D-Link DFL-900 User Manual page 122

Part V
Virtual Private Network
Step 6. Add a Firewall rule
Beforehand, please make sure that the Firewall is
enabled. Select WAN1-to-LAN1 to display the rules
of this direction. The default action of this
direction is Block with Logs. We have to allow
the VPN traffic from the WAN1 side to enter our
LAN1 side. So we click the Insert button to add
a Firewall rule before the default rule.
Step 7. Customize the Firewall rule
Enter the Rule Name as AllowVPN, Source IP
as WAN1_VPNA (192.168.88.0), and Dest.
IP as LAN1_VPNA (192.168.40.0). Click
Apply to store this rule.
If you have not yet configured the Source IP, Dest
IP or Service objects. Please refer Chapter 9 for
the setting information first.
Step 8. View the result
Here we have a new rule before the default
firewall rule. This rule will allow packets from
192.168.88.0 / 255.255.255.0 pass through
DFL-1500. And accomplish the VPN tunnel
establishment.
At DFL-2:
Here we will install the IPSec properties of DFL-2. Note that the "Local Address" and "Remote address" field are opposite to
the DFL-1, and so are "My IP Address" and "Peer's IP Address" field.
D-Link
ADVANCED SETTINGS > Firewall > Edit Rules
ADVANCED SETTINGS > Firewall > Edit Rules > Insert
ADVANCED SETTINGS > Firewall > Edit Rules
114