IPSec VPNs | D-Link DFL-500 manual

Configuring user groups	46
Adding user groups	46
Deleting user groups	47
IPSec VPNs	48
Interoperability with IPSec VPN products	48
Configuring AutoIKE key IPSec VPN	49
Configuring manual key IPSec VPN	50
Configuring dialup VPN	50
Configuring a VPN concentrator for hub and spoke VPN	50
Configuring the VPN concentrator	51
Configuring the member VPNs	51
Configuring IPSec redundancy	52
Adding a remote gateway	53
About dialup VPN authentication	54
About DH groups	56
About the P1 proposal	56
About NAT traversal	57
Adding an AutoIKE key VPN tunnel	57
About the P2 proposal	58
About replay detection	58
About perfect forward secrecy (PFS)	59
Adding a manual key VPN tunnel	59
Adding a VPN concentrator	60
Adding an encrypt policy	61
Viewing VPN tunnel status	63
Viewing dialup VPN connection status	64
Testing a VPN	64
PPTP and L2TP VPNs	66
PPTP VPN configuration	66
Configuring the DFL-500 NPG as a PPTP gateway	67
L2TP VPN configuration	69
Configuring the DFL-500 NPG as an L2TP gateway	69
Web content filtering	71
Enabling web content Filtering	71
Blocking web pages that contain unwanted content	71
Configuring content filtering	71
Clearing the banned word list	72
Changing the content block message	72
Backing up and restoring the banned word list	72
Blocking access to URLs	73
Configuring URL blocking	73
Clearing the URL block list	74
DFL-500 User Manual
	5

Image 5

D-Link DFL-500 user manual IPSec VPNs

Contents

Link DFL-500 Regulatory Compliance Table of Contents Firewall configuration IPSec VPNs Logging and reporting Page NAT/Route mode NAT/Route mode and Transparent modeTransparent mode Introduction DFL-500 QuickStart Guide DFL-500 CLI Reference Guide Customer service and technical supportFor more information Mounting Package contentsGetting started Powering on Connecting to the web-based manager Initial configuration Bits per second Connecting to the command line interface CLIDFL-500 login Stop bits Flow control Next stepsData bits Parity NAT/Route mode settings NAT/Route mode installationPreparing to configure NAT/Route mode Using the command line interface Using the setup wizardStarting the setup wizard Reconnecting to the web-based manager Set system route number 1 gw1 Connecting to your networks Completing the configuration Configuring your internal networkSetting the date and time DFL-500 NPG network connections Preparing to configure Transparent mode Transparent mode installationChanging to Transparent mode Transparent mode settings Administrator Password Set system management ip 10.10.10.2 Configuring the Transparent mode management IP address Configure the Transparent mode default gateway Setting the date and timeConnecting to your network DFL-500 network connections Default policy Firewall configuration Go to Firewall Policy Adding NAT/Route mode policiesChanging to NAT/Route mode Authentication Source Destination Schedule Service ActionDynamic IP Pool Fixed Port VPN Tunnel Web filter Content filtering Adding a NAT/Route Int -Ext policy Adding Transparent mode policiesSource Destination Schedule Service Log Traffic Authentication Web filter Policy matching in detail Configuring policy listsAdding a Transparent mode Int -Ext policy Enabling and disabling policies AddressesChanging the order of policies in a policy list Deleting addresses Adding addressesGo to Firewall Address Adding a firewall address Organizing addresses into address groups ServicesGo to Firewall Address Group Adding an internal address group Providing access to custom services Predefined servicesGrouping services Go to Firewall Service Custom Schedules Adding a service groupCreating one-time schedules Go to Firewall Schedule One-time Creating recurring schedules Virtual IPsAdding a schedule to a policy Go to Firewall Schedule Recurring Static NAT Port Forwarding Adding static NAT virtual IPsGo to Firewall Virtual IP Adding a static NAT virtual IP Using port forwarding virtual IPs Go to Firewall Policy Ext Int Adding policies with virtual IPsAdding a Port Forwarding virtual IP Source IP pools Destination Schedule Service ActionAuthentication Log Traffic Web filter IP/MAC binding Go to Firewall IP/MAC Binding SettingGo to Firewall IP/MAC Binding Static IP/MAC Adding an IP Pool Adding IP/MAC addresses Configuring IP/MAC binding for packets going to the firewall Viewing the dynamic IP/MAC list IP/MAC settingsEnabling IP/MAC binding Go to Firewall IP/MAC Binding Dynamic IP/MAC Setting authentication time out Users and authenticationAdding user names and configuring authentication Adding user names and configuring authentication Adding a user name DisableDeleting user names from the internal database Example Radius configuration Configuring Radius supportAdding Radius servers Deleting Radius servers Adding user groups Configuring user groups Adding a user group Deleting user groups Interoperability with IPSec VPN products IPSec VPNs See Adding a remote gateway Configuring AutoIKE key IPSec VPN Configuring a VPN concentrator for hub and spoke VPN Configuring manual key IPSec VPNConfiguring dialup VPN Configuring the member VPNs Configuring the VPN concentrator Configuring IPSec redundancy Local ID Adding a remote gatewayGo to VPN Ipsec Remote Gateway Adding a remote gateway Dialup User selected About dialup VPN authenticationNat-traversal Keepalive Frequency Main mode with no user group selected About the P1 proposal About DH groupsLocal ID Empty Key Go to VPN Ipsec AutoIKE Key Adding an AutoIKE key VPN tunnelAbout NAT traversal About replay detection About the P2 proposalAutokey Keep Alive Concentrator Adding an AutoIKE key VPN tunnel Go to VPN Ipsec Manual Key Adding a manual key VPN tunnelAbout perfect forward secrecy PFS Adding a manual key VPN tunnel Adding a VPN concentrator Adding a VPN concentrator Adding an encrypt policy VPN Tunnel Allow inbound Go to Firewall Policy Int-ExtAdding an encrypt policy Allow outbound Inbound Viewing VPN tunnel status AutoIKE key tunnel status Testing a VPNViewing dialup VPN connection status Page Pptp and L2TP VPNs Pptp VPN configuration Pptp VPN between a Windows client and the DFL-500 NPG Configuring the DFL-500 NPG as a Pptp gatewayGo to VPN Pptp Pptp Range Source Destination Service Action Example Pptp Range configuration Configuring the DFL-500 NPG as an L2TP gateway L2TP VPN configurationGo to VPN L2TP L2TP Range L2TP VPN between a Windows client and the DFL-500 NPG Sample L2TP address range configuration Enabling web content Filtering Web content filteringBlocking web pages that contain unwanted content Configuring content filtering Backing up and restoring the banned word list Changing the content block messageClearing the banned word list Go to Web Filter URL Block Blocking access to URLsConfiguring URL blocking Changing the URL block message Clearing the URL block listDownloading the URL block list Uploading a URL block list Go to Web Filter Script Filter Exempting URLs from content or URL blockingRemoving scripts from web pages Clearing the Exempt URL list Adding URLs to the Exempt URL ListDownloading the Exempt URL list Go to Web Filter Exempt URL Uploading an Exempt URL list Go to Log&Report Log setting Configuring LoggingLogging and reporting Recording logs on a remote computer Selecting what to log Configuring alert emailExample log settings Go to System Network DNS Configuring alert email System status Administration Execute ping Upgrading the DFL-500 NPG firmware Enter File Name image.out Enter Tftp Server AddressEnter Local Address Restoring system settings Backing up system settingsRestoring system settings to factory defaults Displaying the DFL-500 NPG serial number Changing to Transparent mode System status monitor Restarting the DFL-500 NPGShutting down the DFL-500 NPG System status monitor Network configurationCPU usage Memory usage Up time Total Number of Sessions Protocol From IP From Port To IP To Port Expire Clear Configuring the external interface Configuring the internal interfaceConfiguring the internal interface Go to System Network Interface Configuring the external interface with a static IP address Configuring the external interface Configuring the external interface for PPPoE Https Ping SSH Snmp Configuring the management interface Transparent mode Configuring routingSetting DNS server addresses Adding routing gateways Go to System Network Routing Table Adding a default routeAdding routes to the routing table Adding routes Transparent mode Configuring the routing tableEnabling RIP server support Go to System Network Routing Default Route Exclusion Range Providing Dhcp services to your internal networkGo to System Network Dhcp Starting IP Ending IP Netmask Lease Duration Domain Example Dynamic IP list System configurationSample Dhcp settings Example date and time setting Setting system date and timeGo to System Config Time Go to System Config Admin Adding and editing administrator accountsChanging web-based manager options Read Write Only Go to System Config Snmp Configuring Snmp 100 101 Glossary 102 103 104 Index 105 CLI 106 Dhcp 107 Snmp 108 PFS 109 Transparent mode manual key Adding VPN tunnel IPSec VPN 110 NTP 111 Pptp 112 Smtp 113 VPN 114 IPSec VPN Remote Gateway user groups Deleting 115 116 Technical Support 117 Registration Card 118 119 Limited Warranty 120 121 122 Registration