr with a name as discribed above WEBconfig main menu will be displayed Entering the password in the web browser IP address assignment via the Lancom router default TCP/IP settings to workstation PCsManual IP address assignment IP address assignment via a separate Dhcp serverAdditional information for unknown Internet providers Setting up Internet accessDoes the setup wizard know your Internet provider? User name and passwordIsdn dial-in number User name and password Additional connection optionsDynamic channel bundling Isdn only Complete the configuration with Apply LANconfig Quick access to the setup wizardsAlways configure both sides Linking two networksSecurity aspects General information What information is necessary?Name of the remote station is needed for its identification Settings for the TCP/IP router Settings for the IPX router DNS access to the remote LANExtranet VPN Settings for NetBIOS routing Perform the configuration on both routers, one at a time Ping quick testing for TCP/IP connections Which information is required? Providing dial-up accessCoupling Entry Isdn calling line identity CLISettings for IPX Settings for TCP/IPWAN Settings for the dial-in computer Dial-up via VPNDial-up via Isdn Instructions for LANconfig Providing dial- up access Sending faxes with Lancapi Installation of the Lancom Capi fax modem Select the option Printers and Faxes from the control panel Installation of the MS Windows fax serviceSend a fax with the MS Windows fax service Sending a faxSend a fax with any given office application Sending faxes with Lancapi Security settings Security settings wizardWizard for LANconfig Firewall wizard Wizard for WEBconfigSecurity checklist Configuration under WEBconfigRules Do you make use of a ’Deny All’ Firewall strategy? Have you assigned a password for the configuration?Have you permitted remote configuration? Have you activated the Firewall?Have you closed critical ports with filters? DSL data transfer is slow TroubleshootingProblems with the cabling? No WAN connection is establishedLAN statistics Cable testingUnwanted connections under Windows XP Increasing the TCP/IP window size under WindowsTroubleshooting Appendix Performance data and specificationsRights for up to 16 administrators Pin RJ45 socket Contact assignmentDSL interface ISDN-S0interfacePin mini-DIN socket Configuration interface OutbandCE declaration of conformity Ethernet interfaces 10/100Base-TNumerics Connector cable LAN to LAN coupling 14, 15, 30 InstallationIPX conventions IPX router Settings Connector cable Channel Data compression Dial-innumberSecurity aspects Server Setup Specify MSN NetBIOS NetBIOS proxy Netmask Network segmentPackage contents Packet size adaption Password NetBIOSSettings 28 , 32 Temperature Time WEBconfigCheck connection