User manual D-LINK DFL-500

[. . . ] D-Link DFL-500 DFLNetwork Security Firewall Manual Building Networks for People DFL-500 User Manual 1 © Copyright 2002 D-Link Systems, Inc. All rights reserved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of D-Link Systems, Inc. DFL-500 User Manual Version 2. 27 31 July 2002 Trademarks Products mentioned in this document are trademarks or registered trademarks of their respective holders. Regulatory Compliance FCC Class A Part 15 CSA/CUS DFL-500 User Manual 2 Table of Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Antivirus protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Netmask Complete the following procedures on the DFL-500 VPN gateway to add the source and destination addresses. Adding a source address To add the source address to the internal address list: · · · · Go to Firewall > Address > Internal . Enter an Address Name, the IP Address, and the NetMask of the network to connect to the VPN. Select OK to save the new internal address. Adding a destination address To add the destination address to the external address list: · · · · Go to Firewall > Address > External . Enter an Address Name, the static IP Address, and the Netmask of the client. Select OK to save the destination address. Adding an IPSec VPN policy The VPN policy associates the source and destination address with the VPN tunnel. The VPN gateway then starts up the VPN tunnel whenever it receives packets from the VPN client. Example VPN gateway policy configuration Description Source Destination VPN Tunnel Name Incoming NAT The source address that you added for the VPN (See Example VPN gateway IP addresses for a client with a static IP address). The destination address that you added for the client (See Example VPN gateway IP addresses for a client with a static IP address). The name of the VPN tunnel to be created between the VPN gateway and the VPN client (See Example VPN Tunnel configuration). Select Incoming NAT if you require Network address translation for VPN packets. Example setting Main_Office VPN_Client Client_VPN Select Complete the following procedure on the DFL-500 VPN gateway to add the VPN policy: · · · Go to VPN > IPSEC > Policy . Select a Source address. DFL-500 User Manual 62 · · · Select a Destination address. Select OK to save the VPN policy. Configuring the IPSec VPN client The VPN client PC must be running industry standard IPSec Autokey IKE VPN client software. Configure the client as required to connect to the DFL-500 VPN gateway using an IPSec VPN configuration. Make sure the client configuration includes the settings in VPN client configuration. These settings should match the VPN gateway configuration. VPN client configuration Description Tunnel Name Remote Gateway Keylife Authentication Key Example Setting Should correspond to the VPN tunnel name used on the DFL-500 VPN gateway. The Client authentication key should match the DFL-500 VPN gateway authentication key. 1. 1. 1. 1 100 ddcHH01887d Dial-up VPN Use the following procedures to add a dial-up VPN configuration so that your VPN gateway accepts IPSec VPN connections from any IP address. A dial-up VPN configuration is most often used to allow clients with dynamic IP addresses to connect to the VPN gateway. Clients with dynamic IP addresses can be home or travelling users who dial into the Internet and are dynamically assigned an IP address by their ISP (using PPPoE, DHCP, or a similar protocol). A dial-up VPN tunnel is an IPSec Autokey IKE VPN tunnel with its remote gateway address set to 0. 0. 0. 0. VPN policies and addresses are not required on the dial-up VPN gateway. Any remote IPSec VPN client or gateway that can match the dial-up VPN tunnel's authentication key can connect to the dial-up VPN tunnel. [. . . ] What You Must Do For Warranty Service: For All warranty services, and any terms and conditions, details can be found at local D-Link website. Any claim under this limited warranty must be submitted in writing before the end of the Warranty Period to an Authorized D-Link Service Office. · The customer must submit as part of the claim a written description of the Hardware defect or Software nonconformance in sufficient detail to allow D-Link to confirm the same. · The original product owner must obtain a Return Material Authorization (RMA) number from the Authorized D-Link Service Office and, if requested, provide written proof of purchase of the product (such as a copy of the dated purchase invoice for the product) before the warranty service is provided. DFL-500 User Manual 136 · After an RMA number is issued, the defective product must be packaged securely in the original or other suitable shipping package to ensure that it will not be damaged in transit, and the RMA number must be prominently marked on the outside of the package. · The customer is responsible for all shipping charges to and from D-Link (No CODs allowed). [. . . ]