D-Link DFL-1000 Manuals

Table of Contents

• • 3

    Table of Contents

• 9

  Introducing the DFL-1000

  • 9

    Firewall
    • 10

      Network Address Translation (NAT)
    • 10

      Transparent Mode
  • 10

    Hacker Prevention and Protection
  • 11

    Vpn
  • 11

    Virus and Worm Protection
  • 11

    Web Content Filtering
  • 12

    Secure Installation, Configuration, and Management
    • 12

      Web-Based Manager
    • 13

      Command Line Interface
    • 13

      Logging and Reporting
  • 13

    About This Document
  • 14

    Customer Service and Technical Support

• 15

  Installing the DFL-1000

  • 15

    Before You Start
    • 15

      NAT Mode Install
    • 16

      Transparent Mode Install
  • 17

    Unpacking the DFL-1000
  • 17

    Mounting the DFL-1000
  • 18

    Powering On the DFL-1000
  • 18

    Using the Quick Setup Wizard
    • 18

      Connecting to the Web-Based Manager
    • 19

      Starting the Quick Setup Wizard
    • 19

      Reconnecting to the Web-Based Manager
  • 19

    Configuring the DFL-1000 From the CLI
    • 20

      Connecting to the CLI
    • 20

      Configuring the DFL-1000 to Run in NAT Mode
    • 21

      Configuring the DFL-1000 to Run in Transparent Mode
  • 22

    Connecting the DFL-1000 to Your Network
    • 22

      NAT Mode Connections
    • 23

      Transparent Mode Connections
  • 24

    Configuring Your Internal Network
  • 24

    Completing the Configuration
    • 24

      Configuring the DMZ Interface
    • 25

      Setting the Date and Time

• 26

  Firewall Configuration

  • 26

    Controlling Connections From the Internet
    • 26

      Accepting Incoming Connections in NAT Mode
    • 27

      Accepting Incoming Connections in Transparent Mode
    • 28

      Denying Incoming Connections
    • 29

      Arranging Policies in the Incoming Policy List
  • 29

    Controlling Connections to the Internet
    • 30

      Denying Connections to the Internet From the Internal Network
    • 31

      Accepting Connections to the Internet From the Internal Network
    • 32

      Requiring Authentication to Connect to the Internet
    • 32

      Arranging Policies in the Int to Ext and Outgoing Policy List
  • 33

    Controlling Connections to and From the DMZ
  • 33

    Policies
    • 33

      Policy Information
    • 34

      Default Policy
    • 34

      Adding Policies
    • 35

      Editing Policies
    • 35

      Policy Matching
    • 35

      Arranging Policies in the Policy List
  • 35

    Addresses
    • 36

      Adding Addresses
    • 36

      Editing Addresses
    • 37

      Organizing Addresses Into Address Groups
  • 37

    Services
    • 38

      Pre-Defined Services
    • 39

      Providing Access to Custom Services
    • 39

      Grouping Services
  • 40

    Schedules
    • 40

      Creating One-Time Schedules
    • 41

      Creating Recurring Schedules
    • 42

      Applying a Schedule to a Policy
  • 42

    Users and Authentication
    • 43

      Adding Authentication to a Policy
  • 44

    Virtual Ips
    • 44

      Adding Virtual Ips
  • 44

    IP/MAC Binding
    • 45

      Adding IP/MAC Binding Addresses
    • 45

      Enabling IP/MAC Binding
  • 45

    Traffic Shaping
    • 45

      Adding Traffic Shaping to a Policy
  • 46

    VPN Pass Through
    • 46

      Adding Ipsec and PPTP Pass Through

• 47

  Ipsec Vpns

  • 47

    Compatibility With Third-Party VPN Products
  • 47

    Autokey Ipsec VPN Between Two Networks
    • 48

      Creating the VPN Tunnel
    • 49

      Adding Internal and External Addresses
    • 50

      Adding an Ipsec VPN Policy
  • 51

    Autokey Ipsec VPN for Remote Clients
    • 52

      Configuring the VPN Tunnel for the Client VPN
    • 53

      Adding Internal and External Addresses
    • 53

      Adding an Ipsec VPN Policy
    • 54

      Configuring the VPN Client
  • 54

    Manual Key Exchange Ipsec VPN Between Two Networks
    • 55

      Configuring the VPN Tunnel
    • 55

      Adding Internal and External Addresses
    • 56

      Adding an Ipsec VPN Policy
  • 56

    Manual Key Exchange Ipsec VPN for Remote Clients
    • 56

      Configuring the VPN Tunnel
    • 56

      Adding Internal and External Addresses
  • 57

    Testing a VPN

• 58

  PPTP and L2TP Vpns

  • 58

    PPTP VPN Configuration
    • 59

      Configuring the DFL-1000 As a PPTP Server
    • 60

      Configuring a Windows 98 Client for PPTP
    • 61

      Configuring a Windows 2000 Client for PPTP
    • 61

      Configuring a Windows XP Client to Connect to a DFL-1000 PPTP VPN
  • 62

    L2TP VPN Configuration
    • 63

      Configuring the DFL-1000 As an L2TP Server
    • 64

      Configuring a Windows 2000 Client for L2TP
    • 65

      Configuring a Windows XP Client to Connect to a DFL-1000 L2TP VPN
  • 66

    RADIUS Authentication for PPTP and L2TP Vpns
    • 67

      Adding RADIUS Server Addresses
    • 67

      Turning On RADIUS Authentication for PPTP
    • 67

      Turning On RADIUS Authentication for L2TP

• 68

  Intrusion Detection System (IDS)

  • 68

    Attack Prevention
  • 68

    Alert Email
    • 68

      Configuring Alert Email
    • 69

      Testing Email Alerts

• 70

  Virus Protection

  • 70

    Virus and Worm Protection for Your Internal Network
    • 71

      Configuring High Level Virus Protection for Your Internal Network
    • 72

      Configuring Medium Level Virus Protection for Your Internal Network
    • 73

      Configuring Low Level Virus Protection for Your Internal Network
    • 74

      Configuring Worm Protection for Your Internal Network
  • 74

    Virus and Worm Protection for Incoming Connections
    • 74

      High Level Virus Protection for Incoming Connections
    • 75

      Medium Level Virus Protection for Incoming Connections
    • 76

      Low Level Virus Protection for Incoming Connections
    • 76

      Worm Protection for Incoming Connections
  • 77

    Updating Your Antivirus Database
    • 77

      Updating the Antivirus Database Manually
    • 77

      Configuring Automatic Antivirus Database Updates
  • 78

    Displaying Virus and Worm Lists

• 79

  Web Content Filtering

  • 79

    Blocking Web Pages That Contain Undesired Words
    • 79

      Enabling the Banned Word List
    • 79

      Adding Words to the Banned Word List
    • 80

      Temporarily Disabling the Banned Word List
    • 80

      Temporarily Disabling Individual Words in the Banned Word List
    • 80

      Clearing the Banned Word List
    • 80

      Creating the Banned Word List Using a Text Editor
  • 81

    Blocking Access to Internet Sites
    • 81

      Enabling the URL Block List
    • 81

      Adding Urls to the URL Block List
    • 81

      Temporarily Disabling the URL Block List
    • 81

      Temporarily Disabling Blocking Individual Urls
    • 82

      Clearing the URL Block List
    • 82

      Creating the URL Block List Using a Text Editor
  • 82

    Removing Scripts From Web Pages

• 84

  Logging and Reporting

  • 84

    Configuring Logging
    • 84

      Recording Logs On a Remote Computer
    • 85

      Selecting What to Log
  • 85

    Log Message Formats
    • 86

      Traffic Log Message Format
    • 86

      Event Log Message Format
    • 87

      Attack Log Message Format
  • 88

    Viewing and Maintaining Logs
    • 88

      Viewing Logs
    • 89

      Searching Logs
    • 89

      Downloading a Log File to the Management Computer
    • 90

      Deleting All of the Messages in an Active Log
    • 90

      Deleting a Saved Log File

• 91

  Administering the DFL-1000

  • 91

    Logging Into the Web-Based Manager
  • 91

    System Status
    • 92

      Changing the Operating Mode
    • 92

      Upgrading the DFL-1000 Firmware
    • 92

      Updating Your Antivirus Database
    • 92

      Displaying the DFL-1000 Serial Number
    • 93

      Restoring System Settings
    • 93

      Restoring System Settings to Factory Defaults
    • 95

      Restarting the DFL-1000
    • 95

      Shutting Down the DFL-1000
    • 95

      System Status Monitor
  • 96

    Network Configuration
    • 96

      Changing IP Addresses
    • 96

      Configuring the External Interface for DHCP
    • 96

      Configuring the External Interface for Pppoe
    • 97

      Changing MTU Size to Improve Network Performance
    • 97

      Setting DNS Server Addresses
    • 97

      Controlling Management Access to the DFL-1000
    • 98

      Configuring Routing
    • 98

      Enabling RIP Server Support
    • 99

      Providing DHCP Services to Your Internal Network
  • 100

    System Configuration
    • 100

      Setting System Date and Time
    • 101

      Changing Web-Based Manager Options
    • 101

      Adding and Editing Administrator Accounts
    • 102

      Configuring SNMP

• 104

  Using the DFL-1000 CLI

  • 104

    Connecting to the DFL-1000 CLI
    • 104

      Connecting to the DFL-1000 Communications Port
    • 105

      Connecting to the DFL-1000 CLI Using SSH
  • 105

    CLI Basics
    • 105

      Recalling Commands
    • 105

      Editing Commands
    • 106

      Using Command Shortcuts
    • 106

      Using Command Help
  • 106

    Installing Firmware From a TFTP Server

• 109

  Glossary

• 112

  Troubleshooting Faqs

  • 112

    General Administration
  • 112

    Network Configuration
  • 112

    Firewall Policies
  • 113

    Schedules
  • 113

    Vpn
  • 114

    Virus Protection
  • 114

    Web Content Filtering
  • 116

    Technical Support