iMAC

Multi-WAN SD-WAN gateway with fiber and Gigabit Ethernet
As a multi-WAN SD-WAN gateway, the LANCOM 1930EF flexibly offers various Internet connections on one device for the site networking of medium-sized and large companies. Any external DSL or cable modems can be connected via Gigabit Ethernet. With the connection to fiber optic lines via an optional module, you also benefit from high-speed Internet even with data-intensive traffic. Intelligent load distribution across two Internet lines using load balancing increases the available bandwidth and reduces the network load. With the LANCOM Management Cloud (LMC), you centralize the management of the LANCOM 1930EF, ensure consistent and secure network management, and benefit from security "Engineered in Germany".

LANCOM SD-WAN – Next-level networking
With LANCOM SD-WAN you can manage and monitor your entire corporate network centrally, cost-effectively, quickly, and stress-free! In combination with the LANCOM Management Cloud, the SD-WAN gateway gives you all the options for an automated setup of secure VPN connections (Auto-VPN) between sites, including network virtualization. Highlight features such as High Scalability VPN (HSVPN) and Advanced Mesh VPN offer you a significant plus in scalability and efficiency for a large number of branches and applications. Furthermore, if multiple WAN connections are defined, they are automatically operated in active/active mode (load balancing), thereby increasing the available total bandwidth. With Dynamic Path Selection and Dynamic Traffic Steering, applications are also dynamically routed via the best connection at any given time.

Powerful Gigabit multi-WAN & load balancing
With the LANCOM 1930EF, you can flexibly use a wide variety of Internet connections on one device: The gateway can be connected directly to a fiber optic line (FTTH) via the SFP/TP combo port and separately available SFP module (GPON / AON). In addition, the SD-WAN gateway offers high flexibility via Gigabit Ethernet for connecting external modems. With the parallel use of several Internet lines (load balancing: active/active), the LANCOM 1930EF also ensures ideal load distribution of the data volume and a further increase in the bandwidth provided.

High Scalability VPN (HSVPN)
The ongoing rise of digitalization, greater diversity of applications, and higher data volumes demand powerful, state-of-the-art networks. High Scalability VPN significantly improves the extensibility and efficiency of your architecture. Where previously each individual application required a separate VPN tunnel, HSVPN bundles any number of networks into a single VPN tunnel and transports them collectively to the remote site – with each network remaining secure and strictly separated from the others. The advantage for your business: Considerably fewer VPN tunnels are required, and recovery times are much faster in a failover event. And if you need more VPN tunnels, the LANCOM VPN 100 option is available, allowing you to securely connect up to 100 locations or external employees to the corporate network at the same time.

Security with ARF, VLAN, and inspection firewall
Equipped with a stateful inspection firewall, the LANCOM SD-WAN gateway protects the entire network with functions such as intrusion prevention and denial of service protection. Logical network segmentation allows you to define individual security settings and access rights according to the requirements of the user groups, and to divide your infrastructures and applications into different areas. This network segmentation using ARF (Advanced Routing and Forwarding) and VLAN (Virtual Local Area Network) ensures that your enterprise network as a whole remains protected, even if a network segment is compromised.

Secure communication via VPN
With virtual private networks (VPN), you use the public medium of the Internet as a communication path and secure the connection in such a way that the communication still remains completely inaccessible to external parties. This SD-WAN gateway offers you five integrated IPSec VPN channels for secure encryption, so that the protection of internal company data is always guaranteed when connecting mobile employees, home offices, or branch offices. With the LANCOM VPN Option, you can also upgrade the device to up to 100 VPN channels, so that the infrastructure can easily grow with your needs without additional hardware.

Maximum future-proofing and digital sovereignty
As an established German manufacturer of IT network solutions, LANCOM stands for reliability and know-how. Software and hardware development as well as production take place primarily in Germany, as does the hosting of the network management. Special attention is given to providing trusted solutions with outstanding security features. Another important security characteristic of the products is that they are free from backdoors, as awarded by the German Federal Ministry of Economy with the quality seal “IT Security made in Germany”. All devices are always equipped with hardware that is dimensioned for the future. Even across product generations, updates to the LANCOM operating system family are available several times a year, free of charge. his guarantees a long service life while staying technically up to date, which represents a true protection of your investment. In addition, LANCOM infrastructures are easily scalable thanks to maximum compatibility.

Typical application scenarios

Application scenario with one client
A client is connected to the Internet via the multi-WAN SD-WAN gateway in active/active mode (load balancing). Load balancing is used to distribute the load of the data volume in the network across Internet lines used in parallel. In this way, data connections are distributed evenly over (at least) two lines and the individual bandwidths of the lines are added together. In this scenario, the load balancer integrated in the SD-WAN gateway decides whether to use Internet line 1 or Internet line 2, depending on the load. Even if one line fails, the connection via the other line is always secured.

Application scenario with two or more clients
Several clients are connected to the Internet via the multi-WAN SD-WAN gateway (two external modems for any connections). Now, for example, two clients with a load balancer integrated in the router can work in parallel at the same download speed, as this enables the data load to be distributed over both Internet lines (1 & 2). This enables maximum utilization and consequently an enormous increase in network efficiency.

Application scenario with VPN load balancing
With the integrated load balancer, IKEv2 VPN connections can also be conveniently combined into a load balancer network. Regardless of whether the network is realized with a LANCOM SD-WAN gateway, a LANCOM SD-WAN central site gateway (e.g. LANCOM ISG-5000), or the LANCOM vRouter, the load is better distributed and the data traffic is automatically taken over if one connection fails. This significantly increases the VPN bandwidth for multiple clients.

Site networking with LANCOM SD-WAN
Improved network availability, higher bandwidths, and maximum data security – the demands on companies are constantly growing. Services must be available in the same quality at all locations at all times. With your SD-WAN-capable LANCOM device, you have already taken the first step on the path to highly scalable, efficient, and secure networking of distributed corporate sites. In combination with the LANCOM Management Cloud, this gives you a solution that is unique on the market.

Everything NIS2 compliant?
Does your technical equipment fulfil the NIS2 requirements?

The EU directive on network and information security for enterprises, NIS2, may also affect you and sets strict security standards that could require action. We support you with expert knowledge, tips, and recommendations in video, text and image form.






Design
Product colour: Black
Rack capacity: 1U
Enclosure material: Metal
LED indicators: Yes
Number of fans: 0 fan(s)
Features
Antenna type: Internal
Protocols
Supported network protocols: DNS, HTTP, HTTPS, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RADSEC (secure RADIUS), RTP, SNMPv1,v2c,v3, TFTP, TACACS+, IGMPv3
Routing protocols: LISP, OSPFv2
Feature: DHCP server
Feature: DHCP client
Feature: DMZ support
Network
Ethernet LAN data rates: 10,100,1000 Mbit/s
Networking standards: IEEE 802.1Q
Cabling technology: 10/100/1000Base-T(X)
Security
Feature: Access Control List (ACL)
Feature: MAC address filtering
Security algorithms: 3DES, 128-bit AES, 192-bit AES, 256-bit AES, 1024-bit RSA, 4096-bit RSA, SHA-256, SHA-384, SHA-512
Feature: ARP attack prevention
Firewall security: Yes
Authentication method: PAP, CHAP, MS-CHAP, MS-CHAPv2
Feature: VLAN support
Number of VLANs: 4096
Feature: Password protection
Ports & interfaces
Feature: SIM card slot
Ethernet LAN (RJ-45) ports: 6
Feature: DC-in jack
Combo SFP ports quantity: 1
Management features
Performance management: SLA-Monitor (ICM
Feature: Web-based management
Feature: Quality of Service (QoS) support
Feature: Reset button
Feature: Syslog
Feature: Multicast support
Feature: Traffic shaping
Power
Power consumption (max): 23 W
Power consumption (idle): 9 W
Heat dissipation: 78 BTU/h
Weight & dimensions
Width: 345 mm
Depth: 253 mm
Height: 44 mm
Weight: 2.5 kg
Packaging data
Package width: 410 mm
Package depth: 448 mm
Package height: 130 mm
Packaging content
Feature: Manual
Cables included: AC, LAN (RJ-45)
Operational conditions
Operating temperature (T-T): 0 - 40 °C
Operating relative humidity (H-H): 0 - 95%
Certificates
Compliance certificates: CE, Federal Communications Commission (FCC), RCM, UKCA
Logistics data
Country of origin: Germany
Customs product code (TARIC): 85176200