Page 3
LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software included with this product is subject to written per- mission by LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical develop- ment.
Page 4
Preface Thank you for placing your trust in this LANCOM Systems product. With the LANCOM Router you have chosen a powerful router that possesses integrated DSL respectively ADSL and ISDN interfaces by default as well as an integrated 4-port switch. With this router you can simply and comfortably connect individual PCs or whole local networks to the high-speed Internet.
Page 5
It also contains all of the important technical specifications. The reference manual can be found on the LANCOM product CD as an Acrobat (PDF) document. It is designed as a supplement to the user manual and goes into detail on topics that apply to a variety of models.
Page 6
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Preface contact addresses of LANCOM support, please see the enclosed leaf- let or the LANCOM Systems website. Information symbols Very important instructions. Failure to observe this may result in damage.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Contents Contents 1 Introduction 1.1 How do ADSL and ADSL 2+ work? 1.2 What does VPN offer? 1.3 What can your LANCOM Router do? 2 Installation 2.1 Package contents 2.2 System requirements 2.3 Status displays, interfaces and hardware installation...
Page 8
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Contents 5 Linking two networks 5.1 What information is necessary? 5.1.1 General information 5.1.2 Settings for the TCP/IP router 5.1.3 Settings for the IPX router 5.1.4 Settings for NetBIOS routing 5.2 Instructions for LANconfig...
Page 9
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Contents 9 Troubleshooting 9.1 No WAN connection is established 9.2 DSL data transfer is slow 9.3 Unwanted connections under Windows XP 9.4 Cable testing 10 Appendix 10.1 Performance data and specifications 10.2 Contact assignment...
LANCOM 1721 VPN and LANCOM 1711+ VPN to act as powerful Dynamic VPN gateways for external offices or mobile users. The LANCOM Router models offer each a DSL or ADSL connector and also an ISDN connector. The ISDN line can be used as back-up for the DSL connection,...
equipped to support VPN with 5 active tunnels. With the additional LANCOM VPN Option, VPN support can be extended to 25 active tun- nels (incl. activated hardware accelerator). The following structure results when using the Internet instead of direct con-...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 1: Introduction » The RAS PCs connect to the headquarters LAN via the Internet. The Internet is available virtually everywhere and typically has low access costs. Significant savings can thus be achieved in relation to switched or ded- icated connections, especially over long distances.
Page 13
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 1: Introduction ✔ ✔ ✔ Bridge function for coupling networks via ISDN connection ✔ ✔ Port-Mapping to set up LAN ports as additional WAN ports ✔ ✔ ✔ Policy-based routing for policy-based selection of target routes...
Page 14
✔ ✔ FirmSafe with firmware versions for absolutely secure software upgrades Optional software extensions ✔ ✔ LANCOM VPN Option with 25 active tunnels for protection of network couplings Optional hardware extensions ✔ ✔ ✔ LANCOM Modem Adapter Kit for connection of analog or GSM modems...
LANCOM CD ✔ ✔ ✔ Printed documentation If anything is missing, please contact your retailer or the address stated on the delivery slip of the unit. System requirements Computers that connect to a LANCOM must meet the following minimum requirements:...
Flickering means, that the LED is switched on and off in irregular inter- vals. Front side The various LANCOM Router models have different numbers of indicators on the front panel depending on their functionality. LANCOM 821+ and µ...
Page 17
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation · LANCOM 1711+ VPN ² ¶ º ´ ¾ µ 1711+ VPN The two top-mounted LEDs enable the main function status to be assessed even if the device is positioned vertically.
Page 18
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation tion about a later assignment of the configuration password see the section “Security settings”. Flashing Power LED but no connection? There's no need to worry if the Power LED blinks red and you can no longer connect to the WAN.
Page 19
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation Flickering Error (CRC error, framing error, etc.) On (permanently) No synchronization, searching for remote station Red/ Blinking Hardware error orange ¿ ADSL data Information on data traffic at the ADSL connector:...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation If the ISDN status LED goes off automatically, this does not indicate an error at the S bus. It is in fact because several ISDN connections...
Page 21
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation LANCOM 821+ and LANCOM 1721 VPN not available on LANCOM 821+ DC12V ETH4 ETH3 ETH2 ETH1 Config (COM) ISDN S ADSL Reset » ¿ ´ ² ¶ º...
Page 22
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation º Reset switch The reset switch has two different functions depending on the length of time that it is pressed: Restarting the device (soft reset) – push the button for less than five seconds.
The installation of the LANCOM Router base station takes place in the follow- ing steps: LAN – connect the LANCOM Router to your LAN or to an individual PC. For that purpose, plug the included network cable (green plugs) into the »...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation ISDN – to connect the LANCOM Router to the ISDN, plug one end of the ² supplied ISDN connector cable (light blue plugs) in the ISDN/S port ´...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 2: Installation 2.5.1 Starting the software setup Place the product CD into your drive. The setup program will start automati- cally. If the setup does not start automatically, run AUTORUN.EXE in the ...
What details are necessary? The Basic Settings Wizard is used to set the LANCOM VPN Routers basic TCP/ IP parameters and to protect the device with a configuration password. The following description of the information required by the wizard is divided into...
Page 27
This usually happens in the fol- lowing situations: Only a single PC is going to be attached to the LANCOM VPN Router Setting up a new network Fully automatic TCP/IP configuration will not be offered if you are integrating the LANCOM VPN Router into an existing TCP/IP LAN.
Client: The LANCOM VPN Router obtains its address information from another DHCP server; no address information is required. IP address and network mask for the LANCOM VPN Router Assign the LANCOM VPN Router a free IP address from your LAN's address range and enter the network mask. Gateway address...
If you operate the LANCOM Router on a DSL link that is charged on a time basis you can set the maximum connection time in minutes. The budget can be completely deactivated by entering a value of '0'.
Page 30
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 3: Basic configuration If you cannot access an unconfigured LANCOM, the problem may be due to the netmask of the LAN: with less than 254 possible hosts (net- mask >...
Instructions for WEBconfig Device settings can be configured from any Web browser. WEBconfig config- uration software is an integral component of the LANCOM. A Web browser is all that is required to access WEBconfig. WEBconfig offers similar Setup Wiz- ards to LANconfig and hence provides the perfect conditions for easy config- uration of the LANCOM –...
Page 32
Windows Me or Windows 9x or with command ifconfig in the console under Linux). In this case, the LANCOM can be accessed with address x.x.x.254 (the “x”s stand for the first three blocks in the IP address of the configuration computer).
Page 33
Use LANconfig's “Find Device” function, or perform WEBconfig's “Device Search” from another yet accessible LANCOM. Use suitable tools to find out the IP address assigned to the LANCOM by DHCP and access the device directly using this IP address. Use the serial configuration interface to connect a computer running a terminal program to the device.
DNS server – translates network names (www.lancom.de) or names of computers (www.lancom.de) to actual IP addresses. The LANCOM can perform the functions of both a default gateway and a DNS server. In addition, as a DHCP server it can also automatically assign valid IP addresses to all of the computers in the LAN.
Page 35
IP address and the IP addresses of the standard gateway and DNS server (via DHCP). The IP address of the LANCOM must be stored on the DHCP server so that the DHCP server transmits it to the PCs in the LAN as the standard gateway.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 4: Setting up Internet access 4 Setting up Internet access The LANCOM provides a central point of Internet access for all of the comput- ers in the LAN. INTERNET...
Page 37
Billing by time or flatrate – select the method by which you are billed by your Internet provider. In case of billing by time, you can set the LANCOM to cut connections automatically if no data flows for a certain time (the hold time).
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 4: Setting up Internet access The Internet Connection Wizard 4.1.1 Instructions for LANconfig Mark your device in the selection window. From the command line, select Extras Setup Wizard. In the selection menu, select the Setup Wizard, Set up Internet connec- tion and confirm the selection with Next.
Finish. The Firewall Wizard Your LANCOM features a stateful inspection firewall and firewall filter that provides effective protection from the Internet for your LAN. The core concept of the stateful inspection firewall is that the only data transfers that are con- sidered to be valid are those implemented by the protected device itself.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 4: Setting up Internet access 4.2.1 LANconfig Wizard Mark your LANCOM in the selection window. From the command line, select Extras Setup Wizard. In the selection menu, select the Setup Wizard, Configure firewall and confirm the selection with Continue.
Security aspects You must, of course, protect your LAN against unauthorized access. A LANCOM Router therefore offers a whole range of security mechanisms that can provide an outstanding level of protection: VPN: Network couplings via VPN transmit data by IPSec. The data are encrypted by AES, 3-DES, Blowfish or CAST encryption algorithms.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks The ISDN call back function cannot be configured using the wizard. It can only be set up in the expert configuration. For details, please see the reference manual.
Page 43
The stated ISDN caller ID is used to identify and authenticate callers. When a LANCOM Router receives a call, it compares the ISDN caller ID entered for the remote station with the actual caller ID transferred via the D channel.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks The password for the ISDN connection is an alternative to the use of the ISDN caller ID. It is always used to authenticate callers that do not send an ISDN caller ID.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks DNS access to the remote LAN Thanks to DNS, it is not only possible to access remote computers in a TCP/IP network via their IP address, but also by using freely defined names.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks The IPX network numbers in the head and branch offices are specified to the respective remote sides. IPX internal net: 00020002 IPX network no.: 00000009...
After finishing the configuration of both routers, you can test the network connection. Try to contact a computer in the remote LAN (e.g. with a ping). The LANCOM Router should automatically set up a connection to the remote station and contact the required computer.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 5: Linking two networks 1-Click-VPN for networks (site-to- site) The site-to-site coupling of networks is now very simple with the help of the 1-Click-VPN wizard. It is even possible to simultaneously couple multiple routers to a central network.
After finishing the configuration of both routers, you can test the network connection. Try to contact a computer in the remote LAN (e.g. with a ping). The LANCOM Router should automatically set up a connection to the remote station and contact the required computer.
Security aspects You must, of course, protect your LAN against unauthorized access. A LANCOM Router therefore offers a whole range of security mechanisms that can provide an outstanding level of protection: VPN: Network couplings via VPN transmit data by IPSec. The data are encrypted by AES, 3-DES, Blowfish or CAST encryption algorithms.
User name and password: Users authenticate themselves with this information when dialling in. Incoming number: The LANCOM Router uses the optional ISDN caller ID as an additional user authentication. This security function should not be used when users dial in from differing locations.
This IP address can be permanently assigned when setting up a user. However, it is simpler to let the LANCOM Router automatically assign free IP addresses to users when they dial in. In this case you only need to specify the IP address range that the LANCOM Router should use for RAS users.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 6: Providing dial- in access same applies in the other direction as well: computers in the LAN will also be able to access the remote machine. 6.1.3 Settings for IPX...
Internet access a VPN client LANCOM Systems offers a 30 days trial version of the LANCOM Advanced VPN Client on the LANCOM CD. A detailed description of the LANCOM Advanced VPN Client and a description of its installation can also be found on the CD.
Advanced VPN Client are very easy to set up with the Setup Wizard and exported to a file. This file can then be imported as a profile by the LANCOM Advanced VPN Client. All of the information about the LANCOM VPN Router's configuration is also included, and then supplemented with randomly gener- ated values (e.g.
When setting up the VPN access, certain settings are made to optimize oper- ations with the LANCOM Advanced VPN Client, including: Gateway: If defined in the LANCOM VPN Router, a DynDNS name is used here, or alternatively the IP address FQDN: Combination of the name of the connection, a sequential number and the internal domain in the LANCOM VPN Router.
Chapter 7: Sending faxes with LANCAPI 7 Sending faxes with LANCAPI LANCAPI from LANCOM Systems is a special version of the popular CAPI inter- face. CAPI (Common ISDN Application Programming Interface) establishes the connection between ISDN adapters and communications programs. For their part, these programs provide the computers with office communications func- tions such as a fax machine or answering machine.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 7: Sending faxes with LANCAPI Installation of the LANCOM CAPI Faxmodem Select the entry Install LANCOM software in the setup program of your LANCOM CD. Highlight the option CAPI Faxmodem, click Next and follow the instruc- tions of the installation routine.
For checking the installation, click with the right mouse button on the fax-icon and select Properties. The LANCOM CAPI Faxmodem should now be entered into register 'devices'. Sending a fax After installing all required components, you have several possibilities to send a fax from your workstation PC.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 7: Sending faxes with LANCAPI Adjust the fax device as printer. Click on OK. A wizard appears, that will guide you through the remaining sending process. 7.3.2 Send a fax with the MS Windows fax service Open the window ’Printers and Faxes’...
Chapter 8: Security settings 8 Security settings Your LANCOM device has numerous security functions. You find in this chapter all information needed for an optimal protection of the base station. You can carry out the configuration of security settings very quickly ...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 8: Security settings Select in the selection menu the setup wizard Control Security Settings and confirm your choice with Next. Enter your password in the following windows and select the allowed pro- tocols for the configuration access from local and remote networks.
Page 63
'Management' configuration area on the 'Security' tab. Have you activated the firewall? The stateful inspection firewall of LANCOM devices ensures that you local network cannot be attacked from the outside. Activate the firewall in LANconfig under 'Firewall/QoS' on the 'General' tab.
Page 64
'Routing' tab. Have you used filters to close critical ports? The firewall filters in LANCOM devices offer filter functions for individual computers or entire networks. It is possible to set up source and destina- tion filters for individual ports or port ranges. Furthermore, filters can be set for individual protocols or any combination of protocols (TCP/UDP/ ICMP).
Page 65
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 8: Security settings With the ISDN location verification, the device can only be operated at one particular ISDN connection. After being switched on, the device calls itself at the corresponding telephone number to check that it is still con- nected to the “correct”...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 9: Troubleshooting 9 Troubleshooting In this chapter, you will find suggestions and assistance for a few common dif- ficulties. No WAN connection is established After start-up the router automatically attempts to connect to the DSL pro- vider.
A cabling defect might have occurred, if no data is transmitted over LAN or WAN connection, although the configuration of the devices does not show any discernible errors. You can test the cabling with the built-in cable tester of your LANCOM. Change under WEBconfig to menu item Expert configuration Status LAN statistics Cable test.
Page 68
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Chapter 9: Troubleshooting tested (e.g. “DSL1” or “LAN-1”). Pay attention to the correct spelling of the interfaces. Start the test for the specified interface by clicking on Execute. Change then to menu item Expert configuration...
ITU G992.3 and ITU G.992.5 Annex A ISDN ISDN S0 bus Outband serial V.24/V.28 port (8 pol. mini DIN), in combination with LANCOM modem adapter kit suited for connection of external analogue or GSM modems Power supply 12V DC via external power supply. Permitted power supplies: NEST 12V/1A DC/S Hohlstkr 2.1/5.5mm (RoHS)
Connector 10.3 Declaration of conformity LANCOM Systems herewith declares that the devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995/5/EC directive. The CE declarations of conformity for your device are available in the appro-...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index Index Numerics ISDN interface 10/100Base-TX LAN interface 3-DES Outband Cost budget Accounting ADSL Data frequencies Connect Default gateway Connector cable DHCP Transfer rates DHCP server Dial-up access Answering machine...
Page 74
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index D channel Hardware installation password for connection port ICMP ISDN connection Information symbols Basic settings Installation ISDN leased-line option ADSL ISDN modem configuration port ISDN PBX ISDN S connection...
Page 75
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index Software installation Ping Stateful-inspection firewall Power adapter Status display PPP client Power Prefix for external line Status displays Preshared Key Power Shared Secret Support Switch System preconditions System requirements...
Page 76
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721 VPN Index WEBconfig System requirements Connector cable...
Need help?
Do you have a question about the 821+ and is the answer not in the manual?
Questions and answers