This document describes the management of user-related rights when operating the PPPoE server on the LANCOM router, and how to set up the PPPoE client in Windows 7.
The PPPoE server integrated into the LANCOM router allows multiple PPPoE users to be created and managed within an existing LAN. With the widespread availability of DSL, most operating systems are now equipped with PPPoE clients. These can be used to "log on to the network" as well as to manage access rights to services such as the Internet, e-mail or remote sites.
In most scenarios DHCP is used to assign addresses to LAN users, which makes the configuration of individual firewall rules complicated and laborious. This process can be simplified by creating PPPoE users and then using the remote sites as the basis for granting access rights. This approach greatly simplifies the configuration and management of individual employees and groups.
In the example described here, the firewall is used to restrict the group
named
named Purchasingto using the following services: HTTP, HTTPS, POP3, SNMP, and NNTP. All other services are prohibited for this group. This range of services can be enlarged or restricted to meet your individual needs.
An address pool for dial-in accessmust be specified in the router
under Configuration ->
under TCP/IP
->
→ Addresses.
Procedure:
1. Configuring the LANCOM router:
1.1) Enable the PPPoE server in the configuration of the LANCOM router (
Configuration ->
Communication
->
→ General).
1.2) Assign
a
a nameto the service, e.g. User_Auth).
Information:
Info
Entering a name for the service is optional. This enables a PPPoE client to select a certain PPPoE server as specified in the client software.
The
The Session limit specifies how often a client can be logged on simultaneously with the same MAC address. Once the limit has been reached, the server no longer responds to the client queries that are received. The default is1, the maximum value
is
is 99. A Session limit
of 0
of 0 stands for an unlimited number of sessions.
Image Removed
Image Added
1.3) Click on the button
'
Remote sites (PPPoE)
'
and create a new entry
in the PPPoE server's name list (LANconfig> Communication> Name list)
.
Image Removed
Image Added
The settings for the remote
site
site DEFAULTare applied to all client dial-ins.
To make settings for each individual client, you can define remote-site names for each client here. The name of the remote site must be set in the client as the PPP user name.
Information:
Info
If a MAC address is entered, then only connections from this MAC address will be established. The MAC address of '000000000000' means that the client may log on with any MAC address.
1.4) Go to the
menu Configuration -> Communications -> Protocols -> PPP list
menu Communication → Protocols → PPP list and Adda new entry.
Enter the
user
user Purchasingas remote site into the PPP list without a user name but with a shared password, which is to be used by all employees in the department. Set authentication (encrypted) as CHAP. IPv4 routing is activated for this PPP user.
Image Removed
Image Added
1.5)
The
The firewall can be used to control which services are available for the employees in the Purchasing department. In this example the services WEB and MAIL are to be released.
Go to the
menu Configuration ->
menu Firewall/QoS
->
→ Rulesand Adda new rule.
Image Removed
Image Added
1.6) Enter
a
a name for the new rule.
Image Removed
Image Added
1.7) Go to
the
the Actions tab and select the object ACCEPT.
Image Removed
Image Added
1.8) As
the
the Connection source select the remote site PURCHASING.
Image Removed
Image Added
1.9) On
the
the Services tab, go to the Target services section and add the objects WEB and MAIL.
Image Removed
Image Added
1.10) Close the dialog
with
with OKand write the configuration back to the LANCOM router.
2. Configuring the PPPoE client in Windows 7:
2.1) Click
on
on Start
->
→ Control Panel
->
→ Network and Sharing Centerand select the option Set up a new connection or network.
Image Removed
Image Added
2.2) As a network connection type,
select
select Connect to the Internet.
Image Removed
Image Added
2.3) In the next dialog,
select
select Broadband (PPPoE).
Image Removed
Image Added
2.4) Here you enter the PPP remote site and the associated password.
2.5) Give the PPPoE connection
a
a Connection ame.
Image Removed
Image Added
2.6) Click
on
on Connectto close the wizard.
2.7) Enter
the
the Passwordand click on Connect. This establishes the connection to the LANCOM router.
