Lancom Systems 1821n LS61380 Benutzerhandbuch

LANCOM 1821n Wireless

Scope of features: as of LCOS version LCOS 7.7x

Authentication mechanisms

EAP- TLS, EAP- TTLS, PEAP, MS- CHAP, MS- CHAPv2 as EAP authentication mechanisms, PAP, CHAP, MS- CHAP and MS- CHAPv2 
as PPP authentication mechanisms

Anti- theft

Anti- theft ISDN site verification over B or D channel (self- initiated call back and blocking)

WLAN protocol filters

Limitation of the allowed transfer protocols, source and target addresses on the WLAN interface

Adjustable reset button

Adjustable reset button for "ignore", "boot- only" and "reset- or- boot"

IP redirect

Fixed redirection of any packet received over the WLAN interface to a dedicated target address

VRRP

VRRP (Virtual Router Redundancy Protocol) for backup in case of failure of a device or remote station. Enables passive standby 
groups or reciprocal backup between multiple active devices including load balancing and user definable backup priorities

FirmSafe

For completely safe software upgrades thanks to two stored firmware versions, incl. test mode for firmware updates

ISDN backup

In case of failure of the main connection, a backup connection is established over ISDN. Automatic return to the main connection

Analog/GSM modem backup

Optional operation of an analog or GSM modem at the serial interface

Load balancing

Static and dynamic load balancing over up to 4 WAN connections. Channel bundling with Multilink PPP (if supported by network 
operator)

VPN redundancy

Control of up to 16 redundant VPN gateways for high availability or load balancing

Line monitoring

Line monitoring with LCP echo monitoring, dead- peer detection and up to 4 addresses for end- to- end monitoring with ICMP 
polling

1- Click- VPN Client assistant

One click function in LANconfig to create VPN client connections, incl. automatic profile creation for the LANCOM Advanced 
VPN Client

1- Click- VPN Site- to- Site

Creation of VPN connections between LANCOM routers via drag and drop in LANconfig

Number of VPN tunnels

5 IPSec connections active simultaneously (25 with VPN- 25 Option), unlimited configurable connections. Configuration of all 
remote sites via one configuration entry when using the RAS user template or Proadaptive VPN

Hardware accelerator

Integrated hardware accelerator for 3DES/AES encryption and decryption

IKE

IPSec key exchange with Preshared Key or certificate

Certificates

X.509 digital multi- level certificate support, compatible with Microsoft Server / Enterprise Server and OpenSSL, upload of 
PKCS#12 files via HTTPS interface and LANconfig. Secure Key Storage protects a private key (PKCS#12) from theft

Certificate rollout

Automatic creation, rollout and renewal of certificates via SCEP (Simple Certificate Enrollment Protocol)

Certificate revocation lists (CRL)

CRL retrieval via HTTP

XAUTH

XAUTH client for registering LANCOM routers and access points at XAUTH servers incl. IKE- config mode. XAUTH server enables 
clients to register via XAUTH at LANCOM routers

RAS user template

Configuration of all VPN client connections in IKE ConfigMode via a single configuration entry

Proadaptive VPN

Automated configuration and dynamic creation of all necessary VPN and routing entries based on a default entry for site- to-
site connections. Propagation of dynamically learned routes via RIPv2, if required

VPN Backup

Backup of VPN connections across different hierarchy levels, e.g. in case of failure of a central VPN concentrator and re- routing 
to multiple distributed remote sites. Any number of VPN remote sites can be defined (the tunnel limit applies only to active 
connections)

Algorithms

3DES (168 bit), AES (128, 192 or 256 bit), Blowfish (128 bit), RSA (128 or - 448 bit) and CAST (128 bit). OpenSSL implementation 
with FIPS- 140 certified algorithms. MD- 5 or SHA- 1 hashes

NAT- Traversal

NAT- Traversal (NAT- T) support for VPN over routes without VPN passthrough

IPCOMP

VPN data compression based on LZS or Deflate compression for higher IPSec throughput 

LANCOM Dynamic VPN

Enables VPN connections from or to dynamic IP addresses. The IP address is communicated via ISDN B-  or D- channel or with 
the ICMP or UDP protocol in encrypted form. Dynamic dial- in for remote sites via connection template

Dynamic DNS

Enables the registration of IP addresses with a Dynamic DNS provider in the case that fixed IP addresses are not used for the 
VPN connection

Specific DNS forwarding

DNS forwarding according to DNS domain, e.g. internal names are translated by proprietary DNS servers in the VPN. External 
names are translated by Internet DNS servers

1416- byte frame size UDP

46 Mbps

256- byte frame size UDP

8 Mbps

IMIX

14 Mbps

1518- byte frame size UDP

65 Mbps

256- byte frame size UDP

17 Mbps