Lancom 3550 Wireless User Manual

Lancom systems network router user manual
Table of Contents

Advertisement

Quick Links

LANCOM 3550 Wireless

Advertisement

Table of Contents
loading

Summary of Contents for Lancom 3550 Wireless

  • Page 1 LANCOM 3550 Wireless...
  • Page 2 LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software included with this product is subject to written per- mission by LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical develop- ment.
  • Page 3 ISDN. Furthermore, it is significantly less prone tofailure as there are no cables which are at risk from construction works. Using VRRP with the LANCOM 3550 Wireless offers fully vendor-inde- pendent high availa-bility and a completely transparent, automatic switch of media in the event of backup.
  • Page 4 Our online services (www.lancom-systems.com) are available to you  around the clock should you have any queries regarding the topics discussed in this manual or require any further support. In addition support from LANCOM Systems is also available to you. Telephone info@lancom.de...
  • Page 5 LANCOM Systems support can be found on a separate insert, or at the LANCOM Systems website. Notes symbols Very important instructions. If not followed, damage may result.  Important instruction that should be followed. ...
  • Page 6: Table Of Contents

    LANCOM 3550 Wireless Contents Contents 1 Introduction 1.1 What is a Wireless LAN? 1.2 The advantages of the UMTS/HSPDA solution 1.3 What can your LANCOM Router do? 2 Installation 2.1 Package contents 2.2 System preconditions 2.3 Status displays, interfaces an hardware installation 2.4 The back of the unit...
  • Page 7 5.3.4 Set up a time limit 6 Point- to-point connections 6.1 Antenna alignment for P2P operations 6.2 Configuration 6.3 Access points in relay mode 6.4 Security for point-to-point connections 6.4.1 Encryption with 802.11i/WPA 6.4.2 LEPS for P2P connections LANCOM 3550 Wireless Contents...
  • Page 8 LANCOM 3550 Wireless Contents 7 Security settings 7.1 Security for the Wireless LAN 7.2 Tips for handling keys 7.3 The security settings wizard 7.4 The firewall wizard 7.5 The security checklist 8 Options and accessories 8.1 Optional LANCOM Wireless Router antennas 8.2 LANCOM Public Spot Option...
  • Page 9: Introduction

    Devices which have no built-in wireless interface can be upgraded with a supplement card or an adapter. LANCOM Systems offers wireless adapters by its AirLancer product  line. An AirLancer wireless adapter enables a device (e.g. PC or note- book) for access to the Wireless LAN.
  • Page 10: The Advantages Of The Umts/Hspda Solution

    LANCOM 3550 Wireless Chapter 1: Introduction Larger Wireless LANs, connection to LANs with one or more base stations (infrastructure network) Setting-up of an Internet access Connecting two LANs via a direct radio link (point-to-point mode) Connecting of devices with Ethernet interface via base stations (client...
  • Page 11: Mobile Conference Room

    WLAN interface; the only thing missing for mobile Internet or VPN access is a WAN interface. With the wireless Internet access over UMTS/ HSPDA or GPRS, mobile working areas can be created very easily. LANCOM 3550 Wireless Chapter 1: Introduction...
  • Page 12: Umts/Hspda Backup

    LANCOM 3550 Wireless Chapter 1: Introduction Mobile WLAN, e.g. for a „mobile conference room“. For a group of staff members, who e.g. often work together on projects at a customer’s location, a so-called mobile conference room can be established. The access point then only has to be configured once by the administrator; the staff members on location simply have to supply the device with power and slot in the data card.
  • Page 13 VRRP, LANCOM devices can link the backup event triggering func- tion to the availability of a data connection. With this additional feature, Internet connection over DSL Internet VPN connection to headquarters Backup connection over UMTS/HSPDA LANCOM 3550 Wireless Chapter 1: Introduction...
  • Page 14: What Can Your Lancom Router Do

    LANCOM 3550 Wireless Chapter 1: Introduction LANCOM devices with more than one WAN interface (e.g. DSL and UMTS/ HSPDA interface) can be implemented flexibly in backup solutions. The backup event is triggered for example, when the default route is no longer available via the DSL interface.
  • Page 15 WLANmonitor for visualization of access points und clients in larger WLANs WLAN group configuration for simultaneous configuration of multiple devices Connection to the LAN Fast-Ethernet-connection (10/100base-TX) Power-over-Ethernet (PoE) LANCOM 3550 Wireless Chapter 1: Introduction LANCOM 3550 Wireless ✔ ✔ ✔...
  • Page 16 LANCOM 3550 Wireless Chapter 1: Introduction DHCP and DNS server Connection to the WAN WAN connection for DSL or cable modem UMTS/HSPDA connection via UMTS card in CardBus slot Internet access (IP router) Stateful Inspection Firewall Firewall filter (address, port)
  • Page 17: Installation

    WLAN adapter or access to the LAN (if the access point is connected to the LAN). The LANtools also require a Windows operating system. A web  browser is required for access to WEBconfig. LANCOM 3550 Wireless Chapter 2: Installation LANCOM 3550 Wireless ✔...
  • Page 18: Status Displays, Interfaces An Hardware Installation

    Flickering means, that the LED is switched on and off in irregular inter- vals. Front side The LANCOM 3550 Wireless have status displays on the front panel. Top panel Two addtional LEDs on the top panel provide a convenient overview of the most important status information, especially when the device is mounted vertically.
  • Page 19 The power LED flashes red/green in alternation until a configuration  password has been specified. Without a configuration password, the configuration data of the LANCOM Wireless is insecure. Under normal LANCOM 3550 Wireless Chapter 2: Installation Power WLANLink Device off...
  • Page 20 LANCOM 3550 Wireless Chapter 2: Installation circumstances, you would assign a configuration password during the basic configuration (see instructions in the following chapter). Flashing Power-LED but no connection? There's no need to worry if the Power-LED blinks red and you can no longer connect to the WAN.This simply indicates that a preset time or...
  • Page 21: The Back Of The Unit

    The connections and switches of the base station are located on the back panel: Antenna Main AC 12 V no data traffic data traffic Node Reset LAN 10/100 Mb WAN 10/100 Mb LANCOM 3550 Wireless Chapter 2: Installation Antenna Aux...
  • Page 22: Hardware Installation

    (Autosensing). Connector for diversity antenna Hardware installation The installation of the LANCOM 3550 Wireless base station takes place in the following steps: Mounting of ferrite corres – For operating the device it is necessary to fix the included ferrite cores with the LAN cable, the WAN cable and with the power adapter cable.
  • Page 23: Software Installation

    Antennas – Screw on the both included diversity antennas at the back of the LANCOM 3550 Wireless base station. LAN – You can first connect the LANCOM 3550 Wireless base station to your LAN. For that purpose, plug the included network cable (green plugs) into the LAN connector of the device work connecting socket of your local network (resp.
  • Page 24 PoE power feeding. The power is only switched onto the segment if only devices with PoE support were detected. LANCOM 3550 Wireless supports the proprietary PoE solution by PowerDsine. It is not fully compatible to the finshed standard 802.3af. Although, most of the currently on the marked available Power Hubs and Power Injectors are compatible to the pre-standard of 802.3af.
  • Page 25: Starting Lancom Setup

    (rogue AP detection and rogue client detection). The LANCOM Advanced VPN Client enables a setting of VPN connec- tions from a remote workstation via Internet to a router with VPN func- tion. LANCOM 3550 Wireless Chapter 2: Installation...
  • Page 26 LANCOM 3550 Wireless Chapter 2: Installation With LANCOM Online Documentation, you can copy the documenta- tion files on your PC. Select the appropriate software options and confirm your choice with Next. The software is automatically installed.
  • Page 27: Basic Configuration

    TCP/IP configuration. All parameters are set automatically by the setup wizard. During manual TCP/IP configuration, the wizard will prompt you for the usual TCP/IP parameters: IP address, netmask etc. (more on these topics later). LANCOM 3550 Wireless Chapter 3: Basic configuration...
  • Page 28 LANCOM 3550 Wireless Chapter 3: Basic configuration Fully automatic TCP/IP configuration is only possible in certain network envi- ronments. The setup wizard therefore analyses the connected LAN to deter- mine whether it supports fully automatic configuration. New LAN—fully automatic configuration possible If all connected network devices are still unconfigured, the setup wizard will suggest fully automatic TCP/IP configuration.
  • Page 29: Configuration Protection

    The specification of the network name is facilitated by two technologies: Mobile radio stations can search for Wireless LANs in the environs („scan“) and offer for selection the found Wireless LANs in a list. LANCOM 3550 Wireless Chapter 3: Basic configuration...
  • Page 30: Settings For The Dsl Connection

    LANCOM 3550 Wireless Chapter 3: Basic configuration By using the network name 'ANY', the mobile radio station will enrol in the next available Wireless LAN. The Wireless LAN can be „closed“ to prevent this procedure. In this case, no enrolment with the network name 'ANY' will be accepted.
  • Page 31: Instructions For Lanconfig

    If you have chosen automatic TCP/IP configuration, please continue with Step If you would like to configure the TCP/IP settings manually, assign an available address from a suitable address range to the LANCOM Router. Confirm your choice with Next. LANCOM 3550 Wireless Chapter 3: Basic configuration Programs LANCOM Find).
  • Page 32: Instructions For Webconfig

    LANCOM 3550 Wireless Chapter 3: Basic configuration Specify whether or not the router should act as a DHCP server. Make your selection and confirm with Next. In the following window, specify the password for configuration access. Note that the password is case-sensitive and ensure that it is sufficiently long (at least 6 characters).
  • Page 33 This IP address is not known at first. The accessibility of the device depends on the name resolution: If there is a DNS server for name resolution in the LAN, which inter- changes the assignment of IP addresses to names with the DHCP server, LANCOM 3550 Wireless Chapter 3: Basic configuration Execute...
  • Page 34 LANCOM 3550 Wireless Chapter 3: Basic configuration then the device can be accessed by the name “LANCOM <MAC address>” (e.g. “LANCOM-00a057xxxxxx”). The MAC address can be found on a label at the bottom of the device.  If there is no DNS server in the LAN, or it is not linked to the DHCP server, then the device can not be reached by the name.
  • Page 35 Also set whether or not it is to operate as a DHCP server. Confirm your entry with Apply. Enter the wireless parameters. Select a network name (SSID) and a radio channel. Turn on if necessary the function for ’closed network’. Confirm your choice with Next. LANCOM 3550 Wireless Chapter 3: Basic configuration...
  • Page 36: Tcp/Ip Settings To Workstation Pcs

    LANCOM 3550 Wireless Chapter 3: Basic configuration In the following 'Security settings' window, specify a password for config- uration access. Note that the password is case-sensitive and ensure that it is sufficiently long (at least 6 characters). You may specify whether the device may only be configured from the local network or whether remote configuration via the WAN (i.e.
  • Page 37 For further information and help on the TCP/IP settings of your  LANCOM Router, please see the reference manual. For more informa- tion on the network configuration of the workstation computers, please refer to the documentation of your operating system. LANCOM 3550 Wireless Chapter 3: Basic configuration...
  • Page 38: Setting Up Internet Access

    LANCOM 3550 Wireless Chapter 4: Setting up Internet access 4 Setting up Internet access All computers in the LAN can take advantage of the central Internet access of the LANCOM Router. The connection to the Internet provider can be estab- lished via the WAN interface which is connected to an ADSL or cable modem.
  • Page 39: Instructions For Lanconfig

    Instructions for WEBconfig In the main menu, select Setup Internet access. In the following window select your country and your Internet provider if possible, and enter your access information. LANCOM 3550 Wireless Chapter 4: Setting up Internet access Setup Wizard.
  • Page 40 LANCOM 3550 Wireless Chapter 4: Setting up Internet access Depending on their availability, the wizard will display additional options for your Internet connection. The wizard will inform you as soon as the entered information is complete. Complete the configuration with Apply.
  • Page 41: Setting Up The Umts Profile

    To set up the Internet access, select the UMTS interface and your network operator and enter the PIN number for your SIM card. The Wizard then carries out all other settings automatically. LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile Setup Wizard.
  • Page 42 LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile If your provider does not appear in the list, you can enter the necessary connection data manually. You will need the APN (Access Point Name) and the appropriate telephone number in your provider's mobile tele- phone network.
  • Page 43 With two bars (yellow) the quality of data transfer is questionable, and with one bar there will be no data transfer at all in most cases. LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile...
  • Page 44: Vpn Site Coupling

    LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile As soon as the Internet connection has been established, the section for WAN connections in LANmonitor shows the network being used for the connection. The status of the data card is also displayed by its LEDs and coded ...
  • Page 45 ISDN call (Dynamic VPN), the VPN connection must always be established from the VPN gateway with the UMTS card in the direction of the VPN gateway at the headquarters. LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile as the IKE exchange mode.
  • Page 46: Other Settings

    LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile To ensure that the VPN connection with the network at the headquarters is available on a continuous basis, set both the hold time for the Internet connection and the VPN hold time to '9,999' (keep alive). This is the only way to ensure that access from the headquarters to the UMTS-connected network is possible at all times (e.g.
  • Page 47: Activate Umts/Gprs Profile

    The activation of the UMTS interface and the selection of the profile are to be found in LANconfig in the configuration area 'Interfaces' on the 'WAN' tab with the Interface settings button. LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile...
  • Page 48: Umts/Hspda Only Or Automatic Umts/Hspda/Gprs Selection

    LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile 5.3.3 UMTS/HSPDA only or automatic UMTS/HSPDA/GPRS selection UMTS/HSPDA coverage is not yet universally available. It is still possible to establish a data connection even in areas without UMTS/HSPDA reception by selecting the 'automatic' operating mode.
  • Page 49: Set Up A Time Limit

    LANCOM 3550 Wireless Chapter 5: Setting up the UMTS profile 5.3.4 Set up a time limit You can prevent excessive costs from arising from connections over the UMTS interface by setting up a time limit, for example under LANconfig in the 'Man-...
  • Page 50: Point-To-Point Connections

    LANCOM 3550 Wireless Chapter 6: Point- to- point connections 6 Point-to-point connections LANCOM Wireless access points serve not only as central stations within a wireless network, they can also operate in point-to-point mode to bridge longer distances. For example, they can provide a secure connection between two networks that are several kilometers apart—without direct cabling or...
  • Page 51: Antenna Alignment For P2P Operations

    'Interfaces' on the 'Wireless LAN' tab. Click on the button Physical WLAN settings to open the corresponding WLAN interface and select the tab for 'Point-to-Point'. LANCOM 3550 Wireless Chapter 6: Point- to- point connections . If the receiving antenna is outside of this...
  • Page 52 LANCOM 3550 Wireless Chapter 6: Point- to- point connections Activate the suitable point-to-point operation mode here and set the channel selection scheme to either 'Master' or 'Slave'. Enter the appropri- ate MAC address for the WLAN card at the remote station (maximum 6).
  • Page 53: Access Points In Relay Mode

    WLAN network in the appropriate WLAN interface (i.e. WLAN-1 if you are using the first WLAN card for the P2P Chapter 6: Point- to- point connections Menu/Table Expert configuration Setup faces Interpoint-Settings cd /Setup/Interfaces/WLAN-Interfaces/ Interpoint-Settings Master Slave Master LANCOM 3550 Wireless Interfaces WLAN-Inter- Slave...
  • Page 54 LANCOM 3550 Wireless Chapter 6: Point- to- point connections connection, WLAN-2 if you are using the second card, e.g. as with an access point with two WLAN modules). Activate the 802.11i encryption. Select the method '802.11i (WPA)-PSK'. Enter the passphrase to be used.
  • Page 55: Leps For P2P Connections

    The access list for the matching of MAC addresses to the passphrases (LEPS) Configuration with WEBconfig or Telnet can be found under WEBconfig or Telnet under the following paths: Configuration tool WEBconfig Terminal/Telnet LANCOM 3550 Wireless Chapter 6: Point- to- point connections Menu/Table Expert configuration Setup Interfaces Encryption-Settings...
  • Page 56: Security Settings

    Reflecting on Wireless LANs often entails substantial doubts concerning secu- rity. Many people suppose that abuse of data transmitted via radio links is rel- atively simple. Wireless LAN devices by LANCOM Systems permit the employment of modern security technologies: Closed network...
  • Page 57: Access Control Via Mac Address

    The MAC address is programmed into the hardware and cannot be changed. Wireless LAN devices by LANCOM Systems have got a MAC address label on the casing. The access to an infrastructure network can be restricted to known MAC addresses for certain Wireless LAN devices solely.
  • Page 58: Encryption Of The Data Transfer

    LANCOM 3550 Wireless Chapter 7: Security settings 7.1.4 Encryption of the data transfer A special role comes up to the encryption of data transfer for Wireless LANs. For IEEE 802.11 radio transfer the supplementing encryption standards are 802.11i/WPA and WEP. The function of the encryption is to ensure the security level of cable-bound LANs also in Wireless LANs.
  • Page 59: 802.1X / Eap

    Protocol (EAP) enables the realization of reliable and secure access controls for base stations. The access data is centrally administered on a RADIUS server then, and can be retrieved by the base station if required. LANCOM 3550 Wireless Chapter 7: Security settings...
  • Page 60: Ipsec Over Wlan

    LANCOM 3550 Wireless Chapter 7: Security settings Moreover, this technology makes enables a secured dispatch and a regular automatic change of WEP keys. In this way IEEE 802.1x improves the protec- tion efforts of WEP. In Windows XP the IEEE-802.1x technology is already integrated by default.
  • Page 61: The Security Settings Wizard

    In a next step parameters of the configuration lock like number of failed log-in attempts and the duration of the lock can be adjusted. LANCOM 3550 Wireless Chapter 7: Security settings Setup Wizard.
  • Page 62: Wizard For Webconfig

    LANCOM 3550 Wireless Chapter 7: Security settings Now you can set the security settings for the WLAN. These include the name of the wireless network, the closed network function and the WEP encryption. You can type in the parameters for both wireless networks separately on devices with the option of a second WLAN interface.
  • Page 63: Wizard For Lanconfig

    Detailed information on the security settings listed here can be found  in the reference manual. LANCOM 3550 Wireless Chapter 7: Security settings Setup Wizard. Firewall / QoS...
  • Page 64 LANCOM 3550 Wireless Chapter 7: Security settings Have you assigned a password for the configuration? The simplest option for the protection of the configuration is the estab- lishment of a password. As long as a password hasn't been set, anyone can change the configuration of the device.
  • Page 65 LANCOM 3550 Wireless Chapter 7: Security settings Have you activated the IP masquerading? IP masquerading is the hiding place for all local computers for connection to the Internet. Only the router module of the unit and its IP address are visible on the Internet.
  • Page 66 With the help of 802.11i, WPA or WEP, you can encrypt the data in your wireless network with different encryption methods such as AES, TKIP or WEP. LANCOM Systems recommends the strongest possible encryption by using 802.11i and AES. If the WLAN client adapters do not support these, then you should use TKIP or at least WEP.
  • Page 67 LANCOM 3550 Wireless Chapter 7: Security settings Have you activated the mechanism that protects your WAN lines if the device is stolen? After being stolen, the device can theoretically be operated at another location by unauthorized persons. Password-protected device configura- tions offer no protection from the operation of the RAS access, LAN cou- pling or VPN connections that are set up in the device;...
  • Page 68: Options And Accessories

    LANCOM 3550 Wireless Chapter 8: Options and accessories 8 Options and accessories Your LANCOM Router base station has numerous extensibilities and the pos- sibility to use a broad choice of LANCOM accessories. You find in this chapter information about the available accessories and how to use them with your base station.
  • Page 69: Lancom Public Spot Option

    The most common methods are space diversity and polarization diversity. LANCOM Systems supplies a variety of polarization-diversity antennas as accessories for LANCOM Wireless Router. These models enable two orthogo- nally polarized signals to be received with a single antenna. Further informa- tion about this technique is available in our "Polarization Diversity"...
  • Page 70 Chapter 8: Options and accessories nisms for authentication and billing of single users (AAA - Authentication / Authorisation / Accounting). This lack remedies the LANCOM Systems Open User Authentication (OUA), the main part of the LANCOM Public Spot Option. The OUA procedure realizes the authentication of all wireless clients via user name and password, and checks the authorization of single users via RADIUS.
  • Page 71: Troubleshooting

    Change the PIN in the UMTS/HSPDA/GPRS Profiles. Configuration with The UMTS GPRS Profiles are located in LANconfig in the configuration LANconfig area 'Interfaces' on the register card 'WAN' on the button UMTS/HSPDA/ GPRS Profiles. LANCOM 3550 Wireless Chapter 9: Troubleshooting...
  • Page 72 LANCOM 3550 Wireless Chapter 9: Troubleshooting Under WEBconfig or Telnet the UMTS/HSPDA/GPRS Profiles are Configuration with WEBconfig or Telnet located under the following directories: Konfigurationstool WEBconfig Terminal/Telnet The next attempt with the valid PIN number should occur without error. After the third attempt with an invalid PIN the SIM card is locked. This ...
  • Page 73: No Dsl Connection Is Established

    In any case, the protocol that your DSL provider supplies you with should definitely work. You can monitor and correct the protocol settings under: Configuration tool LANconfig WEBconfig LANCOM 3550 Wireless Chapter 9: Troubleshooting Run command Management Interfaces Interface settings...
  • Page 74: Dsl Data Transfer Is Slow

    LANCOM 3550 Wireless Chapter 9: Troubleshooting DSL data transfer is slow The data transfer rate of an broadband (Internet) DSL connection is dependent upon numerous factors, most of which are outside of one's own sphere of influence. Important factors aside from the bandwidth of one's own Internet connection are the Internet connection and current load of the desired target.
  • Page 75: Appendix

    Temperature range 0°C to +50°C at 95% max. humidity (non condensing) Service Warranty: 3 years Support Via hotline and Internet LANCOM 3550 Wireless Chapter 10: Appendix LANCOM 3550 Wireless 2400 - 2483,5 MHz (ISM) or 5150 - 5750 MHz 10/100base-TX, autosensing, node/hub switch...
  • Page 76: Contact Assignment

    LANCOM 3550 Wireless Chapter 10: Appendix 10.2 Contact assignment 10.2.1 LAN interface, 10/100base-TX 8-pin RJ45 socket, as per ISO 8877, EN 60603-7 Connector 10.2.2 WAN interface, 10/100base-TX 8-pin RJ45 socket, as per ISO 8877, EN 60603-7 Connector Line PoE/G PoE/G...
  • Page 77: Declaration Of Conformity

    Chapter 10: Appendix 10.3 Declaration of conformity LANCOM Systems herewith declares that the devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995/5/EC directive. The CE declarations of conformity for your device are available in the appro-...
  • Page 78: Radio Channel Regulations For Wlans

    Chapter 11: Radio channel regulations for WLANs 11 Radio channel regulations for WLANs Information about approvals and notifications in various countries and the radio channel regulations can be found in the reference manual or on the LANCOM Systems web site (www.lancom-systems.com).
  • Page 79 Firewall Firewall filter FirmSafe Flat rate Gebührensperre Hardware installation HSPDA ICMP Installation antennas LANtools power adapter Internet access Authentication data Flat rate Internet access via UMTS/HSPDA Internet provider Internet-Zugang Protokoll Filter Lock ports IP address LANCOM 3550 Wireless Index connection...
  • Page 80 LANCOM 3550 Wireless Index IP masquerading IP router Connector cable LAN connection LANCOM Enhanced Passphrase Security 56 LANCOM setup LANconfig run setup wizards LANmonitor LANtools System preconditions LEPS MAC address filter MAC-Adresse mobile telephone network Multi SSID NAT – siehe IP-Masquerading...
  • Page 81 Transfer protocol Turbo Mode UMTS automatically switch to GPRS Choosing the mobile telephone net- work incorrect PIN Internet access mobile conference room PIN handling time limit VLAN VRRP WAN connector WEBconfig password System preconditions WLAN Operating modes LANCOM 3550 Wireless Index...

Table of Contents