Datasheet

WLAN operating modes
Infrastructure mode (autonomous operation or managed by LANCOM WLAN controller)WLAN access point
Point-to-multipoint connection of up to 16 Ethernet LANs (mixed operation optional), broken link detection, blind mode, supports VLAN When
configuring Pt-to-Pt links, pre-configured names can be used as an alternative to MAC Adresses for creating a link. Rapid spanning-tree protocol
to support redundant routes in Ethernet networks
WLAN bridge
Use of the LAN connector for simultaneous DSL over LAN, IP router, NAT/Reverse NAT (IP masquerading) DHCP server, DHCP client, DHCP relay
server, DNS server, PPPoE client (incl.Multi-PPPoE), PPTP client and server, NetBIOS proxy, DynDNS client, NTP, port mapping, policy-based routing
based on routing tags, tagging based on firewall rules, dynamic routing with RIPv2, VRRP
WLAN router
Transparent WLAN client mode for wireless Ethernet extensions, e.g. connecting PCs or printers by Ethernet; up to 64 MAC addresses. Automatic
selection of a WLAN profile (max. 8) with individual access parameters depending on signal strength or priority
WLAN client
Firewall
Incoming/Outgoing Traffic inspection based on connection information. Trigger for firewall rules depending on backup status, e.g. simplified rule
sets for low-bandwidth backup lines. Limitation of the number of sessions per remote site (ID)
Stateful inspection firewall
Check based on the header information of an IP packet (IP or MAC source/destination addresses; source/destination ports, DiffServ attribute);
remote-site dependant, direction dependant, bandwidth dependant
Packet filter
Network Address Translation (NAT) based on protocol and WAN address, i.e. to make internal webservers accessible from WANExtended port forwarding
N:N IP address mapping for translation of IP addresses or entire networksN:N IP address mapping
The firewall marks packets with routing tags, e.g. for policy-based routing; Source routing tags for the creation of independent firewall rules for
different ARF contexts
Tagging
Forward, drop, reject, block sender address, close destination port, disconnectActions
Via e-mail, SYSLOG or SNMP trapNotification
Quality of Service
Dynamic bandwidth management with IP traffic shapingTraffic shaping
Dynamic reservation of minimum and maximum bandwidths, totally or connection based, separate settings for send and receive directions. Setting
relative bandwidth limits for QoS in percent
Bandwidth reservation
Priority queuing of packets based on DiffServ/TOS fieldsDiffServ/TOS
Automatic packet-size control by fragmentation or Path Maximum Transmission Unit (PMTU) adjustmentPacket-size control
Automatic or fixed translation of layer-2 priority information (IEEE 802.11p-marked Ethernet frames) to layer-3 DiffServ attributes in routing mode.
Translation from layer 3 to layer 2 with automatic recognition of IEEE 802.11p-support in the destination device
Layer 2/Layer 3 tagging
Security
Monitoring and blocking of login attempts and port scansIntrusion Prevention
Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowedIP spoofing
Filtering of IP or MAC addresses and preset protocols for configuration accessAccess control lists
Protection from fragmentation errors and SYN floodingDenial of Service protection
Detailed settings for handling reassembly, PING, stealth mode and AUTH portGeneral
Filtering of unwanted URLs based on DNS hitlists and wildcard filtersURL blocker
Password-protected configuration access can be set for each interfacePassword protection
Alerts via e-mail, SNMP-Traps and SYSLOGAlerts
EAP-TLS, EAP-TTLS, PEAP, MS-CHAP, MS-CHAPv2 as EAP authentication mechanisms, PAP, CHAP, MS-CHAP and MS-CHAPv2 as PPP authentication
mechanisms
Authentication mechanisms
Limitation of the allowed transfer protocols, source and target addresses on the WLAN interfaceWLAN protocol filters
Adjustable reset button for 'ignore', 'boot-only' and 'reset-or-boot'Adjustable reset button
Fixed redirection of any packet received over the WLAN interface to a dedicated target addressIP redirect
High availability / redundancy
VRRP (Virtual Router Redundancy Protocol) for backup in case of failure of a device or remote station. Enables passive standby groups or reciprocal
backup between multiple active devices including load balancing and user definable backup priorities
VRRP
For completely safe software upgrades thanks to two stored firmware versions, incl. test mode for firmware updatesFirmSafe
LANCOM L-321agn Wireless
Features as of: LCOS 9.00 ( > REL. D)