Lancom 1781A-4G User Manual

LANCOM 1781A-4G

Business VPN router with integrated ADSL2+ and LTE modem for maximum failure safety

1

Intelligent backup scenarios either via ADSL2+ or LTE for business-critical operations

1

Energy-efficient 4-port Gigabit Ethernet switch based on IEEE 802.3az

1

Secure VPN site connectivity with 5 simultaneous IPSec VPN channels (optionally 25 channels)

1

Network virtualization with up to 16 virtual networks on one device (ARF)

1

Stateful inspection firewall with intrusion detection/denial-of-service protection

The professional VPN router LANCOM 1781A-4G features two built-in modems for a secure and highly available Internet access for your company: Apart from an ADSL2+

modem, the router is equipped with an integrated LTE modem for wireless data connections at speeds of up to 100 Mbps. With its extensive VPN capabilities, the device

provides secure, high-performance connectivity to branch offices and remote workers. The four ports of the integrated Gigabit Ethernet switch cater for maximum performance

and are also energy-efficient based on IEEE 802.3az: If no data is transmitted over an interface, the power consumption shuts down automatically. The LANCOM 1781A-4G

further supplies everything that a modern enterprise network needs, such as comprehensive Quality-of-Service capabilities and an object-oriented firewall.

More performance.

The LANCOM 1781A-4G provides a balanced hardware platform for a reliable operation of enterprise networks around the clock. As a professional business router, the

device meets with high standards in the areas of network virtualization, security, and VPN networking. At the same time, its computing power, storage capacity, and the

high-speed interfaces ensure excellent network performance even at times of heavy data traffic.

More security.

The LANCOM 1781A-4G is ideal for offices or small businesses with high data volumes that want to set up a secure and powerful VPN: The router's VPN gateway supports

five simultaneous IPSec channels, to be upgraded up to 25 channels optionally. Additionally, an object-oriented stateful-inspection firewall protects the network with

intrusion prevention and denial of service protection. Optionally available, the LANCOM Content Filter protects up to 100 users effectively while using the Internet. Flexible

bandwidth management guarantees the availability of all applications (also in local networks) as these can be prioritized with a comprehensive range of Quality-of-Service

features.

More management.

LCMS, the LANCOM Management System, is a free software package for the LANCOM 1781A-4G. It enables the configuration of the device, remote maintenance, and

network monitoring. The central component of LCMS, LANconfig, is used to configure the LANCOM 1781A-4G and other LANCOM devices on the network. The extensive

range of features and the onfiguration wizards enable a quick setup of the router. LANCOM Large Scale Monitor (LSM) and the free-of-charge LANmonitor offer detailed,

real-time monitoring of parameters, access to log files and statistics, as well as detailed trace-protocol analysis. Other functions in LCMS include the GUI for firewall setup,

automatic backup of configurations and scripts, and the intuitive folder structure with a convenient search function.

More virtualization.

The LANCOM 1781A-4G helps you to use your IT resources more effectively and to save costs. The device supports multiple independent networks with the powerful

technology Advanced Routing and Forwarding (ARF). The ARF function on the LANCOM 1781A-4G provides up to sixteen virtual networks, each with its own settings for

DHCP, DNS, routing, and firewall.

More reliability for the future.

With the LANCOM 1781A-4G corporate networks can be upgraded for the use of the Internet protocol IPv6 using their current infrastructure. Due to the implementation

of dual-stack, the router can be operated in pure IPv4, pure IPv6, or mixed networks. On top of that, several times a year free-of-charge updates for the LANCOM Operating

System (LCOS) are available. Hence, LANCOM offers maximum safeguarding of your investment.

LANCOM 1781A-4G

LTE modem

LTE, UMTS, HSPA, Edge and GPRS support (mode of transmission automatically or manually adjustable)Supported standards

800/900/1800/2100/2600 MHz (automatically or manually adjustable)LTE-bands

900/2100 MHzUMTS and HSPA bands

850/900/1800/1900 MHzEDGE/GPRS bands

+24 dBmMaximum transmission power UMTS/HSxPA

Receive diversity on the aux antenna (2G + 3G); MIMO (2x2) for LTE (4G)Diversity support

Mini-SIM (2FF), Micro-SIM (3FF) via adaptor, Nano-SIM (4FF) via adaptorSupported SIM card formats

Is supportedMulti-SIM support

Changing of SIM pin via LANconfig or CLI (command line interface)SIM pin

Firewall

Stateful inspection firewall

Packet filter

Tagging

Quality of Service

Bandwidth reservation

Layer 2/Layer 3 tagging

Security

High availability / redundancy

VRRP

Incoming/Outgoing Traffic inspection based on connection information. Trigger for firewall rules depending on backup status, e.g. simplified rule
sets for low-bandwidth backup lines. Limitation of the number of sessions per remote site (ID)

Check based on the header information of an IP packet (IP or MAC source/destination addresses; source/destination ports, DiffServ attribute);
remote-site dependant, direction dependant, bandwidth dependant

Network Address Translation (NAT) based on protocol and WAN address, i.e. to make internal webservers accessible from WANExtended port forwarding

N:N IP address mapping for translation of IP addresses or entire networksN:N IP address mapping

The firewall marks packets with routing tags, e.g. for policy-based routing; Source routing tags for the creation of independent firewall rules for
different ARF contexts

Forward, drop, reject, block sender address, close destination port, disconnectActions

Via e-mail, SYSLOG or SNMP trapNotification

Dynamic bandwidth management with IP traffic shapingTraffic shaping

Dynamic reservation of minimum and maximum bandwidths, totally or connection based, separate settings for send and receive directions. Setting
relative bandwidth limits for QoS in percent

Priority queuing of packets based on DiffServ/TOS fieldsDiffServ/TOS

Automatic packet-size control by fragmentation or Path Maximum Transmission Unit (PMTU) adjustmentPacket-size control

Automatic or fixed translation of layer-2 priority information (IEEE 802.11p-marked Ethernet frames) to layer-3 DiffServ attributes in routing mode.
Translation from layer 3 to layer 2 with automatic recognition of IEEE 802.11p-support in the destination device

Monitoring and blocking of login attempts and port scansIntrusion Prevention

Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowedIP spoofing

Filtering of IP or MAC addresses and preset protocols for configuration access and LANCAPIAccess control lists

Protection from fragmentation errors and SYN floodingDenial of Service protection

Detailed settings for handling reassembly, PING, stealth mode and AUTH portGeneral

Filtering of unwanted URLs based on DNS hitlists and wildcard filters. Extended functionality with Content Filter OptionURL blocker

Password-protected configuration access can be set for each interfacePassword protection

Alerts via e-mail, SNMP traps and SYSLOGAlerts

PAP, CHAP, MS-CHAP and MS-CHAPv2 as PPP authentication mechanismAuthentication mechanisms

Anti-theft ISDN site verification over B or D channel (self-initiated call back and blocking)Anti-theft

Adjustable reset button for 'ignore', 'boot-only' and 'reset-or-boot'Adjustable reset button

VRRP (Virtual Router Redundancy Protocol) for backup in case of failure of a device or remote station. Enables passive standby groups or reciprocal
backup between multiple active devices including load balancing and user definable backup priorities

Features as of: LCOS 9.10