Page 3
The reproduction and distribution of the documentation and software supplied with this product and the use of its contents is subject to written authorization from LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical development.
Page 4
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Preface Preface Thank you for placing your trust in this LANCOM Systems product. With the LANCOM Router you have chosen a powerful router that possesses integrated DSL respectively ADSL and ISDN interfaces by default as well as an integrated 4-port switch.
Page 5
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Preface Components of the documentation The documentation of your device consists of the following parts: Installation Guide User manual PBX Functions manual Reference manual Menu Reference Guide You are now reading the user manual.
Page 6
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Preface This documentation was created by … ... several members of our staff from a variety of departments in order to ensure you the best possible support when using your LANCOM product.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Contents Contents 1 Introduction 1.1 How do ADSL and ADSL 2+ work? 1.2 What does VPN offer? 2 Installation 2.1 Package contents 2.2 System requirements 2.3 Status displays and interfaces 2.3.1 Device connectors...
Page 8
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Contents 5 Connecting two networks 5.1 Which details are necessary? 5.1.1 General information 5.1.2 Settings for the TCP/IP router 5.1.3 Settings for the IPX router 5.1.4 Settings for NetBIOS routing 5.2 Instructions for LANconfig...
Page 9
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Contents 9 Advice & assistance 9.1 No WAN connection can be established 9.2 DSL data transfer is slow 9.3 Unwanted connections under Windows XP 9.4 Cable testing 10 Appendix 10.1 Performance data and specifications 10.2 Connector wiring...
(LAN). The VPN option, which is either integrated already or can be activated subs- quently, enables the LANCOM 1721+ VPN and LANCOM 1711+ VPN to act as powerful Dynamic VPN gateways for external offices or mobile users. The LANCOM Router models offer each a DSL or ADSL connector and also an ISDN connector.
Internet. LANCOM 1721+ VPN only The models LANCOM 1721+ VPN and LANCOM 1711+ VPN are fac- tory equipped to support VPN with 5 active tunnels. With the addi- tional LANCOM VPN Option, VPN support can be extended to 25 active tunnels (incl.
Page 12
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 1: Introduction » The RAS PCs connect to the headquarters LAN via the Internet. The Internet is available virtually everywhere and typically has low access costs. Significant savings can thus be achieved in relation to switched or ded- icated connections, especially over long distances.
Page 13
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 1: Introduction ✔ ✔ Port-Mapping to set up LAN ports as additional WAN ports ✔ ✔ ✔ Policy-based routing for policy-based selection of target routes Load-balancing for bundling of multiple DSL channels...
Page 14
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 1: Introduction ✔ ✔ ✔ Stateful Inspection Firewall ✔ ✔ ✔ Firewall filter for blocking individual IP addresses, protocols and ports ✔ ✔ ✔ MAC address filter regulates, for example, LAN-workstation access to the IP routing function ✔...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation 2 Installation This chapter will assist you to quickly install hardware and software. First, check the package contents and system requirements. The device can be installed and configured quickly and easily if all prerequisites are fulfilled.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation Operating system that supports TCP/IP, e.g. Windows Vista™, Windows XP, Windows Millennium Edition (Me), Windows 2000, Win- dows 98, Linux, BSD Unix, Apple Mac OS, OS/2. Access to the LAN via the TCP/IP protocol.
Page 17
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation The two top-mounted LEDs enable the main function status to be assessed even if the device is positioned vertically. Power Online ³ Power This LED indicates that the device is operational. After the device has been switched on, it will flash green for the duration of the self-test.
Page 18
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation Flashing Power LED but no connection? There's no need to worry if the Power LED blinks red and you can no longer connect to the WAN. This simply indicates that a preset time or connect-charge limit has been reached.
Page 19
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation ¿ ADSL data Information on data traffic at the ADSL connector: ( LANCOM 821+ and No logical connection LANCOM 1721+ VPN Green Blinking Opening the first connection...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation period of inactivity. When needed, the S bus automatically reacti- vates and the ISDN status LED illuminates in green. º ISDN Data Status display for both ISDN B channels:...
Page 21
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation LANCOM 821+ and LANCOM 1721+ not available on LANCOM 821+ DC12V ETH4 ETH3 ETH2 ETH1 Config (COM) ISDN S ADSL Reset » ¿ ´ ² ¶ º...
Page 22
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation º Reset switch The reset switch has two different functions depending on the length of time that it is pressed: Restarting the device (soft reset) – push the button for less than five seconds.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation Reset-or-boot (standard setting): Press the button briefly to re-start the device. Pressing the button for 5 seconds or longer restarts the device and resets the configuration to its factory settings.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation ´ (LANCOM 821+ and LANCOM 1721+ VPN) or (LANCOM 1711+ VPN) of the router and the other end into an ISDN/S multi-device mode or point-to-point mode connection.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 2: Installation 2.5.1 Starting the software setup Place the product CD into your drive. The setup program will start automati- cally. If the setup does not start automatically, run AUTORUN.EXE in the ...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration 3 Basic configuration The basic configuration is conducted with a convenient Setup Wizard that provides step-by-step guidance through the configuration and that requests any necessary information.
Page 27
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration The fully automatic TCP/IP configuration is only possible in certain network environments. For this reason the Setup Wwizard analyses the connected LAN to see whether fully automatic configuration is possible or not.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration Required information for manual TCP/IP configuration When performing manual TCP/IP configuration the Setup Wwizard prompts you for the following information: DHCP mode of operation Off: The IP addresses required must be entered manually.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration 3.1.3 Settings for the wireless LAN Network name (SSID) The Basic Settings Wizard prompts for the access point's network name (fre- quently referred to as SSID – Service Set Identifier). The name is of your own choice.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration 3.1.4 Settings for the DSL connection It may be necessary to enter the transmission protocol used for the DSL con- nection. The wizard will enter the correct setting for the most important DSL providers on its own.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration Instructions for LANconfig Start LANconfig with Start Programs LANCOM LANconfig. LANconfig automatically detects new LANCOM devices in the TCP/IP net- work. As standard, LANCOM Wireless Routers and LANCOM Access Points in managed mode are not displayed by LANconfig carrying out its device search.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration If you cannot access an unconfigured LANCOM VPN Router, the prob- lem may be the LAN netmask: In case there are less than 254 potential hosts available (netmask >'255.255.255.0'), you must ensure that the...
Page 33
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration https://<IP address or device name> Always use the latest version of your browser to ensure maximum security. For Windows, LANCOM Systems GmbH recommends the lat- est version of the Internet Explorer.
Page 34
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration If the configuration computer does not retrieve its IP address from the LANCOM DHCP server, it determines the current IP address of the computer (with Start...
Page 35
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration The MAC address on a sticker on the base of the device. If there is no DNS server in the LAN, or if it is not coupled to the DHCP server, the device cannot be reached via the name.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration Setup Wizards The setup Wizards allow quick and easy configuration of the most common device settings. Select the Wizard and enter the appropriate data on the fol- lowing screens.
Page 37
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 3: Basic configuration IP address allocation by a separate DHCP server For this reason, the workstation PCs have to be set up to automatically retrieve their own IP address and those of the standard gateway and DNS server via DHCP.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 4: Setting up Internet access 4 Setting up Internet access The LANCOM provides a central point of Internet access for all of the comput- ers in the LAN. The connection to the Internet provider can be established via the WAN con- nection which is connected to an ADSL or cable modem.
Page 39
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 4: Setting up Internet access to set up your Internet access. All that is required is the authentication data as supplied to you by your Internet provider. Internet provider unknown If the list in the Setup Wizard does not contain your provider, you will be asked step-by-step for all of the necessary data.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 4: Setting up Internet access The Internet Connection Wizard 4.1.1 Instructions for LANconfig Mark your device in the selection window. From the command line, select Extras Setup Wizard. In the selection menu, select the Setup Wizard, Set up Internet connec- tion and confirm the selection with Next.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 4: Setting up Internet access The Wizard will inform you as soon as the entries are complete. Close the configuration with Finish. LANconfig: Fast starting of the Setup Wiz-...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks 5 Connecting two networks Network connectivity, also known as LAN-LAN connectivity, with the LANCOM Router is used for interconnecting two local area networks. LAN- LAN connectivity can be implemented in two basic ways: VPN: Connecting LANs over VPN ensures that the Internet-based connec- tion between the two LANs has high-security protection.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks Which details are necessary? The Wizard requests you for all of the necessary details step by step. If possi- ble, you should have all of this information to hand before you start the Wiz- ard.
Page 44
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks Connec- Entry Gateway 1 Gateway 2 tivity VPN + ISDN Domain descriptor in the remote network 'branch.company' 'headquarter.com- pany' Hide own stations when accessing remote...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks The ISDN calling line ID specified is used to identify and authenticate the caller. If a LANCOM Router is called, it compares the ISDN calling line ID entered for the remote site to the ID that is actually received over the D channel from the caller.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks not just that of the router. The computer with the IP address 10.0.2.10 in the branch-office LAN sees the server 10.0.1.2 at the main office and, with the appropriate rights, has access to it.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks Only LANCOM For connectivity between two typical IPX networks via a WAN, three IPX net- 821+ work numbers are necessary: For the LAN at the main office...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks Remote Windows workgroups do not appear in the Windows network environment, but they can be contacted directly (e.g.by searching for a computer of known name).
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks remote LAN (e.g. with ping). The LANCOM Router should automatically connect to the remote site and make contact to the requested computer. Ping – the quick test of a TCP/IP con-...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks The 1-Click-VPN Site-to-Site Wizard will be started. Enter a name for this access and select the address under which the router is accessible from the Internet.
Page 51
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 5: Connecting two networks The Wizard will inform you when the required information is complete. You can then close the Wizard with Next. Once you have completed the set-up of both routers, you can start testing the network connection.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 6: Providing dial- in access 6 Providing dial-in access Your LANCOM can be set up with dial-in access accounts enabling individual computers to dial-in to your LAN and fully participate in the network for the duration of the connection.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 6: Providing dial- in access 6.1.1 General information The following information is required for setting up RAS access. The first col- umn shows whether the information for RAS access is required via VPN (sim- ple method with pre-shared keys) and/or via ISDN.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 6: Providing dial- in access You will find information on the other parameters required for RAS access in the chapter 'Connecting two networks'. The ISDN calling line ID (CLI) The ISDN Calling Line Identity (CLI)is the phone number of the calling party as transmitted to the called party.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 6: Providing dial- in access 6.1.3 Settings for IPX Only LANCOM For RAS dial-in to an IPX network, two IP network numbers have to be spec- 821+ ified: the IPX network number of the main office...
Internet access A VPN client LANCOM Systems offers you a 30-day test version of the LANCOM Advanced VPN Client on the CD supplied. A precise description of the VPN client and notes on its setup are also to be found on the CD.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 6: Providing dial- in access Instructions for LANconfig Launch the 'Provide Remote Access (RAS, VPN, IPsec over WLAN)' Wizard. Follow the Wizard’s instructions and enter the necessary data. The Wizard will inform you when the required information is complete.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 6: Providing dial- in access Save profile as an import file for the LANCOM Advanced VPN Client Send profile via e-mail Print out profile Sending a profile via e-mail could be a security risk should the e-mail ...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 7: Fax transmission with LANCAPI 7 Fax transmission with LANCAPI LANCAPI from LANCOM Systems is a specialized version of the widespread ISDN CAPI interface. CAPI stands for Common ISDN Application Programming Interface and it links ISDN adapters and communications software.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 7: Fax transmission with LANCAPI The MS Windows Fax Service. This is the interface between the fax applications and the virtual fax. PCs with fax software, LANCAPI client, CAPI...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 7: Fax transmission with LANCAPI After successful installation, the LANCOM CAPI Fax Modem is entered into the Control Panel under Phone and modem options. Installing the MS Windows Fax Service Go to the Control Panel and select the option Printers and faxes.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 7: Fax transmission with LANCAPI Sending a fax After installing the necessary components, there are a number of ways to send a fax from your computer. If you have a file ready to send, you can send this straight from its application.
Page 63
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 7: Fax transmission with LANCAPI The fax client console opens up. Select the menu item Send file/fax. A Wizard guides you through the remaining procedure.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 8: Security settings 8 Security settings Your LANCOM features numerous security functions. This chapter provides you with all of the information you need to optimally protect your device. You can carry out the configuration of security settings very quickly ...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 8: Security settings In the dialogs that follow you can set the password and select the proto- cols to be available for accessing the configuration from local and remote networks.
Page 66
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 8: Security settings Have you permitted remote configuration? If you do not require remote configuration, please ensure to switch it off. If you need to make use of remote configuration, ensure that you do not fail to password-protect the configuration (see the section above).
Page 67
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 8: Security settings table can be found in the LANconfig in the configuration area 'IP router' on the 'Routing' tab. Have you used filters to close critical ports? The firewall filters in LANCOM devices offer filter functions for individual computers or entire networks.
Page 68
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 8: Security settings With the ISDN location verification, the device can only be operated at one particular ISDN connection. After being switched on, the device calls itself at the corresponding telephone number to check that it is still con- nected to the “correct”...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 9: Advice & assistance 9 Advice & assistance See this chapter for first-aid assistance if some of the typical problems should occur. No WAN connection can be established After starting, the router attempts automatically to connect to the Internet provider.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 9: Advice & assistance Increasing the TCP/IP window size under Windows If the actual transfer rate of a DSL connection is significantly below the fastest rate listed by the provider, there are only a few possible causes (apart from the above-mentioned external factors) which may involve one's own equipment.
Page 71
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 9: Advice & assistance tested (e.g. “DSL1” or “LAN-1”). Pay attention to the correct spelling of the interfaces. Start the test for the specified interface by clicking on Execute.
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Chapter 10: Appendix 10 Appendix 10.1 Performance data and specifications LANCOM 821+ LANCOM 1721+ LANCOM 1711+ Connections Ethernet LAN 4x 10/100Base-TX, auto sensing, switch with node/hub auto sensing WAN/ADSL ADSL over ISDN as per ITU G.992.1 Annex B...
Line 10.3 Declaration of conformity LANCOM Systems herewith declares that the devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995/5/EC directive. The CE declarations of conformity for your device are available in the appro-...
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Index Index Numerics ISDN S interface 10/100Base-TX LAN interface 3 DES Outband WAN interface Cost budget Accounting ADSL Connect Data frequencies Connector cable Default gateway Transfer rates DHCP DHCP server...
Page 77
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Index Information symbols ISDN number Installation ISDN PBX ADSL ISDN S connection configuration port ISDN Connector cable LAN to LAN coupling LANtools LANCAPI power adapter LANCOM VPN Option Internet access...
Page 78
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Index Power PPP client Support Prefix for external line Switch System preconditions System requirements Remote Access Service (RAS) Activate compression in software Configuring the dial-in computer TCP/IP Connect test NetBIOS...
Page 79
LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN Index Windows workgroup search...
Need help?
Do you have a question about the 1711+ VPN and is the answer not in the manual?
Questions and answers