Manuals / Lancom Systems / Computer Equipment / Network Router

Lancom Systems 7111 VPN, 8011 VPN The firewall wizard, Wizard for WEBconfig, Wizard for LANconfig

Models: 8011 VPN 7111 VPN

1 77

Download 77 pages 46.77 Kb

Page 63

8.1.2Wizard for WEBconfig

LANCOM 7111 VPN – LANCOM 8011 VPN

Chapter 8: Security settings

In a next step parameters of the configuration lock like number of failed log-in attempts and the duration of the lock can be adjusted.

Now activate Stateful Inspection, ping-blocking and Stealth mode in the the firewall configuration.

The wizard will inform you when entries are complete. Complete the con- figuration with Finish.

8.1.2Wizard for WEBconfig

Under WEBconfig you have the possibility to run the wizard Security settings to control and change the settings. The following values are handled:

password for the device

allowed protocols for the configuration access of local and remote net- works

the MSN for remote configuration via ISDN

parameters of configuration lock (number of failed log-in attempts and duration of the lock)

8.2The firewall wizard

The LANCOM router incorporates an effective protection of your LAN and WLAN when accessing the Internet by its Stateful Inspection firewall and its firewall filters. Basic idea of the Stateful Inspection firewall is that only self- initiated data transfer is considered allowable. All unasked accesses, which were not initiated from the local network, are inadmissible.

The firewall wizard assists you to create new firewall rules quickly and com- fortably.

Please find further information about the firewall of your LANCOM router and about its configuration in the reference manual.

8.2.1Wizard for LANconfig

The firewall wizard assists you to create new firewall rules quickly and com- fortably .

EN

63

Image 63

Lancom Systems 7111 VPN, 8011 VPN manual The firewall wizard, Wizard for WEBconfig, Wizard for LANconfig

Contents

LANCOM 7111 VPN LANCOM 8011 VPN 2004 LANCOM Systems GmbH, Wuerselen Germany. All rights reserved Preface Security settingsModel variants User manual and reference manualNotes symbols This documentation was compiled …info@lancom.de 4 Setting up Internet access Contents2 Installation 3 Basic configurationSecurity settings Providing dial-up access5 Linking two networks 7 Sending faxes with LANCAPIAppendix 9 Troubleshooting1 Introduction 1.1 Which use does VPN offer?Chapter 1 Introduction Chapter 1 Introduction Conventional network infrastructureA subsidiary is connected to the LAN, typically using a leased line Access Service - RASNetworking via the Internet Further important features of the Firewall are Intrusion Detection 1.2 FirewallLANCOM CD 1.3 What does a router do?Denial-of-Service Protection Quality-of-Service / Traffic managementLAN to LAN coupling via VPN or ISDN Internet access for a LAN e.g. via DSL or ISDN1.3.1 Bridgehead to the WAN 1.3.2 Areas of deployment for routers1.4 What can your LANCOM router do? Remote access to the company network via VPN or ISDNLAN connection LANCOMLANCOM WAN connectionOptional software extensions Quality of ServiceConfiguration LANCOM2 Installation 2.1 Package contents2.2 System preconditions Meanings of the LEDs 2.3 Introducing LANCOM router2.3.1 Status displays Front sideinverse flashing Chapter 2 Installationand the LED remains lit green The Online LED indicates the overall status of all WAN portsLANCOM Flashing Power LED but no connection?Chapter 2 Installation Completely deactivate the lock that has been triggered set limit toData traffic via the WAN connection Chapter 2 InstallationNot connected or no S0 voltage no error message Connection status of the WAN connectionLCD display 2.3.2 The back of the unit 2.4 Hardware installationWAN - connect the WAN port with the included connector cable dark blue plug e. g. with the ethernet port of a DSL modem or of a cable modem 2.5.1 Starting LANCOM setup 2.5 Software installation2.5.2 Which software should you install? 3 Basic configuration 3.1.1 TCP/IP settings3.1 Which information is necessary? IP address and netmask for the LANCOM router New LAN-fully automatic configuration possibleConfigure manually nevertheless? Information required for manual TCP/IP configurationEnable DHCP server? 3.1.2 Configuration protection3.1.3 Settings for the DSL connection 3.1.4 Settings for the ISDN connectionChapter 3 Basic configuration 3.2 Instructions for LANconfigLANconfig 3.1.5 Connect charge protectionComplete the configuration with Finish 3.3 Instructions for WEBconfig Network without DHCP serverChapter 3 Basic configuration Network with DHCP server Starting the wizards in WEBconfigPage Entering the password in the web browser IP address assignment via the LANCOM router default 3.4 TCP/IP settings to workstation PCsIP address assignment via a separate DHCP server Manual IP address assignmentChapter 3 Basic configuration Chapter 4 Setting up Internet access 4 Setting up Internet accessDoes the setup wizard know your Internet provider? Additional information for unknown Internet providersDynamic channel bundling ISDN only Additional connection optionsISDN - dial-in number User name and password Chapter 4 Setting up Internet access4.1 Instructions for LANconfig 4.2 Instructions for WEBconfigLANconfig Quick access to the setup wizards Always configure both sides 5 Linking two networksSecurity aspects 5.1.1 General information 5.1 What information is necessary?The name of the remote station is needed for its identification 5.1.2 Settings for the TCP/IP router Chapter 5 Linking two networksNetmask 5.1.3 Settings for the IPX router DNS access to the remote LANExtranet VPN 5.1.4 Settings for NetBIOS routing 5.3 Instructions for WEBconfig 5.2 Instructions for LANconfigPing - quick testing for TCP/IP connections 6 Providing dial-up access 6.1 Which information is required?Security aspects The ISDN calling line identity CLI 6.1.1 General information6.1.3 Settings for IPX 6.1.2 Settings for TCP/IP6.1.4 Settings for NetBIOS routing Chapter 6 Providing dial- up accessUser SAMPLE 6.2 Settings for the dial-in computer 6.2.1 Dial-up via VPN6.2.2 Dial-up via ISDN 6.4 Instructions for WEBconfig 6.3 Instructions for LANconfigFrom the main menu, launch the Connect two local networks wizard Chapter 6 Providing dial- up accessChapter 7 Sending faxes with LANCAPI 7 Sending faxes with LANCAPIChapter 7 Sending faxes with LANCAPI 7.1 Installation of the LANCOM CAPI fax modem7.2 Installation of the MS Windows fax service Select the option Printers and Faxes from the control panelChapter 7 Sending faxes with LANCAPI 7.3.2 Send a fax with the MS Windows fax service 7.3 Sending a fax7.3.1 Send a fax with any given office application Chapter 7 Sending faxes with LANCAPI LANCOM 7111 VPN - LANCOM 8011 VPN8 Security settings 8.1 The security settings wizard8.1.1 Wizard for LANconfig 8.1.2 Wizard for WEBconfig 8.2.1 Wizard for LANconfig8.2 The firewall wizard 8.3 The security checklist 8.2.2 Configuration under WEBconfigRules Do you make use of a ’Deny All’ Firewall strategy? Have you assigned a password for the configuration?Have you permitted remote configuration? Have you activated the Firewall?Chapter 8 Security settings Have you excluded certain stations from access to the router?Have you closed critical ports with filters? Is your saved LANCOM router configuration stored in a safe place?9.2 DSL data transfer is slow 9 TroubleshootingProblems with the cabling? 9.1 No WAN connection is establishedLAN statistics 9.4 Cable testing9.3 Unwanted connections under Windows XP Increasing the TCP/IP window size under WindowsChange then to menu item Expert configuration Status LAN statis LANCOM 8011 VPN 10.1 Performance data and specifications10 Appendix LANCOM 7111 VPNLANCOM 7111 VPN LANCOM 8011 VPNChapter 10 Appendix Connector 10.2 Contact assignment10.2.1 DSL interface 10.2.2 ISDN-S0 interfaceConnector 10.2.4 Configuration interface Outband10.3 CE declaration of conformity 10.2.3 Ethernet interfaces 10/100Base-TNumerics Indexsee status displays Authentication dataBasic configuration 12, 14, 16Setting up access to the Internet Enable software compressionVirtual Private Network VPN