Lancom 1811 User manual

LANCOM 1811 Wireless DSL –
LANCOM 1821+ Wireless ADSL

© 2007 LANCOM Systems GmbH, Wuerselen (Germany). All rights reserved.
While the information in this manual has been compiled with great care, it may not be deemed an assurance of product
characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery.
The reproduction and distribution of the documentation and software included with this product is subject to written per-
mission by LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical develop-
ment.
All explanations and documents for registration of the products you find in the appendix of this documentation, if they
were present at the time of printing.
Trademarks
Windows®, Windows XP®and Microsoft®are registered trademarks of Microsoft, Corp.
The LANCOM Systems logo, LCOS and the name LANCOM are registered trademarks of LANCOM Systems GmbH. All other
names mentioned may be trademarks or registered trademarks of their respective owners.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit http://www.openssl.org/.
This product includes cryptographic software written by Eric Young ([e-mail]).
This product includes software developed by the NetBSD Foundation, Inc. and its contributors.
Subject to change without notice. No liability for technical errors or omissions.
LANCOM Systems GmbH
Adenauerstr. 20/B2
52146 Wuerselen
Germany
www.lancom.eu
Wuerselen, March 2007
110515/0307

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Preface
3
EN
Preface
Thank you for placing your trust in this LANCOM Systems product.
With the LANCOM Router you have chosen a powerful wireless router that
possesses integrated DSL respectively ADSL and ISDN interfaces by default as
well as an integrated 4-port switch. With this router you can simply and com-
fortably connect individual PCs or whole local networks to the high-speed
Internet.
As a base station, the LANCOM Router provides numerous central functions
and services to the participants of wireless networks and it convinces by a
simple configuration and a reliable continuous operation. With high-effective
technologies, it ensures data security within the whole wireless network.
Model variants
This user manual applies to the following models of the LANCOM Wireless DSL
series:
LANCOM 1811 Wireless DSL
LANCOM 1821+ Wireless ADSL
Model
restriction
The section of the documentation that refer only to a range of models are
marked either in the corresponding text itself or with appropriate comments
placed beside the text.
In the other parts of the documentation, all described models have been clas-
sified under the general term LANCOM Wireless Router.
Security settings
To maximize the security available from your product, we recommend that you
undertake all of the security settings (e.g. firewall, encryption, access protec-
tion, charge limits) that were not already activated when you purchased the
product. The LANconfig Wizard 'Security Settings' will help you with this task.
Further information is also available in the chapter 'Security settings'.
We would additionally like to ask you to refer to our Internet site www.lan-
com.eu for the latest information about your product and technical develop-
ments, and also to download our latest software versions.
User manual and reference manual
The documentation of your device consists of three parts: The installation
guide, the user manual and the reference manual.

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Preface
4
EN
You are now reading the user manual. It contains all information you need to
put your device into operation. It also contains all of the important technical
specifications.
The reference manual can be found on the LANCOM product CD as an Acrobat
(PDF) document. It is designed as a supplement to the user manual and goes
into detail on topics that apply to a variety of models. These include, for
example:
The system design of the operating system LCOS
Configuration
Management
Diagnosis
Security
Routing and WAN functions
Firewall
Quality of Service (QoS)
Virtual Private Networks (VPN)
Virtual Local Networks (VLAN)
Wireless networks (WLAN)
Voice communication in computer networks with Voice over IP (VoIP)
Backup solutions
LANCAPI
Further server services (DHCP, DNS, charge management)
This documentation was created by …
... several members of our staff from a variety of departments in order to
ensure you the best possible support when using your LANCOM product.
In case you encounter any errors, or just want to issue critics enhancements,
please do not hesitate to send an email directly to:
[email protected]
Our online services www.lancom.eu are available to you around the
clock should you have any queries regarding the topics discussed in
this manual or require any further support. The area 'Support' will
help you with many answers to frequently asked questions (FAQs).
Furthermore, the knowledgebase offers you a large reserve of infor-
mation. The latest drivers, firmware, utilities and documentation are
constantly available for download.

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Preface
5
EN
In addition, LANCOM support is available. For telephone numbers and
contact addresses of LANCOM support, please see the enclosed leaf-
let or the LANCOM Systems website.
Information symbols
Very important instructions. Failure to observe this may result in damage.
Important instruction that should be observed.
Additional information that may be helpful but which is not required.

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Contents
6
EN
Contents
1 Introduction 10
1.1 How do ADSL and ADSL 2+ work? 10
1.2 What does VPN offer? 12
1.3 What is a Wireless LAN? 14
1.3.1 Which hardware to use? 14
1.3.2 Operation modes of Wireless LANs and base stations 14
1.4 What can your LANCOM Wireless Router do? 15
2 Installation 19
2.1 Package contents 19
2.2 System requirements 19
2.3 Introducing LANCOM Router 20
2.3.1 Status displays 20
2.3.2 The back of the unit 25
2.4 Hardware installation 27
2.5 Software installation 29
2.5.1 Starting LANCOM setup 29
2.5.2 Which software should you install? 29
3 Basic configuration 31
3.1 Which information is necessary? 31
3.1.1 TCP/IP settings 31
3.1.2 Configuration protection 33
3.1.3 Settings for the Wireless LAN 33
3.1.4 Settings for the ISDN connection 34
3.1.5 Connect charge protection 35
3.2 Instructions for LANconfig 35
3.3 Instructions for WEBconfig 37
3.4 TCP/IP settings to workstation PCs 40
4 Setting up Internet access 42
4.1 Instructions for LANconfig 43
4.2 Instructions for WEBconfig 44

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Contents
7
EN
5 Linking two networks 45
5.1 What information is necessary? 46
5.1.1 General information 46
5.1.2 Settings for the TCP/IP router 48
5.1.3 Settings for the IPX router 49
5.1.4 Settings for NetBIOS routing 50
5.2 Instructions for LANconfig 51
5.3 Instructions for WEBconfig 52
6 Providing dial-in access 53
6.1 Which information is required? 53
6.1.1 General information 54
6.1.2 Settings for TCP/IP 55
6.1.3 Settings for IPX 56
6.1.4 Settings for NetBIOS routing 56
6.2 Settings for the dial-in computer 57
6.2.1 Dial-up via VPN 57
6.2.2 Dial-up via ISDN 57
6.3 Instructions for LANconfig 58
6.4 Instructions for WEBconfig 59
7 Sending faxes with LANCAPI 60
7.1 Installation of the LANCOM CAPI Faxmodem 61
7.2 Installation of the MS Windows fax service 62
7.3 Sending a fax 62
7.3.1 Send a fax with any given office application 62
7.3.2 Send a fax with the MS Windows fax service 63

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Contents
8
EN
8 Security settings 64
8.1 Security for the Wireless LAN 64
8.1.1 Closed network 64
8.1.2 Access control via MAC address 65
8.1.3 LANCOM Enhanced Passphrase Security 65
8.1.4 Encryption of the data transfer 66
8.1.5 802.1x / EAP 67
8.1.6 IPSec over WLAN 68
8.2 Tips for handling keys 68
8.3 The security settings wizard 69
8.3.1 Wizard for LANconfig 69
8.3.2 Wizard for WEBconfig 70
8.4 The firewall wizard 70
8.4.1 Wizard for LANconfig 71
8.4.2 Configuration under WEBconfig 71
8.5 The security checklist 71
9 Options and accessories 76
9.1 Optional LANCOM Wireless Router antennas 76
9.1.1 Antenna Diversity 76
9.1.2 Installation of AirLancer Extender antennas 77
9.2 LANCOM Public Spot Option 77
9.3 LANCOM VoIP Basic Option and LANCOM VoIP Advanced Option
78
9.3.1 Advantages of VoIP solutions 79
9.4 LANCOM VPN Option 79
10 Troubleshooting 81
10.1 No DSL connection is established 81
10.2 DSL data transfer is slow 81
10.3 Unwanted connections under Windows XP 82
10.4 Cable testing 82

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Contents
9
EN
11 Appendix 84
11.1 Performance data and specifications 84
11.2 Contact assignment 86
11.2.1 ADSL interface 86
11.2.2 DSL interface 86
11.2.3 ISDN-S0interface 87
11.2.4 Ethernet interfaces 10/100Base-T 87
11.2.5 Configuration interface (Outband) 88
11.3 CE declaration of conformity 88

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
10
EN
1Introduction
The models of the LANCOM Router series offer each a DSL or ADSL connector
and also an ISDN connector. The ISDN line can be used as back-up for the DSL
connection, for remote management of the router or as basis for the office
communication via LANCAPI.
In addition to their function as routers between LAN and the Internet, all
models of the LANCOM Router series operate also as base stations for wireless
networks. With the base station you link wireless PCs and notebooks to a net-
work, connect these devices to the existing wired LAN and enable also the
wireless devices to access the Internet.
1.1 How do ADSL and ADSL 2+ work?
ADSL (Asymmetric Digital Subscriber Line) is currently the most common tech-
nology for broadband Internet connections. Standard and almost ubiquitous
telephone lines (analog or DSL) are the basis for DSL data transfer to the nea-
rest telephone exchange. From here, the data is passed directly on to the
Internet over high-speed connections.
The asymmetric DSL variant ADSL was developed for applications where users
receive large amounts of data but transmit only small amounts, such as when
surfing in the WWW. ADSL subscribers can receive data at up to 8 Mbps
("downstream") and transmit at up to 800 kbps ("upstream"). ADSL providers
are able to reduce these maximum rates as they please.
To satisfy the strongly increasing demand for higher bandwidths, the stan-
dards ADSL 2 and ADSL 2+ provider higher data rates as a basis for applica-
tions such as video streaming or high-definition TV (HDTV) over the Internet.
Depending on the Internet provider, ADSL 2 devices support downstream data
rates of up to 12 Mbps, and ADSL 2+ devices support up to 24 Mbps. Hands-
Internet splitter
LANCOM Router
telephone
phone line
DSL modem
WLAN LAN

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
11
EN
hake routines during connection establishment ensure that the standards
ADSL, ADSL 2 and ADSL 2+ are intercompatible.
Parallel to data transfer, ADSL also provides full and unlimited support for the
classic applications in telephony (telephone, fax, answering machine, PBX).
This is facilitated by splitters which separate the voice frequencies from the
data frequencies.
Some models feature an integrated modem for ADSL/ADSL 2+. It can be
directly connected to the splitter with the supplied cable.
If the device does not feature an integrated ADSL modem, then the router is
connected to a separate ADSL modem, which in turn is connected to the split-
ter.
LANCOM 1811 Wireless DSLs can also be used for Internet access via
other broadband connections (e.g. cable modems) as long as they
Internet
Splitter
Router with integrated
ADSL modem
Telephone
PSTN
Splitter
ADSL prover
Switching
nodes
DSLAM
Subscribers
Internet
Splitter
Router
Telephone
PSTN
Splitter
ADSL prover
Switching
nodes
DSLAM
Subscribers
ADSL
modem

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
12
EN
have a 10/100Base-Tx Ethernet connector via PPPeE, PPTP or simple
Ethernet (with or without DHCP).
LANCOM 1821+ Wireless ADSL models can use this option as well by
configuring the first LAN port as a WAN interface.
ADSL can operate over both ISDN- and analog telephone lines (POTS – Plain
Old Telephone Service). Devices with an integrated modem are supplied in
two versions. Information about the supported telephone system is to be
found on the type designation on the underside of the device. The device
name is marked on the label along with a suffix which indicates the supported
telephone system:
Annex A-type devices are exclusively to be operated at ADSL-over-POTS con-
nections. Annex B-type devices are exclusively to be operated at ADSL-over-
ISDN connections. Your network operator will be able to inform you of the ver-
sion you need. These devices cannot be altered or upgraded to a system other
than that for which it is equipped.
There are even ADSL-over-ISDN connections which are not combined with an
ISDN connection, but with a standard analog telephone connection instead.
In Germany, for instance, all T-DSL connections from Deutsche Telekom AG are
implemented as ADSL-over-ISDN connections.
1.2 What does VPN offer?
A VPN (Virtual Private Network) can be used to set up secure data communi-
cations over the Internet.
The models LANCOM 1811 Wireless DSL and LANCOM 1821+
Wireless ADSL are factory equipped to support VPN with 5 active tun-
nels. With the additional LANCOM VPN Option, VPN support can be
extended to 25 active tunnels (incl. activated hardware accelerator).
The following structure results when using the Internet instead of direct con-
nections:
Suffix Supported telephone system
'Annex A' ADSL-over-POTS
'Annex A' ADSL-over-ISDN

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
13
EN
All participants have fixed or dial-up connections to the Internet. Expensive
dedicated lines are no longer needed.
쐃All that is required is the Internet connection of the LAN in the headquar-
ters. Special switching devices or routers for dedicated lines to individual
participants are superfluous.
쐇The subsidiary also has its own connection to the Internet.
쐋The RAS PCs connect to the headquarters LAN via the Internet.
The Internet is available virtually everywhere and typically has low access
costs. Significant savings can thus be achieved in relation to switched or dedi-
cated connections, especially over long distances.
The physical connection no longer exists directly between two participants;
instead, the participants rely on their connection to the Internet. The access
technology used is not relevant in this case: Broadband technology such as
DSL (Digital Subscriber Line) is ideal. A conventional ISDN line can be used,
too.
The technologies of the individual participants do not have to be compatible
to one another, as would be the case for conventional direct connections. A
single Internet access can be used to establish multiple simultaneous logical
connections to a variety of remote stations.
Headquarters
Computers using remote access
Internet



LAN
LAN
Branch office

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
14
EN
The resulting savings and high flexibility makes the Internet (or any other IP
network) an outstanding backbone for a corporate network.
1.3 What is a Wireless LAN?
The following sections describe the functionality of wireless networks
in general. The functions supported by your device are listed in the
table ’What can your LANCOM Wireless Router do?’ →Page 15.
A Wireless LAN connects single terminals (e.g. PCs or notebooks) to a local
network (also LAN – Local Area Network). In contrast to a conventional LAN,
communication takes place via radio links rather than via network cables. This
is the reason why a Wireless LAN is also called a Wireless Local Area Network
(WLAN).
All functions of a cable-bound network are also available in a Wireless LAN:
access to files, servers, printers etc. is as possible as the connection of individ-
ual stations to an internal mail system or to the Internet access.
The advantages of Wireless LANs are obvious: notebooks and PCs can be set
up just where they are needed. Due to Wireless LANs, problems with missing
connections or structural alterations belong to the past.
1.3.1 Which hardware to use?
Each station of the Wireless LAN needs access to the Wireless LAN in the form
of a wireless interface. Devices which have no built-in wireless interface can
be upgraded with a supplement card or an adapter.
LANCOM Systems offers wireless adapters by its AirLancer product
line. An AirLancer wireless adapter enables a device (e.g. PC or note-
book) for access to the Wireless LAN.
1.3.2 Operation modes of Wireless LANs and base stations
Wireless LAN technology and base stations in Wireless LANs are used in the
following operation modes:
Simple direct connections between terminals without base station (ad-
hoc mode)
Larger Wireless LANs, connection to LANs with one or more base stations
(infrastructure network)
Passing-through of VPN-encrypted connections with VPN pass-through

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
15
EN
Setting-up of an Internet access
Connecting two LANs via a direct radio link (point-to-point mode)
Connecting of devices with Ethernet interface via base stations (client
mode)
Extending an existing Ethernet network with WLAN (bridge mode)
1.4 What can your LANCOM Wireless Router do?
The following table contains a direct comparison of the properties and func-
tions of your devices with other models:
LANCOM 1811
Wireless DSL
LANCOM 1821+
Wireless ADSL
Applications
Internet access ✔✔
LAN-LAN coupling over VPN ✔✔
LAN-LAN coupling over ISDN ✔✔
RAS server (over VPN) ✔✔
RAS server (over ISDN) ✔✔
IP router ✔✔
IPX router (over ISDN), for example for coupling Novell networks or for dialing in to Novel
networks
✔✔
NetBIOS proxy for coupling Microsoft peer-to-peer networks over ISDN ✔✔
DHCP- and DNS server (for LAN and DMZ) ✔✔
N:N mapping for routing networks with the same IP-address ranges over VPN ✔✔
Configuring LAN ports as additional WAN ports ✔✔
Policy- based routing ✔✔
Load balancing for bundling multiple DSL channels 4
channels
4
channels
Backup solutions and load balancing with VRRP ✔✔
NAT Traversal (NAT-T) ✔✔

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
16
EN
DMZ with configurable IDS checks ✔✔
PPPoE-Server ✔✔
WAN-RIP ✔✔
Spanning-Tree-Protokoll ✔✔
Layer-2-QoS-Tagging ✔✔
ISDN leased lines ✔✔
LANCAPI server to provide office applications such as fax or answering machine via the
ISDN interface.
✔✔
WLAN
Wireless transmission compliant with IEEE 802.11g and IEEE 802.11b ✔✔
Wireless transmission compliant with IEEE 802.11a and IEEE 802.11b ✔✔
Point-to-point mode (six P2P paths can be defined per WLAN interface) ✔✔
Relay function to link two P2P connections ✔✔
Turbo mode: Double the bandwidth at 2.4 GHz and 5 GHz. ✔✔
Super AG incl. hardware compression and bursting ✔✔
Multi SSID ✔✔
Roaming function ✔✔
802.11i / WPA with hardware AES encryption ✔✔
WEP encryption (up to 128-bit key lengths, WEP152) ✔✔
IEEE 802.1x/EAP ✔✔
MAC address filter (ACL) ✔✔
Individual passphrases per MAC address (LEPS) ✔✔
Closed-network function ✔✔
Integrated RADIUS server ✔✔
VLAN ✔✔
LANCOM 1811
Wireless DSL
LANCOM 1821+
Wireless ADSL

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
17
EN
Traffic-lock function ✔✔
QoS für WLAN (IEEE 802.11e, WMM/WME) ✔✔
VoIP functions
SIP users 4/32 1) 4/32 1)
ISDN users 4/32 1) 4/321)
Lines to SIP providers 16 1) 16 1)
Lines to SIP PBX 4 1) 4 1)
external ISDN busses for VoIP 1 11 1
1) depending on VoIP option (Basic/Advanced)
WAN connections
Connection for DSL or cable modem ✔✔
Integrated ADSL modem (ADSL2+ ready) ✔
ISDN S0bus in multi device-mode or in point-to-point mode with automatic D-channel
protocol identification. Supports static and dynamic channel bundling per MLPPP and BACP
as well as Stac data compression (Hi/fn)
✔✔
LAN connection
Separate FastEthernet LAN ports, individually switchable, e.g. as LAN switch or separate
DMZ ports; auto crossover.
Alternatively switchable as a WAN interface for connecting SDSL modems.
44
USB connector
USB 2.0 host port (full speed: 12 Mbps) for connecting a USB printer and for future extensi-
ons
✔
Security functions
IPSec encryption via external software (VPN client) ✔✔
5 integrated VPN tunnels for secure network connections ✔✔
IPSec encryption in hardware (optional; activated with the VPN-25 option) ✔✔
LANCOM 1811
Wireless DSL
LANCOM 1821+
Wireless ADSL

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 1: Introduction
18
EN
IP masquerading (NAT, PAT) to conceal individual LAN workstations behind a single public
IP address.
✔✔
Stateful-inspection firewall ✔✔
Firewall filter for blocking individual IP addresses, protocols and ports ✔✔
MAC address filter regulates, for example, LAN-workstation access to the IP routing func-
tion
✔✔
Protection of the configuration from brute-force attacks. ✔✔
Configuration
Configuration with LANconfig or via web browser; additional terminal mode for Telnet or
equivalent terminal programs; SNMP interface and TFTP server function.
✔✔
Remote configuration via ISDN (with ISDN PPP connections, e.g. via Windows Dial-Up Net-
working).
✔✔
Serial configuration interface ✔✔
Call-back function with PPP authentication mechanisms allowing only predefined ISDN call
numbers
✔✔
FirmSafe for no-risk firmware updates ✔✔
Optional software extensions
LANCOM VPN Option with 25 active tunnels for protection of network couplings and hard-
ware acceleration
✔✔
LANCOM Public Spot Option ✔✔
LANCOM VoIP Basic Option ✔✔
LANCOM VoIP Advanced Option ✔✔
LANCOM 1811
Wireless DSL
LANCOM 1821+
Wireless ADSL

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 2: Installation
19
EN
2 Installation
This chapter will assist you to quickly install hardware and software. First,
check the package contents and system requirements. The device can be
installed and configured quickly and easily if all prerequisites are fulfilled.
2.1 Package contents
Please check the package contents for completeness before starting the
installation. In addition to the base station itself, the package should contain
the following accessories:
If anything is missing, please contact your retailer or the address stated on the
delivery slip of the unit.
2.2 System requirements
Computers that connect to a LANCOM Router must meet the following mini-
mum requirements:
LANCOM 1811
Wireless DSL
LANCOM 1821+
Wireless ADSL
Power adapter ✔✔
LAN connector cable (green plugs) ✔✔
WAN connector cable (dark blue plugs) ✔
ADSL connector cable (transparent plugs) ✔
ISDN connector cable (light blue plugs) ✔✔
2 external screw-on single band antennas (2,4 GHz) with reverse SMA
connection
✔✔
Connector cable for the configuration interface ✔✔
LANCOM CD ✔✔
Printed documentation ✔✔

LANCOM 1811 Wireless DSL – LANCOM 1821+ Wireless ADSL
Chapter 2: Installation
20
EN
Operating system that supports TCP/IP, e.g. Windows VistaTM,
Windows XP, Millennium Edition (Me), Windows 2000, Windows 98,
Linux, BSD Unix, Apple Mac OS, OS/2.
Access to the LAN via the TCP/IP protocol.
Wireless LAN adapter or LAN access (if the access point is to be connected
to the LAN).
The LANtools also require a Windows operating system. A web
browser under any operating system provides access to WEBconfig.
2.3 Introducing LANCOM Router
This section introduces your device. We will give you an overview of all status
displays, connections and switches.
While the information in this section is useful for the installation of the
device, it is not absolutely essential. You may therefore skip this sec-
tion for the time being and go straight forward to the installation on
page 34.
2.3.1 Status displays
The front and the rear panels of the unit feature a series of light emitting
diodes (LEDs) that provide information on the status of the device.
Front side
The various LANCOM Router models have different numbers of indicators on
the front panel depending on their functionality (picture: LANCOM 1811
Wireless DSL).
LANCOM 1811
Wireless DSL
VPN
1811 Wireless DSL
쐃쐇 쐏쐋 쐆 쐊 쐅 쐈 쐉 씈쐎