lancom 1780ew-4g+ - LANCOM Systems GmbH

Routers & VPN Gateways
LANCOM 1780EW-4G+
High-performance 4G LTE VPN router with LTE Advanced, and Wi-Fi
The LANCOM 1780EW-4G+ is a professional, high-performance VPN router with LTE Advanced of up to 300
Mbps and 867 Mbps Wi-Fi based on IEEE 802.11ac. It is ideal e.g. for providing mobile, high-speed access to
company networks via a secure VPN connection, while at the same time supporting a Wi-Fi network. Alternatively,
the Gigabit Ethernet port enables the device to operate with an external modem including LTE backup. On top
of that, the support of SD-WAN for an automatic VPN- and VLAN configuration and SD-WLAN for an automatic
Wi-Fi configuration via the LANCOM Management Cloud enables an extremely easy and efficient handling of
your infrastructure. The right choice for secure, reliable and sustainable networking solutions "Made in Germany".
a Versatile business VPN router with LTE/4G cellular networking for up to 300 Mbps (CAT6)
a Wi-Fi operation at 2.4 or 5 GHz with up to 867 Mbps via IEEE 802.11ac or 300 Mbps via IEEE 802.11n
a Gigabit Ethernet interface with PoE (802.3at)
a SD-WAN – automatic VPN- and VLAN configuration with the LANCOM Management Cloud
a SD-WLAN – automatic Wi-Fi configuration via the LANCOM Management Cloud
a Secure site connectivity with 5 simultaneous IPSec VPN connections (25 channels optional)
a Network virtualization with up to 16 networks on one device (ARF)
a Security Made in Germany
a Maximum future compatibility, reliability, and security
DATASHEET
LANCOM 1780EW-4G+
LTE Advanced with up to 300 Mbps
Secure site connectivity via VPN
The integrated LTE-4G modem of the LANCOM 1780EW-4G+
The LANCOM 1780EW-4G+ offers high levels of security.
offers high-speed 4G connections at up to 300 Mbps. By
The standard equipment of 5 IPSec VPN channels guarantees
enabling mobile operation in this way, the LANCOM
strong encryption, secure connections for mobile employees,
1780EW-4G supports, for example, a mobile conference
and protection of corporate data. The LANCOM VPN option
room that offers temporary yet secure Wi-Fi access to
upgrades the router to support 25 VPN channels. This ensures
company networks.
that your network is perfectly scalable and can grow on
demand—without additional hardware components.
WLAN nach IEEE 802.11ac
Featuring both IEEE 802.11ac and 802.11n Wi-Fi, the
Security Made in Germany
LANCOM 1780EW-4G+ provides wireless networking to
In a market with a strong presence of American and Asian
clients in the 2.4- or 5-GHz frequency range at speeds of up
products, LANCOM offers maximum security "Made in
to 867 Mbps via 11ac or up to 300 Mbps via 11n. Thanks
Germany". The entire LANCOM core product range is
to multi-SSID, the wireless LAN also supports multiple
developed and manufactured in Germany, and tested
networks that are securely separated from one another.
according to the highest standards of security, data
protection and quality. The company's own "closed-source"
Radically easy configuration with SD-WAN
operating system LCOS is developed at the company
In combination with the LANCOM Management Cloud the
headquarters in Germany. Our in-house team of developers
LANCOM 1780EW-4G+ paves the path to automated
works in a highly secure environment as certified by the BSI
management. With Software-defined WAN (SD-WAN) it
(German Federal Office for Information Security), all of which
enables the automatic configuration of secure VPN
is subject to the highest standards of security, encryption,
connections between different sites, including network
and quality.
virtualization even across wide area networks: The VPN
functionality is activated at the click of a mouse and the
Maximum future-proofing
desired VLANs are selected for the respective sites. The
LANCOM products are based on professional expertise, years
laborious configuration of the individual tunnel endpoints is
of experience in IT, and high-quality materials. All of our
a thing of the past.
devices are equipped with hardware that is dimensioned for
the future and, even reaching back to older product
Automatic Wi-Fi configuration with SD-WLAN
generations,
SD-WLAN facilitates the automatic configuration of multiple
System—LCOS—are available several times a year, free of
WLANs (multi-SSID), including for example the separation of
charge. This guarantees a long service life while staying
hotspot networks. All that needs to be specified here is the
technically up to date, which represents a true protection of
SSID authentication method and, if required, the bandwidth
your investment.
restrictions for each WLAN. The WLAN profiles created in
this way are rolled out or updated on any number of access
points and WLAN routers at the different sites – simply by
mouse click.
updates
to
the
LANCOM
Operating
DATASHEET
LANCOM 1780EW-4G+
LCOS 10.12
WLAN product specifications
Frequency band 2.4 GHz and 5 GHz
2400-2483.5 MHz (ISM) and 5150-5700 MHz (depending on country-specific restrictions)
Data rates IEEE 802.11ac/n
867 Mbps according to IEEE 802.11ac with MCS9 (fallback to 6,5 Mbps with MCS0). Compatible to IEEE 802.11ac/n/a, IEEE 802.11
ac/n, IEEE 802.11n/a compatibility mode or pure IEEE 802.11ac, pure IEEE 802.11n, pure IEEE 802.11a mode and data rates selectable
Data rates IEEE 802.11n
300 Mbps according to IEEE 802.11n with MCS15 (fallback to 6,5 Mbps with MCS0). Compatible to IEEE 802.11a/n, IEEE 802.11g/n,
IEEE 802.11b/g/n or IEEE 802.11b/g compatibility mode or pure IEEE 802.11n, pure IEEE 802.11a, IEEE 802.11g or pure IEEE 802.11b
mode and data rates selectable
Data rates IEEE 802.11a/ h
54 Mbps (fallback to 48, 36 , 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection), fully compatible with TPC (adjustable power output)
and DFS (automatic channel selection, radar detection) and data rates selectable
Data rates IEEE 802.11b/g
54 Mbps to IEEE 802.11g (fallback to 48, 36, 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection) compatible to IEEE 802.11b (11, 5.5,
2, 1 Mbps, Automatic Rate Selection), IEEE 802.11b/g compatibility mode or pure IEEE 802.11g or pure IEEE 802.11b and data rates
selectable
Range IEEE 802.11ac/n/a/g/b *
Up to 150 m (up to 30 m in buildings)
Output power at radio module, 5 GHz and IEEE 802.11a/h: +17 dBm @ 54 MBit/s; IEEE 802.11an/ac: +16 dBm @ (MCS7, 20 MHz), +15 dBm @ (MCS7, 40 MHz), +15 dBm (MCS9,
per transmit chain
20 MHz), +14 dBm (MCS9, 40/80 MHZ)
Output power at radio module, 2.4 GHz
and per transmit chain
IEEE 802.11b/g: +18 dBm @ 54 MBit/s, IEEE 802.11n: +16 dBm @ (MCS7, 20 MHz), +16 dBm @ (MCS7, 40 MHz)
Max. allowed radiation power (EIRP), 5 GHz IEEE 802.11a/h: Up to 30 dBm / 1000 mW EIRP (depending on national regulations on channel usage and subject to further obligations
such as TPC and DFS)
Max. allowed radiation power (EIRP), 2.4
GHz
IEEE 802.11b/g: Up to 20 dBm / 100 mW EIRP (transmission power control according to TPC)
Minimum transmission power
Transmission power reduction in software in 1 dB steps to min. 0.5 dBm
Receiver sensitivity 5 GHz
IEEE 802.11a/h: -80 dBm @ 54 MBit/s, IEEE 802.11an/ac: -75 dBm @ (MCS7, 20/40MHz), -71 dBm @ (MCS9, 20/40 MHz), -68 dBm
(MCS9, 80 MHz)
Receiver sensitivity 2.4 GHz
IEEE 802.11b/g: -80 dBm @ 54 MBit/s, IEEE 802.11n: -77 dBm @ (MCS7, 20 MHz), -75 dBm @ (MCS7, 40 MHz)
Radio channels 5 GHz
Up to 26 non-overlapping channels (available channels and further obligations such as automatic DFS dynamic channel selection
depending on national regulations)
Radio channels 2.4 GHz
Up to 13 channels, max. 3 non-overlapping (depending on country-specific restrictions)
Multi-SSID
Up to 30 independent WLAN networks
Concurrent WLAN clients
Up to 65 clients (recommended), 128 clients (max.)
*) Note
The effective distances and transmission rates that can be achieved are depending of the onsite RF conditions
**) Note
The 11ac WLAN module supports max. 128 clients, this specification refers to the combination with the 11n radio module.
Supported WLAN standards
IEEE standards
IEEE 802.11ac, IEEE 802.11n, IEEE 802.11a, IEEE 802.11g, IEEE 802.11b, IEEE 802.11i, IEEE 802.1X, IEEE 802.11u, IEEE 802.11r (Fast
Roaming), IEEE 802.11w (Protected Management Frames), WME and U-APSD/WMM Power Save as defined in IEEE 802.11e, IEEE
802.11h, IEEE 802.11d
Standard IEEE 802.11ac
Supported features
2x2 MIMO, 80 MHz channels, QAM-256
Standard IEEE 802.11n
Supported features
2x2 MIMO, 40 MHz channel, 20/40MHz coexistence mechanisms in the 2.4 GHz band, MAC aggregation, Block Acknowledgement,
STBC (Space Time Block Coding), LDPC (Low Density Parity Check), MRC (Maximal Ratio Combining), Short Guard Interval
WLAN operating modes
Modes
WLAN access point (standalone, WLC or LANCOM Management Cloud managed), WLAN bridge (P2P or P2MP) (standalone or AutoWDS*),
(standalone, WLC or LANCOM Management Cloud managed), WLAN client mode, transparent WLAN client mode
Security
Encryption options
IEEE 802.1X (WPA2-Enterprise), IEEE 802.11i (WPA2-Personal), Wi-Fi Certified™ WPA2™, WPA, WEP, IEEE 802.11w (Protected
Management Frames), LEPS (LANCOM Enhanced Passphrase Security)
DATASHEET
LANCOM 1780EW-4G+
LCOS 10.12
Security
Encryption
AES:CCMP (Advanced Encryption Standard with Counter Mode and Cipher Block Chaining Message Authentication Code Protocol),
TKIP (Temporal Key Integrity Protocol), RC4 (only used by WEP)
EAP types (authenticator)
EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-FAST
RADIUS/EAP-server
User administration MAC-based, rate limiting, passphrases, VLAN user based, authentication of IEEE 802.1X clients via EAP-TLS,
EAP-TTLS, EAP-MD5, EAP-GTC, PEAP, MSCHAP or MSCHAPv2
Others
WLAN protocol filters, IP-redirection of any packet received over the WLAN interface, IEEE 802.1X supplicant, background scanning,
client detection ("rogue WLAN client detection"), Wireless Intrusion Detection System (WIDS), RADIUS CoA (Change of Authorization)
LANCOM Active Radio Control
Client Steering*
Steering of WLAN clients to the ideal access point
Managed RF Optimization*
Selection of optimal WLAN channels by the administrator
Adaptive Noise Immunity
Better WLAN throughput due to immunity against interferences
Spectral Scan
Monitoring your WLAN for sources of interference
Adaptive RF Optimization
Dynamic selection of the optimal WLAN channel
Airtime Fairness
Improved utilization of the WLAN bandwidth
Adaptive Transmission Power
Automatic adjustment of the transmission power for Wi - Fi backup scenarios
*) Note
Only in installations with WLAN controller
Roaming
Roaming
IAPP (Inter Access Point Protocol), IEEE 802.11r (Fast Roaming), OKC (Opportunistic Key Caching), Fast Client Roaming (only in operating
mode client modus)
LTE modem
Supported standards
LTE, UMTS and HSPA support (mode of transmission automatically or manually adjustable), 2G/GSM is not supported
Supported mobile bands (3G/4G)
Band 1 (2100 MHz), Band 2 (1900 MHz), Band 3 (1800 MHz), Band 4 (2100 MHz), Band 5 (800 MHz), Band 7 (2600 MHz), Band 8
(900 MHz), Band 12 (700 MHz), Band 13 (700 MHz), Band 20 (800 MHz), Band 25 (1900 MHz), Band 26 (800 Mhz), Band 29 (700
MHz), Band 30 (2300 MHz), Band 41 (2500 MHz)
Maximum transmission power UMTS/HSxPA +23 dBm
Diversity support
Receive diversity on the aux antenna (3G); MIMO (2x2) for LTE (4G)
GPS
GPS positioning with optional external GPS antenna (accessory)
Supported SIM card formats*
Mini-SIM (2FF), Micro-SIM (3FF) via adaptor, Nano-SIM (4FF) via adaptor
Multi-SIM support
Supported
*) Note
LANCOM Systems recommends the use of a standard SIM (2FF / Mini-SIM)
Layer 2 features
VLAN
4.096 IDs based on IEEE 802.1q, dynamic assignment, Q-in-Q tagging
Quality of Service
WME based on IEEE 802.11e, Wi-Fi Certified™ WMM®
Rate limiting
SSID based, WLAN client based
Multicast
IGMP-Snooping, Multicast-to-Unicast-conversion on WLAN interfaces
Protocols
Ethernet over GRE-Tunnel (EoGRE), ARP-Lookup, LLDP, DHCP option 82, IPv6-Router-Advertisement-Snooping, DHCPv6-Snooping,
LDRA (Lightweight DHCPv6 Relay Agent), Spanning Tree, Rapid Spanning Tree, ARP, Proxy ARP, BOOTP, DHCP, LACP
Layer 3 features
Firewall
Stateful inspection firewall including paket filtering, extended port forwarding, N:N IP address mapping, paket tagging, user-defined
rules and notifications
Quality of Service
Traffic shaping, bandwidth reservation, DiffServ/TOS, packetsize control, layer-2-in-layer-3 tagging
Security
Intrusion Prevention, IP spoofing, access control lists, Denial of Service protection, detailed settings for handling reassembly,
session-recovery, PING, stealth mode and AUTH port, URL blocker, password protection, programmable reset button
PPP authentication mechanisms
PAP, CHAP, MS-CHAP, and MS-CHAPv2
DATASHEET
LANCOM 1780EW-4G+
LCOS 10.12
Layer 3 features
High availability / redundancy
VRRP (Virtual Router Redundancy Protocol), analog/GSM modem backup
Router
IPv4-, IPv6-, NetBIOS/IP multiprotokoll router, IPv4/IPv6 dual stack
Router virtualization
ARF (Advanced Routing and Forwarding) up to separate processing of 16 contexts
IPv4 services
HTTP and HTTPS server for configuration by web interface, DNS client, DNS server, DNS relay, DNS proxy, dynamic DNS client, DHCP
client, DHCP relay and DHCP server including autodetection, NetBIOS/IP proxy, NTP client, SNTP server, policy-based routing,
Bonjour-Proxy, RADIUS
IPv6 services
HTTP and HTTPS server for configuration by web interface, DHCPv6 client, DHCPv6 server, DHCPv6 relay, DNS client, DNS server,
dynamic DNS client, NTP client, SNTP server, Bonjour-Proxy, RADIUS
IPv6 compatible LCOS applications
WEBconfig, HTTP, HTTPS, SSH, Telnet, DNS, TFTP, firewall, RAS dial-in
Dynamic routing protocols
RIPv2, BGPv4, OSPFv2
IPv4 protocols
DNS, HTTP, HTTPS, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RADSEC (secure RADIUS), RTP, SNMPv1,v2c,v3, TFTP, TACACS+
IPv6 protocols
NDP, stateless address autoconfiguration (SLAAC), stateful address autoconfiguration (DHCPv6), router advertisements, ICMPv6,
DHCPv6, DNS, HTTP, HTTPS, PPPoE, RADIUS, SMTP, NTP, BGP, Syslog, SNMPv1,v2c,v3
WAN operating mode
VDSL, ADSL1, ADSL2 or ADSL2+ additional with external DSL modem at an ETH port
WAN protocols
PPPoE, Multi-PPPoE, ML-PPP, GRE, EoGRE, PPTP (PAC or PNS), L2TPv2 (LAC or LNS) and IPoE (using DHCP or no DHCP), RIP-1, RIP-2,
VLAN, IPv6 over PPP (IPv6 and IPv4/IPv6 dual stack session), IP(v6)oE (autokonfiguration, DHCPv6 or static)
Tunneling protocols (IPv4/IPv6)
6to4, 6in4, 6rd (static and over DHCP), Dual Stack Lite (IPv4-in-IPv6-Tunnel)
Security
Intrusion Prevention
Monitoring and blocking of login attempts and port scans
IP spoofing
Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowed
Access control lists
Filtering of IP or MAC addresses and preset protocols for configuration access
Denial of Service protection
Protection from fragmentation errors and SYN flooding
General
Detailed settings for handling reassembly, PING, stealth mode and AUTH port
Password protection
Password-protected configuration access can be set for each interface
Alerts
Alerts via e-mail, SNMP traps and SYSLOG
Authentication mechanisms
EAP-TLS, EAP-TTLS, PEAP, MS-CHAP, MS-CHAPv2 as EAP authentication mechanisms, PAP, CHAP, MS-CHAP and MS-CHAPv2 as PPP
authentication mechanisms
GPS anti-theft
Network protection via site verification by GPS positioning, device stops operating if its location is changes
WLAN protocol filters
Limitation of the allowed transfer protocols, source and target addresses on the WLAN interface
Adjustable reset button
Adjustable reset button for 'ignore', 'boot-only' and 'reset-or-boot'
IP redirect
Fixed redirection of any packet received over the WLAN interface to a dedicated target address
High availability / redundancy
VRRP
VRRP (Virtual Router Redundancy Protocol) for backup in case of failure of a device or remote station.
FirmSafe
For completely safe software upgrades thanks to two stored firmware versions, incl. test mode for firmware updates
LTE-Backup
In case of failure of the main connection, a backup connection is established over the internal LTE modem; automatic return to the
main connection
Analog/GSM modem backup
Optional operation of an analog or GSM modem at the serial interface
Load balancing
Static and dynamic load balancing over up to 2 WAN connections. Channel bundling with Multilink PPP (if supported by network
operator)
VPN redundancy
Backup of VPN connections across different hierarchy levels, e.g. in case of failure of a central VPN concentrator and re-routing to
multiple distributed remote sites. Any number of VPN remote sites can be defined (the tunnel limit applies only to active connections).
Up to 32 alternative remote stations, each with its own routing tag, can be defined per VPN connection. Automatic selection may be
sequential, or dependant on the last connection, or random (VPN load balancing)
Line monitoring
Line monitoring with LCP echo monitoring, dead-peer detection and up to 4 addresses for end-to-end monitoring with ICMP polling
DATASHEET
LANCOM 1780EW-4G+
LCOS 10.12
VPN
IPSec over HTTPS
Enables IPsec VPN based on TCP (at port 443 like HTTPS) which can go through firewalls in networks where e. g. port 500 for IKE is
blocked. Suitable for client-to-site connections and site-to-site connections. IPSec over HTTPS is based on the NCP VPN Path Finder
technology
Number of VPN tunnels
Max. number of concurrent active IPSec, PPTP (MPPE) and L2TPv2 tunnels: 5 (25 with VPN 25 Option). Unlimited configurable
connections. Configuration of all remote sites via one configuration entry when using the RAS user template or Proadaptive VPN.
Hardware accelerator
Integrated hardware accelerator for 3DES/AES encryption and decryption
Realtime clock
Integrated, buffered realtime clock to save the date and time during power failure. Assures timely validation of certificates in any case
Random number generator
Generates real random numbers in hardware, e. g. for improved key generation for certificates immediately after switching-on
1-Click-VPN Client assistant
One click function in LANconfig to create VPN client connections, incl. automatic profile creation for the LANCOM Advanced VPN Client
1-Click-VPN Site-to-Site
Creation of VPN connections between LANCOM routers via drag and drop in LANconfig
IKE, IKEv2
IPSec key exchange with Preshared Key or certificate (RSA signature, digital signature)
Smart Certificate*
Convenient generation of digital X.509 certificates via an own certifaction authority (SCEP-CA) on the webpage or via SCEP.
Certificates
X.509 digital multi-level certificate support, compatible with Microsoft Server / Enterprise Server and OpenSSL. Secure Key Storage
protects a private key (PKCS#12) from theft.
Certificate rollout
Automatic creation, rollout and renewal of certificates via SCEP (Simple Certificate Enrollment Protocol) per certificate hierarchy
Certificate revocation lists (CRL)
CRL retrieval via HTTP per certificate hierarchy
OCSP Client
Check X.509 certifications by using OCSP (Online Certificate Status Protocol) in real time as an alternative to CRLs
XAUTH
XAUTH client for registering LANCOM routers and access points at XAUTH servers incl. IKE-config mode. XAUTH server enables clients
to register via XAUTH at LANCOM routers. Connection of the XAUTH server to RADIUS servers provides the central authentication of
VPN-access with user name and password. Authentication of VPN-client access via XAUTH and RADIUS connection additionally by
OTP token
RAS user template
Configuration of all VPN client connections in IKE ConfigMode via a single configuration entry
Proadaptive VPN
Automated configuration and dynamic creation of all necessary VPN and routing entries based on a default entry for site-to-site
connections. Propagation of dynamically learned routes via RIPv2 if required
Algorithms
3DES (168 bit), AES-CBC and -GCM (128, 192 or 256 bit), Blowfish (128 bit), RSA (1024-4096 bit) and CAST (128 bit). OpenSSL
implementation with FIPS-140 certified algorithms. MD-5, SHA-1, SHA-256, SHA-384 or SHA-512 hashes
NAT-Traversal
NAT-Traversal (NAT-T) support for VPN over routes without VPN passthrough
IPCOMP
VPN data compression based on Deflate compression for higher IPSec throughput on low-bandwidth connections (must be supported
by remote endpoint)
Dynamic DNS
Enables the registration of IP addresses with a Dynamic DNS provider in the case that fixed IP addresses are not used for the VPN
connection
Specific DNS forwarding
DNS forwarding according to DNS domain, e.g. internal names are translated by proprietary DNS servers in the VPN. External names
are translated by Internet DNS servers
IPv4 VPN
Connecting private IPv4 networks
IPv4 VPN over IPv6 WAN
Use of IPv4 VPN over IPv6 WAN connections
IPv6 VPN
Connecting private IPv6 networks
IPv6 VPN over IPv4 WAN
Use of IPv6 VPN over IPv4 WAN connections
Radius
RADIUS authorization and accounting, outsourcing of VPN configurations in external RADIUS server in IKEv2, RADIUS CoA (Change
of Authorization)
*)
Only with VPN 25 option
Performance
Routing-Performance
Data regarding the overall routing performance can be found inside the LANCOM tech paper "Routing-Performance" on
www.lancom-systems.com
VoIP
SIP ALG
The SIP ALG (Application Layer Gateway) acts as a proxy for SIP communication. For SIP calls the ALG opens the necessary ports for
the corresponding media packets. Automatic address translation (STUN is no longer needed).
DATASHEET
LANCOM 1780EW-4G+
LCOS 10.12
Interfaces
ETH1 (PoE)
10/100/1000 Base-T, autosensing, auto node hub, PoE compliant with IEEE 802.3af/at. The port supports energy saving according to
IEEE 802.3az
ETH2
10/100/1000 Base-T, default WAN port, configurable as LAN port. The port supports energy saving according to IEEE 802.3az
Serial interface
Serial configuration interface / COM port (8 pin Mini-DIN): 9,600 - 115,000 baud, suitable for optional connection of analog/GPRS
modems. Supports internal COM port server and allows for transparent asynchronous transmission of serial data via TCP
External antenna connectors
Two reverse SMA connectors
External antenna connectors
Two SMA antenna connectors for external LTE antennas (Ant 1, Ant 2) additional connector for optional GPS antenna (not included
in package content)
Hardware
Power supply
12 V DC, external power adapter (230 V) with bayonet cap.
Power supply
Via Power over Ethernet, compliant with IEEE 802.3af*/at
Housing
Robust synthetic housing, rear connectors, ready for wall mounting, Kensington lock; 210 x 45 x 140 mm (W x H x D)
*) Note
It is recommended to use a PoE adapter or switch with IEEE 802.3at support. Using PoE with IEEE 802.3af the LTE module ist not
available.
Management and monitoring
Management
LANCOM Management Cloud, LANconfig, WEBconfig, WLAN controller, LANCOM Layer 2 management (emergency management)
Management functions
Alternative boot configuration, voluntary automatic updates for LCMS and LCOS, individual access and function rights up to 16
administrators, RADIUS and RADSEC user management, remote access (WAN or (W)LAN, access rights (read/write) adjustable seperately),
SSL, SSH, HTTPS, Telnet, TFTP, SNMP, HTTP, access rights via TACACS+, scripting, timed control of all parameters and actions through
cron job
FirmSafe
Two stored firmware versions, incl. test mode for firmware updates
Monitoring
LANCOM Management Cloud, LANmonitor, WLANmonitor
Monitoring functions
Device SYSLOG, SNMPv1,v2c,v3 incl. SNMP-TRAPS, extensive LOG and TRACE options, PING and TRACEROUTE for checking connections,
internal logging buffer for firewall events
Monitoring statistics
Extensive Ethernet, IP and DNS statistics; SYSLOG error counter, accounting information exportable via LANmonitor and SYSLOG, Layer
7 Application Detection including application-centric tracking of traffic volume
iPerf
iPerf is a tool for measurements of the bandwidth on IP networks (integrated client and server)
SLA-Monitor (ICMP)
Performance monitoring of connections
SD-WLAN
SD-WLAN – automatic WLAN configuration via the LANCOM Management Cloud
SD-LAN
SD-LAN – automatic LAN configuration via the LANCOM Management Cloud
SD-WAN
SD-WAN – automatic WAN configuration via the LANCOM Management Cloud
Hardware
Weight
1,32 lbs (600 g)
Power supply
12 V DC, external power adapter (230 V) with bayonet cap to protect against accidentally unplugging
Power supply
Via Power over Ethernet, compliant with IEEE 802.3af*/at
Environment
Temperature range 0–35° C; humidity 0–95%; non-condensing; Temperature range 0–40°C in a vertical mounting position using the
LANCOM Wall Mount with cable routing to the side
Housing
Robust synthetic housing, rear connectors, ready for wall mounting, Kensington lock; 210 x 45 x 140 mm (W x H x D)
Fans
None; fanless design without rotating parts, high MTBF
Power consumption (max)
Approx. 13 watt with 12 V power supply adapter, approx. 14 watt via PoE
*) Note
It is recommended to use a PoE adapter or switch with IEEE 802.3at support. Using PoE with IEEE 802.3af the LTE module ist not
available.
Declarations of conformity*
CE
EN 60950-1, EN 301 489-1, EN 301 489-17, EN 301 489-24
DATASHEET
LANCOM 1780EW-4G+
LCOS 10.12
Declarations of conformity*
5 GHz WLAN
EN 301 893
2.4 GHz WLAN
EN 300 328
IPv6
IPv6 Ready Gold
Country of Origin
Made in Germany
*) Note
You will find all declarations of conformity in the products section of our website at www.lancom-systems.com
Scope of delivery
Manual
Hardware Quick Reference (DE/EN), Installation Guide (DE/EN)
Cable
2 Ethernet cables, 3m
Antennas
Two 3 dBi dipole antennas (Gain depends on frequency.)
Antennas
Two 2 dBi Edge/UMTS/LTE-antennas
GPS antenna
Passive GPS antenna can be ordered free of charge with enclosed voucher
Power supply unit
External power adapter (230 V), NEST 12 V/1.5 A DC/S, coaxial power connector 2.1/5.5 mm bayonet, temperature range from -5 to
+45° C, LANCOM item no. 111301 (EU)/LANCOM item no 110829 (UK)
Support
Warranty
3 years support
Software updates
Regular free updates (LCOS operating system and LANtools) via Internet
Options
VPN
LANCOM VPN-25 Option (25 channels), item no. 60083
LANCOM Content Filter
LANCOM Content Filter +10 user, 1 year subscription, item no. 61590
LANCOM Content Filter
LANCOM Content Filter +25 user, 1 year subscription, item no. 61591
LANCOM Content Filter
LANCOM Content Filter +100 user, 1 year subscription, item no. 61592
LANCOM Content Filter
LANCOM Content Filter +10 user, 3 year subscription, item no. 61593
LANCOM Content Filter
LANCOM Content Filter +25 user, 3 year subscription, item no. 61594
LANCOM Content Filter
LANCOM Content Filter +100 user, 3 year subscription, item no. 61595
LANCOM Warranty Basic Option S
Option to extend the manufacturer´s warranty from 3 to 5 years, item no. 10710
LANCOM Warranty Advanced Option S
Option to extend the manufacturer´s warranty from 3 to 5 years and replacement of a defective device, item no. 10715
LANCOM Public Spot
Hotspot option for LANCOM access points, LANCOM 17xx and LANCOM 19xx series for user authentication (17xx up to 64 / 19xx up
to 256), versatile access (via voucher, e-mail, SMS), including a comfortable setup wizard, secure separation of guest access and internal
network, item no. 60642
LANCOM Public Spot PMS Accounting Plus Extension of the LANCOM Public Spot (XL) Option for the connection to hotel billing systems with FIAS interface (such as Micros Fidelio)
for authentication and billing of guest accesses for 178x/19xx routers, WLCs, and current central-site gateways, item no. 61638
LANCOM Management Cloud
LANCOM LMC-B-1Y LMC License
LANCOM LMC-B-1Y License (1 Year), enables the management of one category B device for one year via the LANCOM Management
Cloud, item no. 50103
LANCOM LMC-B-3Y LMC License
LANCOM LMC-B-3Y License (3 Years), enables the management of one category B device for three years via the LANCOM Management
Cloud, item no. 50104
LANCOM LMC-B-5Y LMC License
LANCOM LMC-B-5Y License (5 Years), enables the management of one category B device for five years via the LANCOM Management
Cloud, item no. 50105
Accessories
LANCOM WLAN controllers
LANCOM WLC-4006+, item no. 62035 (EU), item no. 62036 (UK) and item no. 62037 (US), LANCOM WLC-4025+, item no. 61378,
item no. 61379 and item no. 61384 (US), LANCOM WLC-4100, item no. 61369 (EU) and item no. 61377 (UK), LANCOM WLC Basic
Option for Routers, item no. 61639
External antenna
AirLancer Extender O-360-3G 4 dBi omnidirectional GSM/GPRS/EDGE/3G outdoor antenna, item no. 61225
External antenna
AirLancer Extender I-360-3G 2dBi GSM/GPRS/EDGE, 5dBi 3G, omnidirectional indoor antenna, item no. 60916
DATASHEET
LANCOM 1780EW-4G+
LCOS 10.12
External antenna
AirLancer Extender O-360-4G omnidirectional GSM/GPRS/EDGE/UMTS/HSPA+/LTE outdoor antenna, item no. 61227
External antenna
AirLancer Extender I-360-4G, +2.5 dBi 4G/3G/2G antenna, 698-960 and 1710-2700 MHz, omnidirectional MIMO indoor antenna, item
no. 60918
19" Rack Mount
19" rack mount adaptor, item no. 61501
LANCOM Wall Mount
For simple, theft-proof mounting of LANCOM devices with plastic housings, item no. 61349
LANCOM Wall Mount (White)
For simple, theft-proof mounting of LANCOM devices with plastic housings, item no. 61345
LANCOM Serial Adapter Kit
For the connection of V.24 modems with AT command set and serial interface for the connection to the LANCOM COM interface, incl.
serial cable and connection plug, item no. 61500
VPN Client Software
LANCOM Advanced VPN Client for Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows 10, single license, item no. 61600
VPN Client Software
LANCOM Advanced VPN Client for Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows 10, 10 licenses, item no. 61601
VPN Client Software
LANCOM Advanced VPN Client for Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows 10, 25 licenses, item no. 61602
VPN Client Software
LANCOM Advanced VPN Client for Mac OS X (10.5 Intel only, 10.6 or higher), single license, item no. 61606
VPN Client Software
LANCOM Advanced VPN Client for Mac OS X (10.5 Intel only, 10.6 or higher), 10 licenses, item no. 61607
*) Note
The polarization diversity antennas require 2 cables and surge arrestors
Item number(s)
LANCOM 1780EW-4G+ (EU)
61712
LANCOM 1780EW-4G+ (UK)
61713
Chassis drawing
www.lancom-systems.com
LANCOM Systems GmbH I Adenauerstr. 20/B2 I 52146 Wuerselen I Germany I E-mail info@lancom.de
LANCOM, LANCOM Systems and LCOS are registered trademarks. All other names or descriptions used may be trademarks or registered trademarks of their owners. Subject to change without notice. No liability for
technical errors and/or omissions. 02/18
Accessories