Table of Contents

Advertisement

Quick Links

. . . c o n n e c t i n g
LANCOM 821+
LANCOM 1711+ VPN
LANCOM 1721 VPN
Handbuch
Manual
y o u r
b u s i n e s s

Advertisement

Table of Contents
loading

Summary of Contents for Lancom 821+

  • Page 1 . . . c o n n e c t i n g y o u r b u s i n e s s LANCOM 821+ LANCOM 1711+ VPN LANCOM 1721 VPN Handbuch Manual...
  • Page 2 LANCOM 821+ LANCOM 1711+ VPN LANCOM 1721 VPN...
  • Page 3 LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software included with this product is subject to written per- mission by LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical develop- ment.
  • Page 4 Preface Thank you for placing your trust in this LANCOM Systems product. With the LANCOM Router you have chosen a powerful router that possesses integrated DSL respectively ADSL and ISDN interfaces by default as well as an integrated 4-port switch. With this router you can simply and comfortably connect individual PCs or whole local networks to the high-speed Internet.
  • Page 5 It also contains all of the important technical specifications. The reference manual can be found on the LANCOM product CD as an Acrobat (PDF) document. It is designed as a supplement to the user manual and goes into detail on topics that apply to a variety of models.
  • Page 6 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Preface contact addresses of LANCOM support, please see the enclosed leaf- let or the LANCOM Systems website. Information symbols Very important instructions. Failure to observe this may result in damage.
  • Page 7: Table Of Contents

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Contents Contents 1 Introduction 1.1 How do ADSL and ADSL 2+ work? 1.2 What does VPN offer? 1.3 What can your LANCOM Router do? 2 Installation 2.1 Package contents 2.2 System requirements 2.3 Status displays, interfaces and hardware installation...
  • Page 8 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Contents 5 Linking two networks 5.1 What information is necessary? 5.1.1 General information 5.1.2 Settings for the TCP/IP router 5.1.3 Settings for the IPX router 5.1.4 Settings for NetBIOS routing 5.2 Instructions for LANconfig...
  • Page 9 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Contents 9 Troubleshooting 9.1 No WAN connection is established 9.2 DSL data transfer is slow 9.3 Unwanted connections under Windows XP 9.4 Cable testing 10 Appendix 10.1 Performance data and specifications 10.2 Contact assignment...
  • Page 10: Introduction

    LANCOM 1721 VPN and LANCOM 1711+ VPN to act as powerful Dynamic VPN gateways for external offices or mobile users. The LANCOM Router models offer each a DSL or ADSL connector and also an ISDN connector. The ISDN line can be used as back-up for the DSL connection,...
  • Page 11: What Does Vpn Offer

     equipped to support VPN with 5 active tunnels. With the additional LANCOM VPN Option, VPN support can be extended to 25 active tun- nels (incl. activated hardware accelerator). The following structure results when using the Internet instead of direct con-...
  • Page 12: What Can Your Lancom Router Do

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 1: Introduction » The RAS PCs connect to the headquarters LAN via the Internet. The Internet is available virtually everywhere and typically has low access costs. Significant savings can thus be achieved in relation to switched or ded- icated connections, especially over long distances.
  • Page 13 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 1: Introduction ✔ ✔ ✔ Bridge function for coupling networks via ISDN connection ✔ ✔ Port-Mapping to set up LAN ports as additional WAN ports ✔ ✔ ✔ Policy-based routing for policy-based selection of target routes...
  • Page 14 ✔ ✔ FirmSafe with firmware versions for absolutely secure software upgrades Optional software extensions ✔ ✔ LANCOM VPN Option with 25 active tunnels for protection of network couplings Optional hardware extensions ✔ ✔ ✔ LANCOM Modem Adapter Kit for connection of analog or GSM modems...
  • Page 15: Installation

    LANCOM CD ✔ ✔ ✔ Printed documentation If anything is missing, please contact your retailer or the address stated on the delivery slip of the unit. System requirements Computers that connect to a LANCOM must meet the following minimum requirements:...
  • Page 16: Status Displays, Interfaces And Hardware Installation

    Flickering means, that the LED is switched on and off in irregular inter- vals. Front side The various LANCOM Router models have different numbers of indicators on the front panel depending on their functionality. LANCOM 821+ and µ...
  • Page 17 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation · LANCOM 1711+ VPN ² ¶ º ´ ¾ µ 1711+ VPN The two top-mounted LEDs enable the main function status to be assessed even if the device is positioned vertically.
  • Page 18 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation tion about a later assignment of the configuration password see the section “Security settings”. Flashing Power LED but no connection? There's no need to worry if the Power LED blinks red and you can no longer connect to the WAN.
  • Page 19 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation Flickering Error (CRC error, framing error, etc.) On (permanently) No synchronization, searching for remote station Red/ Blinking Hardware error orange ¿ ADSL data Information on data traffic at the ADSL connector:...
  • Page 20: Device Connectors

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation If the ISDN status LED goes off automatically, this does not indicate  an error at the S bus. It is in fact because several ISDN connections...
  • Page 21 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation LANCOM 821+ and LANCOM 1721 VPN not available on LANCOM 821+ DC12V ETH4 ETH3 ETH2 ETH1 Config (COM) ISDN S ADSL Reset » ¿ ´ ² ¶ º...
  • Page 22 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation º Reset switch The reset switch has two different functions depending on the length of time that it is pressed: Restarting the device (soft reset) – push the button for less than five seconds.
  • Page 23: Hardware Installation

    The installation of the LANCOM Router base station takes place in the follow- ing steps: LAN – connect the LANCOM Router to your LAN or to an individual PC. For that purpose, plug the included network cable (green plugs) into the »...
  • Page 24: Software Installation

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation ISDN – to connect the LANCOM Router to the ISDN, plug one end of the ² supplied ISDN connector cable (light blue plugs) in the ISDN/S port ´...
  • Page 25: Starting The Software Setup

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation 2.5.1 Starting the software setup Place the product CD into your drive. The setup program will start automati- cally. If the setup does not start automatically, run AUTORUN.EXE in the ...
  • Page 26: Basic Configuration

    What details are necessary? The Basic Settings Wizard is used to set the LANCOM VPN Routers basic TCP/ IP parameters and to protect the device with a configuration password. The following description of the information required by the wizard is divided into...
  • Page 27 This usually happens in the fol- lowing situations: Only a single PC is going to be attached to the LANCOM VPN Router Setting up a new network Fully automatic TCP/IP configuration will not be offered if you are integrating the LANCOM VPN Router into an existing TCP/IP LAN.
  • Page 28: Configuration Protection

    Client: The LANCOM VPN Router obtains its address information from another DHCP server; no address information is required. IP address and network mask for the LANCOM VPN Router Assign the LANCOM VPN Router a free IP address from your LAN's address range and enter the network mask. Gateway address...
  • Page 29: Settings For The Isdn Connection

    If you operate the LANCOM Router on a DSL link that is charged on a time basis you can set the maximum connection time in minutes. The budget can be completely deactivated by entering a value of '0'.
  • Page 30 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 3: Basic configuration If you cannot access an unconfigured LANCOM, the problem may be  due to the netmask of the LAN: with less than 254 possible hosts (net- mask >...
  • Page 31: Instructions For Webconfig

    Instructions for WEBconfig Device settings can be configured from any Web browser. WEBconfig config- uration software is an integral component of the LANCOM. A Web browser is all that is required to access WEBconfig. WEBconfig offers similar Setup Wiz- ards to LANconfig and hence provides the perfect conditions for easy config- uration of the LANCOM –...
  • Page 32 Windows Me or Windows 9x or with command ifconfig in the console under Linux). In this case, the LANCOM can be accessed with address x.x.x.254 (the “x”s stand for the first three blocks in the IP address of the configuration computer).
  • Page 33 Use LANconfig's “Find Device” function, or perform WEBconfig's “Device Search” from another yet accessible LANCOM. Use suitable tools to find out the IP address assigned to the LANCOM by DHCP and access the device directly using this IP address. Use the serial configuration interface to connect a computer running a terminal program to the device.
  • Page 34: Tcp/Ip Settings To Workstation Pcs

    DNS server – translates network names (www.lancom.de) or names of computers (www.lancom.de) to actual IP addresses. The LANCOM can perform the functions of both a default gateway and a DNS server. In addition, as a DHCP server it can also automatically assign valid IP addresses to all of the computers in the LAN.
  • Page 35 IP address and the IP addresses of the standard gateway and DNS server (via DHCP). The IP address of the LANCOM must be stored on the DHCP server so that the DHCP server transmits it to the PCs in the LAN as the standard gateway.
  • Page 36: Setting Up Internet Access

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 4: Setting up Internet access 4 Setting up Internet access The LANCOM provides a central point of Internet access for all of the comput- ers in the LAN. INTERNET...
  • Page 37 Billing by time or flatrate – select the method by which you are billed by your Internet provider. In case of billing by time, you can set the LANCOM to cut connections automatically if no data flows for a certain time (the hold time).
  • Page 38: The Internet Connection Wizard

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 4: Setting up Internet access The Internet Connection Wizard 4.1.1 Instructions for LANconfig Mark your device in the selection window. From the command line, select Extras Setup Wizard. In the selection menu, select the Setup Wizard, Set up Internet connec- tion and confirm the selection with Next.
  • Page 39: Instructions For Webconfig

    Finish. The Firewall Wizard Your LANCOM features a stateful inspection firewall and firewall filter that provides effective protection from the Internet for your LAN. The core concept of the stateful inspection firewall is that the only data transfers that are con- sidered to be valid are those implemented by the protected device itself.
  • Page 40: Lanconfig Wizard

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 4: Setting up Internet access 4.2.1 LANconfig Wizard Mark your LANCOM in the selection window. From the command line, select Extras Setup Wizard. In the selection menu, select the Setup Wizard, Configure firewall and confirm the selection with Continue.
  • Page 41: Linking Two Networks

    Security aspects You must, of course, protect your LAN against unauthorized access. A LANCOM Router therefore offers a whole range of security mechanisms that can provide an outstanding level of protection: VPN: Network couplings via VPN transmit data by IPSec. The data are encrypted by AES, 3-DES, Blowfish or CAST encryption algorithms.
  • Page 42: What Information Is Necessary

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks The ISDN call back function cannot be configured using the wizard. It  can only be set up in the expert configuration. For details, please see the reference manual.
  • Page 43 The stated ISDN caller ID is used to identify and authenticate callers. When a LANCOM Router receives a call, it compares the ISDN caller ID entered for the remote station with the actual caller ID transferred via the D channel.
  • Page 44: Settings For The Tcp/Ip Router

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks The password for the ISDN connection is an alternative to the use of the ISDN caller ID. It is always used to authenticate callers that do not send an ISDN caller ID.
  • Page 45: Settings For The Ipx Router

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks DNS access to the remote LAN Thanks to DNS, it is not only possible to access remote computers in a TCP/IP network via their IP address, but also by using freely defined names.
  • Page 46: Settings For Netbios Routing

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks The IPX network numbers in the head and branch offices are specified to the respective remote sides. IPX internal net: 00020002 IPX network no.: 00000009...
  • Page 47: Instructions For Lanconfig

    After finishing the configuration of both routers, you can test the network connection. Try to contact a computer in the remote LAN (e.g. with a ping). The LANCOM Router should automatically set up a connection to the remote station and contact the required computer.
  • Page 48: 1-Click-Vpn For Networks (Site-To-Site)

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks 1-Click-VPN for networks (site-to- site) The site-to-site coupling of networks is now very simple with the help of the 1-Click-VPN wizard. It is even possible to simultaneously couple multiple routers to a central network.
  • Page 49: Instructions For Webconfig

    After finishing the configuration of both routers, you can test the network connection. Try to contact a computer in the remote LAN (e.g. with a ping). The LANCOM Router should automatically set up a connection to the remote station and contact the required computer.
  • Page 50: Providing Dial-In Access

    Security aspects You must, of course, protect your LAN against unauthorized access. A LANCOM Router therefore offers a whole range of security mechanisms that can provide an outstanding level of protection: VPN: Network couplings via VPN transmit data by IPSec. The data are encrypted by AES, 3-DES, Blowfish or CAST encryption algorithms.
  • Page 51: General Information

    User name and password: Users authenticate themselves with this information when dialling in. Incoming number: The LANCOM Router uses the optional ISDN caller ID as an additional user authentication. This security function should not be used when users dial in from differing locations.
  • Page 52: Settings For Tcp/Ip

    This IP address can be permanently assigned when setting up a user. However, it is simpler to let the LANCOM Router automatically assign free IP addresses to users when they dial in. In this case you only need to specify the IP address range that the LANCOM Router should use for RAS users.
  • Page 53: Settings For Ipx

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 6: Providing dial- in access same applies in the other direction as well: computers in the LAN will also be able to access the remote machine. 6.1.3 Settings for IPX...
  • Page 54: Settings For The Dial-In Computer

    Internet access a VPN client LANCOM Systems offers a 30 days trial version of the LANCOM Advanced VPN Client on the LANCOM CD. A detailed description of the LANCOM Advanced VPN Client and a description of its installation can also be found on the CD.
  • Page 55: 1-Click-Vpn For Lancom Advanced Vpn Client

    Advanced VPN Client are very easy to set up with the Setup Wizard and exported to a file. This file can then be imported as a profile by the LANCOM Advanced VPN Client. All of the information about the LANCOM VPN Router's configuration is also included, and then supplemented with randomly gener- ated values (e.g.
  • Page 56: Instructions For Webconfig

    When setting up the VPN access, certain settings are made to optimize oper- ations with the LANCOM Advanced VPN Client, including: Gateway: If defined in the LANCOM VPN Router, a DynDNS name is used here, or alternatively the IP address FQDN: Combination of the name of the connection, a sequential number and the internal domain in the LANCOM VPN Router.
  • Page 57: Sending Faxes With Lancapi

    Chapter 7: Sending faxes with LANCAPI 7 Sending faxes with LANCAPI LANCAPI from LANCOM Systems is a special version of the popular CAPI inter- face. CAPI (Common ISDN Application Programming Interface) establishes the connection between ISDN adapters and communications programs. For their part, these programs provide the computers with office communications func- tions such as a fax machine or answering machine.
  • Page 58: Installation Of The Lancom Capi Faxmodem

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 7: Sending faxes with LANCAPI Installation of the LANCOM CAPI Faxmodem Select the entry Install LANCOM software in the setup program of your LANCOM CD. Highlight the option CAPI Faxmodem, click Next and follow the instruc- tions of the installation routine.
  • Page 59: Installation Of The Ms Windows Fax Service

    For checking the installation, click with the right mouse button on the fax-icon and select Properties. The LANCOM CAPI Faxmodem should now be entered into register 'devices'. Sending a fax After installing all required components, you have several possibilities to send a fax from your workstation PC.
  • Page 60: Send A Fax With The Ms Windows Fax Service

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 7: Sending faxes with LANCAPI Adjust the fax device as printer. Click on OK. A wizard appears, that will guide you through the remaining sending process. 7.3.2 Send a fax with the MS Windows fax service Open the window ’Printers and Faxes’...
  • Page 61: Security Settings

    Chapter 8: Security settings 8 Security settings Your LANCOM device has numerous security functions. You find in this chapter all information needed for an optimal protection of the base station. You can carry out the configuration of security settings very quickly ...
  • Page 62: Wizard For Webconfig

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 8: Security settings Select in the selection menu the setup wizard Control Security Settings and confirm your choice with Next. Enter your password in the following windows and select the allowed pro- tocols for the configuration access from local and remote networks.
  • Page 63 'Management' configuration area on the 'Security' tab. Have you activated the firewall? The stateful inspection firewall of LANCOM devices ensures that you local network cannot be attacked from the outside. Activate the firewall in LANconfig under 'Firewall/QoS' on the 'General' tab.
  • Page 64 'Routing' tab. Have you used filters to close critical ports? The firewall filters in LANCOM devices offer filter functions for individual computers or entire networks. It is possible to set up source and destina- tion filters for individual ports or port ranges. Furthermore, filters can be set for individual protocols or any combination of protocols (TCP/UDP/ ICMP).
  • Page 65 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 8: Security settings With the ISDN location verification, the device can only be operated at one particular ISDN connection. After being switched on, the device calls itself at the corresponding telephone number to check that it is still con- nected to the “correct”...
  • Page 66: Troubleshooting

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 9: Troubleshooting 9 Troubleshooting In this chapter, you will find suggestions and assistance for a few common dif- ficulties. No WAN connection is established After start-up the router automatically attempts to connect to the DSL pro- vider.
  • Page 67: Unwanted Connections Under Windows Xp

    A cabling defect might have occurred, if no data is transmitted over LAN or WAN connection, although the configuration of the devices does not show any discernible errors. You can test the cabling with the built-in cable tester of your LANCOM. Change under WEBconfig to menu item Expert configuration Status LAN statistics Cable test.
  • Page 68 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 9: Troubleshooting tested (e.g. “DSL1” or “LAN-1”). Pay attention to the correct spelling of the interfaces. Start the test for the specified interface by clicking on Execute. Change then to menu item Expert configuration...
  • Page 69: Appendix

    ITU G992.3 and ITU G.992.5 Annex A ISDN ISDN S0 bus Outband serial V.24/V.28 port (8 pol. mini DIN), in combination with LANCOM modem adapter kit suited for connection of external analogue or GSM modems Power supply 12V DC via external power supply. Permitted power supplies: NEST 12V/1A DC/S Hohlstkr 2.1/5.5mm (RoHS)
  • Page 70: Contact Assignment

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 10: Appendix 10.2 Contact assignment 10.2.1 WAN interface Only LANCOM 8-pin RJ45 socket 1711+ VPN Connector – – 10.2.2 ADSL interface 6-pin RJ11 socket Only LANCOM 821+ and LANCOM...
  • Page 71: Isdn S Interface

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 10: Appendix 10.2.3 ISDN S interface 8-pin RJ45 socket, corresponding to ISO 8877, EN 60603-7 Connector Line – – – – – – – – 10.2.4 Ethernet interface 10/100Base-TX...
  • Page 72: Configuration Interface (Outband)

    Connector 10.3 Declaration of conformity LANCOM Systems herewith declares that the devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995/5/EC directive. The CE declarations of conformity for your device are available in the appro-...
  • Page 73: Index

    LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index Index Numerics ISDN interface 10/100Base-TX LAN interface 3-DES Outband Cost budget Accounting ADSL Data frequencies Connect Default gateway Connector cable DHCP Transfer rates DHCP server Dial-up access Answering machine...
  • Page 74 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index D channel Hardware installation password for connection port ICMP ISDN connection Information symbols Basic settings Installation ISDN leased-line option ADSL ISDN modem configuration port ISDN PBX ISDN S connection...
  • Page 75 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index Software installation Ping Stateful-inspection firewall Power adapter Status display PPP client Power Prefix for external line Status displays Preshared Key Power Shared Secret Support Switch System preconditions System requirements...
  • Page 76 LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index WEBconfig System requirements Connector cable...

This manual is also suitable for:

1711+vpn1721 vpn

Table of Contents