Page 2
LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software included with this product is subject to written per- mission by LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical develop- ment.
Page 3
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Preface Preface Thank you for placing your trust in this LANCOM product. With the LANCOM you have chosen a powerful router that possesses inte- grated DSL respectively ADSL and ISDN interfaces by default as well as an integrated 4-port switch.
Page 4
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Preface Virtual Local Networks (VLAN) Wireless networks (WLAN) LANCAPI Further server services (DHCP, DNS, charge management) Model variants This user manual applies to the following models of the LANCOM series:...
Page 5
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Preface contact information for LANCOM Systems support can be found on a separate insert, or at the LANCOM Systems website. Notes symbols Very important instructions. If not followed, damage may result.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Contents Contents Introduction How does ADSL work? Which use does VPN offer? Firewall What does a router do? 1.4.1 Bridgehead to the WAN 1.4.2 Areas of deployment for routers...
Page 7
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Contents Instructions for WEBconfig Linking two networks What information is necessary? 5.1.1 General information 5.1.2 Settings for the TCP/IP router 5.1.3 Settings for the IPX router 5.1.4 Settings for NetBIOS routing...
Page 8
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Contents The security checklist Troubleshooting No WAN connection is established DSL data transfer is slow Unwanted connections under Windows XP Cable testing 10 Appendix 10.1 Performance data and specifications 10.2...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction 1 Introduction The models LANCOM 821 ADSL/ISDN, LANCOM 1621 ADSL/ISDN and LANCOM 1711 VPN are fully-featured routers that therefore also can be used in combination with the integrated firewall for providing secure Internet access to a complete local network (LAN).
Page 10
Switching node Splitter Splitter DSL access multiplexer Internet Router with integrated Subscriber ADSL provider ADSL modem In some models (like in the picture above) the ADSL modem is integrated directly in the router (e.g. LANCOM 821 ADSL/ISDN and LANCOM 1621 ADSL/...
Page 11
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction ISDN). Other models like LANCOM 1711 VPN are connected to the splitter using a separate ADSL modem. Telephone Telephone Switching node network Splitter Splitter DSL access...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction An 'Annex A' type LANCOM can only be used with ADSL-over-POTS service. Similarly, an 'Annex B' device can only be used with ADSL-over-ISDN service. Retrofitting a device to function with a different telephone system is not pos- sible.
Page 13
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction Conventional network infrastructure First, let's have a look at a typical network structure that can be found in this form or similar forms in many companies:...
Page 14
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction to the original investment costs, ongoing costs are also incurred for the administration and maintenance of this equipment. Networking via the Internet The following structure results when using the Internet instead of direct con-...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction technologies such as DSL (Digital Subscriber Line). But also a conventional ISDN line can be used. The technologies of the individual participants do not have to be compatible to one another, as would be the case for conventional direct connections.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction Denial-of-Service Protection Attacks from the Internet can be break-in attempts as well as attacks with the aim of blocking the accessibility and functionality of individual services. Therefore a LANCOM DSL is equipped with appropriate protec- tive mechanisms, which recognize well-known hacker attacks and which guarantee the functionality.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction Connecting a LAN to the Internet does not technically differ from coupling two LANs. The only difference is that it is not just a handful of computers behind the Internet provider's router.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction access to the Internet is required on either side of the network inter- connection. VPN tunnel via the Internet VPN gateways Conventional via ISDN Without VPN, a LAN to LAN interconnection can alternatively be real- ized via ISDN.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction LAN to LAN coupling via ISDN RAS server (via VPN) RAS server (via ISDN) IP router IPX router (via ISDN), e.g. for coupling of Novell networks or dialling into...
Page 20
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 1: Introduction Firewall filters for a selective locking of IP addresses, protocols and ports MAC address filter control e.g. the access of LAN workstations to IP routing functions Configuration protection to block “brute force attacks“...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation 2 Installation This chapter will assist you to quickly install hardware and software. First, check the package contents and system requirements. The device can be installed and configured quickly and easily if all prerequisites are fulfilled.
2.3.1 Status displays The front and the rear panels (LANCOM 821 ADSL/ISDN) of the unit feature a series of light emitting diodes (LEDs) that provide information on the status of the device. On the LANCOM 1621 ADSL/ISDN a two-lined display additionally shows information on the status.
Page 23
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation Top panel Only LANCOM 821 The two LEDs on the top panel provide a convenient overview of the most ADSL/ISDN important status information, especially when the device is installed vertically.
Page 24
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation The power LED flashes red/green in alternation until a configuration password has been specified. Without a configuration password, the configuration data of the LANCOM is insecure. Under normal circum- stances, you would assign a configuration password during the basic configuration (see instructions in the following chapter).
Page 25
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation ADSL Link (only Connection status of the ADSL link: LANCOM 821 ADSL/ISDN and No active connection LANCOM 1621 ADSL/ISDN) green flashing Establishing first connection green inverse flashing...
Page 26
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation ISDN status Status of ISDN S connection: Not connected or no S voltage (no error message) green blinking Initializing D-channel (establishing contact with the connec- tion point)
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation Security (only Status of the firewall. Indicates the status of the security settings and averted LANCOM 1711 attacks to the protected network. VPN) green constantly on Security settings ok.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation LANCOM 1711 VPN AC12V LAN4 LAN3 LAN2 LAN1 ISDN S Config(COM) Reset 10/100Mbit/s Voltage switch Connection for the included power adapter Switch with four 10/100Base-Tx connections...
Page 29
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation The LAN connector identifies automatically the transfer rate (10/100 Mbps) of the connected network device (autosensing). A parallel connec- tion of devices with different speeds and types is possible.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation Operational? – After a short device self-test the Power LED will be per- manently lit. Green LAN LEDs indicate the LAN sockets that have function- ing connections.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 2: Installation In Setup select Install LANCOM Software. The following selection menus will appear on the screen: 2.5.2 Which software should you install? LANconfig is the configuration program for all LANCOM routers and Wireless LAN access points.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration 3 Basic configuration The basic configuration can be performed on a step-by-step basis using a convenient setup wizard to guide you through the setup process and prompt you for the required information.
Page 33
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration New LAN—fully automatic configuration possible If all connected network devices are still unconfigured, the setup wizard will suggest fully automatic TCP/IP configuration. This may be the case in the fol-...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration Enable DHCP server? Disable the DHCP server function in the LANCOM if you would like to have a different DHCP server assign the IP addresses in your LAN.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration 3.1.5 Connect charge protection Connect charge protection blocks connections that go beyond a previously set amount, protecting you from unexpectedly high connection costs. In LANCOM, there are three independent budgets: For DSL access, you can set a maximum connection time in minutes.
Page 36
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration mask > '255.255.255.0'), please ensure that the IP address 'x.x.x.254' is located in your own subnet. If you have chosen automatic TCP/IP configuration, please continue with...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration Section ’TCP/IP settings to workstation PCs’ auf Seite 41 will describe the settings required for the individual workstations in the LAN. Instructions for WEBconfig To configure the router with WEBconfig you must know how to address it in the LAN.
Page 38
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration address x.x.x.254 ( “x” stands for the first three blocks in the IP address of the configuration PC). Network with DHCP server If a DHCP server is active in the LAN to assign IP addresses, an unconfigured LANCOM device will turn off its own DHCP server.
Page 39
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration If you cannot access an unconfigured LANCOM, the problem may be due to the netmask of the LAN: with less than 254 possible hosts (net- mask >...
Page 40
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration If you would like to configure the TCP/IP settings manually, assign an available address from a suitable address range to the LANCOM. Also set whether or not it is to operate as a DHCP server. Confirm your entry with Apply.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration The basic setup wizard reports that all the necessary information has been provided. You can end the wizard with Go on. TCP/IP settings to workstation PCs The correct addressing of all devices within a LAN is extremely important for TCP/IP networks.
Page 42
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 3: Basic configuration the network configuration of the workstation computers, please refer to the documentation of your operating system.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 4: Setting up Internet access 4 Setting up Internet access All computers in the LAN can take advantage of the central Internet access of the LANCOM. The connection to the Internet provider can be established via any WAN connection.
Page 44
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 4: Setting up Internet access address), default gateway and DNS server. These values can be received automatically from providers that support DHCP. Protocol: PPPoE, PPTP or Plain Ethernet (IPoE)
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 4: Setting up Internet access Instructions for LANconfig Highlight the LANCOM in the selection window. From the menu bar, select Tools Setup Wizard. From the menu, select the Setup Internet access wizard and click Next.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks 5 Linking two networks With the network interconnection (also known as LAN to LAN coupling) of the LANCOM, two local networks are linked. The LAN to LAN coupling can be...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks The ISDN call back function cannot be configured using the wizard. It can only be set up in the expert configuration. For details, please see the reference manual.
Page 48
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks Coupling Entry Gateway 1 Gateway 2 IP address of remote station '10.0.2.100' '10.0.1.100' IP network address of the remote network '10.0.2.0' '10.0.1.0' Netmask of the remote network 255.255.255.0...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks The password for the ISDN connection is an alternative to the use of the ISDN caller ID. It is always used to authenticate callers that do not send an ISDN caller ID.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks DNS access to the remote LAN Thanks to DNS, it is not only possible to access remote computers in a TCP/IP network via their IP address, but also by using freely defined names.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks for the LAN of the branch office for the higher-level WAN The IPX network numbers in the head and branch offices are specified to the respective remote sides.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks Remote Windows workgroups do not appear in the Windows Network Neighbourhood, but can only be contacted directly (e.g. via Find Computers). Instructions for LANconfig Perform the configuration on both routers, one at a time.
Page 53
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 5: Linking two networks From the main menu, launch the 'Connect two local area networks' wiz- ard. Follow the wizard's instructions and enter the required information. The wizard will return a message to indicate that it has all the information it needs.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access 6 Providing dial-up access Your LANCOM supports dial-up connections to permit individual computers full access to your network. This service is also known as RAS (Remote Access Service).
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access 6.1.1 General information The following entries are required to set up a RAS connection. The first column indicates whether the information is required for a connection via VPN (standard method using “preshared keys“) and/or ISDN .
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access The ISDN calling line identity (CLI) The ISDN caller ID—also known as CLI (Calling Line Identity)—this is the telephone number of the caller which is transmitted to the participant receiving the call. As a rule, it consists of the country and area codes and an MSN.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access 6.1.3 Settings for IPX Two IPX network numbers must be provided for remote access to an IPX net- work: the IPX network number of the head office...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access puters in the remote network (via Find Computers, not through the Network Neighbourhood). Settings for the dial-in computer 6.2.1 Dial-up via VPN For dialing into a network via VPN a workstation requires:...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access Terminal adapter or ISDN card set to PPPHDLC PPP selected as the Dial-Up server type, 'Enable software compression' and 'Require data encryption' unchecked...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 6: Providing dial- up access Instructions for WEBconfig RAS access via VPN cannot be configured using the wizard under WEBconfig yet. It can only be set up in the expert configuration. For details, please refer to the reference manual.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI 7 Sending faxes with LANCAPI LANCAPI from LANCOM is a special version of the popular CAPI interface. CAPI (Common ISDN Application Programming Interface) establishes the con- nection between ISDN adapters and communications programs.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI Installation of the LANCOM CAPI fax modem Select the entry Install LANCOM software in the setup program of your LANCOM CD. Highlight the option CAPI fax modem, click Next and follow the instruc-...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI When the installation was successful, the LANCOM CAPI fax modem is entered into the Phone and Modem Options of the control panel. Installation of the MS Windows fax service Select the option Printers and Faxes from the control panel.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI For checking the installation, click with the right mouse button on the fax-icon and select Properties. The LANCOM CAPI fax modem should now be entered into register 'devices'.
Page 65
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 7: Sending faxes with LANCAPI The fax client console will open. Select the menu item Send a Fax. A wiz- ard will assist you through the remaining sending process.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings 8 Security settings Your LANCOM has numerous security functions. You find in this chapter all information you need for an optimal protection. The security settings wizard Access to the configuration of a device permits not only to read out critical information such as WEP key or Internet password.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings In a next step parameters of the configuration lock like number of failed log-in attempts and the duration of the lock can be adjusted. Now activate Stateful Inspection, ping-blocking and Stealth mode in the the firewall configuration.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings Mark your LANCOM in the selection window. Select from the command bar Extras Setup Wizard. Select in the selection menu the setup wizard Configuring Firewall and confirm your choice with Next.
Page 69
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings Have you assigned a password for the configuration? The simplest option for the protection of the configuration is the estab- lishment of a password. As long as a password hasn't been set, anyone can change the configuration of the device.
Page 70
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 8: Security settings individually for each route in the routing table. The routing table can be found in the LANconfig in the 'IP router' configuration section on the 'Routing' tab.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 9: Troubleshooting 9 Troubleshooting In this chapter, you will find suggestions and assistance for a few common dif- ficulties. No WAN connection is established After start-up the router automatically attempts to connect to the access pro- vider.
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 9: Troubleshooting Numerous other factors involving the Internet itself can also influence the transfer rate. Increasing the TCP/IP window size under Windows If the actual transfer rate of a DSL connection is significantly below the fastest rate listed by the provider, there are only a few possible causes (apart from the above-mentioned external factors) which may involve one's own equipment.
Page 73
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 9: Troubleshooting tested (e.g. “DSL1” or “LAN-1”). Pay attention to the correct spelling of the interfaces. Start the test for the specified interface by clicking on Execute. Change then to menu item Expert configuration...
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 10: Appendix 10 Appendix 10.1 Performance data and specifications LANCOM 821 LANCOM 1621 LANCOM 1711 ADSL/ISDN ADSL/ISDN Connections Ethernet LAN 4x 10/100Base-TX, auto sensing, switch with node/hub auto sensing All ports can be switched into the ’Private...
Page 80
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 11: Index provider Lock ports transfer protocol IP address DSL technologies IP address of the LANCOM DSL transfer protocol IP masquerading IP router IPoE Encryption IPSec Binding Filter mechanisms...
Page 81
LANCOM 821 ADSL/ISDN – LANCOM 1621 ADSL/ISDN – LANCOM 1711 VPN Chapter 11: Index LAN to LAN coupling PPPoE Required information PPTP LANCAPI Preshared Key LANCOM setup Shared Secret LANCOM VPN Option LANconfig Quality-of-Service run setup wizards LANmonitor LANtools Remote Access Service (RAS)
Need help?
Do you have a question about the 821 ADSL/ISDN and is the answer not in the manual?
Questions and answers