Manuals / D-Link / Computer Equipment / Network Card

D-Link DFL-500 user manual Ntp, 110

Models: DFL-500

1 122

Download 122 pages 7.35 Kb

Page 110

Image 110

IP addresses policy policy, adding

NAT traversal about

NAT/Route modeNat-traversal

IPSec VPN Remote Gateway netmask

administrator account network address translation

introduction network configuration

changing

NTP

setting system date and time

one-time schedule creating

operating mode changing

P1 proposal about

IPSec VPN remote gateway P2 proposal

about

IPSec AutoIKE key VPN tunnel password

adding

PAT

perfect forward secrecy about

enabling

PFS

about

IPSec AutoIKE key VPN tunnel

PING

management access policy

adding IPSec firewall policy adding L2TP firewall policy adding PPTP firewall policy adding Transparent mode arranging in the policy list disabling

enabling matching

policy mode firewall

POP3

port address translation port forwarding

virtual IP power requirements powering on PPPoE

DFL-500 User Manual	110

Page 110

Image 110

Contents

Link DFL-500 Regulatory Compliance Table of Contents Firewall configuration IPSec VPNs Logging and reporting Page Transparent mode NAT/Route mode and Transparent modeNAT/Route mode IntroductionDFL-500 QuickStart Guide DFL-500 CLI Reference Guide Customer service and technical supportFor more information Mounting Package contentsGetting started Powering on Initial configuration Connecting to the web-based managerBits per second Connecting to the command line interface CLIDFL-500 login Stop bits Flow control Next stepsData bits Parity NAT/Route mode settings NAT/Route mode installationPreparing to configure NAT/Route mode Starting the setup wizard Using the setup wizardUsing the command line interface Reconnecting to the web-based managerConnecting to your networks Set system route number 1 gw1Setting the date and time Configuring your internal networkCompleting the configuration DFL-500 NPG network connectionsChanging to Transparent mode Transparent mode installationPreparing to configure Transparent mode Transparent mode settings Administrator PasswordConfiguring the Transparent mode management IP address Set system management ip 10.10.10.2Configure the Transparent mode default gateway Setting the date and timeConnecting to your network DFL-500 network connections Firewall configuration Default policyGo to Firewall Policy Adding NAT/Route mode policiesChanging to NAT/Route mode Dynamic IP Pool Fixed Port Source Destination Schedule Service ActionAuthentication VPN TunnelContent filtering Web filterAdding a NAT/Route Int -Ext policy Adding Transparent mode policiesSource Destination Schedule Service Log Traffic Authentication Web filter Policy matching in detail Configuring policy listsAdding a Transparent mode Int -Ext policy Enabling and disabling policies AddressesChanging the order of policies in a policy list Go to Firewall Address Adding addressesDeleting addresses Adding a firewall addressGo to Firewall Address Group ServicesOrganizing addresses into address groups Adding an internal address groupGrouping services Predefined servicesProviding access to custom services Go to Firewall Service CustomCreating one-time schedules Adding a service groupSchedules Go to Firewall Schedule One-timeAdding a schedule to a policy Virtual IPsCreating recurring schedules Go to Firewall Schedule RecurringStatic NAT Port Forwarding Adding static NAT virtual IPsGo to Firewall Virtual IP Using port forwarding virtual IPs Adding a static NAT virtual IPAdding a Port Forwarding virtual IP Adding policies with virtual IPsGo to Firewall Policy Ext Int SourceIP pools Destination Schedule Service ActionAuthentication Log Traffic Web filter Go to Firewall IP/MAC Binding Static IP/MAC Go to Firewall IP/MAC Binding SettingIP/MAC binding Adding an IP PoolConfiguring IP/MAC binding for packets going to the firewall Adding IP/MAC addressesEnabling IP/MAC binding IP/MAC settingsViewing the dynamic IP/MAC list Go to Firewall IP/MAC Binding Dynamic IP/MACAdding user names and configuring authentication Users and authenticationSetting authentication time out Adding user names and configuring authenticationAdding a user name DisableDeleting user names from the internal database Adding Radius servers Configuring Radius supportExample Radius configuration Deleting Radius serversConfiguring user groups Adding user groupsDeleting user groups Adding a user groupIPSec VPNs Interoperability with IPSec VPN productsConfiguring AutoIKE key IPSec VPN See Adding a remote gatewayConfiguring a VPN concentrator for hub and spoke VPN Configuring manual key IPSec VPNConfiguring dialup VPN Configuring the VPN concentrator Configuring the member VPNsConfiguring IPSec redundancy Local ID Adding a remote gatewayGo to VPN Ipsec Remote Gateway Adding a remote gateway Dialup User selected About dialup VPN authenticationNat-traversal Keepalive Frequency Main mode with no user group selected Local ID Empty About DH groupsAbout the P1 proposal KeyGo to VPN Ipsec AutoIKE Key Adding an AutoIKE key VPN tunnelAbout NAT traversal Autokey Keep Alive Concentrator About the P2 proposalAbout replay detection Adding an AutoIKE key VPN tunnelGo to VPN Ipsec Manual Key Adding a manual key VPN tunnelAbout perfect forward secrecy PFS Adding a VPN concentrator Adding a manual key VPN tunnelAdding an encrypt policy Adding a VPN concentratorVPN Tunnel Allow inbound Go to Firewall Policy Int-ExtAdding an encrypt policy Viewing VPN tunnel status Allow outbound InboundAutoIKE key tunnel status Testing a VPNViewing dialup VPN connection status Page Pptp VPN configuration Pptp and L2TP VPNsPptp VPN between a Windows client and the DFL-500 NPG Configuring the DFL-500 NPG as a Pptp gatewayGo to VPN Pptp Pptp Range Example Pptp Range configuration Source Destination Service ActionGo to VPN L2TP L2TP Range L2TP VPN configurationConfiguring the DFL-500 NPG as an L2TP gateway L2TP VPN between a Windows client and the DFL-500 NPGSample L2TP address range configuration Blocking web pages that contain unwanted content Web content filteringEnabling web content Filtering Configuring content filteringBacking up and restoring the banned word list Changing the content block messageClearing the banned word list Go to Web Filter URL Block Blocking access to URLsConfiguring URL blocking Downloading the URL block list Clearing the URL block listChanging the URL block message Uploading a URL block listGo to Web Filter Script Filter Exempting URLs from content or URL blockingRemoving scripts from web pages Downloading the Exempt URL list Adding URLs to the Exempt URL ListClearing the Exempt URL list Go to Web Filter Exempt URLUploading an Exempt URL list Logging and reporting Configuring LoggingGo to Log&Report Log setting Recording logs on a remote computerSelecting what to log Configuring alert emailExample log settings Configuring alert email Go to System Network DNSAdministration System statusUpgrading the DFL-500 NPG firmware Execute pingEnter File Name image.out Enter Tftp Server AddressEnter Local Address Restoring system settings to factory defaults Backing up system settingsRestoring system settings Displaying the DFL-500 NPG serial numberChanging to Transparent mode System status monitor Restarting the DFL-500 NPGShutting down the DFL-500 NPG CPU usage Memory usage Up time Total Number of Sessions Network configurationSystem status monitor Protocol From IP From Port To IP To Port Expire ClearConfiguring the internal interface Configuring the internal interfaceConfiguring the external interface Go to System Network InterfaceConfiguring the external interface with a static IP address Configuring the external interface for PPPoE Configuring the external interfaceHttps Ping SSH Snmp Setting DNS server addresses Configuring routingConfiguring the management interface Transparent mode Adding routing gatewaysGo to System Network Routing Table Adding a default routeAdding routes to the routing table Enabling RIP server support Configuring the routing tableAdding routes Transparent mode Go to System Network RoutingGo to System Network Dhcp Providing Dhcp services to your internal networkDefault Route Exclusion Range Starting IP Ending IP Netmask Lease Duration DomainExample Dynamic IP list System configurationSample Dhcp settings Example date and time setting Setting system date and timeGo to System Config Time Changing web-based manager options Adding and editing administrator accountsGo to System Config Admin Read Write OnlyConfiguring Snmp Go to System Config Snmp100 Glossary 101102 103 Index 104CLI 105Dhcp 106Snmp 107PFS 108Transparent mode manual key Adding VPN tunnel IPSec VPN 109NTP 110Pptp 111Smtp 112VPN 113IPSec VPN Remote Gateway user groups Deleting 114115 Technical Support 116Registration Card 117118 Limited Warranty 119120 121 Registration 122