Summary of the content on the page No. 1
LANCOM 7111 VPN
LANCOM 8011 VPN
Summary of the content on the page No. 2
© 2004 LANCOM Systems GmbH, Wuerselen (Germany). All rights reserved. While the information in this manual has been compiled with great care, it may not be deemed an assurance of product characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software included with this product is subject to written per- mission by LANCOM Systems. We reserve the right to make any alterations that ar
Summary of the content on the page No. 3
LANCOM 7111 VPN – LANCOM 8011 VPN Preface Preface Thank you for placing your trust in this LANCOM Systems product. The top models of the LANCOM router series serve as extremely powerful Dynamic VPN gateways for medium-sized and large locations. Due to the Fast Ethernet uplink, LANCOM devices are ideal partners for all connection variants. Integrated LANCOM High Security Firewall With 100 up to 1000 VPN channels the LANCOM router series offers enough capacity for high-bandwidth couplings
Summary of the content on the page No. 4
LANCOM 7111 VPN – LANCOM 8011 VPN Preface We ask you additionally to inform you about technical developments and actual hints to your product on our Web page www.lancom.de, and to down- load new software versions if necessary. User manual and reference manual The documentation of your device consists of two parts: the user manual and the reference manual. You are now reading the user manual. It contains all information you need to start your LANCOM router. It also contains the most important t
Summary of the content on the page No. 5
LANCOM 7111 VPN – LANCOM 8011 VPN Preface In the other parts of the documentation, all described models have been clas- sified under the general term LANCOM router. This documentation was compiled … ...by several members of our staff from a variety of departments in order to ensure you the best possible support when using your LANCOM product. In case you encounter any errors, or just want to issue critics or enhance- ments, please do not hesitate to send an email directly to: info@lancom.de O
Summary of the content on the page No. 6
LANCOM 7111 VPN – LANCOM 8011 VPN Contents Contents 1 Introduction 9 1.1 Which use does VPN offer? 9 1.2 Firewall 12 1.3 What does a router do? 13 1.3.1 Bridgehead to the WAN 14 1.3.2 Areas of deployment for routers 14 1.4 What can your LANCOM router do? 15 2 Installation 18 2.1 Package contents 18 2.2 System preconditions 18 2.3 Introducing LANCOM router 19 2.3.1 Status displays 19 2.3.2 The back of the unit 24 2.4 Hardware installation 24 2.5 Software installation 26 2.5.1 St
Summary of the content on the page No. 7
LANCOM 7111 VPN – LANCOM 8011 VPN Contents 5 Linking two networks 42 5.1 What information is necessary? 43 5.1.1 General information 43 5.1.2 Settings for the TCP/IP router 45 5.1.3 Settings for the IPX router 46 5.1.4 Settings for NetBIOS routing 47 5.2 Instructions for LANconfig 48 5.3 Instructions for WEBconfig 48 6 Providing dial-up access 50 6.1 Which information is required? 50 6.1.1 General information 51 6.1.2 Settings for TCP/IP 52 6.1.3 Settings for IPX 52 6.1.4 Setting
Summary of the content on the page No. 8
LANCOM 7111 VPN – LANCOM 8011 VPN Contents 9 Troubleshooting 67 9.1 No WAN connection is established 67 9.2 DSL data transfer is slow 67 9.3 Unwanted connections under Windows XP 68 9.4 Cable testing 68 10 Appendix 70 10.1 Performance data and specifications 70 10.2 Contact assignment 72 10.2.1 DSL interface 72 10.2.2 ISDN-S interface 72 0 10.2.3 Ethernet interfaces 10/100Base-T 73 10.2.4 Configuration interface (Outband) 73 10.3 CE declaration of conformity 73 11 Index 74 8 EN
Summary of the content on the page No. 9
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction 1Introduction The models of the LANCOM router series operate as powerful Dynamic VPN gateways with 200, 500 or 1000 VPN channels for remote sites or mobile users. Due to the Fast Ethernet uplink, the devices are the ideal partner for almost all WAN connection variants. The integrated multi protocol router and the integrated firewall enable a secure internet access for the local network. The ISDN interface is mainly used to establish Dyn
Summary of the content on the page No. 10
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction Conventional network infrastructure First, let's have a look at a typical network structure that can be found in this form or similar forms in many companies: LAN Head Office ISDN ISDN LAN Workstation in remote access, Internet e.g. homework Subsidiary The corporate network is based on the internal network (LAN) in the head- quarters. This LAN is connected to the outside world in three ways: A subsidiary is connected to the LA
Summary of the content on the page No. 11
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction to the original investment costs, ongoing costs are also incurred for the administration and maintenance of this equipment. Networking via the Internet The following structure results when using the Internet instead of direct con- nections : LAN Head Office Internet Workstation in remote access Subsidiary All participants have fixed or dial-up connections to the Internet. Expensive dedicated lines are no longer needed. All that
Summary of the content on the page No. 12
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction technologies such as DSL (Digital Subscriber Line) or G.703 (2-Mbit leased lines). But also a conventional ISDN line can be used. The technologies of the individual participants do not have to be compatible to one another, as would be the case for conventional direct connections. A single Internet access can be used to establish multiple simultaneous logical connections to a variety of remote stations. The resulting savings and high fle
Summary of the content on the page No. 13
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction Denial-of-Service Protection Attacks from the Internet can be break-in attempts as well as attacks with the aim of blocking the accessibility and functionality of individual services. Therefore a LANCOM Wireless DSL is equipped with appropriate protective mechanisms, which recognize well-known hacker attacks and which guarantee the functionality. Quality-of-Service / Traffic management The generic term Quality-of-Service (brief: QoS
Summary of the content on the page No. 14
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction Connecting a LAN to the Internet does not technically differ from coupling two LANs. The only difference is that it is not just a handful of computers behind the Internet provider's router. Instead, it is the net of the networks - the public Internet. 1.3.1 Bridgehead to the WAN All routers have at least two connections: at least one for the LAN at least one for WAN connections In addition to LAN connectivity (10/100 Mbps Ethernet
Summary of the content on the page No. 15
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction access to the Internet is required on either side of the network inter- connection. VPN tunnel via the Internet VPN gateways Conventional via ISDN Without VPN, a LAN to LAN interconnection can alternatively be real- ized via ISDN. In this case, an intelligent line management and sophisticated filter mechanisms keeps connection costs low. Remote access to the company network (via VPN or ISDN) The work of many office workers in mode
Summary of the content on the page No. 16
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction LANCOM 7111 LANCOM 8011 VPN VPN RAS server (via VPN) 100 tunnel 200 tunnel, optional 500 or 1000 RAS server (via ISDN) IP router IPX router (via ISDN), e.g. for coupling of Novell networks or dialling into Novell networks NetBIOS proxy for coupling of Microsoft peer-to-peer networks via ISDN DHCP and DNS server (for LAN and WAN) N:N mapping for routing networks using the same IP address ranges via VPN LANCAPI server for the operati
Summary of the content on the page No. 17
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 1: Introduction LANCOM 7111 LANCOM 8011 VPN VPN Quality of Service Dynamic bandwidth management / IP-Traffic Shaping Bandwidth limiting with absolute or per connection transfer limits, separated from send or receive site TOS or DiffServ priority queuing Automatic packet size adaption incl. PMTU adjustment or fragmenta- tion. Configuration Configuration with LANconfig or with web browser, additionally termi- nal mode for Telnet or other terminal prog
Summary of the content on the page No. 18
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 2: Installation 2 Installation This chapter will assist you to quickly install hardware and software. First, check the package contents and system requirements. The device can be installed and configured quickly and easily if all prerequisites are fulfilled. 2.1 Package contents Please check the package contents for completeness before starting the installation. In addition to the device itself, the package should contain the following accessories: LAN
Summary of the content on the page No. 19
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 2: Installation Operating system that supports TCP/IP, e.g. Windows XP, Windows Mil- lennium Edition (Me), Windows 2000, Windows 98, Windows 95, Win- dows NT, Linux, BSD Unix, Apple Mac OS, OS/2, BeOS. Access to the LAN via the TCP/IP protocol. The LANtools and the LANCAPI functions also require a Windows operating system. A web browser is required for access to WEBconfig. 2.3 Introducing LANCOM router This section introduces your device. We will g
Summary of the content on the page No. 20
LANCOM 7111 VPN – LANCOM 8011 VPN Chapter 2: Installation Flashing means, that the LED lights up very briefly in the respective col- our and stay then clearly longer (approximately 10x longer) switched off. Inverse flashing means the opposite. The LED lights permanently in the respective colour and is only briefly interrupted. Flickering means, that the LED is switched on and off in irregular inter- vals. Power This LED indicates that the device is operational. After the device has bee
