Providing Dial-In Access; Which Details Are Necessary - Lancom 1711+ VPN Manual

6 Providing dial-in access

Your LANCOM can be set up with dial-in access accounts enabling individual
computers to dial-in to your LAN and fully participate in the network for the
duration of the connection. This service is called RAS (Remote Access Service).
RAS access can be implemented in two basic ways:
VPN: RAS access via VPN provides a highly secure Internet-based connec-
tion between the LAN and the dial-in computer. The router in the LAN
must support VPN; the dial-in computer needs any form of Internet access
and a VPN client.
ISDN: RAS access via ISDN provides a direct connection between the LAN
and the dial-in computer over an ISDN phone line. The router in the LAN
needs an ISDN interface. The dial-in computer needs an ISDN adapter or
an ISDN modem. The protocol of data transfer is PPP. This ensures that all
normal devices and operating systems are supported.
Setting up dial-in access is carried out with the familiar convenience of a
Setup Wizard.
Security aspects
Of course your LAN has to be protected from unauthorized access.
For this reason, a LANCOM provides a range of security mechanisms that offer
an outstanding level of protection.
VPN: VPN-based connectivity relies on IPsec for transferring data. The
encryption methods employed are 3-DES, AES or Blowfish
ISDN: Security for ISDN-based connectivity relies on password protection,
a check of the ISDN number, and the call-back function.
The ISDN call-back function cannot be set up by Wizard, but in the

Expert Configuration only. Refer to the reference manual for informa-
tion on this.
6.1

Which details are necessary?

The Wizard sets up an access account for just one user. For additional users,
launch the Wizard again.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN
Chapter 6: Providing dial- in access
51