Lancom 1790-4G User Manual

Routers & VPN Gateways

LANCOM 1790-4G

Professional VPN site connectivity via high-speed LTE or external modems

The LANCOM 1790-4G gets you connected, whatever type of Internet connection you have on-site—be it a fast

connection via LTE/4G, or external modems backed up by LTE/4G. For example, at locations without a wired

Internet connection, the LANCOM 1790-4G offers a professional-grade primary Internet access based on the

mobile communications standard LTE Advanced. This offers up to 300 Mbps for fast data transfer and, thanks

to VPN, secure connectivity for offices, stores, or employees at their home offices. With an external modem

operating at the Gigabit Ethernet interface, the integrated LTE Advanced modem offers a secure backup if the

primary connection were to go down.

a

Business VPN router with LTE/4G cellular networking for up to 300 Mbps (CAT 6)

a

Gigabit Ethernet interface for connection to external DSL or cable modems

a

SD-WAN – automatic VPN and VLAN configuration via the LANCOM Management Cloud

a

5 simultaneous IPSec VPN connections (25 channels optional)

a

Network virtualization with up to 16 networks on one device (ARF)

a

Security Made in Germany

a

Maximum future compatibility, reliability, and security

DATASHEET

LANCOM 1790-4G

LTE Advanced for up to 300 Mbps

The integrated LTE/4G modem of the LANCOM 1790-4G

offers high-speed 4G connections at up to 300 Mbps. This

makes it ideal for professional and high-speed Internet

connectivity for enterprises at locations without DSL.

Connects external modems

The LANCOM 1790-4G connects to an external modem via

the Gigabit Ethernet interface, which makes you completely

independent of the on-site Internet connection type.

Secure site connectivity via VPN

The LANCOM 1790-4G offers high levels of security. The

standard equipment of 5 IPSec VPN channels guarantees

strong encryption, secure connections for mobile employees,

and protection of corporate data. The LANCOM VPN option

upgrades the router to support 25 VPN channels. This ensures

that your network is perfectly scalable and can grow on

demand—without needing additional hardware.

Radically simplified configuration with SD-WAN

In combination with the LANCOM Management Cloud, the

LANCOM 1790-4G paves the way to automated

management. The software-defined WAN (SD-WAN) enables

the automatic setup of secure VPN connections between

sites, including network virtualization across the wide-area

network: A few mouse clicks is all it takes to enable the VPN

function and select the required VLANs for each site. The

laborious configuration of individual tunnel endpoints is no

longer required at all.

Stateful inspection firewall

Equipped with a stateful inspection firewall, the LANCOM

1790-4G protects the entire network. With features such as

intrusion prevention and Denial-of-Service protection, this

business VPN router provides optimal protection and secures

all of the data on the network.

Advanced Routing & Forwarding

The LANCOM 1790-4G provides up to 16 securely isolated

IP contexts, each of which has its own separate routing. This

is an elegant way of operating IP applications with one

central router and keeping the different communication

channels securely separated from one another.

Security Made in Germany

In a market with a strong presence of American and Asian

products, LANCOM offers maximum security "Made in

Germany". The entire LANCOM core product range is

developed and manufactured in Germany, and tested

according to the highest standards of security, data

protection and quality. The company's own "closed-source"

operating system LCOS is developed at the company

headquarters in Germany. Our in-house team of developers

works in a highly secure environment as certified by the BSI

(German Federal Office for Information Security), all of which

is subject to the highest standards of security, encryption,

and quality.

Maximum future-proofing

LANCOM products are based on professional expertise, years

of experience in IT, and high-quality materials. All of our

devices are equipped with hardware that is dimensioned for

the future and, even reaching back to older product

generations, updates to the LANCOM Operating

System—LCOS—are available several times a year, free of

charge. This guarantees a long service life while staying

technically up to date, which represents a true protection of

your investment.

DATASHEET

LANCOM 1790-4G

LTE modem

LTE, UMTS and HSPA support (mode of transmission automatically or manually adjustable), 2G/GSM is not supportedSupported standards

Supported mobile bands (3G/4G)

Layer 2 features

Protocols

Layer 3 features

Firewall

Security

IPv4 services

IPv6 services

IPv6 protocols

WAN protocols

Security

Band 1 (2100 MHz), Band 2 (1900 MHz), Band 3 (1800 MHz), Band 4 (2100 MHz), Band 5 (800 MHz), Band 7 (2600 MHz), Band 8
(900 MHz), Band 12 (700 MHz), Band 13 (700 MHz), Band 20 (800 MHz), Band 25 (1900 MHz), Band 26 (800 Mhz), Band 29 (700
MHz), Band 30 (2300 MHz), Band 41 (2500 MHz)

+23 dBmMaximum transmission power UMTS/HSxPA

Receive diversity on the aux antenna (3G); MIMO (2x2) for LTE (4G)Diversity support

Mini-SIM (2FF), Micro-SIM (3FF) via adaptor, Nano-SIM (4FF) via adaptorSupported SIM card formats*

SupportedMulti-SIM support

LANCOM Systems recommends the use of a standard SIM (2FF / Mini-SIM)*) Note

4.096 IDs based on IEEE 802.1q, dynamic assignment, Q-in-Q taggingVLAN

IGMP-SnoopingMulticast

Ethernet over GRE-Tunnel (EoGRE), ARP-Lookup, LLDP, DHCP option 82, IPv6-Router-Advertisement-Snooping, DHCPv6-Snooping,
LDRA (Lightweight DHCPv6 Relay Agent), Spanning Tree, Rapid Spanning Tree, ARP, Proxy ARP, BOOTP, DHCP, LACP

Stateful inspection firewall including paket filtering, extended port forwarding, N:N IP address mapping, paket tagging, user-defined
rules and notifications

Traffic shaping, bandwidth reservation, DiffServ/TOS, packetsize control, layer-2-in-layer-3 taggingQuality of Service

Intrusion Prevention, IP spoofing, access control lists, Denial of Service protection, detailed settings for handling reassembly,
session-recovery, PING, stealth mode and AUTH port, URL blocker, password protection, programmable reset button

PAP, CHAP, MS-CHAP, and MS-CHAPv2PPP authentication mechanisms

VRRP (Virtual Router Redundancy Protocol), analog/GSM modem backupHigh availability / redundancy

IPv4-, IPv6-, NetBIOS/IP multiprotokoll router, IPv4/IPv6 dual stackRouter

ARF (Advanced Routing and Forwarding) up to separate processing of 16 contextsRouter virtualization

HTTP and HTTPS server for configuration by web interface, DNS client, DNS server, DNS relay, DNS proxy, dynamic DNS client, DHCP
client, DHCP relay and DHCP server including autodetection, NetBIOS/IP proxy, NTP client, SNTP server, policy-based routing,
Bonjour-Proxy, RADIUS

HTTP and HTTPS server for configuration by web interface, DHCPv6 client, DHCPv6 server, DHCPv6 relay, DNS client, DNS server,
dynamic DNS client, NTP client, SNTP server, Bonjour-Proxy, RADIUS

WEBconfig, HTTP, HTTPS, SSH, Telnet, DNS, TFTP, firewall, RAS dial-inIPv6 compatible LCOS applications

RIPv2, BGPv4, OSPFv2, LISP (Locator/ID Separation Protocol)Dynamic routing protocols

DNS, HTTP, HTTPS, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RADSEC (secure RADIUS), RTP, SNMPv1,v2c,v3, TFTP, TACACS+IPv4 protocols

NDP, stateless address autoconfiguration (SLAAC), stateful address autoconfiguration (DHCPv6), router advertisements, ICMPv6,
DHCPv6, DNS, HTTP, HTTPS, PPPoE, RADIUS, SMTP, NTP, BGP, LISP, Syslog, SNMPv1,v2c,v3

VDSL, ADSL1, ADSL2 or ADSL2+ additional with external DSL modem at an ETH port, UMTS/LTEWAN operating mode

PPPoE, Multi-PPPoE, ML-PPP, GRE, EoGRE, PPTP (PAC or PNS), L2TPv2 (LAC or LNS), L2TPv3 with Ethernet-Pseudowire and IPoE (using
DHCP or no DHCP), RIP-1, RIP-2, VLAN, IPv6 over PPP (IPv6 and IPv4/IPv6 dual stack session), IP(v6)oE (autokonfiguration, DHCPv6
or static)

6to4, 6in4, 6rd (static and over DHCP), Dual Stack Lite (IPv4-in-IPv6-Tunnel)Tunneling protocols (IPv4/IPv6)

Monitoring and blocking of login attempts and port scansIntrusion Prevention

Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowedIP spoofing

Filtering of IP or MAC addresses and preset protocols for configuration accessAccess control lists

Protection from fragmentation errors and SYN floodingDenial of Service protection

LCOS 10.20