Lancom Systems 8011 VPN, 7111 VPN specification

© 2004 LANCOM Systems GmbH, Wuerselen (Germany). All rights reserved.

While the information in this manual has been compiled with great care, it may not be deemed an assurance of product characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery.

The reproduction and distribution of the documentation and software included with this product is subject to written per- mission by LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical develop- ment.

Trademarks

Windows®, Windows XP® and Microsoft® are registered trademarks of Microsoft, Corp.

The LANCOM Systems logo and the name LANCOM are registered trademarks of LANCOM Systems GmbH. All other names mentioned may be trademarks or registered trademarks of their respective owners.

Subject to change without notice. No liability for technical errors or omissions.

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit http://www.openssl.org/.

LANCOM Systems GmbH

Adenauerstr. 20/B2

52146 Wuerselen

Germany

www.lancom.de

Wuerselen, December 2004

110297/1204

Image 2

Lancom Systems 8011 VPN, 7111 VPN manual Lancom Systems GmbH, Wuerselen Germany. All rights reserved

Contents

Lancom 7111 VPN Lancom 8011 VPN Lancom Systems GmbH, Wuerselen Germany. All rights reserved Security settings Preface Model variants This documentation was compiled … Info@lancom.de Contents Sending faxes with Lancapi Providing dial-up accessLinking two networks Troubleshooting Appendix Introduction Which use does VPN offer? Conventional network infrastructure Isdn Networking via the Internet Firewall What does a router do? Denial-of-Service ProtectionQuality-of-Service / Traffic management Areas of deployment for routers Internet access for a LAN e.g. via DSL or IsdnBridgehead to the WAN LAN to LAN coupling via VPN or Isdn Conventional via Isdn Remote access to the company network via VPN or IsdnWhat can your Lancom router do? Lancom Quality of Service System preconditions InstallationPackage contents Status displays Access to the LAN via the TCP/IP protocolIntroducing Lancom router Front side LED remains lit green Online LED indicates the overall status of all WAN ports Flashing Power LED but no connection? Lancom Connection status of Isdn S0 connection Connection status of the WAN connectionData traffic via the WAN connection LCD display Connection status of the serial configuration port7111 VPN, for both Isdn B channels with Lancom 8011 VPN Hardware installation Back of the unit Installation Software installation Starting Lancom setup Which software should you install? Which information is necessary? Basic configuration1 TCP/IP settings Information required for manual TCP/IP configuration New LAN-fully automatic configuration possibleConfigure manually nevertheless? IP address and netmask for the Lancom router Settings for the Isdn connection Configuration protectionSettings for the DSL connection Enable Dhcp server? LANconfig Instructions for LANconfigStart up LANconfig by clicking Start Programs Lancom Connect charge protection Complete the configuration with Finish Instructions for WEBconfig Network without Dhcp server Or with a name as discribed above Starting the wizards in WEBconfigNetwork with Dhcp server WEBconfig main menu will be displayed Entering the password in the web browser TCP/IP settings to workstation PCs IP address assignment via the Lancom router default IP address assignment via a separate Dhcp server Manual IP address assignment User name and password Setting up Internet accessDoes the setup wizard know your Internet provider? Additional information for unknown Internet providers Dynamic channel bundling Isdn only Isdn dial-in number User name and passwordAdditional connection options LANconfig Quick access to the setup wizards Complete the configuration with Apply Security aspects Always configure both sidesLinking two networks What information is necessary? General information Name of the remote station is needed for its identification Settings for the TCP/IP router Extranet VPN Settings for the IPX routerDNS access to the remote LAN Settings for NetBIOS routing Perform the configuration on both routers, one at a time Ping quick testing for TCP/IP connections Providing dial-up access Which information is required? Isdn calling line identity CLI Coupling Entry Settings for TCP/IP Settings for IPX WAN Dial-up via Isdn Settings for the dial-in computerDial-up via VPN Instructions for LANconfig Providing dial- up access Sending faxes with Lancapi Installation of the Lancom Capi fax modem Installation of the MS Windows fax service Select the option Printers and Faxes from the control panel Send a fax with any given office application Send a fax with the MS Windows fax serviceSending a fax Sending faxes with Lancapi Wizard for LANconfig Security settingsSecurity settings wizard Wizard for WEBconfig Firewall wizard Rules Security checklistConfiguration under WEBconfig Have you activated the Firewall? Have you assigned a password for the configuration?Have you permitted remote configuration? Do you make use of a ’Deny All’ Firewall strategy? Have you closed critical ports with filters? No WAN connection is established TroubleshootingProblems with the cabling? DSL data transfer is slow Increasing the TCP/IP window size under Windows Cable testingUnwanted connections under Windows XP LAN statistics Troubleshooting Performance data and specifications Appendix Rights for up to 16 administrators ISDN-S0interface Contact assignmentDSL interface Pin RJ45 socket Ethernet interfaces 10/100Base-T Configuration interface OutbandCE declaration of conformity Pin mini-DIN socket Numerics Connector cable Channel Data compression Dial-innumber InstallationIPX conventions IPX router Settings Connector cable LAN to LAN coupling 14, 15, 30 NetBIOS NetBIOS NetBIOS proxy Netmask Network segmentPackage contents Packet size adaption Password Security aspects Server Setup Specify MSN Check connection Settings 28 , 32Temperature Time WEBconfig