Lancom Systems 7111 VPN, 8011 VPN manual Rights for up to 16 administrators

Page 71

 

 

LANCOM 7111 VPN – LANCOM 8011 VPN

 

 

 

Chapter 10: Appendix

 

 

 

 

LANCOM 7111 VPN

LANCOM 8011 VPN

Interfaces

WAN: 10/100 Mbps Fast Ethernet

 

 

LAN/DMZ/Switch: 4 ports, 10/100 Mbps Fast Ethernet

 

ISDN (RJ-45): ISDN S0 Bus

 

 

Serial config (8 pol. Mini DIN) COM port: 9600-11500 baud

 

 

 

Management

Outband

command line interface, serial V.24/V.28 port (8 pol. mini-DIN)

 

Inband

LANconfig (Windows configuration program), incl. setup wizard; LAN-

 

 

monitor (Windows status monitor); WEBconfig (integrated Web Server);

 

 

telnet; SNMP management via SNMP V2; remote maintenance via ISDN

 

 

or Dynamic DNS; RADIUS user management for dial in (PPP/PPTP and

 

 

ISDN CLIP); remote maintenance via ISDN; configuration via telnet/SSL,

 

 

SSH, browser (HTTP/HTTPS); VPN tunnel; WAN or LAN access separately

 

 

activatable; simultaneous remote configuration and management of

 

 

several devices with LANconfig/LAN monitor, supervisor alarm via SNMP

 

 

traps, SYSLOG and email; scheduled events of all parameters and actions

 

 

(e.g. firewall filter or connections) via CRON service. Individual access

 

 

rights for up to 16 administrators.

 

Tools

LANconfig (Windows program ), LANmonitor (Windows status display),

 

 

WEBconfig (integrated Web-server)

Statistics

Very extensive Ethernet, IP and DNS statistics; SYSLOG error counter, connecting and

 

online time as well as transfer quantity per station; accounting information exportable

 

via LANmonitor and SYSLOG

 

 

 

Diagnosis

Very extensive LOG and TRACE mechanism, integrated PING and TRACEROUTE. Log-

 

ging buffer for SYSLOG and firewall events device-integrated.

Hardware

Design without rotating ports and with high MTBF, internal power supply (110-230 V)

 

temperature 5–40 °C; humidity 0–80 %; non-condensing. Robust metal case, 19”

 

1HE (435 x 45 x 207 mm), connectors on the front, 19” rack mount bit

 

 

Approvals

EU (CE certification: EN 55022, EN 55024, EN 60950)

 

 

Package contents

CD incl. firmware and tools ( LANconfig, LANmonitor, LANCAPI), printed manual (Eng-

 

lish, German), power adapter, cable for outband interface, ISDN connection cable, 2

 

Ethernet cable (WAN, LAN)

 

 

 

 

Service

Warranty: 3 years

 

 

Support: Via hotline and Internet

 

 

 

 

Options

61401 Service option (advanced replace-

61401 Service option (advanced replace-

 

ment, 4 years warranty)*

ment, 4 years warranty)*

 

110288 LANCOM Modem Adapter Kit for

61402 LANCOM VPN option 500 chan-

 

connecting modems (analogue or GSM)

nels

 

to the serial configuration interface

61403 LANCOM VPN option 1000 chan-

 

 

 

nels

 

 

 

110288 LANCOM Modem Adapter Kit for

 

 

 

connecting modems (analogue or GSM)

 

 

 

to the serial configuration interface

 

 

 

 

EN

71

Image 71
Contents Lancom 7111 VPN Lancom 8011 VPN Lancom Systems GmbH, Wuerselen Germany. All rights reserved Preface Security settingsModel variants Info@lancom.de This documentation was compiled …Contents Sending faxes with Lancapi Providing dial-up accessLinking two networks Appendix TroubleshootingWhich use does VPN offer? IntroductionIsdn Conventional network infrastructureNetworking via the Internet Firewall What does a router do? Denial-of-Service ProtectionQuality-of-Service / Traffic management LAN to LAN coupling via VPN or Isdn Internet access for a LAN e.g. via DSL or IsdnBridgehead to the WAN Areas of deployment for routersConventional via Isdn Remote access to the company network via VPN or IsdnWhat can your Lancom router do? Lancom Quality of Service System preconditions InstallationPackage contents Front side Access to the LAN via the TCP/IP protocolIntroducing Lancom router Status displaysOnline LED indicates the overall status of all WAN ports LED remains lit greenLancom Flashing Power LED but no connection?Connection status of Isdn S0 connection Connection status of the WAN connectionData traffic via the WAN connection LCD display Connection status of the serial configuration port7111 VPN, for both Isdn B channels with Lancom 8011 VPN Back of the unit Hardware installationInstallation Starting Lancom setup Software installationWhich software should you install? Which information is necessary? Basic configuration1 TCP/IP settings IP address and netmask for the Lancom router New LAN-fully automatic configuration possibleConfigure manually nevertheless? Information required for manual TCP/IP configurationEnable Dhcp server? Configuration protectionSettings for the DSL connection Settings for the Isdn connectionConnect charge protection Instructions for LANconfigStart up LANconfig by clicking Start Programs Lancom LANconfigComplete the configuration with Finish Network without Dhcp server Instructions for WEBconfigOr with a name as discribed above Starting the wizards in WEBconfigNetwork with Dhcp server WEBconfig main menu will be displayed Entering the password in the web browser IP address assignment via the Lancom router default TCP/IP settings to workstation PCsManual IP address assignment IP address assignment via a separate Dhcp serverAdditional information for unknown Internet providers Setting up Internet accessDoes the setup wizard know your Internet provider? User name and passwordDynamic channel bundling Isdn only Isdn dial-in number User name and passwordAdditional connection options Complete the configuration with Apply LANconfig Quick access to the setup wizardsSecurity aspects Always configure both sidesLinking two networks General information What information is necessary?Name of the remote station is needed for its identification Settings for the TCP/IP router Extranet VPN Settings for the IPX routerDNS access to the remote LAN Settings for NetBIOS routing Perform the configuration on both routers, one at a time Ping quick testing for TCP/IP connections Which information is required? Providing dial-up accessCoupling Entry Isdn calling line identity CLISettings for IPX Settings for TCP/IPWAN Dial-up via Isdn Settings for the dial-in computerDial-up via VPN Instructions for LANconfig Providing dial- up access Sending faxes with Lancapi Installation of the Lancom Capi fax modem Select the option Printers and Faxes from the control panel Installation of the MS Windows fax serviceSend a fax with any given office application Send a fax with the MS Windows fax serviceSending a fax Sending faxes with Lancapi Wizard for LANconfig Security settingsSecurity settings wizard Firewall wizard Wizard for WEBconfigRules Security checklistConfiguration under WEBconfig Do you make use of a ’Deny All’ Firewall strategy? Have you assigned a password for the configuration?Have you permitted remote configuration? Have you activated the Firewall?Have you closed critical ports with filters? DSL data transfer is slow TroubleshootingProblems with the cabling? No WAN connection is establishedLAN statistics Cable testingUnwanted connections under Windows XP Increasing the TCP/IP window size under WindowsTroubleshooting Appendix Performance data and specificationsRights for up to 16 administrators Pin RJ45 socket Contact assignmentDSL interface ISDN-S0interfacePin mini-DIN socket Configuration interface OutbandCE declaration of conformity Ethernet interfaces 10/100Base-TNumerics Connector cable LAN to LAN coupling 14, 15, 30 InstallationIPX conventions IPX router Settings Connector cable Channel Data compression Dial-innumberSecurity aspects Server Setup Specify MSN NetBIOS NetBIOS proxy Netmask Network segmentPackage contents Packet size adaption Password NetBIOSCheck connection Settings 28 , 32Temperature Time WEBconfig