D-Link DFL 80 (DFL
Contents
1. Quick Installation Guide DFL 80 This product can be set up using any current web browser i e 4 Port Ethernet VPN Firewall Internet Explorer 6 or Netscape Navigator 6 2 3 Before You Begin If you purchased this Firewall to share your high speed Internet connection with other computers you must have either an Ethernet based Cable or DSL modem with an established Internet account from an Internet Service Provider ISP 2 It s best to use the same computer that is connected to your modem for configuring the DFL 80 VPN Firewall The DFL 80 acts as a DHCP server and will assign all the necessary IP address information on your network See Appendix at the end of this Quick Installation Guide or the Manual on the CD ROM for setting each network adapter to automatically obtain an IP address Check Your Package Contents DFL 80 4 Port Ethernet VPN Firewall CD ROM containing Manual and Warranty Ethernet Straight Through Cable 5V DC Power Adapter Using a power supply with a different voltage rating will damage and void If any of the above items are missing please contact your reseller the warranty of this product 2003 D Link Systems Inc All rights reserved Trademarks or registered trademarks are the property of their respective holders Software and specifications subject to change without notice DFL 80 03142003 Part No IG BDFL80 Connecting The DFL 80 Firewall To Your Network2. originally provided to you by your PRE ISP You will need to complete all WAN airan AR the required fields ist ihih s92 Click Next Please continue to the last part of step 4 Set Outgoing Policy 7 The Setup Wizard Leiden If your ISP uses PPPoE Point to Point Protocol over Ethernet and this option is selected then this screen will appear Used mainly for DSL Internet service Please be sure to remove any existing PPPoE client software installed on your computers Enter in the username and password provided to you by your ISP Click Next Set Outgoing Policy You will be prompted to select the type of Internet connection for your network Make sure that Any Services is selected Click Next D Dii Pineal Mecoupiell iilierinet E apearini oF eLPA TALLA pi Sat FPPoE Eate det tha PPLE kikanrhin panijad tr om Py SP Checks Met ti nie 7 GLa trees ll a aml riori E mjrariini Set Oulgeing Policy Bele Higar aarti hi hanal pa 1h oaair Un ia kiasa Cirk Basi i con Sermicu Preta cols Ary Wb Appir m HTP Fot ET File Tarh Piir FTE Mor aj ad Tarare Dorn Hapa Serdar Your Setup is Complete Sebup Completed Tae Satu Flue Se coe pleted Chek on Gath le miakiy argan oh ae Cipp Pagimi ba ares thee cured sartiege gad aTi the Click Restart Please wait for the DFL 80 to save the changes and reboot When the DFL 80 has finished rebooting you will be b
3. First connect the power adapter to the receptor at the back panel of the DFL 80 and then plug the other end of the power adapter to a wall outlet or power strip The Power LED will turn ON to indicate proper operation B 1 Power off your Cable or DSL modem some devices may not have an on off switch and will require you to unplug the power adapter Now the DFL 80 should be powered on and the Cable DSL modem should be turned off 2 Cable DSL modem Power Off DFL 80 Power On Connect an Ethernet cable to the Ethernet jack located on the Cable DSL modem After the Ethernet cable is securely connected power on the Cable DSL modem by turning on the unit or plugging in the power adapter 3 Cable DSL modem Power On DFL 80 Power On Insert the other end of the Ethernet cable to the EXTERNAL PORT on the back panel of the DFL 80 The EXTERNAL LED light will illuminate to indicate proper connection If the EXTERNAL LED is not illuminated please go back to step B and repeat its instructions C Insert an Ethernet cable to LAN port 1 on the back panel of the DFL 80 and an available Ethernet port on the network adapter in the computer you will use to configure the DFL 80 The LED light for LAN Port 1 will illuminate to indicate proper connection Note The LAN Ports on the DFL 80 are Auto MDI MDIX Meaning you can use a straight through or crossover Ethernet cable to the LAN Ports D DMZ port is used to connect to a DM
4. 2 170 0 200 192 158 20 0 psk Disconnect Connect Modify Remove 14 Please fill in the appropriate information for Site B WFH Auto Keyed Tunnal Name Site_B ne ra From Source Internal From feurce interven Eil Subnet Mask Budne Mask aieea ee 192 168 20 0 255 255 255 0 To Daslinaten Remote Gateway Fixed IP R moir Gateway Firad F 117 0100 192 170 0 100 Hinai id ik 1p 11h J JUG 205 2900 Subnet Mask ee a has 192 168 10 0 255 255 255 0 Tare AT eae Authentication Method Akania Wathen ey Preshare Preshared Key ey Preshare Key 123456 Ercapeuialion Encapsulation Encryption o Date Eneryplion Acthertication ESP ji Surthentication iiy Pertect Foran Gecrecy Poe L Palin ALLL Emami Schedule reyes 123456 is an example of a preshare key please fill in any secret preshare key you desire Keep in mind that both sites require the same preshare key There should now be a VPN policy created for Site B After the VPN policies have been created for the two remote locations click Connect at both Sites to enable the VPN policy The two remote locations will authenticate and the VPN status should now say Connected Congratulations you have created a simple IPSec VPN tunnel Site A and Site B should now be able to communicate with each other securely over the Internet All IP traffic from the two Sites are now encrypted strongly with 168 bit 3DES encryption Destination lm ma PSRIRSA States Co
5. O mae URL address box Then press the a A http 192 168 1 1 Enter or Return key e The log on pop up screen will appear Connect to 197 160 141 pi Type admin for the username and admin for the password O The Setup Wizard continued Once you have logged in the Home screen will appear HESA h Pi EEH Pa ee p hH ST ee eee A E Click Setup Wizard fis ie Jes ee ee ed ee ee Er cy pa ji ey Hir met poe jem ae ee a E You will see the following screens Wwhodres ip the DALODD Enp Wiis Thee Ar ed ele pa ihre theese forges riepa Begin by deb on Hral saa ay pad E pE aa Chom peu Hre oe eg 2 Se beret comeeciios Shao 4 Sei Cage ep Ste i Sve b liris Click Next Set up your new password You have the option to establish a password for the Admin account Tou may charge Me wii ecco pees by ee m a nF pein Cirk Ae onm ma Click Next Choose your time zone based from GMT time Click on Assist to select your time zone from the available selections Click Next Select your Internet Connection You will be prompted to select the type of Internet connection for your network Click Next J The Setup Wizard continued DESO Setirp Wizard Choose Thre fone Ears the bipes frre fob let pou locaton aed click Ad lo Se oiei hea Fromm GRIT ami alot oo Jigs tj sy aditzi AACE ARATO SARET TIES TERN Eyice ie CeMmdclde lapi M En
6. Z network which contains Network Servers B EXTERNAL PORT This is for the connection of an Ethernet cable to the Cable or DSL modem D DMZ Port This is for the connection to Network Servers C LAN PORTS These are the connections for Ethernet cables to Ethernet enabled computers A Receptor for Reset Button Power Adapter Pressing this button restores the Firewall to its original factory default settings Restart Your Computer Connecting Additional Computers To The DFL 80 Using additional Ethernet CAT5 UTP cables connect your Ethernet equipped computers to the remaining Ethernet LAN ports on the back panel of the DFL 80 LOCAL NETWORK LEDs a solid light on the port indicates a connection to an Ethernet External LED a solid light indicates connection enabled computer on ports 1 4 onthe WAN port This This LED blinks during data transmission LED blinks during data transmission POWER LED a solid light indicates a proper connection to the power supply DMZ LED a solid light indicates connection on the DMZ port This LED blinks during data transmission When you have completed the steps in this Quick Installation Guide your connected network should look similar to this Firewall Microsoft Internet Explorer File Edit View Favorites Tools Help Open your Web browser and ae ae type http 192 168 1 1 into the eck
7. i o yoe EP Cok MaW o canain l Choose tia npon ia obtain a li adem Oo Dyan P Ajde sehoreatlodlly rote yos P Far mo Y Chems hia npian ta smi staile IP ae jefe pen ation prosilit tu poe bry your MF Chp Ths option F i ISP agers PPPoE A if you are unsure of which setting to select please contact your Internet Service Provider The Setup Wizard continued DOH Peet icrewett terre Lapin a If you selected Dynamic IP Tie Address this screen will Dlink appear Used mainly for Cable Internet service E B05 stip WI ard Set Dynamit IP Address Feoe IGP pinet piu to cri a epic hial mimi oF apati MAC mide ple ere in Click Hani in cones Click the Clone MAC Address eer a ae button to automatically copy the 0 Se opera MAC address of the network on eira adapter in your computer You can eae anaa also manually type in the MAC address 2B This setup should be done on ack heat Balt the computer that is registered on the ISP s network Click Next Please continue to the last part of step 4 Set Outgoing Policy 7 Oe mrem ee eee lieben i ajikiini p D Link If your ISP requires a Static IP Address and this option is selected then this screen will appear DRAPS Setup Wizared Sat Static IP Address Ente inthe erir P entai provided tn yor by pour Ge Cik Mari 16 Cobre l Enter the IP address information E i MAAN P Aji
8. l down menu Select Using DHCP in the Configure pull down menu Click on Apply Now The IP address information the Subnet Mask the Router s IP address and the Ethernet adapter address will appear Click on Network woe a mpy 2 a Bae bs pF f DG DU area 63 os a Te h ale G i co Pe oe g 1S nO manne ee eres qe factor Wak 255 2G Jrs 5 Chik pbp HET D eer har rng BQO b fever TIERED ac Chaal Bha ma Creare Adder Bie io Ee m w aaa BG CER ll Dpi Oe tepa gp eh Leane Baere Ei A rover Appietan revise mdee Fli sh Ceria F Aiia ELIMA LEETE og Talika DHCP Gimi i Vang F T MH na Pa Ge ee Dibisa Added Bite Pi Me La 12 APPENDIX continued This example will demonstrate how to create a Virtual Private Network VPN between two remote locations through the Internet The VPN policy will use IPSec to securely send receive encrypted data over the Internet This example will consist of two DFL 80 VPN Firewalls with a simple setup to enable VPN The two remote locations in this example will be called Site A and Site B Both firewalls must already be set up and able to communicate with each other WAN 192 170 0 100 VPN Tunnel WAN 192 170 0 200 Cable DSL Mader LAN 192 168 10 1 LAN 192 168 20 1 Site A Site B Homer rh lesion r Lata Please note the difference
9. nhgure Name GatewayviP _ i ca Subnet Site_B 192 170 0 100 192 168 10 0 psk Disconnec 15 Technical Support You can find software updates and user documentation on the D Link website D Link provides free technical support for customers within the United States and within Canada for the duration of the warranty period on this product U S and Canadian customers can contact D Link technical support through our website or by phone Tech Support for customers within the United States D Link Technical Support over the Telephone 877 453 5465 24 hours a day seven days a week D Link Technical Support over the Internet http support dlink com email support dlink com Tech Support for customers within Canada D Link Technical Support over the Telephone 800 361 5265 Monday to Friday 8 30am to 9 00pm EST D Link Technical Support over the Internet http support dlink ca email support dlink ca D Link Building Networks for People
10. rought back to the main web page YPN Firewall Rebocting Test Internet Connection You will be returned to the main web page Click to Exit VPN Firewall sarri is the beet The ey ets ed eke po be cari gage ee i EDUTE W An Then relaunch your Web browser i e Internet Explorer or Netscape Navigator to link to your favorite Web site to test your Internet connection For additional settings or information refer to the Manual located on the CD 10 APPENDIX To connect to the network make sure the network adapter in your computer is configured properly Here s how to configure the network adapter to obtain an IP address automatically for the DFL 80 Firewall For Microsoft Windows XP Go to Start gt right click on My Network Places gt select Properties gt Double click on the Network Connection associated with the Ethernet adapter i e D Link DFE 530TX Click Internet Protocol TCP IP Click Properties tte et Pretec Le Proparin Edt Tok cer pe g ee E fe ee E la tar dali Pum mphaph gair gio F Select Obtain an IP address a pipiens pa automatically ee F fe Ute OHS perem bere eho ae 5 Leg hs ierg OMS ee ches ITH i j Restart your computer SSS 559595900 OE if necessary _s_ 11 For Apple Macintosh OS X Go to the Apple Menu Click on Network and Select System Preferences Select Built in Ethernet in the Show pul
11. s in the IP addresses for each site We will begin by configuring the DFL 80 at Site A Start by going into the web configuration Once in go to the VPN menu You should now be under VPN gt Autokey Pi ae Citic ne e r 2 A GE AG Sie C oe p Dawi i am E Click New Entery 13 The IP Address information used for Site A and Site B are example IP Addresses Only Please fill in the appropriate information for Site A VPM Aub Keyed Turrel Name Site A ee File A From Source Internal from paume internet OME Subnet Mask Subnet ope 152 108 10 fre re es 192 168 10 0 255 255 255 0 enim rm Remote Gateway Fixed 3a Remol Gatepyay Fixed i 192 170 On uted oes EES LE I Pi 0 IP 192 170 0 200 aie thiacaiers ip Subnet Mask Guba Maei dtir 2752759 Authentication Method Aum ertcmben Metiod Franaa Preshare Preahared Key INS Preshare Key 123456 Ereapsulaiar Encapsulation Encryption z ee ESP Paertect Forward Secrecy Pome Lirimi aL Seceani secret preshare key you desire Keep in mind that both i 123456 is an example of a preshare key please fill in any sites require the same preshare key There should now be a VPN policy created for Site A Site Ais now complete we will now configure Site B with the other DFL 80 Follow the same steps previously with Site Ato create a VPN policy Please change the appropriate IP information Destination Gateway IP Configure F Subnet Site_A19
Download Pdf Manuals
Related Search