LCOS Release
eSIM integration, WireGuard, and two-factor authentication
LCOS 10.94 marks the beginning of the next generation of mobile network management. The integrated eSIM technology in SD-WAN gateways replaces the use of physical SIM cards: Contracts can be digitally installed, changed, updated, and managed – without on-site intervention and without manual card handling. This saves time, reduces the effort involved in rollouts, and offers maximum flexibility, especially for companies with locations spread across different regions or countries. In addition, WireGuard support offers a modern, secure, and easy-to-set-up VPN solution that stands out for its high user-friendliness, especially in very small-scale scenarios. For added protection in device management, two-factor authentication is available for local device configuration, providing reliable access security.
eSIM: The smart mobile communications solution built into the R&S®LANCOM Router
With integrated eSIM technology, R&S®LANCOM SD-WAN gateways connect effortlessly to the mobile network. Instead of physical SIM cards that have to be managed and replaced manually, mobile contracts and profiles can be set up and managed digitally. The permanently installed eSIM (consumer version) is programmed via software with the provider’s profile. This makes it possible to upload, change, update, and manage contracts or tariffs quickly and easily – without time-consuming card replacements or costly on-site visits. New devices are ready for immediate use, and rollouts across multiple locations or large device fleets can be completed in no time. At the same time, security is enhanced, since there are no physical cards that could be lost or misused. Whether for mobile workplaces, branch networks, or as a backup solution, eSIM ensures simple management of mobile connectivity while providing maximum flexibility and efficiency.
WireGuard
WireGuard support provides a fast and flexible solution for secure VPN connections — ideal for small-scale networking scenarios such as home offices or businesses with only a few VPN tunnels. Thanks to its streamlined design and intuitive operation, this modern protocol offers a simple and reliable way to establish secure connections. Cutting-edge cryptographic algorithms ensure robust protection. In addition, WireGuard is supported on all major operating systems, making it an excellent choice for heterogeneous IT environments.
Two-factor authentication (2FA)
The two-factor authentication (2FA) feature makes local device management with LCOS even more secure. In addition to the standard password, an additional security code can now be required — conveniently generated by a common authenticator app. This ensures that access remains protected even if the password is compromised. Setup is straightforward using standard apps and offers effective protection against brute-force attacks. By enabling 2FA, you enhance your security standards and reliably prevent unauthorized access to your devices.
- Support for hybrid post-quantum methods: Extension of encryption in device management (SSH and TLS)
- With the WLC Basic and WLC Upgrade software options, the R&S®LANCOM 2100EF can now manage up to 60 access points
- Extended configuration options for Wi-Fi 7 access points via R&S®LANCOM WLAN controllers
- Fully transparent data forwarding from mobile connections thanks to support for WWAN bridge mode
Scalable, efficient, and secure networks
The new LCOS version is designed for demanding enterprise scenarios with several WAN connections and applications. With a R&S®LANCOM Secure SD-WAN you create the foundation for a comprehensive networking of distributed corporate sites. Discover how the R&S®LANCOM SD-Branch solution caters for an additional highly integrated approach for the management of all network segments (routers – WAN, switches – LAN, access points – wireless LAN, firewalls – security) in branch infrastructures.
Before any LCOS update, be sure to backup your current device configuration. Devices featuring the "Firmsafe" function have the option of an initial "test mode" firmware upload. The new firmware is activated permanently only if the device has been accessed with a log-in or for configuration purposes before the pre-set time period has expired. Otherwise, the device switches back to its former version.
