LCOS 10.20
  • LCOS 10.20

LCOS 10.20

The power pack for Wi-Fi and site connectivity!

Powerful features for powerful firmware. Numerous innovations take your network management to the next level. Use the highlight features of LCOS 10.20 to enhance your LANCOM access points, WLAN controllers, routers and gateways. Experience superb control over your networks and a noticeable increase in quality with our in-house closed-source software.


Feature Highlights

WPA3 - State-of-the-art Wi-Fi security

The latest generation of Wi-Fi encryption - WPA3 (Wi-Fi Protected Access) - now offers you more security for your WLAN infrastructure. As the successor of WPA2, WPA3 offers important extensions and security features for small ("WPA3-Personal") and large networks ("WPA3-Enterprise"). With LCOS 10.20, all LANCOM access points and WLAN routers support the new Wi-Fi security standard. Learn more in our Whitepaper



Auto Updater – always up-to-date

The Auto Updater keeps your installations up-to-date automatically: If desired, LANCOM devices can search for new software updates, and download and install them without any user interaction. You can choose whether to install only security updates, release updates, or all updates automatically. If automatic updates are not desired, the feature can still be used to check for new updates, which can then be installed with a single click.


Client Management – for best-ever Wi-Fi

Client Management steers Wi-Fi clients to the best available access point and frequency band. This feature improves the quality of wireless networks of all sizes—whether they operate stand-alone or orchestrated by the LANCOM Management Cloud. The popular Band Steering and Client Steering, which so far were separate features, have now been combined and even operate without a WLAN controller.



Keep control of who is in your Wi-Fi. With LEPS-U (LANCOM Enhanced Passphrase Security – User), individual clients or entire groups each receive a unique Wi-Fi password for an SSID. Using LEPS-MAC, you additionally authenticate the clients by their MAC address—ideal for secure corporate networks.


WAN Policy-Based NAT

WAN Policy-Based NAT allows an easy assignment of static WAN IPv4 addresses to desired services. Due to a NAT action in the firewall rules internal addresses are masked behind a WAN address from the Internet access provider. Ideal for scenarios e.g. for the operation of mail servers and web servers with different WAN addresses.

Further Features

Enhanced Open

Thanks to the introduction of additional data encryption, Enhanced Open improves the security of clients in open Wi-Fis such as hotspots in cafés or hotels.


VDSL routers now operate optionally in DSL bridge mode. This allows a device to work purely as a DSL modem. Ideal for scenarios where multiple DSL connections are operated on one router.

OCSP responder – more power for Smart Certificate

Maximum security with VPN access: Smart Certificate is the easy way to create digital certificates with your LANCOM device—without any need for an external certificate authority. This feature has now been extended to include the OCSP (Online Certificate Status Protocol) network protocol, which enables clients to automatically and efficiently query the integrated CA for the status of X.509 certificates.

LISP (Locator / ID Separation Protocol) support

The Locator / ID Separation Protocol (LISP) is a new routing architecture. LISP allows the implementation of highly scalable networks with an integrated routing protocol, tunneling, and overlays. Ideal for service providers or enterprise networks.

Public Spot CSV import

Public Spot management is now even easier: Hotspot users are easily imported and exported by text file (CSV).


Note: Before any LCOS update, be sure to backup your current device configuration. Devices featuring the "Firmsafe" function have the option of an initial "test mode" firmware upload. The new firmware is activated permanently only if the device has been accessed with a log-in or for configuration purposes before the pre-set time period has expired. Otherwise, the device switches back to its former version.

Ask a question!