Manuals / D-Link / Computer Equipment / Network Card

D-Link DFL-500 user manual Pfs, 108

Models: DFL-500

1 122

Download 122 pages 7.35 Kb

Page 108

Image 108

IPSec IPSec VPN

adding firewall policy AutoIKE key

AutoIKE key remote gateway AutoIKE key VPN tunnel compatibility with IPSec VPN products concentrator

configuring remote gateway definition

dialup VPN features

hub and spoke manual key

manual key exchange VPN tunnel remote gateway

status timeout user groups

viewing tunnel status IPSec VPN tunnel

adding AutoIKE key tunnel adding manual key tunnel

enabling perfect forward secrecy (PFS) enabling replay detection

keep alive keylife

P2 proposal

PFS

remote gateway replay detection testing

tunnel name

Java applets

removing from web pages

keep alive

IPSec AutoIKE key VPN tunnel keepalive frequency

IPSec VPN remote gateway keylife

IPSec AutoIKE key VPN tunnel IPSec VPN remote gateway

L2TP

adding firewall policy configuring configuring gateway definition enabling

ending IP

network configuration starting IP

DFL-500 User Manual	108

Page 108

Image 108

Contents

Link DFL-500 Regulatory Compliance Table of Contents Firewall configuration IPSec VPNs Logging and reporting Page NAT/Route mode and Transparent mode NAT/Route modeTransparent mode IntroductionCustomer service and technical support For more informationDFL-500 QuickStart Guide DFL-500 CLI Reference Guide Package contents Getting startedMounting Powering on Initial configuration Connecting to the web-based managerConnecting to the command line interface CLI DFL-500 loginBits per second Next steps Data bits ParityStop bits Flow control NAT/Route mode installation Preparing to configure NAT/Route modeNAT/Route mode settings Using the setup wizard Using the command line interfaceStarting the setup wizard Reconnecting to the web-based managerConnecting to your networks Set system route number 1 gw1Configuring your internal network Completing the configurationSetting the date and time DFL-500 NPG network connectionsTransparent mode installation Preparing to configure Transparent modeChanging to Transparent mode Transparent mode settings Administrator PasswordConfiguring the Transparent mode management IP address Set system management ip 10.10.10.2Setting the date and time Connecting to your networkConfigure the Transparent mode default gateway DFL-500 network connections Firewall configuration Default policyAdding NAT/Route mode policies Changing to NAT/Route modeGo to Firewall Policy Source Destination Schedule Service Action AuthenticationDynamic IP Pool Fixed Port VPN TunnelContent filtering Web filterAdding Transparent mode policies Source Destination Schedule ServiceAdding a NAT/Route Int -Ext policy Log Traffic Authentication Web filter Configuring policy lists Adding a Transparent mode Int -Ext policyPolicy matching in detail Addresses Changing the order of policies in a policy listEnabling and disabling policies Adding addresses Deleting addressesGo to Firewall Address Adding a firewall addressServices Organizing addresses into address groupsGo to Firewall Address Group Adding an internal address groupPredefined services Providing access to custom servicesGrouping services Go to Firewall Service CustomAdding a service group SchedulesCreating one-time schedules Go to Firewall Schedule One-timeVirtual IPs Creating recurring schedulesAdding a schedule to a policy Go to Firewall Schedule RecurringAdding static NAT virtual IPs Go to Firewall Virtual IPStatic NAT Port Forwarding Using port forwarding virtual IPs Adding a static NAT virtual IPAdding policies with virtual IPs Go to Firewall Policy Ext IntAdding a Port Forwarding virtual IP SourceDestination Schedule Service Action Authentication Log Traffic Web filterIP pools Go to Firewall IP/MAC Binding Setting IP/MAC bindingGo to Firewall IP/MAC Binding Static IP/MAC Adding an IP PoolConfiguring IP/MAC binding for packets going to the firewall Adding IP/MAC addressesIP/MAC settings Viewing the dynamic IP/MAC listEnabling IP/MAC binding Go to Firewall IP/MAC Binding Dynamic IP/MACUsers and authentication Setting authentication time outAdding user names and configuring authentication Adding user names and configuring authenticationDisable Deleting user names from the internal databaseAdding a user name Configuring Radius support Example Radius configurationAdding Radius servers Deleting Radius serversConfiguring user groups Adding user groupsDeleting user groups Adding a user groupIPSec VPNs Interoperability with IPSec VPN productsConfiguring AutoIKE key IPSec VPN See Adding a remote gatewayConfiguring manual key IPSec VPN Configuring dialup VPNConfiguring a VPN concentrator for hub and spoke VPN Configuring the VPN concentrator Configuring the member VPNsConfiguring IPSec redundancy Adding a remote gateway Go to VPN Ipsec Remote GatewayLocal ID About dialup VPN authentication Nat-traversal Keepalive FrequencyAdding a remote gateway Dialup User selected Main mode with no user group selected About DH groups About the P1 proposalLocal ID Empty KeyAdding an AutoIKE key VPN tunnel About NAT traversalGo to VPN Ipsec AutoIKE Key About the P2 proposal About replay detectionAutokey Keep Alive Concentrator Adding an AutoIKE key VPN tunnelAdding a manual key VPN tunnel About perfect forward secrecy PFSGo to VPN Ipsec Manual Key Adding a VPN concentrator Adding a manual key VPN tunnelAdding an encrypt policy Adding a VPN concentratorGo to Firewall Policy Int-Ext Adding an encrypt policyVPN Tunnel Allow inbound Viewing VPN tunnel status Allow outbound InboundTesting a VPN Viewing dialup VPN connection statusAutoIKE key tunnel status Page Pptp VPN configuration Pptp and L2TP VPNsConfiguring the DFL-500 NPG as a Pptp gateway Go to VPN Pptp Pptp RangePptp VPN between a Windows client and the DFL-500 NPG Example Pptp Range configuration Source Destination Service ActionL2TP VPN configuration Configuring the DFL-500 NPG as an L2TP gatewayGo to VPN L2TP L2TP Range L2TP VPN between a Windows client and the DFL-500 NPGSample L2TP address range configuration Web content filtering Enabling web content FilteringBlocking web pages that contain unwanted content Configuring content filteringChanging the content block message Clearing the banned word listBacking up and restoring the banned word list Blocking access to URLs Configuring URL blockingGo to Web Filter URL Block Clearing the URL block list Changing the URL block messageDownloading the URL block list Uploading a URL block listExempting URLs from content or URL blocking Removing scripts from web pagesGo to Web Filter Script Filter Adding URLs to the Exempt URL List Clearing the Exempt URL listDownloading the Exempt URL list Go to Web Filter Exempt URLUploading an Exempt URL list Configuring Logging Go to Log&Report Log settingLogging and reporting Recording logs on a remote computerConfiguring alert email Example log settingsSelecting what to log Configuring alert email Go to System Network DNSAdministration System statusUpgrading the DFL-500 NPG firmware Execute pingEnter Tftp Server Address Enter Local AddressEnter File Name image.out Backing up system settings Restoring system settingsRestoring system settings to factory defaults Displaying the DFL-500 NPG serial numberChanging to Transparent mode Restarting the DFL-500 NPG Shutting down the DFL-500 NPGSystem status monitor Network configuration System status monitorCPU usage Memory usage Up time Total Number of Sessions Protocol From IP From Port To IP To Port Expire ClearConfiguring the internal interface Configuring the external interfaceConfiguring the internal interface Go to System Network InterfaceConfiguring the external interface with a static IP address Configuring the external interface for PPPoE Configuring the external interfaceHttps Ping SSH Snmp Configuring routing Configuring the management interface Transparent modeSetting DNS server addresses Adding routing gatewaysAdding a default route Adding routes to the routing tableGo to System Network Routing Table Configuring the routing table Adding routes Transparent modeEnabling RIP server support Go to System Network RoutingProviding Dhcp services to your internal network Default Route Exclusion RangeGo to System Network Dhcp Starting IP Ending IP Netmask Lease Duration DomainSystem configuration Sample Dhcp settingsExample Dynamic IP list Setting system date and time Go to System Config TimeExample date and time setting Adding and editing administrator accounts Go to System Config AdminChanging web-based manager options Read Write OnlyConfiguring Snmp Go to System Config Snmp100 Glossary 101102 103 Index 104CLI 105Dhcp 106Snmp 107PFS 108Transparent mode manual key Adding VPN tunnel IPSec VPN 109NTP 110Pptp 111Smtp 112VPN 113IPSec VPN Remote Gateway user groups Deleting 114115 Technical Support 116Registration Card 117118 Limited Warranty 119120 121 Registration 122