Lancom Systems 821, 1711, 1621 manual Have you assigned a password for the configuration?

Page 69

LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN

Chapter 8: Security settings

Have you assigned a password for the configuration?

The simplest option for the protection of the configuration is the estab- lishment of a password. As long as a password hasn't been set, anyone can change the configuration of the device. The field for entering the password is contained in LANconfig in the 'Management' configuration area on the 'Security' tab. It is particularly required to assign a password to the configuration if you want to allow remote configuration.

Have you permitted remote configuration?

If you do not require remote configuration, then deactivate it. If you require remote configuration, then be sure to assign a password protec- tion for the configuration (see previous section). The field for deactivating the remote configuration is also contained in LANconfig in the 'Manage- ment' configuration area on the 'Security' tab. Select here under 'Access rights - of remote networks' for all types of configuration the option 'not allowed'.

Have you provided the SNMP configuration with a password?

Also protect the SNMP configuration with a password. The field for pro- tection of the SNMP configuration with a password is also contained in LANconfig in the 'Management' configuration area on the 'Security' tab.

Have you activated the Firewall?

The Stateful Inspection Firewall of the LANCOM ensures that your local network cannot be attacked from the outside . The Firewall can be ena- bled in LANconfig under ’Firewall/QoS’ on the register card ’General’.

Do you make use of a ’Deny All’ Firewall strategy?

For maximum security and control you prevent at first any data transfer through the Firewall. Only those connections, which are explicitly desired have to allowed by the a dedicated Firewall rule then. Thus ’Trojans’ and certain Email viruses loose their communication way back. The Firewall rules are summarized in LANconfig under ’Firewall/Qos’ on the register card ’Rules’.

Have you activated the IP masquerading?

IP masquerading is the hiding place for all local computers for connection to the Internet. Only the router module of the unit and its IP address are visible on the Internet. The IP address can be fixed or assigned dynami- cally by the provider. The computers in the LAN then use the router as a gateway so that they themselves cannot be detected. The router separates Internet and intranet, as if by a wall. The use of IP masquerading is set

EN

69

Image 69
Contents Lancom 821 ADSL/ISDN Lancom 1621 ADSL/ISDN Lancom 1711 VPN Lancom Systems GmbH, Wuerselen Germany. All rights reserved Security settings PrefaceThank you for placing your trust in this Lancom product Model variants Preface Contents Installation of the MS Windows fax service Sending a fax Providing dial-up accessLinking two networks Sending faxes with LancapiSecurity checklist TroubleshootingAppendix Introduction Access to a complete local network LANHow does Adsl work? AddressesIdeal for Internet surfers All services via a single cable-thanks to the splitterCode ADSL-over-ISDN or ADSL-over-POTS?Which use does VPN offer? Conventional network infrastructure Networking via the Internet Firewall Denial-of-Service Protection Quality-of-Service / Traffic managementWhat does a router do? Areas of deployment for routers Bridgehead to the WANAt least one for WAN connections LAN to LAN coupling via VPN or IsdnRemote access to the company network via VPN or Isdn What can your Lancom do?Conventional via Isdn WAN connection Configuration Installation Package contentsSystem preconditions Introducing Lancom Status displaysFront side Top panel Meanings of the LEDsLED remains lit green Online LED indicates the overall status of all WAN ports Flashing Power LED but no connection?Connection status of the WAN connection Connection status of the Adsl linkData traffic via the Adsl link Data traffic via the DSL connectionSeparate status display for both Isdn B channels Status of the four LAN ports in the integrated switchBack of the unit Hardware installation Using the included power adapter Adsl connector cable transparent plugsStarting Lancom setup Software installationWhich software should you install? Basic configuration 1 TCP/IP settingsWhich information is necessary? Configure manually nevertheless? New LAN-fully automatic configuration possibleInformation required for manual TCP/IP configuration IP address and netmask for the LancomSettings for the DSL connection Configuration protectionSettings for the Isdn connection Enable Dhcp server?Start up LANconfig by clicking Start Programs Lancom Instructions for LANconfigLANconfig Connect charge protectionComplete the configuration with Finish Network without Dhcp server Instructions for WEBconfigStarting the wizards in WEBconfig Network with Dhcp serverOr with a name as discribed above Basic configuration Entering the password in the web browser IP address assignment via the Lancom default TCP/IP settings to workstation PCsIP address assignment via a separate Dhcp server Manual IP address assignmentBasic configuration Setting up Internet access Does the setup wizard know your Internet provider?Additional information for unknown Internet providers Protocol PPPoE, Pptp or Plain Ethernet IPoE User name and passwordAdditional connection options Dynamic channel bundling Isdn onlyTools Setup Wizard LANconfig Quick access to the setup wizardsComplete the configuration with Apply Always configure both sides Linking two networksSecurity aspects General information What information is necessary?Isdn Settings for the TCP/IP router Settings for the IPX router DNS access to the remote LANExtranet VPN Settings for NetBIOS routing Perform the configuration on both routers, one at a time Ping quick testing for TCP/IP connections Which information is required? Providing dial-up accessCoupling Entry Isdn calling line identity CLI Settings for TCP/IPWAN Settings for IPXSettings for the dial-in computer Dial-up via VPNDial-up via Isdn Instructions for LANconfig Instructions for WEBconfig Sending faxes with Lancapi Lancom CD Installation of the Lancom Capi fax modemSelect the option Printers and Faxes from the control panel Installation of the MS Windows fax serviceSend a fax with the MS Windows fax service Sending a faxSend a fax with any given office application Sending faxes with Lancapi Security settings Security settings wizardWizard for LANconfig Firewall wizard Wizard for WEBconfigSecurity checklist Configuration under WEBconfigRules Have you permitted remote configuration? Have you assigned a password for the configuration?Have you activated the Firewall? Do you make use of a ’Deny All’ Firewall strategy?Have you closed critical ports with filters? Is your saved Lancom configuration stored in a safe place?Problems with the cabling? TroubleshootingNo WAN connection is established DSL data transfer is slowUnwanted connections under Windows XP Cable testingIncreasing the TCP/IP window size under Windows LAN statisticsTroubleshooting Appendix Performance data and specificationsATM Contact assignment Adsl interfacePin RJ45 socket Ethernet WAN interface Lancom 1711 VPN ISDN-S0interfacePin RJ45 socket, corresponding to ISO 8877, EN CE declaration of conformity Configuration interface OutbandEthernet interfaces 10/100Base-T Pin mini-DIN socketNumerics IndexHardware installation 1TR6 Caller ID FirmSafe IPX conventions Flat rate IPX router SettingsInstallation Connection Connector cable Configuration port ChannelNetBIOS Power adapter 21, 27Security aspects Server Setup Specify MSN LAN to LAN coupling 17, 18, 19, 34Online Power Settings Stateful Inspection TelephoneVoltage switch WAN data VPN client WAN status Switch System preconditions Connector cable WAN connection
Related manuals
Manual 7 pages 33.19 Kb

1621, 1711, 821 specifications

Lancom Systems is a notable player in the networking solutions market, and its range of routers, specifically the 821, 1621, and 1711 models, showcases the company's commitment to delivering robust, high-quality products for various enterprise needs. Each model brings distinct features, making them suitable for different environments and operational demands.

The Lancom 821 is particularly designed for small to medium-sized enterprises (SMEs) requiring reliable internet connectivity and secure networking. This router supports various VPN technologies, ensuring secure data transmission across the organization. Equipped with advanced firewall capabilities, the 821 can handle multiple connections while protecting against potential cyber threats. Its support for IPv6 enhances compatibility with future networks, making it a long-term investment. The device’s manageable architecture allows for remote access and troubleshooting, reducing the need for on-site IT interventions.

On the other hand, the Lancom 1621 is tailored for larger organizations or those with more extensive networking demands. This model offers enhanced throughput and is capable of managing large volumes of traffic without compromising performance. It features a variety of WAN connection options, including DSL, LTE, and fiber, allowing businesses to choose the best solution for their requirements. The 1621 also incorporates sophisticated Quality of Service (QoS) settings, which prioritize critical applications to ensure optimal performance during peak times. Built-in redundancy features enhance reliability, making it an excellent choice for mission-critical applications.

The Lancom 1711 takes networking capabilities a step further, targeting enterprises with even more complex needs. It boasts advanced routing and switching features, making it suitable for enterprise-grade deployments. The 1711 supports enterprise WLAN management, allowing seamless integration with wireless access points. Its robust performance over WAN connections enables the deployment of various real-time applications, such as voice over IP (VoIP) and video conferencing, without latency issues. Security is a top priority, with features including an IPSec VPN and integrated threat detection to safeguard organizational data.

In summary, the Lancom 821, 1621, and 1711 routers serve as versatile tools for businesses, each designed with distinct capabilities to meet specific networking needs. Their strengths lie in their security features, support for various connection types, and reliable performance under heavy loads. With these devices, organizations can ensure that their network infrastructure not only meets current demands but is also poised for future growth.