Lancom Systems L-54AG Benutzerhandbuch

LANCOM L-54ag Wireless

Scope of features: as of LCOS version 7.5x

Stateful inspection firewall

Incoming/Outgoing Traffic inspection based on connection information

Packet filter

Check based on the header information of an IP packet (IP or MAC source/destination addresses; source/destination ports, 
DiffServ attribute); remote- site dependant, direction dependant, bandwidth dependant

Extended port forwarding

Network Address Translation (NAT) based on protocol and WAN address, i.e. to make internal webservers accessible from WAN

N:N IP address mapping

N:N IP address mapping for translation of IP addresses or entire networks

Tagging

The firewall marks packets with routing tags, e.g. for policy- based routing

Actions

Forward, drop, reject, block sender address, close destination port, disconnect

Notification

Via e- mail, SYSLOG or SNMP trap

Traffic shaping

Dynamic bandwidth management with IP traffic shaping

Bandwidth reservation

Dynamic reservation of minimum and maximum bandwidths, totally or connection bases, separate settings for send and receive 
directions

DiffServ/TOS

Priority queuing of packets based on DiffServ/TOS fields 

Packet- size control

Automatic packet- size control by fragmentation or Path Maximum Transmission Unit (PMTU) adjustment.

Layer 2/Layer 3 tagging

Automatic or fixed translation of layer- 2 priority information (802.11p- marked Ethernet frames) to layer- 3 DiffServ attributes in 
routing mode. Translation from layer 3 to layer 2 with automatic recognition of 802.1p- support in the destination device.

Intrusion Prevention

Monitoring and blocking of login attempts and port scans

IP spoofing

Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowed

Access control lists

Filtering of IP or MAC addresses and preset protocols for configuration access

Denial of Service protection

Protection from fragmentation errors and SYN flooding

General

Detailed settings for handling reassembly, PING, stealth mode and AUTH port

URL blocker

Filtering of unwanted URLs based on DNS hitlists and wildcard filters

Password protection

Password- protected configuration access can be set for each interface

Alerts

Alerts via e- mail, SNMP- Traps and SYSLOG

Authentication mechanisms

EAP- TLS, EAP- TTLS, PEAP, MSCHAP, MXCHAPv2 as EAP authentication mechanisms, PAP, CHAP and MS- CHAP as PPP 
authentication mechanisms

WLAN protocol filters

Limitation of the allowed transfer protocols, source and target addresses on the WLAN interface

Adjustable reset button

Adjustable reset button for "ignore", "boot- only" and "reset- or- boot

IP redirect

Fixed redirection of any packet received over the WLAN interface to a dedicated target address

VRRP

VRRP (Virtual Router Redundancy Protocol) for backup in case of failure of a device or remote station. Enables passive standby 
groups or reciprocal backup between multiple active devices including load balancing and user definable backup priorities

FirmSafe

For completely safe software upgrades thanks to two stored firmware versions, incl. test mode for firmware updates

Analog/GSM modem backup

Optional operation of an analog or GSM modem at the serial interface

Line monitoring

Line monitoring with LCP echo monitoring, up to 4 addresses for end- to- end monitoring with ICMP polling.

Frequency band 2.4 GHz or 5 GHz (EU 
compliance)

2400 - 2483.5 MHz (ISM) or 5150 - 5750 MHz or 5725- 5825 MHz (UK only)

Data rates 2.4 GHz

54 Mbps to IEEE 802.11g (fallback to 48, 36 , 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection) compatible to IEEE 802.11b (11, 
5.5, 2, 1 Mbps, Automatic Rate Selection), 802.11 b/g compatibility mode or pure g or pure b, Super A/G with Turbo Mode (108 
Mbps), bursting, compression

Data rates 5 GHz

54 Mbps to IEEE 802.11a/h (fallback to 48, 36 , 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection), Super A/G with Turbo Mode 
(108 Mbps), bursting, compression, fully compatible with TPC (adjustable power output) and DFS (automatic channel selection, 
radar detection) according to ETSI regulations.

Range 802.11a/b/g *

Up to 150 m (up to 30 m in buildings) *

Maximum transmission power 2.4 GHz

802.11b: +19 dBm @ 1 and 2 Mbps, +19 dBm @ 5.5 and 11 Mbps

Maximum transmission power 2.4 GHz

802.11g: +19 dBm @ 6 Mbps, +14 dBm @ 54 Mbps

Maximum transmission power 5 GHz

802.11a/h: +18 dBm @ 6 Mbps, +12 dBm @ 54 Mbps with transmission power control (TPC) and manual power settings

Minimum transmission power

Transmission power reduction in software in 1 dB steps to min. 0.5 dBm

Reception sensitivity 2.4 GHz

802.11b: - 87 dBm @ 11 Mbps, - 94 dBm @ 1 Mbps