Manuals / Lancom Systems / Computer Equipment / Network Router

Lancom Systems 1711, 821, 1621 manual What does a router do?, Denial-of-Service Protection

Models: 1621 1711 821

1 82

Download 82 pages 23.97 Kb

Page 16

Denial-of-Service Protection

EN

LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN

Chapter 1: Introduction

Denial-of-Service Protection

Attacks from the Internet can be break-in attempts as well as attacks with the aim of blocking the accessibility and functionality of individual services. Therefore a LANCOM DSL is equipped with appropriate protec- tive mechanisms, which recognize well-known hacker attacks and which guarantee the functionality.

Quality-of-Service / Traffic management

The generic term Quality-of-Service (brief: QoS) summarizes the functions of the LANCOM which guarantee certain service qualities. The advantage is that the QoS functions can take place by means of the existing powerful classification methods of the Firewall (e.g. limitation of subnetworks, single workstations or certain services).

Guaranteed minimum bandwidths give priority to enterprise critical appli- cations, VoIP PBX installations or certain user groups.

More details about the function of the Stateful Inspection Firewall of your LANCOM can be found in the reference manual on the LANCOM CD.

1.4What does a router do?

The following sections describe the functionality of routers in general. The functions supported by your device are listed in the table “What can your LANCOM do?” on page 18.

Routers connect LANs at different locations and individual PCs to form a Wide Area Network (WAN). With the appropriate rights, any computer in this WAN can access other computers and services of the complete WAN (as with 'PC 1' accessing 'Server A' in the remote LAN in the diagram).

PC 1	server A
PC 1
	WAN connection
router	router
LAN 1	LAN 2

16

Image 16

Lancom Systems 1711, 821 What does a router do?, Denial-of-Service Protection, Quality-of-Service / Traffic management

Contents

LANCOM 821 ADSL/ISDN - LANCOM 1621 ADSL/ISDN - LANCOM 1711 VPN 2005 LANCOM Systems GmbH, Wuerselen Germany. All rights reserved Security settings PrefaceThank you for placing your trust in this LANCOM product User manual and reference manualThis documentation was compiled … Model variantsinfo@lancom.de Important instruction that should be followed Notes symbolsAdditional instructions which can be helpful, but are not required Contents InstallationBasic configuration Setting up Internet accessProviding dial-up access Linking two networksSending faxes with LANCAPI Security settingsTroubleshooting AppendixIntroduction How does ADSL work?High speed via standard telephone lines would be possible when relying solely on the telephone networkAll services via a single cable-thanks to the splitter Ideal for Internet surfersInternet ADSL providerADSL-over-ISDN or ADSL-over-POTS? Code1.2 Which use does VPN offer? Conventional network infrastructure Networking via the Internet Further important features of the Firewall are Intrusion Detection 1.3 FirewallInternet Denial-of-Service Protection 1.4 What does a router do?Quality-of-Service / Traffic management 1.4.1 Bridgehead to the WAN 1.4.2 Areas of deployment for routers1.5 What can your LANCOM do? LANCOM 821 ADSLLANCOM 1621 ADSL LANCOM 1711 DSLLANCOM 821 ADSL LANCOM 1621 ADSLLANCOM 1711 DSL WAN connectionConfiguration LANCOM 821 ADSLLANCOM 1621 ADSL LANCOM 1711 DSL2.1 Package contents 2 Installation2.2 System preconditions 2.3.1 Status displays 2.3 Introducing LANCOMFront side Top panel Meanings of the LEDsFlashing Power LED but no connection? Completely deactivate the lock that has been triggered set limit toThe Online LED indicates the overall status of all WAN ports LANCOMConnection status of the ADSL link Connection status of the WAN connectionData traffic via the ADSL link Data traffic via the DSL connectionStatus of ISDN S0 connection Status of the four LAN ports in the integrated switchSeparate status display for both ISDN B channels 2.3.2 The back of the unit Voltage switch Connection for the included power adapter Reset switchSwitch with four 10/100Base-Tx connections Serial configuration port ISDN/S0 port ADSL port2.4 Hardware installation ADSL connector cable transparent plugs using the included power adapterConnect to power - Connect socket DSL - connect the WAN interface2.5 Software installation 2.5.1 Starting LANCOM setup2.5.2 Which software should you install? 3.1.1 TCP/IP settings 3 Basic configuration3.1 Which information is necessary? New LAN-fully automatic configuration possible Configure manually nevertheless?Information required for manual TCP/IP configuration IP address and netmask for the LANCOM3.1.2 Configuration protection 3.1.3 Settings for the DSL connection3.1.4 Settings for the ISDN connection Enable DHCP server?LANconfig 3.2 Instructions for LANconfig3.1.5 Connect charge protection Complete the configuration with Finish 3.3 Instructions for WEBconfig Network without DHCP serverStarting the wizards in WEBconfig Network with DHCP serverIf you cannot access an unconfigured LANCOM, the problem may be due to the netmask of the LAN with less than 254 possible hosts net- mask 255.255.255.0, please ensure that the IP address x.x.x.254 is located in your own subnet Entering the password in the web browser 3.4 TCP/IP settings to workstation PCs IP address assignment via the LANCOM defaultIP address assignment via a separate DHCP server Manual IP address assignmentPage 4 Setting up Internet access Does the setup wizard know your Internet provider?Additional information for unknown Internet providers ADSLAdditional connection options User name and passwordProtocol PPPoE, PPTP or Plain Ethernet IPoE Dynamic channel bundling ISDN only4.1 Instructions for LANconfig 4.2 Instructions for WEBconfigTools Setup Wizard LANconfig Quick access to the setup wizards5 Linking two networks Always configure both sidesSecurity aspects 5.1 What information is necessary? 5.1.1 General informationIPX routing for access to remote network NetBIOS routing for access to remote netHide local stations for access to remote net TCP/IP routing for access to remote network5.1.2 Settings for the TCP/IP router NetmaskDNS access to the remote LAN 5.1.3 Settings for the IPX routerExtranet VPN 5.1.4 Settings for NetBIOS routing 5.2 Instructions for LANconfig 5.3 Instructions for WEBconfigPing - quick testing for TCP/IP connections 6.1 Which information is required? 6 Providing dial-up accessSecurity aspects 6.1.1 General information Notes to the individual valuesCoupling Entry6.1.2 Settings for TCP/IP The ISDN calling line identity CLI6.1.4 Settings for NetBIOS routing 6.1.3 Settings for IPXUser SAMPLE 6.2.1 Dial-up via VPN 6.2 Settings for the dial-in computer6.2.2 Dial-up via ISDN 6.3 Instructions for LANconfig 6.4 Instructions for WEBconfig 7 Sending faxes with LANCAPI ISDNSelect the entry Install LANCOM software in the setup program of your 7.1 Installation of the LANCOM CAPI fax modemLANCOM CD 7.2 Installation of the MS Windows fax service Select the option Printers and Faxes from the control panel7.3 Sending a fax 7.3.2 Send a fax with the MS Windows fax service7.3.1 Send a fax with any given office application LANCOM 821 ADSL/ISDN - LANCOM 1621 ADSL/ISDN - LANCOM 1711 VPN 8.1 The security settings wizard 8 Security settings8.1.1 Wizard for LANconfig 8.2.1 Wizard for LANconfig 8.1.2 Wizard for WEBconfig8.2 The firewall wizard 8.2.2 Configuration under WEBconfig 8.3 The security checklistRules Have you assigned a password for the configuration? Have you permitted remote configuration?Have you activated the Firewall? Do you make use of a ’Deny All’ Firewall strategy?Is your saved LANCOM configuration stored in a safe place? Have you excluded certain stations from access to the router?Have you closed critical ports with filters? 9 Troubleshooting Problems with the cabling?9.1 No WAN connection is established 9.2 DSL data transfer is slow9.4 Cable testing 9.3 Unwanted connections under Windows XPIncreasing the TCP/IP window size under Windows LAN statisticsChange then to menu item Expert configuration Status LAN statis 10.1 Performance data and specifications 10 AppendixLANCOM LANCOMTemperature range LANCOMLANCOM LANCOM10.2 Contact assignment 10.2.1 ADSL interfaceConnector LANCOM10.2.2 Ethernet WAN interface LANCOM 1711 VPN 10.2.3 ISDN-S0 interfaceConnector Connector10.2.5 Configuration interface Outband 10.3 CE declaration of conformity10.2.4 Ethernet interfaces 10/100Base-T ConnectorIndex Numerics15, 17 ISDN leased line optionSetting up access to the Internet see status displaysStateful Inspection Firewall Wide Area Network WAN