Advertisement
LANCOM L-322agn
Security
Intrusion Prevention
IP spoofing
Access control lists
Denial of Service protection
General
URL blocker
Password protection
Alerts
Authentication mechanisms
WLAN protocol filters
Adjustable reset button
IP redirect
High availability / redundancy
VRRP
FirmSafe
Analog/GSM modem backup
Line monitoring
Routing functions
Router
Advanced Routing and Forwarding
HTTP
DNS
DHCP
NetBIOS
NTP
Policy- based routing
Dynamic routing
Layer 2 functions
ARP lookup
COM port server
COM port forwarding
LAN protocols
IP
Rapid Spanning Tree
WAN protocols
Ethernet
Monitoring and blocking of login attempts and port scans
Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowed
Filtering of IP or MAC addresses and preset protocols for configuration access
Protection from fragmentation errors and SYN flooding
Detailed settings for handling reassembly, PING, stealth mode and AUTH port
Filtering of unwanted URLs based on DNS hitlists and wildcard filters
Password- protected configuration access can be set for each interface
Alerts via e- mail, SNMP- Traps and SYSLOG
EAP- TLS, EAP- TTLS, PEAP, MS- CHAP, MS- CHAPv2 as EAP authentication mechanisms, PAP, CHAP, MS- CHAP and MS- CHAPv2
as PPP authentication mechanisms
Limitation of the allowed transfer protocols, source and target addresses on the WLAN interface
Adjustable reset button for 'ignore', 'boot- only' and 'reset- or- boot'
Fixed redirection of any packet received over the WLAN interface to a dedicated target address
VRRP (Virtual Router Redundancy Protocol) for backup in case of failure of a device or remote station. Enables passive standby
groups or reciprocal backup between multiple active devices including load balancing and user definable backup priorities
For completely safe software upgrades thanks to two stored firmware versions, incl. test mode for firmware updates
Optional operation of an analog or GSM modem at the serial interface
Line monitoring with LCP echo monitoring, up to 4 addresses for end- to- end monitoring with ICMP polling
IP and NetBIOS/IP multi- protocol router
Separate processing of 8 contexts due to virtualization of the routers. Mapping to VLANs and complete independent
management and configuration of IP networks in the device, i.e. individual settings for DHCP, DNS, Firewalling, QoS, VLAN,
Routing etc. Automatic learning of routing tags for ARF contexts from the routing table
HTTP and HTTPS server for configuration by web interface
DNS client, DNS server, DNS relay, DNS proxy and dynamic DNS client
DHCP client, DHCP relay and DHCP server with autodetection. Cluster of several LANCOM DHCP servers per context (ARF
network) enables caching of all DNS assignments at each router. DHCP forwarding to multiple (redundant) DHCP servers
NetBIOS/IP proxy
NTP client and SNTP server, automatic adjustment for daylight- saving time
Policy- based routing based on routing tags. Based on firewall rules, certain data types are marked for specific routing, e.g. to
particular remote sites or lines
Dynamic routing with RIPv2. Learning and propagating routes; separate settings for LAN and WAN. Extended RIPv2 including
HopCount, Poisoned Reverse, Triggered Update for LAN (acc. to RFC 2453) and WAN (acc. to RFC 2091) as well as filter options
for propagation of routes. Definition of RIP sources with wildcards
Packets sent in response to LCOS service requests (e.g. for Telnet, SSH, SNTP, SMTP, HTTP(S), SNMP, etc.) via Ethernet can be
routed directly to the requesting station (default) or to a target determined by ARP lookup
COM- port server for the DIN interface. For a serial device connected to it, the server manages its own virtual COM port via Telnet
(RFC 2217) for remote maintenance (works with popular virtual COM- port drivers compliant with RFC 2217). Switchable newline
conversion and alternative binary mode. TCP keepalive according to RFC 1122 with configurable keepalive interval,
retransmission timeout and retries
ARP, proxy ARP, BOOTP, DHCP, DNS, HTTP, HTTPS, IP, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RIP- 1, RIP- 2, RTP,
SIP, SNMP, TCP, TFTP, UDP, VRRP, VLAN
802.1d Spanning Tree and 802.1w Rapid Spanning Tree support for dynamic path selection with redundant layer 2 connections
PPPoE, Multi- PPPoE, ML- PPP, PPTP (PAC or PNS) and plain Ethernet (with or without DHCP), RIP- 1, RIP- 2, VLAN, IP
Scope of features: as of LCOS version 8.5x
Advertisement
