LANCOM 821+ – LANCOM 1711+ VPN – LANCOM 1721+ VPN
Chapter 6: Providing dial- in access
51
EN
6 Providing dial- in access
Your LANCOM can be set up with dial-in access accounts enabling individual
computers to dial-in to your LAN and fully participate in the network for the
duration of the connection. This service is called RAS (
R
emote
A
ccess
S
ervice).
RAS access can be implemented in two basic ways:
VPN
: RAS access via VPN provides a highly secure Internet-based connec-
tion between the LAN and the dial-in computer. The router in the LAN
must support VPN; the dial-in computer needs any form of Internet access
and a VPN client.
ISDN
: RAS access via ISDN provides a direct connection between the LAN
and the dial-in computer over an ISDN phone line. The router in the LAN
needs an ISDN interface. The dial-in computer needs an ISDN adapter or
an ISDN modem. The protocol of data transfer is PPP. This ensures that all
normal devices and operating systems are supported.
Setting up dial-in access is carried out with the familiar convenience of a
Setup Wizard.
Security aspects
Of course your LAN has to be protected from unauthorized access.
For this reason, a LANCOM provides a range of security mechanisms that offer
an outstanding level of protection.
VPN
: VPN-based connectivity relies on IPsec for transferring data. The
encryption methods employed are 3-DES, AES or Blowfish
ISDN
: Security for ISDN-based connectivity relies on password protection,
a check of the ISDN number, and the call-back function.
The ISDN call-back function cannot be set up by Wizard, but in the
Expert Configuration only. Refer to the reference manual for informa-
tion on this.
6.1
Which details are necessary?
The Wizard sets up an access account for just one user. For additional users,
launch the Wizard again.