Deutsche Telekom and LANCOM hardware partnership – how to reach lancom support – VPN IKEv1 vs IKEv2

https://www.amazon.de/LANCOM-884-VoIP-Over-ISDN/dp/B01ERY8A8S/

lancom-systems.de is a major partner of Deutsche Telekom.

https://my.lancom-systems.de/newsroom/presse/archiv/archivansicht/lancom-systems-kooperiert-mit-deutscher-telekom/

that’s how a lot of lancom products end up at Telekom customers.

They could also have partnered with AVM that builds those pretty nice fritzboxes, why not?

just in case anyone wonders, this is NOT the official lancom forum: https://www.lancom-forum.de/

it is a forum run by social incompetent hobbyists and not paid by lancom.

so don’t expect to reach lancom tech support via this forum.

to reach the official lancom support, the user will need to register at LANCOM’s Jira instance here: https://support.lancom-systems.com/servicedesk/customer/portal/3/user/signup

the lancom support has answered… it only took them 5 weeks…

English:

• Since 2019, IKEv1 has been described as deprecated and insecure by the IETF (Internet Engineering Task Force) and should therefore no longer be used.
• LANCOM Systems recommends using the current IKEv2 standard instead.
• The IKEv1 functionality is retained in LANCOM devices and can therefore continue to be used for scenarios with devices without IKEv2 support.
• However, LANCOM Systems will no longer provide support for the analysis of connection problems with IKEv1 connections.
• Also, there will be no bug fixes or new features in the firmware for IKEv1.
  • In individual cases, connection interruptions may occur during rekeying.
  • In such a case, it may be useful to increase the lifetimes so that the disconnections no longer occur so frequently. For information, see the following articles:
  • https://support.lancom-systems.com/knowledge/x/zQAJBQ
  • https://support.lancom-systems.com/knowledge/x/_wAJBQ

German:

• IKEv1 wird seit 2019 durch die IETF (Internet Engineering Task Force) als veraltet (deprecated) und unsicher bezeichnet und sollte daher nicht mehr verwendet werden.
• LANCOM Systems empfiehlt stattdessen den aktuellen Standard IKEv2 zu verwenden.
• Die IKEv1 Funktionalität bleibt in LANCOM Geräten erhalten und kann somit weiterhin für Szenarien mit Geräten ohne IKEv2 Unterstützung verwendet werden.
• LANCOM Systems wird allerdings keinen Support mehr bei der Analyse von Verbindungs-Problemen mit IKEv1-Verbindungen leisten.
• Auch wird es für IKEv1 keine Fehlerbehebungen oder neue Features in der Firmware geben.
• In Einzelfällen kann es zu Verbindungsabbrüchen während des Rekeyings kommen.
• In einem solchen Fall kann es sinnvoll sein, die Lifetimes anzuheben, damit die Verbindungsabbrüche nicht mehr so häufig auftreten.
• Informationen erhalten Sie in folgenden Artikeln:
  • https://support.lancom-systems.com/knowledge/x/zQAJBQ
  • https://support.lancom-systems.com/knowledge/x/_wAJBQ

liked this article?

• only together we can create a truly free world
• plz support dwaves to keep it up & running!
• (yes the info on the internet is (mostly) free but beer is still not free (still have to work on that))
• really really hate advertisement
• contribute: whenever a solution was found, blog about it for others to find!
• talk about, recommend & link to this blog and articles
• thanks to all who contribute!