Manual Lancom L-11 (page 42 of 102) (English)

680944

Zoom out

Zoom in

1/102

LANCOM Wireless L-11/IL-11

LANCOM

Wireless L-11/IL-II

LANCOM Wireless L-11/IL-11

While the information in this manual has been compiled with great care, it may not be deemed an assurance of product

characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery.

The reproduction and distribution of the documentation and software supplied with this product and the use of its contents

is subject to written authorization from LANCOM Systems. We reserve the right to make any alterations that arise as the

result of technical development.

Trademarks

Windows

, Windows NT

and Microsoft

are registered trademarks of Microsoft, Corp.

The LANCOM Systems logo is a registered trademark of LANCOM Systems GmbH. All other names mentioned may be

trademarks or registered trademarks of their respective owners

LANCOM Systems Subject to change without notice. No liability for technical errors or omissions.

LANCOM Systems GmbH

Adenauerstraße 20/B2

D-52146 Würselen

Germany

www.lancom.de

Würselen, July 2002

100324/01.08.02

LANCOM Wireless L-11/IL-11

Preface

Thank you for placing your trust in this LANCOM product.

Wireless networks from LANCOM Systems are economical alternatives or

additions to local wired networks (LANs). Notebooks and PCs can use mobile

network cards to communicate with one another or access wired networks

via access points and can even be integrated into the ISDN network.

Documentation

The accompanying documentation comprises:

•

Manual

Hardware installation, description of the functions, operating modes and

sample configurations

•

CD containing electronic documentation

All product manuals, basic technical information (e.g. wireless networks,

general networking technology, TCP/IP etc.), workshop with detailed ex-

amples of applications, reference section for general information includ-

ing a complete description of the menus.

Our online services (www.LANCOM.de) are available to you around the clock

should you have any queries regarding the topics discussed in this manual or

require any further support. Current drivers, firmware, tools and manuals can

be downloaded at any time.

LANCOM Wireless L-11/IL-11

Contents

1 Introduction 9

1.1 The basic functions of a wireless network 10

1.2 Operating modes 10

1.3 What does the LANCOM Wireless offer? 13

2 Installation 21

2.1 Package contents 21

2.2 System requirements 21

2.3 Install TCP/IP on your workstation 22

2.3.1 Windows 95 and Windows 98 22

2.3.2 Windows NT 4.0 23

2.3.3 Windows 2000 25

2.4 Introducing the LANCOM Wireless 26

2.4.1 The front of the unit 26

2.4.2 The status of the ISDN connection (LANCOM Wireless IL-

11) 28

2.4.3 The bottom of the unit 30

2.5 How to connect the device 30

2.6 Software installation 30

2.7 Quickstart 31

2.7.1 The wizards 32

2.7.2 Basic settings 32

3 Configuration and management 37

3.1 Radio or wired: configuration approaches 37

3.2 Configuration using LANconfig 37

3.3 Configuration with WEBconfig 38

3.4 Configuration using Telnet 39

3.5 Configuration using a dial-up connection (LANCOM Wireless IL-

11 ) 39

3.5.1 This is what you need for remote configuration 39

3.5.2 This is how you prepare the remote configuration 40

3.5.3 The first remote connection using a Dial-up Networking

and LANconfig 40

3.5.4 The first remote connection using a PPP client and Telnet

3.5.5 Limiting remote configuration 41

LANCOM Wireless L-11/IL-11

3.6 Configuration using SNMP 42

3.7 New firmware with FirmSafe 43

3.7.1 This is how FirmSafe works 43

3.7.2 How to load new software 44

3.8 What's happening on the line? 45

3.9 LANmonitor 45

3.10 DSL firmware for LANCOM Wireless 46

4 Operating modes and functions 49

4.1 Establishing wireless connections 49

4.1.1 Considerations for setting up a wireless network 50

4.1.2 Ad hoc network (peer-to-peer) 50

4.1.3 Infrastructure network 51

4.1.4 Point-to-point network 52

4.1.5 Wireless Internet gateway via ISDN (LANCOM Wireless IL-

11) 52

4.1.6 Wireless Internet gateway via DSL 53

4.2 Security for your configuration 54

4.2.1 Security for the device 54

4.2.2 Security for your WLAN 56

4.2.3 Security for your LAN 57

4.3 ISDN routing (LANCOM Wireless IL-11) 62

4.3.1 ISDN name list 63

4.3.2 Interface settings 64

4.3.3 Router interface settings 65

4.3.4 Layer list 65

4.3.5 Call charge management 66

4.4 Automatic address administration with DHCP 67

4.4.1 The DHCP server 67

4.4.2 DHCP—'on', 'off' or 'auto'? 68

4.4.3 How are the addresses assigned? 68

4.4.4 Configuring the DHCP server 71

4.5 The least-cost router (LANCOM Wireless IL-11) 74

4.5.1 Function of the LANCOM Wireless least-cost router 74

4.5.2 Setting up the least-cost router 77

4.6 LANCOM CAPI Faxmodem (LANCOM Wireless IL-11) 79

4.6.1 Installation 79

4.6.2 Faxing with the LANCOM CAPI Faxmodem 80

LANCOM Wireless L-11/IL-11

4.7 Office communications and LANCAPI 80

4.7.1 LANCAPI interface settings 80

4.7.2 The LANCAPI (LANCOM Wireless IL-11) 81

4.8 Accounting 86

4.8.1 Configuring accounting 87

4.8.2 Reading the accounting data 87

5 Technical data 89

5.1 Power and ratings data 89

5.2 Radio frequency channels 91

6 Appendix 93

6.1 Declaration of conformity 93

6.2 General Warranty conditions 93

7 Index 95

LANCOM Wireless L-11/IL-11

Introduction

LANCOM Wireless L-11/IL-11

1 Introduction

The advantages of wireless LANs are obvious: Notebooks and PCs can be set

up where they are wanted—problems with missing ports or construction al-

terations are a thing of the past with wireless networking.

Network links in conferences or presentations, access to resources in adja-

cent buildings and exchanging data with mobile units are only a few of the

options available with a wireless LAN.

The access point plays the central role in enabling these options in an exist-

ing wired network. All stations in the wireless network access the LAN via

the access point.

The present manual refers to both LANCOM Wireless L-11 and LANCOM

Wireless IL-11. All references to ISDN or the ISDN-router are exclusively re-

lied to LANCOM Wireless IL-11.

Your entire LAN is connected to the outside world via the integrated IP router

and the ISDN interface of LANCOM Wireless IL-11. Access to the Internet for

the entire LAN or office functions such as fax and answering machine at all

workstations are only some of the advantages offered by the ISDN router.

Notes on using wireless LAN devices

LANCOM Wireless LAN products can use up to 13 radio frequency channels

in a frequency band between 2400 MHz and 2483 MHz. The devices are

approved for operation in all EU countries and Switzerland. Use of the

devices is regulated throughout Europe by the 1999/5/EG guideline of the

European Parliament and Council Directive of 9 March 1999 regarding Radio

and Telecommunication Terminal Equipment (R&TTE) and the mutual

approval of their conformity. Please observe the approved frequencies for

individual countries as listed in the appendix.

LANCOM Systems is not responsible for disturbances or interference caused

by unauthorized modifications made to the devices. LANCOM Systems will

not be held liable especially for the consequences of connecting external

antennas or cables that are not explicitly designed for use with

LANCOM Wireless and AirLancer devices.

See the appendix for more information on CE conformity.

Introduction

LANCOM Wireless L-11/IL-11

1.1 The basic functions of a wireless network

This chapter introduces the basic functional principles of a wireless network.

The terms used will be explained and the structure and possible applications

of wireless networks introduced. Detailed information on this and other top-

ics can be found in the electronic documentation on the CD.

Wireless network

adapters WLAN

Wireless network adapters connect individual notebooks and PCs to a Local

Area Network (LAN). As the usual network cables have been replaced by a

radio link in this case, we also refer to this as a Wireless Local Area Network

(WLAN).

Access point

Furthermore, the access point forms the bridge between LAN and WLAN.

The LANCOM Wireless access point also can function as an Internet router

or a wireless bridge between two ethernet LANs. It has a slot for a wireless

network adapter (AirLancer MC-11) as well as a normal Ethernet connection

on the other side to exchange data between the two networks.

Radio cell

The maximum area in which wireless network adapters in mobile stations

and the access point can reach each other and exchange data is known as a

radio cell.

All of the standard functions of a wired network are also available in a wire-

less network: Access to files, servers, printers etc. is possible as is the inte-

gration of the mobile stations into an internal company e-mail system.

1.2 Operating modes

The following operating modes are available using LANCOM Systems wire-

less network adapters and access points:

• Ad hoc network (peer-to-peer)

• Infrastructure network

• Wireless bridge

• Wireless LAN + ISDN gateway (LANCOM Wireless IL-11)

• Wireless LAN + DSL gateway

Direct PC

connection

Use the wireless network cards to link two or more computers directly. All

computers in a WLAN can then communicate with one another with no addi-

tional hardware.

Introduction

LANCOM Wireless L-11/IL-11

Ad hoc network

This application is generally called a peer-to-peer network. In the language

of wireless networking, it is known as an ad hoc network.

Infrastructure

network

All computers with wireless network cards are able to access a wired net-

work via an access point. The access point acts as the connection between

the LAN and the WLAN and it also forms the switching center for data traffic

within the WLANs.

A wireless network with a access point is also referred to as an infrastructure

network.

This network type is ideally suited as an addition to existing LANs. The infra-

structure network is the ideal solution for expansion of a LAN in areas where

wiring is not possible or not economical.

Roaming

Multiple access points can be used if the range of a cell is not sufficient to

link all mobile stations. This makes it possible to switch from one wireless

cell to another without interrupting the connection to the network.

Ad hoc network

Infrastructure network

Introduction

LANCOM Wireless L-11/IL-11

Radio cells can also overlap to ensure good coverage. Different channels (up

to 13 channels are available) can be selected to prevent interference

between the cells.

WLAN and

ISDN/DSL gateway

The LANCOM Wireless IL-11 access point offers a special supplementary

function. The access point connects both the wireless network and the wired

or DSL network simultaneously to the ISDN network via the ISDN interface.

This enables additional applications such as access to the Internet for all

computers in the LAN and WLAN together with all the functions of an IP

router.

Introduction

LANCOM Wireless L-11/IL-11

1.3 What does the LANCOM Wireless offer?

The following is an outline of the principal features of the device giving you

a quick overview of its capabilities.

Easy installation

• Connect the LANCOM Wireless to the power supply.

•

Establish a link to the LAN.

•

Connect to a DSL port.

•

Plug in the ISDN cable.

(LANCOM Wireless IL-11)

•

Switch it on.

• Go!

LAN connection

Access points for wireless networks by LANCOM Systems work in Ethernet

environments. Use the 10Base-T connection and a hub or switch to connect

the LANCOM Wireless to a 10 Mbit LAN or to a DSL modem.

WAN connection

The LANCOM Wireless IL-11 is connected to the S

interface(s) of an ISDN

basic rate interface in point-to-multipoint configuration (multi-device termi-

nal) or in point-to-point configuration (system terminal). The router automat-

ically detects your port type and the D-channel protocol being used. Switched

connections using DSS1 or 1TR6 can also be used, as can leased-line connec-

tions.

Operation with an ISDN leased line is not included in the standard delivery

scope of the router. The leased line option can be enabled by entering a code

that has to be purchased seperately.

DSL connection

With special DSL firmware (on CD-ROM), you can connect your LANCOM

Wireless to a DSL modem (such as the T-DSL network offered by Deutsche

Telekom). Instead of connecting to the Ethernet, you can have quick access

to the Internet. This procedure can be switched in both directions by using

the corresponding firmware.

Introduction

LANCOM Wireless L-11/IL-11

Configuration

Setting up and configuring the devices to your specific needs is made quick

and easy in Windows operating systems by the configuration tool supplied,

LANconfig.

The management tool WEBconfig is just as easy to use. It allows you to

access the configuration of the LANCOM Wireless access point or even load

new firmware using any HTML browser. Furthermore it is possible to access

device configuration via SNMP, Telnet and TFTP.

For access to the device, the TCP/IP protocol has to be installed on the sta-

tions. The LANCOM Wireless access point can then be configured for a LAN,

WLAN or WAN connection. The unit can be maintained remotely via ISDN—

even before being configured after delivery (LANCOM Wireless IL-11).

Access to the device is possible from a WAN (via ISDN), WLAN or LAN. TFTP

is supported along with SNMP if configuring from the LAN or WLAN.

The integrated setup wizards from LANconfig and WEBconfig help you get

the unit operating in a few steps.

Software update

Your device has a flash ROM memory to ensure that its software remains

state of the art. This allows new firmware to be loaded onto the device with-

out the need to open it up.

The current version is always available to you on our online media and can be

loaded via the LAN, the WLAN or the WAN (ISDN).

FirmSafe

There is no risk involved with loading the new firmware: The FirmSafe func-

tion enables two firmware files to be managed on one device. If the new

firmware version does not function as desired after the upload you can simply

revert to the previous version.

If an error occurs during the upload (e.g. a transmission error) the functioning

previous version is automatically reactivated.

Intruder protection

Along with password protection and call number recognition (CLIP), the router

offers protection against unauthorized access to the company network by

means of a callback function which only permits a connection to be estab-

lished to previously defined ISDN telephone numbers only (LANCOM Wire-

Introduction

LANCOM Wireless L-11/IL-11

less IL-11). Authentication mechanisms in PPP, firewall filters and IP

masquerading complete the security concept. Furthermore, login barring pre-

vents any “brute force attacks” and denies access to the router after a con-

figurable number of login attempts using an incorrect password.

Wireless and secure with WEP

The WEP (Wired Equivalent Privacy) encryption method attaches a 40-bit or

128-bit key to the wireless data. The data encryption and authentication of

the stations makes it as good as impossible for the data in transit to be inter-

cepted. This ensures a considerably higher level of data security in wireless

network operation. Additionally, station filters based on MAC addresses

make it possible to allow or deny individual stations access to the access

point.

The basic WEP encryption meanwhile is said to be attacable (which requires

a great deal of energy). Therefore WEPplus has been developed which avoids

the weaknesses of WEP encryption and increases the security.

Charge monitoring

(LANCOM Wireless IL-11)

Subscribing to “Advice of charge during connection” on the ISDN network

(AOCD) allows you to set the charge units available for a specified period for

the ISDN connection. This puts you in constant control of your phone bill.

If charge information is not available from your ISDN connection, you can also

limit the active ISDN connect time for a specified period. The router will not

permit the active establishment of connections once this time has elapsed.

Least-cost routing

(LANCOM Wireless IL-11)

Even if there is a large selection of telecommunications service providers you

can always use the cheapest ISDN lines using the least-cost router.

Automatic time check

(LANCOM Wireless IL-11)

In order to generate sound statistics and to select the correct connection

paths using the least cost router, the device always must have the exact time.

It can read the time from the ISDN network itself. The router's internal time

is always compared to ISDN time either each time a connection is estab-

lished or each time the device is switched on. Of course, the time can also be

set manually.

Introduction

LANCOM Wireless L-11/IL-11

Channel bundling and compression (LANCOM Wireless IL-11)

The device supports static and dynamic channel bundling via MLPPP and

BACP on the ISDN line. Stac data compression (hi/fn) can be used to achieve

increases in the data transfer rate of up to 400% in case that the remote site

also supports this compression.

LANmonitor

Under Windows operating systems, this tool displays the status of the router

on the screen at all times. The most important information for every device

in the local network is displayed, such as:

• Connection status for each transfer channel

• Name of the remote site

• The connected unit module (router, LANCAPI)

• Connection duration and transmission rates

• Excerpts of the device statistics (e.g. PPP negotiation data)

Additionally, the software allows you to log and save the messages on the

PC for further processing.

AirLancer Client Manager

The AirLancer Client Manager is included with the AirLancer cards and pro-

vides software tools for configuring AirLancer adapters and monitoring and

diagnosing wireless networks. The wireless connection of WLAN clients to

the access point is continuously monitored, and the current status is also dis-

played. You have a choice of the following:

• Set the wireless parameters and user profiles

• Monitor and analyze the wireless network (site survey)

• Display the available access points

• Carry out tests and diagnostics on the card

• Monitor the signal strength

• Assign the WEP encryption key

Refer to the online help file for detailed information on the AirLancer Client

Manager.

Introduction

LANCOM Wireless L-11/IL-11

Status displays

LED indicators on the front of your access point allow you to monitor the ISDN

and Ethernet connections and the current line connections, thus simplifying

the process of diagnosing any systems failures.

Statistics

The comprehensive statistics function lets you keep track of your LANCOM

Wireless. These statistics give you all the information you need on the data

packets transferred, for example, so that you can optimize the configuration

of your device.

DHCP

Your LANCOM Wireless provides the following DHCP modes:

• DHCP server, to assign IP addresses

• DHCP client, to receive addresses

• DHCP relay agent, to forward DHCP requests

With its factory-preset configuration, the device operates using a sophisti-

cated automatic mode, which makes it extremely easy to get the LANCOM

running either on an existing network or a new network.

DNS server

The router's DNS server functions allow you to set up links between IP

addresses and names of computers or networks. The correct route can be

directly assigned in the event of queries for known computer names.

The DNS server can also access the name and IP information from the DHCP

server and the NetBIOS module.

The DNS server can also serve as an effective filter for the users in your local

network. Access to specified domains can be denied to individual computers

or complete networks.

LANCAPI and CAPI Faxmodem (LANCOM Wireless IL-11)

The main advantages of using LANCAPI are economic. The LANCAPI is a spe-

cial type of CAPI 2.0 interface through which various communications pro-

grams via the network can access the router.

Any workstation which has been integrated into the LAN (Local Area Net-

work) can use LANCAPI to give unlimited access to office communication

functions such as fax and EuroFileTransfer. All functions are made available

Introduction

LANCOM Wireless L-11/IL-11

throughout the network without the need to add hardware to the worksta-

tions. The office communications software simply needs to be loaded onto

the individual workstations.

A fax device is simulated at the workstation so that faxes can be sent. With

the LANCAPI, the PC forwards the fax via the network to the router which

establishes the connection to the recipient.

Routing: Line connection and management

The router checks all data on the network to determine whether they have to

be sent to another network or computer. If data transfer is necessary, the

router establishes the connection itself and closes the connection once the

transfer is complete. Any partly used call charge units are used up fully if call

charge information is transmitted during the connection.

To reduce transfer costs, the router offers various filter options depending on

the mode of operation. These filters can be used to exclude data from being

tranmitted to all or part of the network. Data that belongs to specific services

(e.g. printing services) can also be excluded from transfer.

NetBIOS proxy

LANCOM Systems routers offer a special feature for the interconnection of

Microsoft peer-to-peer networks. With the integrated routing of IP NetBIOS

packets, the linking of Windows networks becomes child's play. The remote

stations relevant for the exchange of data are entered in a list to ensure that

not every NetBIOS packet results in the establishment of a connection.

As a NetBIOS proxy, the router answers the queries for known workstations

locally to prevent unnecessary connections from being established.

Accounting

Most data transfers through the LANCOM Wireless router take place via dial-

up connections, where the charges are calculated based on the online time,

or via static connections, where the charges are calculated based on the

transferred data volume. Only a small portion of users use true leased-line

connections with flat-rate charging.

For many users it is important to determine which of the immediate LAN com-

puters use the connection to the router and what charges they incur.

With its accounting feature, LANCOM Wireless offers the ability to break-

down online times and data transfer volumes for ISDN and DSL connections

based on the individual computers that use the connections. This allows you

Introduction

LANCOM Wireless L-11/IL-11

to determine the incorrect configuration of the computer or router quickly and

allocate the resulting expenses to their appropriate causes.

Introduction

LANCOM Wireless L-11/IL-11

Roaming

The roaming feature lets you construct bigger wireless networks using any

number of access points. When stations switch from one wireless cell to

another while connected, they are automatically logged off of the previous

access point and logged onto the next.

Installation

LANCOM Wireless L-11/IL-11

2 Installation

This section will help you to connect as quickly as possible. First we will

describe the contents of the package and introduce the device itself. After

that we will explain how to connect the unit and put it to use quickly.

The following information is intended for experienced users familiar with

hardware and network configuration.

2.1 Package contents

Please ensure that the delivery is complete before beginning with the instal-

lation. The package should include the following components:

• LANCOM Wireless IL-11 or LANCOM Wireless L-11

• AirLancer wireless network adapter with integrated antenna (already in

the access point)

• Power adapter

• LAN connector cable

(also suitable when connecting to a DSL modem)

• ISDN connection cable (LANCOM Wireless IL-11)

• Documentation

• CD containing LANconfig, other software and electronic documentation

If anything should be missing, please contact your dealer.

2.2 System requirements

PCs that are to communicate with a LANCOM Wireless access point have to

meet the following minimum requirements:

• The TCP/IP protocol must be installed.

• A web browser must be installed (for HTML configuration).

• An AirLancer or other ethernet card has to be installed.

Several programs and drivers, such as LANconfig and LANCAPI require a

Windows operating system.

Installation

LANCOM Wireless L-11/IL-11

2.3 Install TCP/IP on your workstation

To establish a connection to a LANCOM Wireless access point for the first

time, the TCP/IP protocol has to be set up. The following describes how to

install this protocol on various operating systems.

2.3.1 Windows 95 and Windows 98

Using Windows 95 and Windows 98 as examples, this section will show

what needs to be done, if it is not already done for you, to ensure smooth

communication between computers in a TCP/IP network with the router con-

nected to the workstations.

• Installing TCP/IP

To install TCP/IP, click Start / Settings / Control Panel / Network /

Add / Protocol. Select the manufacturer 'Microsoft' and the 'TCP/IP'

network protocol.

• Allocate IP addresses (using DHCP)

If you are going to use the router as a DHCP server, set the workstations

to obtain IP addresses automatically: Start / Settings / Control panel /

Network / TCP/IP / Properties / IP address / Automatically receive

IP address. Also, delete any existing entries for DNS servers and gate-

ways (found under the 'Gateway' and 'DNS Configuration' tabs). When

the computer is restarted, it then searches for a DHCP server on the net-

work and lets it assign an IP address to it.

• Setting fixed IP addresses (not using DHCP)

If you are not going to use a DHCP server on your network, assign the

workstations fixed IP addresses: Start / Settings / Control panel / Net-

work / TCP/IP / Properties / IP address / Determine IP address.

Assign unique IP addresses, for example taken from a reserved range of

addresses. For example, the workstations can be assigned addressed

from '10.1.1.2' to '10.1.1.253', the router can be given '10.1.1.1' and all

can have the subnet mask of '255.255.255.0'. To test whether or not a

specific IP address, such as '10.1.1.1', is free, enter

ping 10.1.1.1

in a DOS session If you do not receive a response, the address is most

likely free.

• Entering the gateway and DNS server (not necessary when using DHCP)

On the workstation computers, specify the address of the local network

router as the gateway and as the Domain Name Server (DNS server):

Installation

LANCOM Wireless L-11/IL-11

Start / Settings / Control panel / Network / TCP/IP / Properties /

Gateway and DNS configuration. Also enter a host name on the DNS

configuration page. In doing so, use the name of the PC, which ideally

matches the user's name, to maintain a certain amount of consistency.

• Checking the IP configuration

Under Windows 95 and Windows 98, you can view the current IP config-

uration of your computer with by using Start / Run / winipcfg. Among

other information, this shows you which IP address was assigned to the

computer by the DHCP server and which addresses have been specified

for DNS servers and the gateway.

2.3.2 Windows NT 4.0

Using Windows NT 4.0 as an example, this section will show what needs to

be done, if it is not already done for you, to ensure smooth communication

between computers in a TCP/IP network with the router connected to the

workstations.

• Installing TCP/IP

To install TCP/IP, click Start / Settings / Control Panel / Network /

Protocols / Add. Select the 'TCP/IP protocol' network protocol.

• Allocate IP addresses (using DHCP)

If you are going to use the router as a DHCP server, set the workstations

to obtain IP addresses automatically. To do so, select Yes when com-

pleting the network protocol installation.

Windows then copies the required files and, when finished, requests you

to reboot.

• Setting fixed IP addresses (not using DHCP)

If you are not going to use a DHCP server on your network, assign the

workstations fixed IP addresses: Start / Settings / Control Panel /

Network / Protocols / Properties. This tab also lets you set the stan-

dard gateway.

Installation

LANCOM Wireless L-11/IL-11

Assign unique IP addresses, for example taken from a reserved range of

addresses. For example, the workstations can be assigned addressed

from '10.1.1.2' to '10.1.1.253', the router can be given '10.1.1.1' and all

can have the subnet mask of '255.255.255.0'. To test whether or not a

specific IP address, such as '10.1.1.1', is free, enter

ping 10.1.1.1

in a DOS session. If you do not receive a response, the address is most

likely free.

• Entering the DNS server (not necessary when using DHCP)

On the workstation computers, specify the address of the local network

router as the Domain Name Server (DNS server) on the 'DNS' tab. Also

enter a host name on the DNS configuration page. In doing so, use the

name of the PC, which ideally matches the user's name, to maintain a cer-

tain amount of consistency.

Installation

LANCOM Wireless L-11/IL-11

• Checking the IP configuration

Under Windows NT 4.0 you can query the current IP configuration of your

computer with Start / Run / ipconfig. This shows you which IP address

was assigned to the computer by the DHCP server and which addresses

have been specified for the gateway (not for the DNS server).

2.3.3 Windows 2000

With Windows 2000, helpful hardware setup wizards provide support when

you install the new hardware. If your network card is not detected during sys-

tem startup, launch the hardware wizard by selecting

Start / Settings / Control Panel / Add/Remove Hardware.

a Select to search for new hardware and then select the 'Add a new device'

from the list that follows and click Next >.

b The search should detect the network card. Click again Next >. The sys-

tem then configures the new hardware and a LAN connection.

c To verify the new LAN connection, open its window by selecting

Start / Settings / Network and Dialup Connections

From there, click the connection with the right mouse button and open its

properties.

Installation

LANCOM Wireless L-11/IL-11

d The dialog that appears contains a list box containing the installed net-

work components. TCP/IP should be listed in any case.

e Select its entry and click the Properties... button.

This opens a dialog where you can define all of the properties for this network

protocol. The procedures for setting address, DHCP, gateway and DNS are

the same here as in Windows 98.

2.4 Introducing the LANCOM Wireless

This section introduces the unit's hardware. It covers the unit's display ele-

ments and connection options.

2.4.1 The front of the unit

LEDs

You will find a number of LEDs as display elements on the front panel.

1 This LED shows the send/receive status of the card:

• Off—no wireless activity

• Blinking—wireless data being sent/received

Installation

LANCOM Wireless L-11/IL-11

2 The second LED indicates the card's operating mode:

• Lit green—standard mode

• Blinking green—the card is in energy-saving mode

3 The 'Power/Msg' LED on the access point lights up briefly when the

power is switched on. After the self-test, either an error is output by a

flashing light code or the device starts and the LED remains lit.

4 The 'S

Status' LED on the access point shows the activity on the D-chan-

nel (LANCOM Wireless IL-11 only).

5 The 'WAN Channel-1' LED on the access point shows the activity on the

first B-channel on the ISDN port (LANCOM Wireless IL-11 only).

6 The 'WAN Channel-2' LED on the access point shows the activity on the

second B-channel on the ISDN port (LANCOM Wireless IL-11 only).

7 The 'LAN Tx/Rx' LED on the access point indicates activity on the wireless

network and the LAN.

8 The LED 'LAN link' on the access point indicates data activity in the Ether-

net network.

9 The Reset button is recessed in the case and can only be reached with a

pointed object such as a paper clip. Press the Reset button until all of the

LEDs light up to reset the unit to its factory defaults.

off Device off

green 1 x short Boot procedure (test and load) started

green flashing Display of a boot error (flashing light code)

green Device ready for use

Installation

LANCOM Wireless L-11/IL-11

2.4.2 The status of the ISDN connection (LANCOM Wireless

IL-11)

This LED shows the status of the S

connection:

WAN

Chan1

Chan2

These LEDs indicate the status of the corresponding logical ISDN-WAN chan-

nels (in both router and CAPI modes):

The ISDN WAN channels do not have any fixed assignments to B channels!

The connection is active and incurring charges so long as the 'Chan1' or

'Chan2' LED is green!

WAN

Chan 1+2

This LED indicates whether the current ISDN connection is static or using

dynamic channel bundling.

off Not connected or no S

voltage

(often, the S

voltage is disabled at ISDN connections

after certain length of inactivity)

green flashing Initializing (establishing contact with the connection

point)

green operational

bus activated, TEI exists and D channel protocol

checked)

green Power off LED is on, but power LED is off: unit in boot monitor

off Channel idle

red flashing incoming call pending

green flashing outgoing call being executed

red Channel is physically established/protocol negotiation

in process

green Corresponding protocol negotiation (X.75, PPP, etc.)

completed; channel is logically online

green/red short red flashes

(duration approx.

1/10 s)

Indicate a received data packet

Installation

LANCOM Wireless L-11/IL-11

off no connection or no bundle connection active

green static or dynamic bundle connection active

Installation

LANCOM Wireless L-11/IL-11

2.4.3 The bottom of the unit

Now turn the whole thing upside down and take a look at the bottom. There

you'll find:

1 Connection for power supply unit

2 10Base-T network connection

3 ISDN S

port (LANCOM Wireless IL-11)

2.5 How to connect the device

a Connect your LANCOM Wireless to the LAN. Plug the network cable (sup-

plied) into the 10Base-T terminal of the device and into a free network

connector on your local network (or into a free socket on a hub in your

LAN). The cable for the LAN connector is labeled with a colored bend-

proof protector.

b Connect your LANCOM Wireless IL-11 to the ISDN network. To do so,

connect the supplied ISDN line connection cable to the ISDN/S

terminal

on the unit and to an ISDN/S

multi-device terminal or system terminal

(point-to-multipoint or point-to-point configuration).

c Connect the AC adapter to the device and switch it on. After a short

device self-test the 'Power/Msg' LED will be permanently lit. The 'LAN

Link' LED indicates that your router is correctly connected to the LAN.

2.6 Software installation

The LANconfig configuration software for Windows operating systems

enables you to set up your router easily and conveniently for the desired

application. To use it, first install LANtools from the CD onto your system.

쐃쐇쐋

LAN S

Installation

LANCOM Wireless L-11/IL-11

With other operating systems, you can use WEBconfig in an HTML browser

to carry out the configuration.

You will need a Windows PC on the LAN to run LANconfig. LANCOM also

provides a Linux version of LANconfig which can be downloaded from their

website.

a Install the TCP/IP network protocol on the computer that will be used to

set up your device.

b Then install LANconfig. If the setup program does not start up automat-

ically after insertion of the LANCOM CD, start Windows Explorer, click on

'autorun.exe' on the LANCOM CD and follow the instructions in the install

program.

2.7 Quickstart

The following steps should help you get your device running quickly and eas-

ily. Choose from three different installation scenarios:

The TCP/IP protocol is installed on the system and there is no DHCP

server on the LAN

In this case, the LANCOM Wireless activates the DHCP server in automatic

mode. It assigns IP addresses in the range of 10.x.x.x. You can assign a fixed

IP address to the LANCOM Wireless or let it be assigned automatically. In

the later case, the LANCOM Wireless is assigned the address 10.0.0.1.

The TCP/IP protocol is installed on the system and there is already a

DHCP server on the LAN

The LANCOM Wireless acquires its IP address from the DHCP server on the

LAN. LANconfig finds the LANCOM Wireless at its address. The setup wiz-

ard asks for a static IP address. Because the address is previously unknown,

you cannot access the LANCOM Wireless using WEBconfig.

The TCP/IP protocol is installed on the system with a fixed IP

address

In this case, LANconfig finds LANCOM Wireless at the client computer's

address, which ends in 254 (x.x.x.254). The setup wizard asks for a static IP

address.

Installation

LANCOM Wireless L-11/IL-11

2.7.1 The wizards

The following wizards, which make it very easy to set up and configure the

LANCOM Wireless, are available in LANconfig and WEBconfig:

• Basic settings

• Changing security settings

• Setting up Internet access

• Selecting the Internet provider

• Preparing remote access service (RAS) (LANCOM Wireless IL-11)

• Connecting two local networks (LANCOM Wireless IL-11)

Wizards in LANconfig

a Start the software LANconfig with Start / Programs / LANCOM / LAN-

config.

b Select your LANCOM Wireless in the list of devices and call up the wiz-

ards.

Wizards in WEBconfig

a Launch your browser and enter the device's IP address, which you config-

ured in the basic settings, into the address field. If you did not specify an

IP address while carrying out the basic settings, the address is '10.0.0.1'.

b The start page provides links to the wizards.

The wizards guide you through the individual configuration steps. Each step

is accompanied by an explanation of its values. The following provides a

detailed description of the basic settings for the LANCOM Wireless.

2.7.2 Basic settings

With the basic settings, you assign a name to the unit and define the IP

addresses for operation in the local network.

LANconfig

The first time LANconfig is run, the new device is detected on the TCP/IP net-

work and can immediately be configured. A wizard starts automatically to

help you with the basic configuration of the unit; it can also perform the com-

plete basic configuration for you.

Installation

LANCOM Wireless L-11/IL-11

The start page for automatic configuration does not appear in all described

cases. In some cases you are asked to enter an IP address in the next step (c).

a Start the new software with Start / Programs / LANCOM / LANconfig.

b Select the option 'All settings to be defined automatically' if you are not

familiar with networks and IP addresses and one of the following condi-

tions applies:

• You have not yet used IP addresses in your network but would like to

do so starting now. You are not concerned about the specific IP

addresses that will be used. The router as a DHCP server will auto-

matically set and assign the IP addresses for all devices in the net-

work (LAN and WLAN).

• You do not want to use IP addresses because you are using a pure

Windows network, for example.

If you are not sure whether your network already uses IP addresses, click on

Start / Run, enter

winipcfg on the command line and click OK. If the next

window shows the value '0.0.0.0' in the field 'IP address', the computer has

never had an IP address.

Under Windows NT you can check IP addresses with the command

ipconfig.

c Select the option 'I wish to define the settings myself' if you are familiar

with networks and IP addresses and one of the following conditions

applies:

Installation

LANCOM Wireless L-11/IL-11

• You have not yet used IP addresses in your network but would like to

do so starting now. However, you wish to set the IP address for the

router and assign it an address from an address range reserved for

private use, e.g. '10.0.0.254' with the network mask '255.255.255.0'.

At the same time you will set the address range that the DHCP server

uses for the other devices in the network (so long as the DHCP server

is not switched off).

• You have previously used IP addresses for the computers in your LAN.

Assign the router a free address from the previously used address

range, and select whether the router should run as a DHCP server or

not.

You can find more information on the general structure of networks and set-

ting IP addresses in the electronic documentation on the LANCOM CD.

d Enter a password for access to the unit and choose whether to use it as

a DHCP server on your LAN.

Disable 'Automatically configure workstations via DHCP' only if you want to

use IP addresses on your network or already use another DHCP server. The

functions of the DHCP server are described in this manual on CD.

WEBconfig

If you do not wish to or cannot use LANconfig (e.g. because you have installed

a different operating system), you can configure the basic settings using a

normal HTML browser.

a Start your browser.

• If you do not yet have a DHCP or DNS server on your LAN, the router

reacts to any name (like 'LANCOM' or 'Router') that you specify in the

address field. The startup page will appear automatically.

• If you already use a DHCP server or work with fixed IP addresses on

your LAN, enter the address as 'x.x.x.254' in the browser's address

field, where 'x.x.x' stands for the currently configured range of

addresses.

Installation

LANCOM Wireless L-11/IL-11

From this point on, the procedure is the same as for the LANconfig.

Telnet

Open a telnet connection to the address '10.0.0.254' if you have not used IP

addresses in your network to date, or the address 'x.x.x.254', in which 'x.x.x'

stands for the address range previously used in the network.

Procedure example:

a Start the telnet connection by clicking Start / Run and entering

telnet

10.0.0.254

on the command line.

b Set the IP address on the LAN/WLAN:

cd /setup/TCP-IP

set intranet adr. 10.0.0.1

set intranet mask 255.255.255.0

When the Internet address is changed, the telnet connection is interrupted.

c Set up DHCP

cd /setup/DHCP/

dir

set operating on

Even if the entries at this point are not very clear without further explanation,

you can reach the same destination as with the setup with LANconfig!

Installation

LANCOM Wireless L-11/IL-11

With these settings, you have completed making your new router known on

the local network. The router itself is addressable using the IP address of

'10.0.0.1'. After you reboot your system, all units on the local network will be

assigned IP addresses by the DHCP server in the router. It will use an address

pool from '10.0.0.2' to '10.0.0.253' automatically.

Configuration and management

LANCOM Wireless L-11/IL-11

3 Configuration and management

LANCOM Wireless access points are always delivered with up-to-date soft-

ware in which a number of the settings have already been prepared for you.

It will nevertheless be necessary for you to add some information and config-

ure the router to your specific needs. These settings are made as part of the

configuration process.

This section will show you the programs and routes you can use to access the

device and set it up.

And, if the team at LANCOM Systems has produced new firmware with new

features for your use, we will show you how to load the new software.

3.1 Radio or wired: configuration approaches

With the configuration via WLAN and LAN or the remote configuration via

ISDN, you can access the access point from any computer on the WLAN, LAN

or WAN (ISDN). However, you can restrict or block the access altogether by

using the IP access list.

The configuration of LANCOM Wireless requires the use of either LANconfig

for Windows, WEBconfig or Telnet (supplied with most operating systems).

LANconfig is supplied with your device. You can always obtain up-to-date

releases from our online media.

3.2 Configuration using LANconfig

Start LANconfig e.g. via the Windows taskbar with Start / Programs / LAN-

COM / LANconfig LANconfig searches the local area network for devices.

Just click on the Browse button or call up the command with Device / Find

to initiate a search for a new device manually. LANconfig will then prompt

for a location to search. You will only need to specify the local area network

if using the inband solution, and then you're off.

Configuration and management

LANCOM Wireless L-11/IL-11

Once LANconfig has finished its search, it displays a list of all the devices it

has found, together with their names and perhaps a description, the IP

address and its status.

Two different display options can be selected for configuring the devices with

LANconfig:

• The 'simple display' mode only shows the settings required under normal

circumstances.

• The 'complete display' mode shows all available configuration options.

Some of these settings should only be modified by experienced users.

Select the display mode in the View / Options menu.

Double-clicking the entry for the highlighted device and then clicking the

Configure button or the Edit / Edit Configuration File option reads the

device's current settings and displays the 'General' configuration selection.

The remainder of the program's operation is pretty much self-explanatory or

you can use the online help. You can click on the question mark top right in

any window or right-click on an unclear term at any time to call up context-

sensitive help.

3.3 Configuration with WEBconfig

You can configure the basic settings of the device from any web browser,

even a simple text-based browser. WEBconfig provides setup wizards similar

to LANconfig, making the configuration procedure for the LANCOM Wireless

as comfortable as possible from any operating system.

To establish a connection to the LANCOM Wireless, there has to be a LAN

connection present using the TCP/IP protocol. Access generally is estab-

lished using the device's IP address:

Configuration and management

LANCOM Wireless L-11/IL-11

http://<LANCOM IP address>

A LANCOM Wireless that has not be reconfigured or has been reset will even

respond to all IP addresses. A prerequisite is that the last set of numbers in

the IP address is '254' (e.g. http://10.0.0.254 and http://192.168.0.254).

Extensive, context-sensitive documentation for each WEBconfig page and

field is available at all times in WEBconfig by selecting the 'Help (Reference

Manual)' link.

3.4 Configuration using Telnet

Start up the configuration (e.g. from a DOS box) using Telnet with the com-

mand:

C:\>Telnet 10.0.0.1

Telnet will then establish a connection with the device using the IP address.

After entering the password (if you have set one to protect the configuration),

all commands are available from the 'Configuration commands' section.

3.5 Configuration using a dial-up connection (LAN-

COM Wireless IL-11 )

Configuring routers at remote sites is particularly easy using the remote con-

figuration method via a dial-up connection. The device is accessible by the

administrator immediately without any settings being made after it is

switched on and connected to the WAN interface. This means that you save

a lot of time and costs when connecting other networks to your network

because you do not have to travel to the other network or instruct the staff

on-site on configuring the router

You can also reserve a special calling number for remote configuration. Then

the support technician can always access the router even if it is really no

longer accessible due to incorrect settings.

3.5.1 This is what you need for remote configuration

• A computer with a PPP client, e.g. Windows Dial-up Networking

• A program for inband configuration, e.g. LANconfig or Telnet

Configuration and management

LANCOM Wireless L-11/IL-11

3.5.2 This is how you prepare the remote configuration

a Attach the router to the power supply.

b Connect the device to a WAN interface.

3.5.3 The first remote connection using a Dial-up Networking

and LANconfig

c In the LANconfig program select Device / New, enable 'Dial-up connec-

tion' as the connection type and enter the calling number of the WAN

interface to which the LANCOM Wireless IL-11 is connected. If you wish,

you can also enter the time period after which an idle connection is to be

disconnected automatically.

d LANconfig now automatically generates a new entry under Dial-up Net-

working. Select a device that supports PPP (e.g. the NDIS-WAN driver

included with the LANCAPI) for the connection and press OK to confirm.

e Then the LANconfig program will display a new device with the name

'Unknown' and the dial-up call number as the address in the device list.

Once the entry appears in the device list the Dial-up Networking connection

is broken.

f You can configure the device remotely just like all other devices. LAN-

config establishes a dial-up connection enabling you to select a configu-

ration.

3.5.4 The first remote connection using a PPP client and Tel-

net

a Establish a connection to the LANCOM Wireless IL-11 with your PPP cli-

ent using the following details:

• User name 'ADMIN'

• Password as set on the LANCOM Wireless IL-11, factory default set-

ting is no password

• An IP address for the connection, only if required

b Open a Telnet session to the LANCOM Wireless IL-11. Use the following

IP address for this purpose:

Configuration and management

LANCOM Wireless L-11/IL-11

• '172.17.17.18', if you have not defined an IP address for the PPP cli-

ent. The LANCOM Wireless IL-11 automatically uses this address if

no other address has been defined. The calling PC then responds to

the IP address '172.17.17.17'.

• Raise the IP address of the PC by one, if you have defined an address.

For example: If you have defined the IP address '10.0.200.123' for the

PPP client, the LANCOM Wireless IL-11 will respond to

'10.0.200.124'. Exception: If the digits '254' are at the end of the IP

address, the router responds to 'x.x.x.1'.

c You can configure the LANCOM Wireless IL-11 remotely just like all other

devices.

3.5.5 Limiting remote configuration

The PPP connection of any other remote site to the router, of course, will only

succeed if the device answers every call with the corresponding PPP settings.

This is the case using the factory default settings because the default proto-

col (default layer) is set to PPP.

You may, however, want to change the default layer for LAN-to-LAN connec-

tions, for example, to a different protocol after the first configuration run.

Then the device will no longer take calls on the dial-up connection using the

PPP settings. The solution to this is to agree upon a special calling number for

configuration access. If the device receives a call on this number, it will

always use PPP, regardless of any other settings made on the router. Only a

specific user name which is automatically entered by the LANconfig program

during call establishment will be accepted during the PPP negotiations.

a Switch to the 'Security' tab in the 'Management' configuration section.

b In the 'Configuration access' field, choose whether the configuration is

fully accessible, read-only or not accessible from remote networks.

Alternatively, enter the following command during a Telnet or terminal

connection:

set/setup/config-module/wan-config

[on][read][off]

If you wish to block access to the router from the WAN entirely, set configu-

ration access from remote networks to 'denied'.

Configuration and management

LANCOM Wireless L-11/IL-11

c Enter a calling number of your connector as the calling number in the

'configuration access' area, which is not used for other purposes.

Alternatively, enter the following command:

set /setup/config-module/Farconfig 123456

d You can protect the configuration of the device by assigning a password.

Alternatively, enter the following command during a Telnet or terminal

connection:

passwd

You will then be prompted to enter and confirm a new password.

3.6 Configuration using SNMP

The Simple Network Management Protocol (SNMP V.1 as specified in RFC

1157) allows monitoring and configuration of the devices on a network from

a single central instance.

Detailed information on the configuration of LANCOM Wireless devices with

SNMP can be found in the electronic documentation on the CD.

Configuration and management

LANCOM Wireless L-11/IL-11

3.7 New firmware with FirmSafe

The software in the LANCOM Wireless device is constantly being updated.

We have fitted the devices with a flash ROM which makes child's play of

updating the operating software so that you can enjoy the benefits of new

features and functions. No need to change the EPROM, no need to open up

the case: simply load the new release and you're away.

3.7.1 This is how FirmSafe works

FirmSafe makes the installation of the new software safe: The used firmware

is not simply overwritten but saved additionally in the device as a second

firmware.

Of the two firmware versions saved in the device only one can ever be active.

When loading a new firmware version the active firmware version is not

overwritten. You can decide which firmware version you want to activate

after the upload:

• 'Immediate': The first option loads the new firmware and activates it im-

mediately. This can result in the following situations:

• The new firmware is loaded successfully and works as desired. Then

all is well.

• The device no longer responds after loading the new firmware. If an

error occurs during the upload, the device automatically reactivates

the previous firmware version and reboots the device.

• 'Login': To avoid problems with faulty uploads there is the second option

with which the firmware is uploaded and also immediately booted.

• In contrast to the first option, the device will wait for five minutes

until it has successfully logged on. Only if this login attempt is suc-

cessful does the new firmware remain active permanently.

• If the device no longer responds and it is therefore impossible to log

in, it automatically loads the previous firmware version and reboots

the device with it.

• 'Manual': With the third option you can define a time period during which

you want to test the new firmware yourself. The device will start with

the new firmware and wait for the preset period until the loaded firm-

ware is manually activated and therefore becomes permanently effec-

tive.

Configuration and management

LANCOM Wireless L-11/IL-11

3.7.2 How to load new software

There are various ways of carrying out a firmware upload (which is the term

given to the installation of software), all of which produce the same result:

• LANconfig

• WEBconfig

• TFTP

All settings will remain unchanged by a firmware upload. All the same you

should save the configuration first for safety's sake (with Edit / Save con-

figuration to file if using LANconfig, for example).

If the newly installed release contains parameters which are not present in

the device's current firmware, the router will add the missing values using

the default settings.

LANconfig

When using LANconfig, highlight the desired device in the selection list and

click on Edit / Firmware Management / Upload New Firmware, or click

directly on the Firmware Upload button. Then select the directory in which

the new version is located and mark the corresponding file.

LANconfig then tells you the version number and the date of the firmware in

the description and offers to upload the file. The firmware you already have

installed will be replaced by the selected release by clicking Open.

You also have to decide whether the firmware should be permanently acti-

vated immediately after loading or set a testing period during which you will

activate the firmware yourself. To activate the firmware during the set test

period, click on Edit / Firmware Management / After upload, start the

new firmware in test mode.

WEBconfig

Launch your browser and enter the device's IP address, which you configured

in the basic settings, into the address field. If you did not specify an IP

address while configuring the basic settings, the address is 'http://

10.0.0.254'.

There is a link on the start page called 'Upload New Firmware'. In the next

window, you can search for the firmware file in the directory index and then

click the Upload button.

Configuration and management

LANCOM Wireless L-11/IL-11

TFTP

With TFTP you can use the writeflash command to install new firmware. To

transmit a new firmware version to a device with the IP address

194.162.200.17, you would enter the following command under Windows NT

for example:

tftp -i 194.162.200.17 put lc_wl1iu.200 writeflash

This command sends the corresponding file to the input IP address using the

writeflash command. Binary file transfer must be set for TFTP. However,

many systems have the ASCII format preset. This example for Windows NT

shows you how to achieve this by using the '-i' parameter.

The device is booted up following a successful firmware upload and this acti-

vates the new firmware switch directly. If an error occurs during the upload

(write error in the flash ROM, TFTP transmission error or similar) FirmSafe

activates the previous firmware. The configuration remains in operation.

With TFTP, other configuration commands can be performed too. The syntax

is best demonstrated with the following examples:

• tftp 10.0.0.1 get readconfig file1: Reads the configuration from the device

with the address 10.0.0.1 and saves it as file1 in the current directory.

• tftp 10.0.0.1 put file1 writeconfig: Writes the configuration from file1 to

the device with the address 10.0.0.1.

• tftp 10.0.0.1 get dir/status/verb file2: Saves the current connection infor-

mation in file2.

3.8 What's happening on the line?

After the basic setup of the devices, further important information can be

gained with regard to the parameters still to be modified, especially by

observing the data flow on the various ports of the router.

In addition to the device statistics that can be read out during a telnet or ter-

minal session or with WEBconfig, a variety of other options are also avail-

able.

3.9 LANmonitor

The LANmonitor includes a monitoring tool with which you can view the most

important information on the status of your router on your monitor at any time

Configuration and management

LANCOM Wireless L-11/IL-11

under Windows operating systems. Many of the internal messages gener-

ated by the device are converted to plain text, thereby helping you to trouble-

shoot.

Installing LANmonitor

Usually, LANmonitor is automatically installed together with the LANconfig

configuration software on the computer from which you wish to configure

your router or access point.

If LANmonitor is not yet installed on your computer, place the LANCOM CD

in your CD drive. If the setup program does not start up automatically after

insertion of the CD, start Windows Explorer, click on 'autorun.exe' on the

LANCOM CD and follow the instructions in the install program.

During the installation you should activate the 'LANmonitor'.

With LANmonitor you can only monitor those devices that you can access

inband, i.e. via the local network. Your computer must also have the TCP/IP

network protocol installed on it. With this program you cannot access any

router connected to the serial interface.

3.10 DSL firmware for LANCOM Wireless

With the accompanying DSL firmware, the LANCOM Wireless router can be

configured for communication via DSL.

Make sure that no ethernet network connections are active after uploading

the firmware. It is advised that you should setup connection to the access

point via WLAN. Wireless connection to the access point is also possible

after the firmware upgrade.

Configuration and management

LANCOM Wireless L-11/IL-11

Procedures

a Disconnect the access point from the network, and establish a connec-

tion via the wireless network card (WLAN connection).

b Insert the accompanying CD in the computer, which is connected with the

access point via WLAN.

c Initialize LANconfig and select

Processing / Firmware Management / Upload New Firmware

Open the firmware directory called \lcwild\... or \lcwld\.. respectively

on the CD and highlight the file.

lc_di11u.270 (LANCOM Wireless IL-11) or

lc_dl11u.270 (LANCOM Wireless L-11)

After copying the firmware, the system should be reset. Then the DSL con-

nection can be set up.

If you would like to delete this setup and install your access point for LAN

operation within an Ethernet network, proceed likewise.

Ethernet

connection

DSL connection

Before upgrading the firm-

ware, network access is

possible via the Ethernet

interface.

> After the firmware upgrade, con-

nection to an Ethernet network

is no longer possible! The Ether-

net interface on the Wireless

router is now available for a DSL

connection.

Configuration and management

LANCOM Wireless L-11/IL-11

Operating modes and functions

LANCOM Wireless L-11/IL-11

4 Operating modes and functions

This section is an introduction to the functions and operating modes of your

device. It includes information on the following points:

• Wireless connections

• Security for your configuration

• Security for your LAN

• Security for your WLAN

• Call charge management

• DSL connections

• ISDN connections (LANCOM Wireless IL-11)

• Automatic address administration with DHCP

• DHCP server

• Least-cost router (LANCOM Wireless IL-11)

• LANCAPI (LANCOM Wireless IL-11)

• Time check

Alongside the description of the individual points, we will also give you

instructions to support you as you configure your device.

Please refer to the electronic documentation for a detailed description of all

parameters and menus.

4.1 Establishing wireless connections

This section explains how to get a wireless network going. There are several

different basic operating systems:

• Ad hoc network

• Infrastructure network

• Point-to-point network (wireless bridge)

• Wireless Internet gateway ISDN (LANCOM Wireless IL-11)

• Wireless Internet gateway DSL

The network structures are described in the introduction of this manual. For

information on the topic of security and device configuration, refer to the

chapter entitled 'Security for your configuration' on page 54.

Before configuring a network connection manually, check whether one of the

available wizards might be applied to this purpose ('The wizards' on page 32).

Operating modes and functions

LANCOM Wireless L-11/IL-11

4.1.1 Considerations for setting up a wireless network

When designing networks for several access points, first determine where

the access points will be positioned and how far apart they will be from each

another. To ensure that the infrastructure of your wireless cells is free of

gaps, use a mobile computer and the AirLancer Client Manager to test the

wireless connections within the planned range. Use this method to measure

the maximum distance between the individual access points. Wireless gaps

between access points are irrelevant where no workstations are planned or

network access does not have to be guaranteed.

Each access point spans its own wireless cell using a specific channel. In

most countries there are 13 available radiofrequencies, some of which how-

ever overlap. The actual number of channels on the ISM frequency band that

do not overlap are a maximum of three (e.g. channels 1, 6 and 13). This

means that no more than three access points within reach of a wireless LAN

can be operated completely free of interference; i.e. only three access points

per room or floor. A frequency or neighboring channel, naturally, can be used

again by other stations outside of the range.

When analyzing the network environment, the Site Monitor and Link Test

tools of the AirLancer Client Manager are very useful.

Refer to the appendix in this manual for a detailed list of frequency bands for

the individual channels.

4.1.2 Ad hoc network (peer-to-peer)

Define the direct connection between several computers in the configuration

profile using the AirLancer Client Manager.

a Select the Add/Edit Configuration Profile command in the 'Action'

menu.

b Select and label one of the four profiles and specify 'Peer-to-peer group'

in the drop-down menu.

c Click Edit Profile and enter the name of the network. This name has to

be the same for all computers on the network.

You have now established the wireless bridge. You now have to set up a net-

work in order to access other computers.

Operating modes and functions

LANCOM Wireless L-11/IL-11

In Windows, set up Client for Microsoft Networks and file printer sharing

under the Network Neighbourhood properties. If you want to use TCP/IP as

your network protocol, be sure it is installed.

4.1.3 Infrastructure network

Define the wireless connection between the computers with AirLancer MC-

11 and the access point in the configuration profile using the AirLancer Client

Managers.

a Select the Add/Edit Configuration Profile command in the 'Action'

menu.

b Select and label one of the four profiles and specify 'Access Point' in the

drop-down menu.

c Click Edit Profile and enter the name of the network. The name has to

be the same for each computer on the network and has to match the

name that has been assigned to the access point.

If you are creating an infrastructure network with more than one access point,

the roaming function is always available. Roaming guarantees the ability of

a mobile computer to switch from one wireless cell to another. The IAPP pro-

tocol has to be enabled for the access points so that the roaming computer

can be logged on and off of the various access points. You also have to set

the channel numbers at the access points (refer to page page 50, 'Consider-

ations for setting up a wireless network'). As the network name, you can

enter 'ANY'. This allows the roaming stations to log onto any nearby access

point. In this case, access at the access point has to be permitted for the net-

work name, 'ANY'.

The corresponding menu commands are as follows:

WEBconfig:

Advanced configuration / Setup / WLAN module / IAPP protocol and

Advanced configuration / Setup / WLAN module / Closed network

LANconfig:

/ WLAN access / General / Roaming and

/ Management / Interfaces

Operating modes and functions

LANCOM Wireless L-11/IL-11

4.1.4 Point-to-point network

On a point-to-point network, two or more access points communicate with

each other. When configuring mobile stations, proceed exactly as you would

for setting up an infrastructure network. It is also possible to connect point-

to-point networks and infrastructure networks.

For the access points in this case, however, both the network name and the

radio frequency have to be the same and interpoint communication has to be

enabled. Furthermore, in the list of protocols you can only define the proto-

cols that are copied in the network. You can increase data throughput by

excluding any unneeded protocols.

The corresponding menu commands are as follows:

WEBconfig:

Advanced configuration / Setup / WLAN module

LANconfig:

/ Management / Interfaces

/ WLAN access / General / Point-to-point

4.1.5 Wireless Internet gateway via ISDN (LANCOM Wireless

IL-11)

For a wireless Internet gateway via ISDN, proceed on the client side exactly

as you would for setting up an infrastructure network.

Only a few steps are required to set up Internet access for all network users

via the integrated ISDN router. The easiest method to set up Internet access

is by using the setup wizard provided in Webconfig or LANconfig. You can

then fine-tune the settings manually in the individual router tables:

• Layer list

The layer list contains predefined protocols, which you can customize as

needed (e.g. for channel bundling). The standard protocol is PPPHDLC,

which you can use in most cases. Here, assign a layer name for the ISDN

gateway. That defines it for the Internet connection to be configured.

• Name list

Data for remote stations and the phone numbers. Here, for example, en-

ter the Internet provider you call for an ISDN connection. The recom-

mended idle time is about 90 seconds. Apply the layer names that you

have created in the layer list.

Operating modes and functions

LANCOM Wireless L-11/IL-11

• PPP list

Here enter the device name and/or user name of the remote station and

the password for the connection. If the user name is different from the

device name, enter the user name here as well. Be sure that authentica-

tion is set to 'None'. This refers to the local authentication of the remote

station. The LANCOM, not the provider, has to log on.

• IP router module

Here define the default route in the routing table. This should match the

device name defined in the name list. The IP address of the default route

is always 255.255.255.255 and the subnet mask is 0.0.0.0. The router

sends the data packets that are not intended for stations within the LAN

directly to the default route (such as an Internet provider).

The corresponding menu commands are as follows:

WEBconfig:

Advanced configuration / Setup / WAN module and

Advanced configuration / Setup / IP router module

LANconfig:

/ Communication / Remote stations and Protocols

/ IP router / Routing / Routing table

4.1.6 Wireless Internet gateway via DSL

The use of the LANCOM Wireless as a DSL router or DSL gateway is only pos-

sible if your provider uses the PPPoE or PPTP protocol.

For a wireless Internet gateway via DSL, proceed on the client side exactly as

you would for setting up an infrastructure network.

Configure the following settings for the access point:

First you have to load the DSL firmware into the access point. Note that,

after doing so, the LAN interface will no longer be available! It then

functions as a DSL interface.

• Name list

Data for remote stations and the phone numbers. Here, for example, en-

ter the Internet provider you call for a DSL connection. The recommended

idle time is about 300 seconds. PPPoE is always used as the protocol.

• PPP list

Here enter the device name of the remote station and the password. If

Operating modes and functions

LANCOM Wireless L-11/IL-11

the user name is different from the device name, enter the user name

here as well. Be sure that no check is executed.

• PTPP list

Here enter the device name of the remote station and its IP address and

the port address (usually 1.723). Similar to the name list enter an idle

time (default 300 seconds ).

• IP router module

Here define the default route in the routing table. This should match the

device name defined in the name list. The IP address of the default route

is always 255.255.255.255 and the subnet mask is 0.0.0.0. The router

sends the data packets that are not intended for stations within the LAN

directly to the default route (such as an Internet provider).

Advanced configuration / Setup / WAN module and

Advanced configuration / Setup / IP router module

LANconfig:

/ Communication / Remote stations and Protocols

/ IP router / Routing / Routing table

4.2 Security for your configuration

A number of important parameters for the exchange of data are established

in the configuration of the device. These include the security of your network,

monitoring of costs and the authorizations for the individual network users.

Needless to say, the parameters that you have set should not be modified by

unauthorized persons. The LANCOM Wireless thus offers a variety of options

to protect the configuration.

4.2.1 Security for the device

Password protection

The simplest option for the protection of the configuration is the establish-

ment of a password. As long as a password hasn't been set, anyone can

change the configuration of the device.

The password input field can be found in the LANconfig in the 'Management'

configuration section on the 'Security' tab. The password prompt can be acti-

vated in a terminal or Telnet session in the /Setup/Config-mod-

Operating modes and functions

LANCOM Wireless L-11/IL-11

ule/passw.required menu. In this case, the password itself is set

with the command passwd.

The configuration in the LANCOM Wireless is protected against “brute force

attacks” by barring logins. A brute-force attack is the attempt of an unautho-

rized person to crack a password to gain access to a network, a computer or

another device. In order to do so, a computer can, for example, go through all

the possible combinations of letters and numbers until the right password is

found.

As a measure of protection against such attacks, the maximum allowed num-

ber of unsuccessful attempts to login can be set. If this limit is reached, the

access will be barred for a certain length of time.

These parameters apply globally to all configuration options (outband, Telnet,

TFTP/LANconfig and SNMP). These parameters apply globally to all config-

uration options (Telnet, TFTP/LANconfig and SNMP). If barring is activated

on one port all other ports are automatically barred too.

The following entries are provided in the LANconfig for configuring login bar-

ring in the 'Management' configuration area on the 'Security' tab or under /

Setup/Config-module in the menu:

• 'Lock configuration after' (Login errors)

• 'Lock configuration for' (Lock-minutes)

Access control via TCP/IP

Access to the internal functions of the devices through TCP/IP can be

restricted using a special filter list. Internal functions in this case refer to

configuration sessions via LANconfig, WEBconfig, SNMP or Telnet.

This table is empty by default and so access to the router can therefore be

obtained by TCP/IP from computers with any IP address. The filter is acti-

vated when the first IP address with its associated network mask is entered

and from that point on only those IP addresses contained in this initial entry

will be permitted to use the internal functions. The circle of authorized users

can be expanded by inputting further entries. The filter entries can describe

both individual computers and whole networks.

The access list can be found in LANconfig in the 'TCP/IP' configuration sec-

tion on the 'General' tab, or in the /Setup/TCP-IP-module/

Access-list menu.

Operating modes and functions

LANCOM Wireless L-11/IL-11

4.2.2 Security for your WLAN

The security of wireless data also can be guaranteed using various tech-

niques:

• Station filter

• Using a closed network

• Data encryption

You can also call up the wizards provided in WEBconfig or LANconfig to con-

figure the basic security settings.

Station filter

When defining an access list, specify which clients are allowed access to the

access point. Under the /Setup/WLAN-module/Access-list

menu item, add the MAC addresses of the card whose access is to be moni-

tored. Then, under the setting found under /Setup/WLAN-module/

Access-mode, you can define whether whether clients with these card

addresses have access (positive) or are not authorized (negative).

Closed network

On a closed network, the network name is not visible on remote stations.

Logging on using the 'ANY' network name is not possible in this case. There-

fore, all wireless stations on a closed network have to know the network

names and have them entered in their current user profiles.

Use the /Setup/WLAN-module menu to set the value for a closed net-

work to 'On' (no access with 'ANY') or 'Off' (access with 'ANY' allowed).

Data encryption

The 11-Mbit wireless network cards support a data encryption based on the

WEP method (Wired Equivalent Privacy). The 'Security' tab in the AirLancer

Client Manager lets you define four different keys, based on how

• the data received and sent via wireless cards is decoded and

• the data sent via wireless cards is encoded.

The four various keys can contain five alphanumeric characters from the

range 'a-z' and '0-9', whereby capitalization and lower case letters are distin-

Operating modes and functions

LANCOM Wireless L-11/IL-11

Host names can be used only if LANCOM Wireless can resolve the names

into IP addresses. To do so, LANCOM Wireless has to have learned the

names via DHCP or NetBIOS, or the assignment has to be entered statically

in the DNS or IP-routing table. An entry in the IP-routing table can simulta-

neously assign a host name to an entire net.

Filter list

The filter list is constructed of the object and rule lists. In doing so, the union

of sets of all filters defined by the objects and rules is formed.

Note here that incorrect input neither results in a filter being created nor an

error message. When configuring filters manually, be sure to verify that the

filter you create does what you intend.

There are several ways of configuring firewall filters:

• WEBconfig

Full configuration E Setup E IP router module E Firewall

• LANconfig

IP router E Filter

• Telnet

/Setup/IP-router module/Firewall

LANconfig provides a very convenient tool for setting up filters. Use the fol-

lowing 'Filter' index card to define filter rules.

Note that configuring filters using LANconfig modifies the form of object

tables that have been set up using Telnet or WEBconfig.

• General

Define here the name of the filter service and what is to happen with the

data packets (action).

• Stations

Define here the stations for which the filter rule is to apply as sender or

addressee.

• Services

Specify here which IP protocols and source and target ports the filter rule

applies to.

Security check

The “identifier” to be used for determining the caller can be specified in the

'Communication' configuration section under the 'Call Acceptance' tab, or

Operating modes and functions

LANCOM Wireless L-11/IL-11

under the /Setup/WAN-module/Security menu. You have a

choice of the following:

• All calls are accepted from any remote station.

• Name: Only calls from those remote stations entered in the name list are

accepted.

• Number: Only calls from those remote stations entered in the number list

are accepted.

• Name or number: Only calls from those remote stations entered in the

name list or number list are accepted.

It is an obvious requirement for identification that the corresponding informa-

tion is also sent by the caller.

Verification of

name (LANCOM

Wireless IL-11)

When using the LANCOM or PPP layer on the B channel, the name of the call-

ing party can also be transmitted. This requires a connection to be estab-

lished first, since the name cannot be transferred over the D channel.

The name of the remote station can also be transferred in PPP connections.

This requires a connection to be established first, since the name cannot be

transferred over the D channel.

The routers' response is obvious: Only those calls with recognized names are

accepted if protection by name is set; all others are rejected.

The name sent by the remote station will be checked for its appearance on

the PPP list of user names if the PPP protocol is being used. If the user name

is not available, the device name is accepted and verified as the name of the

remote station. The PPP list can be found in the LANconfig in the 'Communi-

cation' configuration section on the 'Protocols' tab, or in the /Setup/

WAN-module/PPP-list menu.

Addition security is provided by a password. PPP offers password protection

through three different login protocols: PAP (Password Authentication Proto-

col), CHAP (Challenge Handshake Authentication Protocol) and MS-CHAP

(the Microsoft variation of CHAP). All of these protocols serve the same pur-

pose. The calling device determines which protocol is used.

Obviously you will not need to use the PAP, CHAP or MS-CHAP security pro-

cedures if you are using the LANCOM Wireless IL-11 to dial up an Internet

service provider yourself, for example. You will probably not be able to per-

suade the ISP to respond to a request for a password.

And where do a caller's name and password come from?

Operating modes and functions

LANCOM Wireless L-11/IL-11

separates Internet and intranet, as if by a wall. Therefore, IP masquerading

is also called a “firewall function”.

For further information, see the 'IP routing: IP masquerading' section.

4.3 ISDN routing (LANCOM Wireless IL-11)

Data communications between two ISDN terminal devices takes place via

ISDN connections. These connections can be realized either as dial-up or

leased-line connections.

Initially the router modules only determine the remote site to which a data

packet is to be sent. The various parameters for all required ISDN connec-

tions must be arranged so that a given connection can be selected and estab-

lished as required. These parameters are stored in a variety of lists, the

interaction of which permits the correct connections.

A simplified example will clarify this process.

A data packet from a computer initially finds the path to the Internet through

the IP address of the recipient. The computer sends the packet with this

Provider A

Internet user's PC

Router

Data packet with

IP address

IP routing tab. IP address

➮ name of remote site

ISDN list Remote station

➮ subscriber number, communication layer

PPP list Remote site

➮ user name and password

Operating modes and functions

LANCOM Wireless L-11/IL-11

• the last data has been exchanged across static connections for the

holding time B1.

• the data throughput has dropped below a specified level for the hold-

ing time B2 in dynamic connections.

• Layer name

The layer stands for a collection of protocols to be used for this connec-

tion. The layer must be set up identically on both sides of the connection.

• Callback

If the router receives a call from this specific remote station, it may be set

to refuse the connection. Instead, the remote station is called back using

the following options:

• Normal callback

• Callback using the fast LANCOM process

• Callback after name verification

• Await the callback from the remote station using the fast LANCOM

process

4.3.2 Interface settings

The interface settings for the LANconfig can be found in the 'Management'

configuration section on the 'Interfaces' tab, or under /Setup/WAN-

module/Interface-list during Telnet or terminal sessions.

The overall parameters are set for each interface (i.e. each S

port) in the

interface settings. These parameters apply to all operating modes of the

device. Specifically, they are:

• D channel protocol used on the S

port

Automatic recognition: DSS1 (Euro-ISDN), DSS1 point-to-point, 1TR6,

Group 0 leased-line connections

• Leased line option

B channel to be used for the leased-line connection

• Dialing prefix

Number to precede outgoing calls, e.g. the prefix for external calls when

using a PBX.

Operating modes and functions

LANCOM Wireless L-11/IL-11

• Encapsulation

Specify here whether an Ethernet header should be added to the data

packets. Normally the setting 'Transparent' will be sufficient; this setting

may only be required for HDLC connections to third-party devices.

• Layer-3

Layer-3 protocol for the connection. Recognized automatically in the

case of some incoming connections.

An additional entry is required in the PPP list when using PPP.

An additional entry is required in the scripts list when using scripts.

• Layer-2

Layer-2 protocol for the connection.

• Options

Enables data compression and channel bundling. These options are only

effective when supported by the protocols of Layer 2 and Layer 3.

• Layer-1

Layer-1 protocol for the connection. Recognized automatically in the

case of some incoming connections.

4.3.5 Call charge management

The capability of the router to automatically establish connections to all

required remote stations and close them again when no longer required pro-

vides users with extremely convenient access to the Internet, for example.

However, quite substantial costs may be incurred by data transfer over paid

lines if the router is not configured properly (e.g. in the filter configuration) or

by excessive use of the communications opportunities (e.g. extended surfing

in the Internet).

Settings in the charge module

The interface settings for the LANconfig can be found in the 'Management'

configuration section on the 'Charges' tab, or under /Setup/Charge-

module during Telnet or terminal sessions.

The current charge and connect-time information is retained when rebooting

(e.g. when installing new firmware) is not lost until the unit is switched off.

All of the time values indicated here are in minutes.

Operating modes and functions

LANCOM Wireless L-11/IL-11

d Install the LANconfig on a computer in the network.

e Start the program from the 'LANCOM' program group. When loading, the

LANconfig will detect an unconfigured router in the network and will

launch the wizard for the basic settings.

• If you have not previously used any IP addresses in your network,

select the option 'Make all settings automatically' in this wizard and

confirm your selection with Finish in the next window.

The wizard assigns the IP address '10.0.0.1' with the netmask

'255.255.255.0' to the router and enables the DHCP server. On the

basis of this IP address, the device then determines the valid address

pool for the DHCP assignment.

• In the event that IP addresses were already in use in your network

before converting to DHCP operation, select the option 'I would like

to adjust the settings manually' in the wizard. In the next window,

enter an unused IP address from the previously-used address range

and activate the DHCP server.

The wizard now assigns the selected IP address and associated net-

Operating modes and functions

LANCOM Wireless L-11/IL-11

mask to the device. On the basis of this IP address, the device then

determines the valid address pool for the DHCP assignment.

• After a few seconds, all of the computers in the network will be

checked and are assigned a new IP address by the DHCP server as

required. The computers also receive additional parameters such as

the broadcast address, DNS server, default gateway, etc.

Manual configuration

If configuration using the LANconfig wizard is not for you, set the parameters

for the DHCP server manually: In LANconfig in the 'TCP/IP' configuration sec-

tion on the 'DHCP' tab or in the /Setup/DHCP-module menu).

4.5 The least-cost router (LANCOM Wireless IL-11)

The liberalization of the European telecommunications market has led to the

availability of a variety of providers (network operators) that often offer a

wide range of different charges. These providers also provide the option of

the preselection of a given network or the placement of long-distance calls

on a call-by-call basis without a contract with a specific provider. The prefix

of the provider must be dialed to access the desired network on a call-by-call

basis. The normal telephone number is dialed after the network identifica-

tion prefix.

Unfortunately, the most inexpensive rates vary from provider to provider

depending on the time of day and region. In the morning Provider 1, Provider

2 in the afternoon and possibly Provider 3 for international calls. To always

have the most economical connection for telephone calls, surfing the Internet

or transferring data to other networks, it would be necessary to decide which

provider is the least expensive before each connection. A LANCOM Wireless

IL-11 does this for you. Least-cost routing (LCR) is the function for this task.

You define once which providers have the most favorable charges for your

purposes, and the device automatically selects the most economical provider

for you, (regardless of whether you are using the router, the LANCAPI etc.).

4.5.1 Function of the LANCOM Wireless least-cost router

The LCR analyzes the digits dialed by the router or LANCAPI.

The unit checks the LCR table after each digit for a correspondence to a pre-

viously dialed number (prefix). If a suitable entry is found which is even valid

for the current time and date, the network identification prefix for the connec-

Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

Forumrules

To achieve meaningful questions, we apply the following rules:

First, read the manual;
Check if your question has been asked previously;
Try to ask your question as clearly as possible;
Did you already try to solve the problem? Please mention this;
Is your problem solved by a visitor then let him/her know in this forum;
To give a response to a question or answer, do not use this form but click on the button 'reply to this question';
Your question will be posted here and emailed to our subscribers. Therefore, avoid filling in personal details.

new questions and answers
new manuals

You will receive an email to register for one or both of the options.

Get your user manual by e-mail

Enter your email address to receive the manual of Lancom L-11 in the language / languages: English as an attachment in your email.

The manual is 3,8 mb in size.

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

Others manual(s) of Lancom L-11

Lancom L-11 User Manual - German - 106 pages

The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.

Info

Lancom L-11 Manual

Product: