
Security
Monitoring and blocking of login attempts and port scansIntrusion Prevention
Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowedIP spoofing
Filtering of IP or MAC addresses and preset protocols for configuration accessAccess control lists
Protection from fragmentation errors and SYN floodingDenial of Service protection
Detailed settings for handling reassembly, PING, stealth mode and AUTH portGeneral
Filtering of unwanted URLs based on DNS hitlists and wildcard filtersURL blocker
Password-protected configuration access can be set for each interfacePassword protection
Alerts via e-mail, SNMP-Traps and SYSLOGAlerts
EAP-TLS, EAP-TTLS, PEAP, MS-CHAP, MS-CHAPv2 as EAP authentication mechanisms, PAP, CHAP, MS-CHAP and MS-CHAPv2 as PPP authentication
mechanisms
Authentication mechanisms
Limitation of the allowed transfer protocols, source and target addresses on the WLAN interfaceWLAN protocol filters
Adjustable reset button for 'ignore', 'boot-only' and 'reset-or-boot'Adjustable reset button
Fixed redirection of any packet received over the WLAN interface to a dedicated target addressIP redirect
High availability / redundancy
VRRP (Virtual Router Redundancy Protocol) for backup in case of failure of a device or remote station. Enables passive standby groups or reciprocal
backup between multiple active devices including load balancing and user definable backup priorities
VRRP
For completely safe software upgrades thanks to two stored firmware versions, incl. test mode for firmware updatesFirmSafe
Optional operation of an analog or GSM modem at the serial interfaceAnalog/GSM modem backup
Line monitoring with LCP echo monitoring, up to 4 addresses for end-to-end monitoring with ICMP pollingLine monitoring
Routing functions
IP and NetBIOS/IP multi-protocol routerRouter
Separate processing of 16 contexts due to virtualization of the routers. Mapping to VLANs and complete independent management and configuration
of IP networks in the device, i.e. individual settings for DHCP, DNS, Firewalling, QoS, VLAN, Routing etc. Automatic learning of routing tags for
ARF contexts from the routing table
Advanced Routing and Forwarding
HTTP and HTTPS server for configuration by web interfaceHTTP
DNS client, DNS server, DNS relay, DNS proxy and dynamic DNS clientDNS
DHCP client, DHCP relay and DHCP server with autodetection. Cluster of several LANCOM DHCP servers per context (ARF network) enables caching
of all DNS assignments at each router. DHCP forwarding to multiple (redundant) DHCP servers
DHCP
NetBIOS/IP proxyNetBIOS
NTP client and SNTP server, automatic adjustment for daylight-saving timeNTP
Policy-based routing based on routing tags. Based on firewall rules, certain data types are marked for specific routing, e.g. to particular remote
sites or lines
Policy-based routing
Dynamic routing with RIPv2. Learning and propagating routes; separate settings for LAN and WAN. Extended RIPv2 including HopCount, Poisoned
Reverse, Triggered Update for LAN (acc. to RFC 2453) and WAN (acc. to RFC 2091) as well as filter options for propagation of routes. Definition
of RIP sources with wildcards
Dynamic routing
IPv6 routerIPv6 router
DHCPv6 client, DHCPv6 server, DHCPv6 relay, stateless- and stateful mode, IPv6 address (IA_NA), prefix delegation (IA_PD)DHCPv6
Layer 2 functions
Packets sent in response to LCOS service requests (e.g. for Telnet, SSH, SNTP, SMTP, HTTP(S), SNMP, etc.) via Ethernet can be routed directly to the
requesting station (default) or to a target determined by ARP lookup
ARP lookup
COM port server
COM-port server for the DIN interface. For a serial device connected to it, the server manages its own virtual COM port via Telnet (RFC 2217) for
remote maintenance (works with popular virtual COM-port drivers compliant with RFC 2217). Switchable newline conversion and alternative binary
mode. TCP keepalive according to RFC 1122 with configurable keepalive interval, retransmission timeout and retries
COM port forwarding
LAN protocols
ARP, proxy ARP, BOOTP, DHCP, DNS, HTTP, HTTPS, IP, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RIP-1, RIP-2, RTP, SIP, SNMP, TCP, TFTP,
UDP, VRRP, VLAN
IP
LANCOM L-460agn dual Wireless
Features as of: LCOS 8.80
Komentáře k této Příručce