D-Link DFL-1000 Manuals

• 3

  Table of Contents

9

Introducing the DFL-1000

• 9

  Firewall
  • 10

    Network Address Translation (NAT)
  • 10

    Transparent Mode
• 10

  Hacker Prevention and Protection
• 11

  Vpn
• 11

  Virus and Worm Protection
• 11

  Web Content Filtering
• 12

  Secure Installation, Configuration, and Management
  • 12

    Web-Based Manager
  • 13

    Command Line Interface
  • 13

    Logging and Reporting
• 13

  About This Document
• 14

  Customer Service and Technical Support

15

Installing the DFL-1000

• 15

  Before You Start
  • 15

    NAT Mode Install
  • 16

    Transparent Mode Install
• 17

  Unpacking the DFL-1000
• 17

  Mounting the DFL-1000
• 18

  Powering On the DFL-1000
• 18

  Using the Quick Setup Wizard
  • 18

    Connecting to the Web-Based Manager
  • 19

    Starting the Quick Setup Wizard
  • 19

    Reconnecting to the Web-Based Manager
• 19

  Configuring the DFL-1000 From the CLI
  • 20

    Connecting to the CLI
  • 20

    Configuring the DFL-1000 to Run in NAT Mode
  • 21

    Configuring the DFL-1000 to Run in Transparent Mode
• 22

  Connecting the DFL-1000 to Your Network
  • 22

    NAT Mode Connections
  • 23

    Transparent Mode Connections
• 24

  Configuring Your Internal Network
• 24

  Completing the Configuration
  • 24

    Configuring the DMZ Interface
  • 25

    Setting the Date and Time

26

Firewall Configuration

• 26

  Controlling Connections From the Internet
  • 26

    Accepting Incoming Connections in NAT Mode
  • 27

    Accepting Incoming Connections in Transparent Mode
  • 28

    Denying Incoming Connections
  • 29

    Arranging Policies in the Incoming Policy List
• 29

  Controlling Connections to the Internet
  • 30

    Denying Connections to the Internet From the Internal Network
  • 31

    Accepting Connections to the Internet From the Internal Network
  • 32

    Requiring Authentication to Connect to the Internet
  • 32

    Arranging Policies in the Int to Ext and Outgoing Policy List
• 33

  Controlling Connections to and From the DMZ
• 33

  Policies
  • 33

    Policy Information
  • 34

    Default Policy
  • 34

    Adding Policies
  • 35

    Editing Policies
  • 35

    Policy Matching
  • 35

    Arranging Policies in the Policy List
• 35

  Addresses
  • 36

    Adding Addresses
  • 36

    Editing Addresses
  • 37

    Organizing Addresses Into Address Groups
• 37

  Services
  • 38

    Pre-Defined Services
  • 39

    Providing Access to Custom Services
  • 39

    Grouping Services
• 40

  Schedules
  • 40

    Creating One-Time Schedules
  • 41

    Creating Recurring Schedules
  • 42

    Applying a Schedule to a Policy
• 42

  Users and Authentication
  • 43

    Adding Authentication to a Policy
• 44

  Virtual Ips
  • 44

    Adding Virtual Ips
• 44

  IP/MAC Binding
  • 45

    Adding IP/MAC Binding Addresses
  • 45

    Enabling IP/MAC Binding
• 45

  Traffic Shaping
  • 45

    Adding Traffic Shaping to a Policy
• 46

  VPN Pass Through
  • 46

    Adding Ipsec and PPTP Pass Through

47

Ipsec Vpns

• 47

  Compatibility with Third-Party VPN Products
• 47

  Autokey Ipsec VPN Between Two Networks
  • 48

    Creating the VPN Tunnel
  • 49

    Adding Internal and External Addresses
  • 50

    Adding an Ipsec VPN Policy
• 51

  Autokey Ipsec VPN for Remote Clients
  • 52

    Configuring the VPN Tunnel for the Client VPN
  • 53

    Adding Internal and External Addresses
  • 53

    Adding an Ipsec VPN Policy
  • 54

    Configuring the VPN Client
• 54

  Manual Key Exchange Ipsec VPN Between Two Networks
  • 55

    Configuring the VPN Tunnel
  • 55

    Adding Internal and External Addresses
  • 56

    Adding an Ipsec VPN Policy
• 56

  Manual Key Exchange Ipsec VPN for Remote Clients
  • 56

    Configuring the VPN Tunnel
  • 56

    Adding Internal and External Addresses
• 57

  Testing a VPN

58

PPTP and L2TP Vpns

• 58

  PPTP VPN Configuration
  • 59

    Configuring the DFL-1000 As a PPTP Server
  • 60

    Configuring a Windows 98 Client for PPTP
  • 61

    Configuring a Windows 2000 Client for PPTP
  • 61

    Configuring a Windows XP Client to Connect to a DFL-1000 PPTP VPN
• 62

  L2TP VPN Configuration
  • 63

    Configuring the DFL-1000 As an L2TP Server
  • 64

    Configuring a Windows 2000 Client for L2TP
  • 65

    Configuring a Windows XP Client to Connect to a DFL-1000 L2TP VPN
• 66

  RADIUS Authentication for PPTP and L2TP Vpns
  • 67

    Adding RADIUS Server Addresses
  • 67

    Turning On RADIUS Authentication for PPTP
  • 67

    Turning On RADIUS Authentication for L2TP

68

Intrusion Detection System (IDS)

• 68

  Attack Prevention
• 68

  Alert Email
  • 68

    Configuring Alert Email
  • 69

    Testing Email Alerts

70

Virus Protection

• 70

  Virus and Worm Protection for Your Internal Network
  • 71

    Configuring High Level Virus Protection for Your Internal Network
  • 72

    Configuring Medium Level Virus Protection for Your Internal Network
  • 73

    Configuring Low Level Virus Protection for Your Internal Network
  • 74

    Configuring Worm Protection for Your Internal Network
• 74

  Virus and Worm Protection for Incoming Connections
  • 74

    High Level Virus Protection for Incoming Connections
  • 75

    Medium Level Virus Protection for Incoming Connections
  • 76

    Low Level Virus Protection for Incoming Connections
  • 76

    Worm Protection for Incoming Connections
• 77

  Updating Your Antivirus Database
  • 77

    Updating the Antivirus Database Manually
  • 77

    Configuring Automatic Antivirus Database Updates
• 78

  Displaying Virus and Worm Lists

79

Web Content Filtering

• 79

  Blocking Web Pages That Contain Undesired Words
  • 79

    Enabling the Banned Word List
  • 79

    Adding Words to the Banned Word List
  • 80

    Temporarily Disabling the Banned Word List
  • 80

    Temporarily Disabling Individual Words in the Banned Word List
  • 80

    Clearing the Banned Word List
  • 80

    Creating the Banned Word List Using a Text Editor
• 81

  Blocking Access to Internet Sites
  • 81

    Enabling the URL Block List
  • 81

    Adding Urls to the URL Block List
  • 81

    Temporarily Disabling the URL Block List
  • 81

    Temporarily Disabling Blocking Individual Urls
  • 82

    Clearing the URL Block List
  • 82

    Creating the URL Block List Using a Text Editor
• 82

  Removing Scripts From Web Pages

84

Logging and Reporting

• 84

  Configuring Logging
  • 84

    Recording Logs On a Remote Computer
  • 85

    Selecting What to Log
• 85

  Log Message Formats
  • 86

    Traffic Log Message Format
  • 86

    Event Log Message Format
  • 87

    Attack Log Message Format
• 88

  Viewing and Maintaining Logs
  • 88

    Viewing Logs
  • 89

    Searching Logs
  • 89

    Downloading a Log File to the Management Computer
  • 90

    Deleting All of the Messages in an Active Log
  • 90

    Deleting a Saved Log File

91

Administering the DFL-1000

• 91

  Logging Into the Web-Based Manager
• 91

  System Status
  • 92

    Changing the Operating Mode
  • 92

    Upgrading the DFL-1000 Firmware
  • 92

    Updating Your Antivirus Database
  • 92

    Displaying the DFL-1000 Serial Number
  • 93

    Restoring System Settings
  • 93

    Restoring System Settings to Factory Defaults
  • 95

    Restarting the DFL-1000
  • 95

    Shutting Down the DFL-1000
  • 95

    System Status Monitor
• 96

  Network Configuration
  • 96

    Changing IP Addresses
  • 96

    Configuring the External Interface for DHCP
  • 96

    Configuring the External Interface for Pppoe
  • 97

    Changing MTU Size to Improve Network Performance
  • 97

    Setting DNS Server Addresses
  • 97

    Controlling Management Access to the DFL-1000
  • 98

    Configuring Routing
  • 98

    Enabling RIP Server Support
  • 99

    Providing DHCP Services to Your Internal Network
• 100

  System Configuration
  • 100

    Setting System Date and Time
  • 101

    Changing Web-Based Manager Options
  • 101

    Adding and Editing Administrator Accounts
  • 102

    Configuring SNMP

104

Using the DFL-1000 CLI

• 104

  Connecting to the DFL-1000 CLI
  • 104

    Connecting to the DFL-1000 Communications Port
  • 105

    Connecting to the DFL-1000 CLI Using SSH
• 105

  CLI Basics
  • 105

    Recalling Commands
  • 105

    Editing Commands
  • 106

    Using Command Shortcuts
  • 106

    Using Command Help
• 106

  Installing Firmware From a TFTP Server

109

Glossary

112

Troubleshooting Faqs

• 112

  General Administration
• 112

  Network Configuration
• 112

  Firewall Policies
• 113

  Schedules
• 113

  Vpn
• 114

  Virus Protection
• 114

  Web Content Filtering
• 116

  Technical Support