Swyx SwyxConnect 1722, User Manual

Page 1: ...SwyxConnect 1722 SwyxConnect 1723 SwyxConnect 1724 Documentation SwyxWare Branch Office Solution As of September 2006 ...

Page 2: ...e are registered trademarks of Swyx All other trademarks and product names are trademarks or registered trademarks of the respective owners Siemens and CorNet are registered trademarks of Siemens AG This documentation is licensed for Swyx Reproduction adaptation or translation of this documentation without the express written consent of Swyx is prohibited and will be prosecuted as a violation of i...

Page 3: ...tworks and the step by step cost effective and simple migration from existing telecommunications systems to corporate Voice over IP The particular characteristics of Swyx VoIP Routers include among others SIP proxy for registration with providers and upstream VoIP PBXs SIP trunking for multiple parallel lines with extension numbers over a single account with a switchboard number SIP gateway with t...

Page 4: ...p you with this task Further information is also available in the chapter Security settings We would additionally like to ask you to refer to our Internet site www swyx com for the latest information about your product and technical developments and also to download our latest software versions User manual and reference manual The documentation of your device consists of three parts The installati...

Page 5: ...o swyx de Our online services www swyx com are available to you around the clock should you have any queries regarding the topics discussed in this manual or require any further support The area Support will help you with many answers to frequently asked questions FAQs Furthermore the knowledgebase offers you a large reserve of information The latest drivers firmware utilities and documentation ar...

Page 6: ...r TE mode 2 11 Bus termination life line support and power supply 2 12 Protocol setting 2 14 ISDN connection timing 2 15 Software installation 2 16 Starting Software Setup 2 17 Which software should I install 2 17 Configuring the VoIP functions 3 1 LANconfig Wizards 3 1 Configuration examples 3 2 Using VoIP telephony as an extension to an analog PBX 3 2 Using VoIP telephony to complement the ISDN ...

Page 7: ... is necessary 6 2 General information 6 2 Settings for the TCP IP router 6 4 Settings for the IPX router 6 6 Settings for NetBIOS routing 6 7 Instructions for LANconfig 6 7 Instructions for WEBconfig 6 8 Providing dial in access 7 1 Which information is required 7 1 General information 7 2 Settings for TCP IP 7 3 Settings for IPX 7 4 Settings for NetBIOS routing 7 4 Settings for the dial in comput...

Page 8: ...9 1 DSL data transfer is slow 9 1 Unwanted connections under Windows XP 9 2 Appendix 10 1 Performance data and specifications 10 1 Contact assignment 10 2 ADSL interface 10 2 ISDN interface 10 3 ISDN interface 10 3 ISDN Analog interface 10 3 Analog interface 10 4 Ethernet interface 10 100Base TX 10 4 Configuration interface Outband 10 5 Declaration of conformity 10 5 ...

Page 9: ...d and almost ubiquitous telephone lines analog or DSL are the basis for DSL data transfer to the nearest telephone exchange From here the data is passed directly on to the Internet over high speed connections The asymmetric DSL variant ADSL was developed for applications where users receive large amounts of data but transmit only small amounts such as when surfing in the WWW ADSL subscribers can r...

Page 10: ...es the supported telephone system Annex A type devices are exclusively to be operated at ADSL over POTS connections Annex B type devices are exclusively to be operated at ADSL over ISDN connections Your network operator will be able to inform you of the version you need These devices cannot be altered or upgraded to a system other than that for which it is equipped There are even ADSL over ISDN co...

Page 11: ... Internet 3 The RAS PCs connect to the headquarters LAN via the Internet The Internet is available virtually everywhere and typically has low access costs Significant savings can thus be achieved in relation to switched or dedicated connections especially over long distances The physical connection no longer exists directly between two participants instead the participants rely on their connection...

Page 12: ...ter firewall filters allow the blocking of individual IP addresses protocols and ports MAC address filters also offer effective control over the access of LAN workstations to the IP routing functions in the device Further important features in the firewall are Intrusion detection Attempts to break in to the local network or central firewall are recognized repelled and recorded by the Intrusion Det...

Page 13: ...nctions of traditional telephony via cost effective and wide spread networking structures such as the Internet VoIP itself is not a standard rather it is a collective term for the various technologies equipment protocols voice encoding etc which make voice communications in IP networks possible 1 4 1 Example Applications Voice over IP solutions offers advantages across a broad spectrum of applicat...

Page 14: ...der are often available at no cost With the appropriate connection to a public SIP provider any other SIP subscriber worldwide can be called irrespective of the provider network As an alternative to a direct telephone connection public telephone network subscribers can also be reached over a diversion via the SIP provider The costs depend on the provider s particular tariff models Frequently long ...

Page 15: ...analog and VoIP telephony can be united in a single telephone A VoIP telephone or an existing analog or ISDN telephone can be used for free telephone calls via VPN to the headquarters or to make standard calls via the conventional telephone network The advantages of a telephone connection to headquarters The configuration of telephone functions can be carried out centrally in the VoIP PBX at headq...

Page 16: ...ge lines with a remote SIP gateway Companies with nation wide and internationally distributed sites are often interconnected with VPN already A Swyx VoIP Router can be used not only to connect the SIP ISDN and analog telephones at a branch office to the SIP PBX at headquarters it can also integrate the branch office s local telephone lines into corporate communications with help of the SIP Remote ...

Page 17: ... this Peer to Peer scenario a Swyx VoIP Router has been implemented at both locations Along with data transfer via VPN it is also possible to use VoIP functions between the two locations The advantages of peer to peer site coupling ISDN and analog PBXs at different locations can form a common internal telephone network An SIP PBX is not necessary Calls within the company network are at no charge O...

Page 18: ...alog PBX and ISDN and analog telephones 3 Analog terminal devices internally connected either into the ISDN network via a PBX with a b ports or alternatively into the VoIP network over an ATA Analog Telephone Adapter 4 External SIP providers and all of the external subscribers attai nable via them 5 Upstream SIP PBXs with all of the internal and external subscri bers attainable through it 6 The ex...

Page 19: ...the number of possible ISDN subscribers is determined by the length of the extension number DDI In this case all of the telephones and terminal equipment connected to the PBX can be mapped with a single ISDN user entry Analog users Two devices connected to the analog interfaces SIP users A maximum of 32 SIP terminal devices connected over LAN WLAN and DMZ and analog devices connected with an ATA T...

Page 20: ...mber or even solely with an SIP name over the Internet also differs from pro vider to provider A trunk line acts like an extended SIP account with a main external telephone number and multiple extension numbers Internal users use this account in parallel and several calls can be made simultaneously until the maximum available bandwidth is exhausted As a SIP gateway line the Swyx VoIP Router provid...

Page 21: ... analog is automatic and invisible to the user 1 4 3 2 Telephone even during a power cut With life line support and power relay to the internal ISDN port it remains possible to telephone over the conventional telephone network even in case of a power outage ISDN backup load balancing and VRRP in combination with Ethernet ports as WAN interfaces provide SIP connections with redundancy and high reli...

Page 22: ...xtension and area selection code not including the leading zero can be at the most 11 characters long The terms point to multipoint connection and point to point connection are used in many countries to describe the technical implementation of point to multipoint with MSN and point to point with DDI Other countries may use different types of connection and other combinations of protocol and call n...

Page 23: ...vel networks NetBIOS proxy for coupling Microsoft peer to peer networks over ISDN DHCP and DNS server for LAN and DMZ N N mapping for routing networks with the same IP address ranges over VPN Configuring LAN ports as additional WAN ports Policy based routing Load balancing for bundling multiple DSL channels 4 chan nels 2 chan nels 2 chan nels Backup solutions and load balancing with VRRP NAT Trave...

Page 24: ...ritization of SIP connections Number of local subscribers 32 x SIP 40 x ISDN 32 x SIP 40 x ISDN 2 x ana log 32 x SIP 40 x ISDN SIP ISDN and analog gateway Free choice from available ISDN S0 buses Operation at exchange lines or exten sion lines Operation at point to multipoint lines or point to point lines Automatic registration and authenti cation of local ISDN subscribers as SIP users Registratio...

Page 25: ... mapping numeral replacement and number supplementation Rules for routing according to dialed outgoing call number line and domain Multiple cycles also forced after number replacement Up to two destinations per routing rule as a backup Rule based rejection of calls Supplementation of call number prefixes per line Supplement remove root numbers per line Voice proces sing Echo canceling and de jitte...

Page 26: ...onnected equipment ISDN1 to ISDN2 ISDN1 to ISDN3 Internal power supply for the ISDN NT connector providing power to a maximum of two connected telephones Analog connector to connect an analog terminal device or an analog PBX tone dialing 2 Analog connector for connecting the Swyx VoIP Router to an analog exchange line or to an upstream analog PBX tone dialing combined with ISDN1 1 Relay of signals...

Page 27: ...tivated with the VPN 25 option IP masquerading NAT PAT to conceal individual LAN workstations behind a single public IP address Stateful inspection firewall Firewall filter for blocking individual IP addresses protocols and ports MAC address filter regulates for example LAN workstation access to the IP routing function Protection of the configuration from brute force attacks Configuration Configur...

Page 28: ... can your Swyx VoIP Router do Call back function with PPP authentication mecha nisms allowing only predefined ISDN call numbers FirmSafe for no risk firmware updates SwyxConnect 1722 SwyxConnect 1723 SwyxConnect 1724 ...

Page 29: ...er or to the address on the delivery note supplied with your device SwyxConnect 1722 SwyxConnect 1723 SwyxConnect 1724 Power adapter LAN connector cable green connectors 1 1 1 ADSL connector cable transparent connectors 1 1 1 ISDN connector cable light blue connectors 1 1 2 Adapter to cross over the contacts for reconfigured ISDN interfaces 1 1 2 Analog cable RJ11 connector to TAE NF socket German...

Page 30: ...e You will find an overview of all status displays connectors and switches here 2 3 1 Status displays Depending on the range of functions of the model SwyxConnects have different numbers of front mounted status displays 2 3 1 1 Front Status displays on the front of the device provide information about operational and connection status SwyxConnect 1722 SwyxConnect 1723 LANCOM LANCOM 1722 1722 VoIP ...

Page 31: ...onger switched off Inverse flashing means the opposite The LED lights permanently in the respective colour and is only briefly interrupted Flickering means that the LED is switched on and off in irregular intervals Power This LED provides information on the device s operating state After being switched on it blinks green during the self test The LED then shines constantly to indicate operational r...

Page 32: ...the power LED blinks red and no WAN connections can be established there is no cause for concern This merely means that a pre set charge or time limit has been reached There are three ways to remove the lock Reset the toll protection Increase the limit Deactivate the lock completely set limit to 0 LANmonitor shows you when a charge or time limit has been reached To reset the toll protection activa...

Page 33: ...error framing error etc Red On perma nently No synchronization searching for remote station Green Permanently Synchronization successful Green Blinking flashing Handshake training Red orange Blinking Hardware error TE mode external ISDN con nection NT mode internal ISDN con nection Off Interface off or Layer 1 deactivated or no Layer 2 TEI Interface switched off When switched off the line may unde...

Page 34: ... 1 or Layer 2 Abort due to error in establishing D channel Layer 1 Red orange Blinking ISDN hardware error TE mode external ISDN con nection NT mode internal ISDN con nection Off Interface switched off Green On perma nently Analog exchange line is switched on Orange Blinking Call being established from exchange towards SwyxConnect The line is ringing at the SwyxConnect Orange On perma nently The S...

Page 35: ...e of shutdown due to temperature Off No networking device attached Green On perma nently Connection to network device operational not data traffic Green Flickering Data traffic Red Flickering Data packet collision Off No VPN tunnel established Green Blinking Connection establishment Green Flashing First connection Green Inverse flashing Other connections Green On perma nently VPN tunnels are estab...

Page 36: ... 1 and ISDN 2 TE mode alternatively switchable to NT mode ISDN 3 and ISDN 4 NT mode alternatively switchable to TE mode Default SwyxConnect 1723 ISDN 2 NT mode alternatively switchable to TE mode For safety reasons interface ISDN 2 on the SwyxConnect 1723 must not be directly or indirectly connected to an external exchange e g the telephone network 8 Combined ISDN analog interface Default SwyxConn...

Page 37: ...evices of different speeds and types in parallel Avoid having multiple unconfigured SwyxConnects at once within a single network segment Any unconfigured SwyxConnect takes on the same IP address ending in 254 and so address conflicts could arise To avoid problems multiple SwyxConnects should be configured one after the other with the respective device being assigned with a new and unique IP addres...

Page 38: ...rface on the Swyx VoIP Router RJ11 socket marked with for connecting analog terminal equipment telephones or PBXs If your terminal equipment features a TAE F or TAE N connector please use the supplied adapter cable RJ11 plug to TAE N F socket The Swyx VoIP Router supplies power to the analog terminal equipment connected to it With life line support the voltage supplied from the analog exchange lin...

Page 39: ...o an ISDN exchange line or for connecting up ISDN terminal equipment The interfaces are switched into the NT or TE mode for this ISDN TE interface external ISDN connection An ISDN interface in TE mode for connection to the ISDN bus of an upstream ISDN PBX or to an ISDN NTBA This ISDN interface can be used for backup connections over ISDN or as a dial in interface for remote stations With the SwyxC...

Page 40: ...termination is obligatory with an ISDN interface in NT mode Bus termination is generally deactivated for ISDN interfaces in TE mode If the Swyx VoIP Router is the last device at a longer ISDN bus and this itself is not terminated it may be advantage ous to activate the bus termination for an ISDN interface in TE mode Not including SwyxConnect 1724 If life line support is activated the interfaces I...

Page 41: ...wyxConnect 1722 5 and 6 on the SwyxConnect 1724 must be up to deactivate the DIP switches must be down Only SwyxConnect 1723 With the internal power supply the model SwyxConnect 1723 supports a maximum of two telephones without their own supply power is fed from the ISDN2 interface To activate the internal power supply the corresponding DIP switches 1 and 2 must be up to deactivate the DIP switche...

Page 42: ...H client you will find the settings for the ISDN interface parameters under Setup Interfaces WAN Select the protocol for each ISDN interface according to its application and the ISDN connection type Point to multipoint and point to point connections can be used in various combinations at a Swyx VoIP Router The following options are available 9 10 ISDN 1 Rx Tx 100 Ω bus termina tion down off ISDN 1...

Page 43: ...g to adopt the ISDN timing of the connected ISDN line please refer to ISDN connection timing without signaling and other functions Leased line GRP0 for Group 0 leased lines over ISDN Off NT mode operation always has to be set manually With the SwyxConnect 1722 if the ISDN 2 connector is set to Off there may be a connection to ISDN 1 in the case that the device has been set up for life line support...

Page 44: ...existing ISDN PBX at a point to point connection The selected ISDN interface has to be configured for TE mode The ISDN interface settings contain two more modes which play a particular role in this context DSS1 NT reverse or DSS1 NT point to point reverse When all ISDN interfaces are operated in NT mode the timing system runs freely because there is no TE interface to take on the ISDN timing If in...

Page 45: ...Install Software The following selection menus will appear on screen 2 6 2 Which software should I install LANconfig is the Windows configuration program for all SwyxConnect routers and SwyxConnect access points WEBconfig can be used alternatively or in addition via a web browser With LANmonitor you can use a Windows computer to monitor all of your SwyxConnect routers and SwyxConnect access points...

Page 46: ... under Basic configuration Setting up the Internet Access and Security Settings 3 1 LANconfig Wizards For the configuration of VoIP functions too you can rely upon LANconfig s Wizards 1 Mark your SwyxConnect in the selection window From the command line select Extras Setup Wizard 2 In the selection menu select the Setup Wizard Configure Voice over IP Call Manager and confirm the selection with Con...

Page 47: ...o allow subscribers to receive immediate access to an outside line when they pick up the receiver The following functions are available to you after configuring the Swyx VoIP Router Internal calls with analog and SIP telephones and between SIP softphones External telephony with analog and SIP terminal equipment over the analog exchange line External calls to defined ranges of telephone numbers e g...

Page 48: ...e the supplied adapter RJ11 socket to TAE plug in Germany if necessary Example SwyxConnect 1723 4 Connect the analog PBX with an analog interface on the Swyx VoIP Router Use the supplied adapter cable RJ11 plug to TAE socket in Germany if necessary 5 An analog terminal device such as a fax can optionally be connected to the second analog interface 6 Use the supplied power supply unit to provide th...

Page 49: ...ing steps must be carried out Set up the line to the SIP provider Activate the analog line and assign the internal telephone number in the Swyx VoIP Router Create analog users Adapt the call routing table Detailed instructions on configuring the SwyxConnect 1 Under LANconfig start the setup wizard for configuring the VoIP Call Manager Enable the options SIP provider Analog PBX or central exchange ...

Page 50: ... require any other information Display name optional The display name is only required if the SIP provider verifies this during registration If you enter a display name here then this name will be displayed at the remote site If the field remains empty then the display name for the corresponding internal user is transmitted Authentication name optional Special authentication names are not supporte...

Page 51: ...ssumed that the user is trying to establish an outside connection The other routes are used to carry out international and natio nal long distance calls as well as local calls as standard over the analog line The Call Router removes the preceding zeros from the number again and sends the call out to the analog line In order to channel calls to special destinations such as interna tional and nation...

Page 52: ...he comment Fax via POTS with the unchanged destination number for the destination line ANALOG for calls made from internal number 13 by the users USER ANALOG This call routing table is only valid for PBX systems that forward the special character star for internal calls on their external bus If the PBX processes this character in a different manner then the table must be adapted accordingly ...

Page 53: ...nctions are available to you after configuring the Swyx VoIP Router Internal telephony with ISDN and SIP telephones and SIP softphones External telephony with ISDN and SIP terminal equipment over ISDN Accessing internal terminal equipment ISDN and SIP via the MSNs External calls to defined ranges of telephone numbers e g overseas calls via the SIP account for cheaper calls SIP provider with the fo...

Page 54: ...r end of this cable into an ISDN exchange line e g directly into the ISDN NTBA Example SwyxConnect 1723 4 Connect the ISDN PBX with an ISDN interface in NT mode with factory settings 5 You can optionally connect analog terminal equipment such as fax machines or DECT telephones to the analog interfaces 6 Use the supplied power supply unit to provide the device with power Detailed information about ...

Page 55: ... the following steps must be carried out Set up the line to the SIP provider Activate the ISDN line and assign the internal telephone number in the Swyx VoIP Router Create analog users Adapt the call routing table Detailed instructions on configuring the SwyxConnect 1 Under LANconfig start the setup wizard for configuring the VoIP Call Manager Enable the options SIP provider ISDN phone system and ...

Page 56: ...r with local area code here providing that the SIP provider does not require any other information Display name optional The display name is only required if the SIP provider verifies this during registration If you enter a display name here then this name will be displayed at the remote site If the field remains empty then the display name for the corresponding internal user is transmitted Authen...

Page 57: ... number will be assigned to the terminal device as an internal number Interface Here you select the analog interface that the respective terminal device is connected to 7 Enable spontaneous outside line access for ISDN and SIP users in order to keep the subscribers telephone behavior as consistent as possible 8 The call routing table suggested by the setup wizard automatically allows spontaneous o...

Page 58: ...h as interna tional and national long distance calls over the SIP provider and not over the analog exchange line double click on the corres ponding entry in the table and switch the line used form ISDN to SIPPROVIDER To ensure that fax connections are always established over the ISDN exchange line you can optionally generate a line with priority 1 for all called numbers with the comment Fax via IS...

Page 59: ...erfaces on the Swyx VoIP Router will be connected to the ISDN PBX so that the maximum possible number of lines is available for parallel calls The PBX is configured to allow subscribers to receive immediate access to an outside line when they pick up the receiver The following functions are available to you after configuring the Swyx VoIP Router Internal telephony with ISDN and SIP telephones and ...

Page 60: ... It is vital that power relay power supply and life line are deactivated with the DIP switches under the devices before connecting the cables and adapters to the PBX Detailed information about each step of the hardware installation can be found under Hardware Installation For ISDN interfaces in NT mode with factory settings you can use the ISDN connector cable light blue connectors to directly con...

Page 61: ... internal telephone number for each piece of terminal equipment to be connected In general the numbers used are predetermined by the PBX which often only allows certain number ranges 3 Order a trunk account from a SIP provider including a switchboard number and a range of extension numbers and have the assess information at hand 3 2 3 3 Configuring the Swyx VoIP Router When configuring the SwyxCon...

Page 62: ...l be pre configured automatically Internal standard number Incoming calls are directed to the call router along with the extension number as communicated from the SIP trunk account If the call router does not contain a matching entry the call is forwarded directly to the internal number recorded here Enter an internal number from your dialing plan here e g 11 SIP domain realm You received this dom...

Page 63: ...DN bus at all ISDN interfaces in order to use the VoIP functionality Select all ISDN interfaces to be used for internal ISDN users and terminal equipment 5 Enter one common ISDN user for all of the connected ISDN terminal devices For each of these enter the placeholder as Internal number and MSN DDI This ensures that extension numbers coming from the Call Manager are forwarded to the internal ISDN...

Page 64: ...r the VoIP terminal equipment in the network VoIP softphones such as a SwyxIt Now or VoIP telephones can register themselves locally with the Swyx VoIP Router The SIP proxy handles the switching of calls to a public SIP provider or to a VoIP PBX at a different site Alternatively the Swyx VoIP Router acting as a SIP gateway can itself perform the conversion to other telephone networks e g to analog...

Page 65: ... enter the LAN IP address Realm is always the internal VoIP domain On the tab Location enter your international country code and local code each without their leading zero s and enter the national and international prefixes e g 0 and 00 The field Public line access prefix is for the character your PBX or Swyx VoIP Router uses to access an outside line e g 0 or With this information the SwyxIt Now ...

Page 66: ...configured with the same domain and the router has to be the DNS server for the SwyxIt Now 3 Enter the SIP account user name and password for logging in to the SIP PBX Under normal circumstances when using authentication a SIP user should also be created on the Swyx VoIP Router which uses the same internal telephone number and most importantly the same user name and the same password as those in t...

Page 67: ...e from the company Snom is configured so that it registers at a Swyx VoIP Router 1 From the Setup menu select one of the possible lines e g Line 2 2 Enter the following values Registrar Internal VoIP domain for the SwyxConnect Account Internal number for the user Displayname Name of the user as it is to be displayed at the remote site If you are using a different VoIP telephone please consult the ...

Page 68: ...hich information is necessary The basic configuration wizard will take care of the basic TCP IP configuration of the router and protect the device with a configuration password The following descriptions of the information required by the wizard are grouped in these configuration sections TCP IP settings protection of the configuration information on DSL connection configuring connect charge prote...

Page 69: ...e manually nevertheless The fully automatic TCP IP configuration is optional You may also select manual configuration instead Make your selection after the following considerations Choose automatic configuration if you are not familiar with networks and IP addresses Select manual TCP IP configuration if you are familiar with networks and IP addresses and one of the following conditions is applicab...

Page 70: ...rators can be set up Further information can be found in the section Managing rights for different administrators in the LCOS reference manual 4 1 3 Settings for the DSL connection For the WAN connection it may be necessary to enter the transfer protocol being used The wizard will e g automatically enter the correct settings for major DSL providers You only need to enter the protocol used by your ...

Page 71: ...P settings manually assign an available address from a suitable address range to the SwyxConnect Confirm your choice with Next 3 Specify whether or not the router should act as a DHCP server Make your selection and confirm with Next 4 In the following window specify the password for configuration access Note that the password is case sensitive and ensure that it is sufficiently long at least 6 cha...

Page 72: ...her a DHCP server and a DNS server are already active in the LAN and whether these two server processes exchange the assignment of IP addresses to symbolic names within the LAN between each other After powered on unconfigured SwyxConnect devices check first whether a DHCP server is already active in the LAN Dependent on the situation the device is able to switch on its own DHCP server or alternati...

Page 73: ... 2 Network with DHCP server If a DHCP server is active in the LAN to assign IP addresses an unconfigured SwyxConnect device will turn off its own DHCP server It will change into DHCP client mode and will obtain an IP address from the DHCP server of the LAN This IP address is not known at first The accessibility of the device depends on the name resolution If there is a DNS server for name resoluti...

Page 74: ...nnect or with a name as discribed above If you cannot access an unconfigured SwyxConnect the problem may be due to the netmask of the LAN with less than 254 possible hosts netmask 255 255 255 0 please ensure that the IP address x x x 254 is located in your own subnet The WEBconfig main menu will be displayed The setup wizards are tailored precisely to the functionality of the specific SwyxConnect ...

Page 75: ...he Internet You should always make sure that the configuration access is suitably protected e g with a password 5 In the next window select your DSL provider from the list that is displayed Confirm your choice with Apply If you select My provider is not listed here you must enter the transfer protocol used by your DSL provider manually in the next window Confirm your choice with Apply 6 Connect ch...

Page 76: ...ct default In this operating mode the SwyxConnect not only assigns IP addresses to the PCs in the LAN it also uses DHCP to specify its own IP address as that of the default gateway and DNS ser ver The PCs must therefore be configured so that they automati cally obtain their own IP address and the IP addresses of the standard gateway and DNS server via DHCP IP address assignment via a separate DHCP...

Page 77: ...r further information and help on the TCP IP settings of your SwyxConnect please see the reference manual For more information on the network configuration of the workstation computers please refer to the documentation of your operating system ...

Page 78: ...that are supplied by your provider are required 5 0 0 2 Additional information for unknown Internet providers If the setup wizard does not know your Internet provider it will prompt you for all of the required information step by step Your provider will supply this information Connection via DSL modem Protocol PPPoE Connection via access router with fixed IP address Protocol Plain Ethernet 5 0 0 3...

Page 79: ... Next 3 In the following window select your country and your Internet provider if possible and enter your access information 4 Depending on their availability the wizard will display additional options for your Internet connection 5 The wizard will inform you as soon as the entered information is complete Complete the configuration with Finish 5 2 Instructions for WEBconfig 1 In the main menu sele...

Page 80: ...config 3 Depending on their availability the wizard will display additional options for your Internet connection 4 The wizard will inform you as soon as the entered information is complete Complete the configuration with Apply ...

Page 81: ...mation provided matches The following instructions will assume that SwyxConnect devices are being used on both sides A network interconnection may also be realized with routers from other manufacturers A mixed setup usually requires more extensive configuration measures for both devices however Please refer to the reference manual for more information in this regard A setup wizard handles the conf...

Page 82: ...o be made for each of the routers Arrows mark the dependencies between the entries 6 1 1 General information The following details are required for the installation of LAN to LAN couplings The first column indicates whether the information is required for network couplings over VPN standard method using preshared keys and or ISDN Further details to network couplings via VPN using enhanced methods ...

Page 83: ...res ISDN VPN ISDN Password for secure transmis sion of the IP address Password Password VPN Shared secret for encryption Secret Secret VPN IP address of remote station 10 0 2 100 10 0 1 100 VPN IP network address of the remote network 10 0 2 0 10 0 1 0 VPN Netmask of the remote network 255 255 255 0 255 255 255 0 VPN Domain name of the remote network head branch VPN Hide local stations for access ...

Page 84: ...password for the ISDN connection is an alternative to the use of the ISDN caller ID It is always used to authenticate callers that do not send an ISDN caller ID The exact same password must be entered on both sides It is used for calls in both directions The Shared Secret is the central password for security within the VPN The exact same password has to be entered on both sides Data compression in...

Page 85: ...0 will not only be able to access the server of the head office via its IP address but also via its name server head company The only precondition the domain of the remote network in the wizard must be specified The domain can only be specified in the LANconfig wizard In WEBconfig enter the appropriate information later in the expert configuration For more information see the SwyxConnect reference...

Page 86: ...The coupling of IPX networks via VPN cannot be configured using the wizard It can only be set up in the expert configuration For details please see the reference manual Coupling two typical IPX networks to form a WAN requires three IPX network numbers for the LAN of the head office for the LAN of the branch office for the higher level WAN The IPX network numbers in the head and branch offices are ...

Page 87: ...eighbourhood but can only be contacted directly e g via Find Computers 6 2 Instructions for LANconfig Perform the configuration on both routers one at a time 1 Launch the Connect two local area networks wizard Follow the wizard s instructions and enter the required information LAN of the head office IPX network no 00000001 Binding Ethernet_II 0123 123456 LAN of the branch office IPX network no 000...

Page 88: ...ain menu launch the Connect two local area networks wizard Follow the wizard s instructions and enter the required information 2 The wizard will return a message to indicate that it has all the information it needs Close the wizard with Terminate 3 After finishing the configuration of both routers you can test the network connection Try to contact a computer in the remote LAN e g with a ping The S...

Page 89: ...ransfer protocol is PPP Therefore the support of all usual devices and operating systems is ensured A setup wizard handles the configuration of the dial in connection in the usual convenient manner 7 0 0 1 Security aspects You must of course protect your LAN against unauthorized access A SwyxConnect therefore offers a whole range of security mechanisms that can provide an outstanding level of prot...

Page 90: ...rmation when dialling in Incoming number The SwyxConnect uses the optional ISDN caller ID as an additional user authentication This security function should not be used when users dial in from differing locations Coup ling Entry VPN ISDN User name VPN ISDN Password VPN Shared secret for encryption VPN Hide local stations for access to remote network Extranet VPN ISDN Incoming number of remote stat...

Page 91: ...e IP address 10 0 1 101 will be assigned to the PC when connecting This IP address makes the computer a fully fledged member of the LAN with the appropriate rights it can access all of the other devices in the LAN The same applies in the other direction as well computers in the LAN will also be able to access the remote machine The ISDN calling line identity CLI The ISDN caller ID also known as CL...

Page 92: ...e binding Specifying the IPX network number and binding used is not necessary if the remote network also contains a Novell server A network number for the WAN must also be entered manually in this case however 7 1 4 Settings for NetBIOS routing All that is required to use NetBIOS is the name of a Windows workgroup from the router s own LAN The connection is not established automatically The RAS us...

Page 93: ...otocol TCP IP IPX installed and bound to the dial up adapter New connection in Dial Up Networking with the call number of the router Terminal adapter or ISDN card set to PPPHDLC PPP selected as the Dial Up server type Enable software compression and Require data encryption unchecked Select desired network protocols TCP IP IPX Additional TCP IP settings Assignment of IP address and name server addr...

Page 94: ...e 46 7 4 Instructions for WEBconfig RAS access via VPN cannot be configured using the wizard under WEBconfig yet It can only be set up in the expert configuration For details please refer to the reference manual 4 From the main menu launch the Connect two local networks wizard Follow the wizard s instructions and enter the required information 5 Configure Dial Up Networking access on the dial in P...

Page 95: ... access This protection is already activated during the basic configuration by entering a password The device locks access to its configuration for a specified period of time after a certain number of failed log in attempts Both the number of failed attempts and the duration of the lock can be set as needed By default access is locked for a period of five minutes after the fifth failed log in atte...

Page 96: ... the settings The following values are handled password for the device allowed protocols for the configuration access of local and remote networks parameters of configuration lock number of failed log in attempts and duration of the lock 8 2 The firewall wizard The SwyxConnect incorporates an effective protection of your LAN when accessing the Internet by its Stateful Inspection firewall and its f...

Page 97: ...ed when the rule will apply to a data packet 5 The wizard will inform you as soon as the entries are complete Complete the configuration with Finish 8 2 2 Configuration under WEBconfig Under WEBconfig it is possible to check and modify all parameters related to the protection of the Internet access under Configuration Firewall QoS Rules Rule Table 8 3 The security checklist The following checklist...

Page 98: ... here under Access rights of remote net works for all types of configuration the option not allowed Have you assigned a password to the SNMP configuration Also protect the SNMP configuration with a password The field for protection of the SNMP configuration with a password is also contained in LANconfig in the Management configuration area on the Security tab Have you activated the Firewall The St...

Page 99: ... individual protocols or any combinations of proto cols TCP UDP ICMP can be filtered It is particularly easy to set up the filters with LANconfig The Rules tab under Fire wall QoS can assist you to define and change the filter rules Have you excluded certain stations from access to the rou ter Access to the internal functions of the devices can be restricted using a special filter list Internal fu...

Page 100: ...he device a thief could gain access to a protected net work The device s operation can be protected by various means for example it will cease to function if there is an interruption to the power supply or if the device is switched on in another location With the ISDN site verification the device can only be operated at one particular ISDN connection After being switched on the device calls itself...

Page 101: ... physical connection 9 1 0 2 Has the correct transfer protocol been selected The transfer protocol is set along with the basic settings The basic setup wizard will enter the correct settings for numerous DSL providers automatically Only if your DSL provider is not listed you will have to enter manually the protocol being used In any case the protocol that your DSL provider supplies you with should...

Page 102: ...ion This can cause a severe decrease in download speed The cause of this problem is what is known as the TCP IP receive window size of the Windows operating system that is set to a value too small for asynchronous connections Instructions on how to increase the Windows size can be found in the Knowledge Base of the support section of the LANCOM web site www swyx com 9 3 Unwanted connections under ...

Page 103: ...over POTS as per ITU G 992 5 Annex A ADSL 2 Annex B devices ADSL over ISDN as per ITU G 992 1 Annex B as well as proprietary ADSL over ISDN Texas Instruments ADI Alcatel ETSI TS 101 388 ADSL over ISDN as per ITU G 992 5 Annex B ADSL 2 ISDN 2 ISDN inter faces Default 1x NT S0 1x TE 2 ISDN inter faces Default 1x NT S0 1x TE 4 ISDN inter faces Default 2x NT S0 2x TE ISDN interfaces are switchable wit...

Page 104: ...o cancelling G 168 automatic adaptive de jitter buffer transparent pass through for negotiated codecs interaction on codec negotiation filter quality bandwdith voice coding with G 711 µ Law A Law 64 kBps G 726 16 24 32 40 kBps G 722 High Quality Codec for UDI calls G 729 Annex A Low Bandwidth Codec Housing 210 x 143 x 45 mm W x H x D rugged plastic case connectors on the rear side stackable provis...

Page 105: ... 3 ISDN interface 8 pin RJ45 socket corresponding to ISO 8877 EN 60603 7 assembled as ISDN NT for connection of ISDN terminal endpoint devices 10 2 4 ISDN Analog interface 8 pin RJ45 socket assembled as ISDN TE for direct connection to an ISDN exchange line NTBA Connector Pin Line IAE 1 2 3 T 2a 4 R 1a 5 R 1b 6 T 2b 7 8 Connector Pin Line IAE 1 2 3 R 2a 4 T 1a 5 T 1b 6 R 2b 7 8 ...

Page 106: ...ce 6 pin RJ11 socket 10 2 6 Ethernet interface 10 100Base TX 8 pin RJ45 socket corresponding to ISO 8877 EN 60603 7 Connector Pin Line IAE 1 R a 2 T b 3 T 2a 4 R 1a 5 R 1b 6 T 2b 7 8 Connector Pin IAE 1 2 3 a 4 b 5 6 Connector Pin IAE 1 T 2 T 3 R 4 PoE G 5 PoE G 6 R 7 PoE 48 V 8 PoE 48 V ...

Page 107: ...devices of the type described in this documentation are in agreement with the basic requirements and other relevant regulations of the 1995 5 EC directive The CE declarations of conformity for your device are available in the appropriate product area on the Swyx web site www lancom de Connector Pin IAE 1 CTS 2 RTS 3 RxD 4 RI 5 TxD 6 DSR 7 DCD 8 DTR U GND ...

Page 108: ...ction 1 19 4 3 Connect charge protection 4 5 4 8 Contact assignment 10 2 ADSL interface 10 2 DSL interface 10 4 LAN interface 10 4 Outband 10 5 D Data frequencies 1 2 DDI 1 14 Default gateway 4 9 Denial of Service protection 1 4 DHCP 4 9 DHCP server 1 15 4 2 4 3 4 4 4 8 4 9 Dial up access 7 1 Dial up adapter 7 5 Direct Dialing In 1 14 DNS access to the remote LAN 6 5 DNS server 1 15 4 9 Documentat...

Page 109: ... caller ID 6 4 7 2 7 3 Connector cable 2 1 D channel 7 3 password for connection 6 4 ISDN leased line option 1 15 ISDN life line 2 12 ISDN modem 7 1 ISDN power relay 2 13 ISDN S0 connection 1 18 L LAN Connector cable 2 1 LAN to LAN coupling 6 1 Required information 6 2 LANCAPI 1 15 LANCOM setup 2 17 LANconfig 2 17 4 4 run setup wizards 5 2 LAN LAN coupling 1 15 LANmonitor 2 17 LANtools System requ...

Page 110: ...set switch 2 8 Reset the configuration 2 9 Reset the toll protection 2 4 Restarting the device 2 9 Router function 1 1 S SDSL modem 1 19 Searching for Windows work groups 6 7 Security Firewall wizard 8 2 Security checklist 8 3 Setting up Internet access 5 1 SIP gateway 1 8 SIP PBX 1 9 SIP provider 1 6 Software installation 2 16 SSID 4 4 4 8 Stateful Inspection Firewall 8 2 Stateful inspection fire...

Page 111: ...Voice communication 1 5 Voice frequencies 1 2 Voice over IP 1 5 VoIP 1 5 Connecting subsidiaries or home offices 1 7 Peer to peer 1 9 VoIP lines 1 11 VoIP PBX 1 7 VoIP softphone 1 6 VoIP users 1 11 VPN 1 3 VPN client 7 5 VRRP 1 13 W WEBconfig 4 5 password 4 8 System requirements 2 2 ...

Page 112: ...I 5 ...