Manuals / D-Link / Computer Equipment / Network Card

D-Link DFL-500 user manual Viewing VPN tunnel status, Allow outbound Inbound

Models: DFL-500

1 122

Download 122 pages 7.35 Kb

Page 63

Allow outbound

Inbound

NAT

Outbound

NAT

Select Allow outbound to enable outbound users to connect to the destination address.

The DFL-500 NPG translates the source address of incoming packets to the IP address of the DFL-500 interface connected to the source address network.

The DFL-500 NPG translates the source address of outgoing packets to the IP address of the DFL-500 interface connected to the destination address network.

Use the information in Adding NAT/Route mode policies to configure the remaining policy settings.

•Select OK to save the encrypt policy.

•To make sure that the encrypt policy is matched for VPN connections, arrange the encrypt policy above other policies with similar source and destination addresses in the policy list.

Viewing VPN tunnel status

You can use the IPSec VPN tunnel list to view the status of all IPSec AutoIKE key VPN tunnels. For each tunnel, the list shows the status of each tunnel as well as the tunnel time out.

To view VPN tunnel status:

•Go to VPN > IPSEC > AutoIKE Key .

The Status column displays the status of each tunnel. If Status is Up, the tunnel is active. If Status is Down, the tunnel is not active.

The Timeout column displays the time before the next key exchange. The time is calculated by subtracting the time elapsed since the last key exchange from the keylife.

DFL-500 User Manual	63

Image 63

D-Link DFL-500 user manual Viewing VPN tunnel status, Allow outbound Inbound

Contents

Link DFL-500 Regulatory Compliance Table of Contents Firewall configuration IPSec VPNs Logging and reporting Page Introduction NAT/Route mode and Transparent modeNAT/Route mode Transparent modeCustomer service and technical support For more informationDFL-500 QuickStart Guide DFL-500 CLI Reference Guide Package contents Getting startedMounting Powering on Connecting to the web-based manager Initial configurationConnecting to the command line interface CLI DFL-500 loginBits per second Next steps Data bits ParityStop bits Flow control NAT/Route mode installation Preparing to configure NAT/Route modeNAT/Route mode settings Reconnecting to the web-based manager Using the setup wizardUsing the command line interface Starting the setup wizardSet system route number 1 gw1 Connecting to your networksDFL-500 NPG network connections Configuring your internal networkCompleting the configuration Setting the date and timeTransparent mode settings Administrator Password Transparent mode installationPreparing to configure Transparent mode Changing to Transparent modeSet system management ip 10.10.10.2 Configuring the Transparent mode management IP addressSetting the date and time Connecting to your networkConfigure the Transparent mode default gateway DFL-500 network connections Default policy Firewall configurationAdding NAT/Route mode policies Changing to NAT/Route modeGo to Firewall Policy VPN Tunnel Source Destination Schedule Service ActionAuthentication Dynamic IP Pool Fixed PortWeb filter Content filteringAdding Transparent mode policies Source Destination Schedule ServiceAdding a NAT/Route Int -Ext policy Log Traffic Authentication Web filter Configuring policy lists Adding a Transparent mode Int -Ext policyPolicy matching in detail Addresses Changing the order of policies in a policy listEnabling and disabling policies Adding a firewall address Adding addressesDeleting addresses Go to Firewall AddressAdding an internal address group ServicesOrganizing addresses into address groups Go to Firewall Address GroupGo to Firewall Service Custom Predefined servicesProviding access to custom services Grouping servicesGo to Firewall Schedule One-time Adding a service groupSchedules Creating one-time schedulesGo to Firewall Schedule Recurring Virtual IPsCreating recurring schedules Adding a schedule to a policyAdding static NAT virtual IPs Go to Firewall Virtual IPStatic NAT Port Forwarding Adding a static NAT virtual IP Using port forwarding virtual IPsSource Adding policies with virtual IPsGo to Firewall Policy Ext Int Adding a Port Forwarding virtual IPDestination Schedule Service Action Authentication Log Traffic Web filterIP pools Adding an IP Pool Go to Firewall IP/MAC Binding SettingIP/MAC binding Go to Firewall IP/MAC Binding Static IP/MACAdding IP/MAC addresses Configuring IP/MAC binding for packets going to the firewallGo to Firewall IP/MAC Binding Dynamic IP/MAC IP/MAC settingsViewing the dynamic IP/MAC list Enabling IP/MAC bindingAdding user names and configuring authentication Users and authenticationSetting authentication time out Adding user names and configuring authenticationDisable Deleting user names from the internal databaseAdding a user name Deleting Radius servers Configuring Radius supportExample Radius configuration Adding Radius serversAdding user groups Configuring user groupsAdding a user group Deleting user groupsInteroperability with IPSec VPN products IPSec VPNsSee Adding a remote gateway Configuring AutoIKE key IPSec VPNConfiguring manual key IPSec VPN Configuring dialup VPNConfiguring a VPN concentrator for hub and spoke VPN Configuring the member VPNs Configuring the VPN concentratorConfiguring IPSec redundancy Adding a remote gateway Go to VPN Ipsec Remote GatewayLocal ID About dialup VPN authentication Nat-traversal Keepalive FrequencyAdding a remote gateway Dialup User selected Main mode with no user group selected Key About DH groupsAbout the P1 proposal Local ID EmptyAdding an AutoIKE key VPN tunnel About NAT traversalGo to VPN Ipsec AutoIKE Key Adding an AutoIKE key VPN tunnel About the P2 proposalAbout replay detection Autokey Keep Alive ConcentratorAdding a manual key VPN tunnel About perfect forward secrecy PFSGo to VPN Ipsec Manual Key Adding a manual key VPN tunnel Adding a VPN concentratorAdding a VPN concentrator Adding an encrypt policyGo to Firewall Policy Int-Ext Adding an encrypt policyVPN Tunnel Allow inbound Allow outbound Inbound Viewing VPN tunnel statusTesting a VPN Viewing dialup VPN connection statusAutoIKE key tunnel status Page Pptp and L2TP VPNs Pptp VPN configurationConfiguring the DFL-500 NPG as a Pptp gateway Go to VPN Pptp Pptp RangePptp VPN between a Windows client and the DFL-500 NPG Source Destination Service Action Example Pptp Range configurationL2TP VPN between a Windows client and the DFL-500 NPG L2TP VPN configurationConfiguring the DFL-500 NPG as an L2TP gateway Go to VPN L2TP L2TP RangeSample L2TP address range configuration Configuring content filtering Web content filteringEnabling web content Filtering Blocking web pages that contain unwanted contentChanging the content block message Clearing the banned word listBacking up and restoring the banned word list Blocking access to URLs Configuring URL blockingGo to Web Filter URL Block Uploading a URL block list Clearing the URL block listChanging the URL block message Downloading the URL block listExempting URLs from content or URL blocking Removing scripts from web pagesGo to Web Filter Script Filter Go to Web Filter Exempt URL Adding URLs to the Exempt URL ListClearing the Exempt URL list Downloading the Exempt URL listUploading an Exempt URL list Recording logs on a remote computer Configuring LoggingGo to Log&Report Log setting Logging and reportingConfiguring alert email Example log settingsSelecting what to log Go to System Network DNS Configuring alert emailSystem status AdministrationExecute ping Upgrading the DFL-500 NPG firmwareEnter Tftp Server Address Enter Local AddressEnter File Name image.out Displaying the DFL-500 NPG serial number Backing up system settingsRestoring system settings Restoring system settings to factory defaultsChanging to Transparent mode Restarting the DFL-500 NPG Shutting down the DFL-500 NPGSystem status monitor Protocol From IP From Port To IP To Port Expire Clear Network configurationSystem status monitor CPU usage Memory usage Up time Total Number of SessionsGo to System Network Interface Configuring the internal interfaceConfiguring the external interface Configuring the internal interfaceConfiguring the external interface with a static IP address Configuring the external interface Configuring the external interface for PPPoEHttps Ping SSH Snmp Adding routing gateways Configuring routingConfiguring the management interface Transparent mode Setting DNS server addressesAdding a default route Adding routes to the routing tableGo to System Network Routing Table Go to System Network Routing Configuring the routing tableAdding routes Transparent mode Enabling RIP server supportStarting IP Ending IP Netmask Lease Duration Domain Providing Dhcp services to your internal networkDefault Route Exclusion Range Go to System Network DhcpSystem configuration Sample Dhcp settingsExample Dynamic IP list Setting system date and time Go to System Config TimeExample date and time setting Read Write Only Adding and editing administrator accountsGo to System Config Admin Changing web-based manager optionsGo to System Config Snmp Configuring Snmp100 101 Glossary102 103 104 Index105 CLI106 Dhcp107 Snmp108 PFS109 Transparent mode manual key Adding VPN tunnel IPSec VPN110 NTP111 Pptp112 Smtp113 VPN114 IPSec VPN Remote Gateway user groups Deleting115 116 Technical Support117 Registration Card118 119 Limited Warranty120 121 122 Registration