D-Link DFL-900 User Manual page 128

Part V
Virtual Private Network
FIELD
Transport Layer
Condition
Protocol
Enable Replay
Action
Detection
Step 5. Remind to add a Firewall rule
After finishing IPSec rule settings, we need to add
a firewall rule. Here system shows a window
message to remind you of adding a firewall rule.
Just press the OK button to add a firewall rule.
Step 6. Add a Firewall rule
Same as that in IKE method. Please make sure
that the Firewall is enabled. Select WAN1-to-LAN1
to display the rules of this direction. The default
action of this direction is Block with Logs. We
have to allow the VPN traffic from the WAN1 side
to enter our LAN1 side. So we click the Insert
button to add a Firewall rule before the default
rule.
Step 7. Customize the Firewall rule
Enter the Rule Name as AllowVPN, Source IP
as WAN1_VPNA (192.168.88.0), and Dest.
IP as LAN1_VPNA (192.168.40.0). Click
Apply to store this rule.
D-Link
DESCRIPTION
Utilize this field to select some packets which are
specified protocol (ANY, TCP, UDP). If the
packets are not the specified protocol will not be
allowed to pass through IPSec tunnels.
Whether is the "Replay Detection" enabled？
Table 13-7 Setup Advanced feature in the IPSec Manual Key rule
ADVANCED SETTINGS > VPN Settings > IPSec > Manual Key > Add
ADVANCED SETTINGS > Firewall > Edit Rules
ADVANCED SETTINGS > Firewall > Edit Rules > Insert
ANY / TCP / UDP
NO / YES
120
Range / Format EXAMPLE
ANY
NO