Configuring Management Access - D-Link NetDefendOS User Manual

• Web Interface
The Web Interface (also known as the Web User Interface or WebUI) is built into NetDefendOS
and provides a user-friendly and intuitive graphical management interface, accessible from a
standard web browser.
The browser connects to one of the hardware's Ethernet interfaces using HTTP or HTTPS (by
default, only HTTPS is enabled) and NetDefendOS responds like a web server, allowing web
pages to be used as the management interface.
By default with NetDefendOS, Web Interface access is enabled for users on the network
connected via the LAN interface of the D-Link firewall (on products where more than one
LAN interface is available, LAN1 should be used as the default interface).
This feature is described further in Section 2.1.4, "The Web Interface".
• The CLI
The Command Line Interface (CLI), accessible via the local console port or remotely using the
Secure Shell (SSH) protocol, provides the most fine-grained control over all parameters in
NetDefendOS.
This feature is described further in Section 2.1.5, "The CLI".
• Secure Copy
Secure Copy (SCP) is a widely used communication protocol for file transfer. No specific SCP
client is provided with NetDefendOS distributions but there exists a wide selection of SCP
clients available for nearly all workstation platforms.
SCP is a complement to CLI usage and provides a secure means of file transfer between the
administrator's workstation and the NetDefend Firewall. Various files used by NetDefendOS
can be both uploaded and downloaded with SCP.
This feature is described further in Section 2.1.7, "Secure Copy".
• The Console Boot Menu
Before NetDefendOS starts running, a console connected directly to the NetDefend Firewall's
local console port can be used to do basic configuration through the boot menu. This menu
can be entered by pressing any console key between power-up and NetDefendOS starting. It
is the D-Link firmware loader that is being accessed with the boot menu.
This feature is described further in Section 2.1.8, "The Console Boot Menu".
Access to the Web Interface can be permitted for administrative users on a certain network, while
at the same time allowing CLI access for a remote administrator connecting through a specific
IPsec tunnel.
All management access requires that a Remote Management object exists to allow that access.
The predefined Remote Management objects and how to create new ones are described in the
next section.

2.1.2. Configuring Management Access

Management access to NetDefendOS by an administrator depends on two factors:
• The IP address assigned to the default management Ethernet interface. This IP address can be
changed as long as the new IP still belongs to the network that is allowed by the relevant
Remote Management object.
Chapter 2: Management and Maintenance
34