Manuals / Lancom Systems / Computer Equipment / Network Router

Lancom Systems 1711, 821, 1621 The firewall wizard, Wizard for WEBconfig, Wizard for LANconfig

Models: 1621 1711 821

1 82

Download 82 pages 23.97 Kb

Page 67

8.1.2Wizard for WEBconfig

LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN

Chapter 8: Security settings

In a next step parameters of the configuration lock like number of failed log-in attempts and the duration of the lock can be adjusted.

Now activate Stateful Inspection, ping-blocking and Stealth mode in the the firewall configuration.

The wizard will inform you when entries are complete. Complete the con- figuration with Finish.

8.1.2Wizard for WEBconfig

Under WEBconfig you have the possibility to run the wizard Security settings to control and change the settings. The following values are handled:

password for the device

allowed protocols for the configuration access of local and remote net- works

the MSN for remote configuration via ISDN

parameters of configuration lock (number of failed log-in attempts and duration of the lock)

8.2The firewall wizard

The LANCOM incorporates an effective protection of your LAN and WLAN when accessing the Internet by its Stateful Inspection firewall and its firewall filters. Basic idea of the Stateful Inspection firewall is that only self-initiated data transfer is considered allowable. All unasked accesses, which were not initiated from the local network, are inadmissible.

The firewall wizard assists you to create new firewall rules quickly and com- fortably.

Please find further information about the firewall of your LANCOM and about its configuration in the reference manual.

8.2.1Wizard for LANconfig

The firewall wizard assists you to create new firewall rules quickly and com- fortably .

EN

67

Image 67

Lancom Systems 1711, 821, 1621 manual The firewall wizard, Wizard for WEBconfig, Wizard for LANconfig

Contents

LANCOM 821 ADSL/ISDN - LANCOM 1621 ADSL/ISDN - LANCOM 1711 VPN 2005 LANCOM Systems GmbH, Wuerselen Germany. All rights reserved User manual and reference manual Security settingsPreface Thank you for placing your trust in this LANCOM productThis documentation was compiled … Model variantsinfo@lancom.de Important instruction that should be followed Notes symbolsAdditional instructions which can be helpful, but are not required Setting up Internet access ContentsInstallation Basic configurationSecurity settings Providing dial-up accessLinking two networks Sending faxes with LANCAPIAppendix Troubleshootingwould be possible when relying solely on the telephone network IntroductionHow does ADSL work? High speed via standard telephone linesADSL provider All services via a single cable-thanks to the splitterIdeal for Internet surfers InternetCode ADSL-over-ISDN or ADSL-over-POTS?1.2 Which use does VPN offer? Conventional network infrastructure Networking via the Internet Further important features of the Firewall are Intrusion Detection 1.3 FirewallInternet Denial-of-Service Protection 1.4 What does a router do?Quality-of-Service / Traffic management 1.4.2 Areas of deployment for routers 1.4.1 Bridgehead to the WANLANCOM 1711 DSL 1.5 What can your LANCOM do?LANCOM 821 ADSL LANCOM 1621 ADSLWAN connection LANCOM 821 ADSLLANCOM 1621 ADSL LANCOM 1711 DSLLANCOM 1711 DSL ConfigurationLANCOM 821 ADSL LANCOM 1621 ADSL2.1 Package contents 2 Installation2.2 System preconditions 2.3.1 Status displays 2.3 Introducing LANCOMFront side Meanings of the LEDs Top panelLANCOM Flashing Power LED but no connection?Completely deactivate the lock that has been triggered set limit to The Online LED indicates the overall status of all WAN portsData traffic via the DSL connection Connection status of the ADSL linkConnection status of the WAN connection Data traffic via the ADSL linkStatus of ISDN S0 connection Status of the four LAN ports in the integrated switchSeparate status display for both ISDN B channels ISDN/S0 port ADSL port 2.3.2 The back of the unitVoltage switch Connection for the included power adapter Reset switch Switch with four 10/100Base-Tx connections Serial configuration port2.4 Hardware installation DSL - connect the WAN interface ADSL connector cable transparent plugsusing the included power adapter Connect to power - Connect socket2.5.1 Starting LANCOM setup 2.5 Software installation2.5.2 Which software should you install? 3.1.1 TCP/IP settings 3 Basic configuration3.1 Which information is necessary? IP address and netmask for the LANCOM New LAN-fully automatic configuration possibleConfigure manually nevertheless? Information required for manual TCP/IP configurationEnable DHCP server? 3.1.2 Configuration protection3.1.3 Settings for the DSL connection 3.1.4 Settings for the ISDN connectionLANconfig 3.2 Instructions for LANconfig3.1.5 Connect charge protection Complete the configuration with Finish Network without DHCP server 3.3 Instructions for WEBconfigNetwork with DHCP server Starting the wizards in WEBconfigIf you cannot access an unconfigured LANCOM, the problem may be due to the netmask of the LAN with less than 254 possible hosts net- mask 255.255.255.0, please ensure that the IP address x.x.x.254 is located in your own subnet Entering the password in the web browser Manual IP address assignment 3.4 TCP/IP settings to workstation PCsIP address assignment via the LANCOM default IP address assignment via a separate DHCP serverPage ADSL 4 Setting up Internet accessDoes the setup wizard know your Internet provider? Additional information for unknown Internet providersDynamic channel bundling ISDN only Additional connection optionsUser name and password Protocol PPPoE, PPTP or Plain Ethernet IPoELANconfig Quick access to the setup wizards 4.1 Instructions for LANconfig4.2 Instructions for WEBconfig Tools Setup Wizard5 Linking two networks Always configure both sidesSecurity aspects 5.1.1 General information 5.1 What information is necessary?TCP/IP routing for access to remote network IPX routing for access to remote networkNetBIOS routing for access to remote net Hide local stations for access to remote netNetmask 5.1.2 Settings for the TCP/IP routerDNS access to the remote LAN 5.1.3 Settings for the IPX routerExtranet VPN 5.1.4 Settings for NetBIOS routing 5.3 Instructions for WEBconfig 5.2 Instructions for LANconfigPing - quick testing for TCP/IP connections 6.1 Which information is required? 6 Providing dial-up accessSecurity aspects Entry 6.1.1 General informationNotes to the individual values CouplingThe ISDN calling line identity CLI 6.1.2 Settings for TCP/IP6.1.4 Settings for NetBIOS routing 6.1.3 Settings for IPXUser SAMPLE 6.2.1 Dial-up via VPN 6.2 Settings for the dial-in computer6.2.2 Dial-up via ISDN 6.3 Instructions for LANconfig 6.4 Instructions for WEBconfig ISDN 7 Sending faxes with LANCAPISelect the entry Install LANCOM software in the setup program of your 7.1 Installation of the LANCOM CAPI fax modemLANCOM CD Select the option Printers and Faxes from the control panel 7.2 Installation of the MS Windows fax service7.3 Sending a fax 7.3.2 Send a fax with the MS Windows fax service7.3.1 Send a fax with any given office application LANCOM 821 ADSL/ISDN - LANCOM 1621 ADSL/ISDN - LANCOM 1711 VPN 8.1 The security settings wizard 8 Security settings8.1.1 Wizard for LANconfig 8.2.1 Wizard for LANconfig 8.1.2 Wizard for WEBconfig8.2 The firewall wizard 8.2.2 Configuration under WEBconfig 8.3 The security checklistRules Do you make use of a ’Deny All’ Firewall strategy? Have you assigned a password for the configuration?Have you permitted remote configuration? Have you activated the Firewall?Is your saved LANCOM configuration stored in a safe place? Have you excluded certain stations from access to the router?Have you closed critical ports with filters? 9.2 DSL data transfer is slow 9 TroubleshootingProblems with the cabling? 9.1 No WAN connection is establishedLAN statistics 9.4 Cable testing9.3 Unwanted connections under Windows XP Increasing the TCP/IP window size under WindowsChange then to menu item Expert configuration Status LAN statis LANCOM 10.1 Performance data and specifications10 Appendix LANCOMLANCOM Temperature rangeLANCOM LANCOMLANCOM 10.2 Contact assignment10.2.1 ADSL interface ConnectorConnector 10.2.2 Ethernet WAN interface LANCOM 1711 VPN10.2.3 ISDN-S0 interface ConnectorConnector 10.2.5 Configuration interface Outband10.3 CE declaration of conformity 10.2.4 Ethernet interfaces 10/100Base-TNumerics IndexISDN leased line option 15, 17see status displays Setting up access to the InternetWide Area Network WAN Stateful Inspection Firewall