Manuals / D-Link / Computer Equipment / Network Card

D-Link DFL-500 user manual Index, 104

Models: DFL-500

1 122

Download 122 pages 7.35 Kb

Page 104

Image 104

Index

action

policy option ActiveX

removing from web pages address

adding editing group IP/MAC binding virtual IP

address group example

address name admin

administrator account administrator account

adding admin editing netmask trusted host

aggressive mode remote gateway

alert email configuring

critical firewall or VPN events allow traffic

IP/MAC binding authentication

policy option timeout

authentication key

IPSec VPN remote gateway manual key VPN tunnel

AutoIKE key

adding VPN remote gateway adding VPN tunnel

VPN configuring VPN tunnel

backing up system settings

banned word list backing up clearing restoring

blacklist

URL block message

changing

block traffic IP/MAC binding

DFL-500 User Manual	104

Page 104

Image 104

Contents

Link DFL-500 Regulatory Compliance Table of Contents Firewall configuration IPSec VPNs Logging and reporting Page NAT/Route mode and Transparent mode NAT/Route modeTransparent mode IntroductionDFL-500 QuickStart Guide DFL-500 CLI Reference Guide Customer service and technical supportFor more information Mounting Package contentsGetting started Powering on Initial configuration Connecting to the web-based managerBits per second Connecting to the command line interface CLIDFL-500 login Stop bits Flow control Next stepsData bits Parity NAT/Route mode settings NAT/Route mode installationPreparing to configure NAT/Route mode Using the setup wizard Using the command line interfaceStarting the setup wizard Reconnecting to the web-based managerConnecting to your networks Set system route number 1 gw1Configuring your internal network Completing the configurationSetting the date and time DFL-500 NPG network connectionsTransparent mode installation Preparing to configure Transparent modeChanging to Transparent mode Transparent mode settings Administrator PasswordConfiguring the Transparent mode management IP address Set system management ip 10.10.10.2Configure the Transparent mode default gateway Setting the date and timeConnecting to your network DFL-500 network connections Firewall configuration Default policyGo to Firewall Policy Adding NAT/Route mode policiesChanging to NAT/Route mode Source Destination Schedule Service Action AuthenticationDynamic IP Pool Fixed Port VPN TunnelContent filtering Web filterAdding a NAT/Route Int -Ext policy Adding Transparent mode policiesSource Destination Schedule Service Log Traffic Authentication Web filter Policy matching in detail Configuring policy listsAdding a Transparent mode Int -Ext policy Enabling and disabling policies AddressesChanging the order of policies in a policy list Adding addresses Deleting addressesGo to Firewall Address Adding a firewall addressServices Organizing addresses into address groupsGo to Firewall Address Group Adding an internal address groupPredefined services Providing access to custom servicesGrouping services Go to Firewall Service CustomAdding a service group SchedulesCreating one-time schedules Go to Firewall Schedule One-timeVirtual IPs Creating recurring schedulesAdding a schedule to a policy Go to Firewall Schedule RecurringStatic NAT Port Forwarding Adding static NAT virtual IPsGo to Firewall Virtual IP Using port forwarding virtual IPs Adding a static NAT virtual IPAdding policies with virtual IPs Go to Firewall Policy Ext IntAdding a Port Forwarding virtual IP SourceIP pools Destination Schedule Service ActionAuthentication Log Traffic Web filter Go to Firewall IP/MAC Binding Setting IP/MAC bindingGo to Firewall IP/MAC Binding Static IP/MAC Adding an IP PoolConfiguring IP/MAC binding for packets going to the firewall Adding IP/MAC addressesIP/MAC settings Viewing the dynamic IP/MAC listEnabling IP/MAC binding Go to Firewall IP/MAC Binding Dynamic IP/MACUsers and authentication Setting authentication time outAdding user names and configuring authentication Adding user names and configuring authenticationAdding a user name DisableDeleting user names from the internal database Configuring Radius support Example Radius configurationAdding Radius servers Deleting Radius serversConfiguring user groups Adding user groupsDeleting user groups Adding a user groupIPSec VPNs Interoperability with IPSec VPN productsConfiguring AutoIKE key IPSec VPN See Adding a remote gatewayConfiguring a VPN concentrator for hub and spoke VPN Configuring manual key IPSec VPNConfiguring dialup VPN Configuring the VPN concentrator Configuring the member VPNsConfiguring IPSec redundancy Local ID Adding a remote gatewayGo to VPN Ipsec Remote Gateway Adding a remote gateway Dialup User selected About dialup VPN authenticationNat-traversal Keepalive Frequency Main mode with no user group selected About DH groups About the P1 proposalLocal ID Empty KeyGo to VPN Ipsec AutoIKE Key Adding an AutoIKE key VPN tunnelAbout NAT traversal About the P2 proposal About replay detectionAutokey Keep Alive Concentrator Adding an AutoIKE key VPN tunnelGo to VPN Ipsec Manual Key Adding a manual key VPN tunnelAbout perfect forward secrecy PFS Adding a VPN concentrator Adding a manual key VPN tunnelAdding an encrypt policy Adding a VPN concentratorVPN Tunnel Allow inbound Go to Firewall Policy Int-ExtAdding an encrypt policy Viewing VPN tunnel status Allow outbound InboundAutoIKE key tunnel status Testing a VPNViewing dialup VPN connection status Page Pptp VPN configuration Pptp and L2TP VPNsPptp VPN between a Windows client and the DFL-500 NPG Configuring the DFL-500 NPG as a Pptp gatewayGo to VPN Pptp Pptp Range Example Pptp Range configuration Source Destination Service ActionL2TP VPN configuration Configuring the DFL-500 NPG as an L2TP gatewayGo to VPN L2TP L2TP Range L2TP VPN between a Windows client and the DFL-500 NPGSample L2TP address range configuration Web content filtering Enabling web content FilteringBlocking web pages that contain unwanted content Configuring content filteringBacking up and restoring the banned word list Changing the content block messageClearing the banned word list Go to Web Filter URL Block Blocking access to URLsConfiguring URL blocking Clearing the URL block list Changing the URL block messageDownloading the URL block list Uploading a URL block listGo to Web Filter Script Filter Exempting URLs from content or URL blockingRemoving scripts from web pages Adding URLs to the Exempt URL List Clearing the Exempt URL listDownloading the Exempt URL list Go to Web Filter Exempt URLUploading an Exempt URL list Configuring Logging Go to Log&Report Log settingLogging and reporting Recording logs on a remote computerSelecting what to log Configuring alert emailExample log settings Configuring alert email Go to System Network DNSAdministration System statusUpgrading the DFL-500 NPG firmware Execute pingEnter File Name image.out Enter Tftp Server AddressEnter Local Address Backing up system settings Restoring system settingsRestoring system settings to factory defaults Displaying the DFL-500 NPG serial numberChanging to Transparent mode System status monitor Restarting the DFL-500 NPGShutting down the DFL-500 NPG Network configuration System status monitorCPU usage Memory usage Up time Total Number of Sessions Protocol From IP From Port To IP To Port Expire ClearConfiguring the internal interface Configuring the external interfaceConfiguring the internal interface Go to System Network InterfaceConfiguring the external interface with a static IP address Configuring the external interface for PPPoE Configuring the external interfaceHttps Ping SSH Snmp Configuring routing Configuring the management interface Transparent modeSetting DNS server addresses Adding routing gatewaysGo to System Network Routing Table Adding a default routeAdding routes to the routing table Configuring the routing table Adding routes Transparent modeEnabling RIP server support Go to System Network RoutingProviding Dhcp services to your internal network Default Route Exclusion RangeGo to System Network Dhcp Starting IP Ending IP Netmask Lease Duration DomainExample Dynamic IP list System configurationSample Dhcp settings Example date and time setting Setting system date and timeGo to System Config Time Adding and editing administrator accounts Go to System Config AdminChanging web-based manager options Read Write OnlyConfiguring Snmp Go to System Config Snmp100 Glossary 101102 103 Index 104CLI 105Dhcp 106Snmp 107PFS 108Transparent mode manual key Adding VPN tunnel IPSec VPN 109NTP 110Pptp 111Smtp 112VPN 113IPSec VPN Remote Gateway user groups Deleting 114115 Technical Support 116Registration Card 117118 Limited Warranty 119120 121 Registration 122