D-Link DFL-1000 Manuel utilisateur

Quick Install Guide

DFL-1000

Version 2.27

1. Before you start

The DFL-1000 has the following settings when first powered on.

Operating Mode: NAT/Route

Administrator Account: User name: admin

Password: (none)

Internal Interface: IP: 192.168.1.99

Netmask: 255.255.255.0

External Interface: Manual: IP: 192.168.100.99

Netmask: 255.255.255.0

Default Gateway: (none)

Primary DNS Server: 207.194.200.1

Secondary DNS Server: 207.194.200.129

DMZ Interface: IP: 10.10.10.1

Netmask: 255.255.255.0

Use the following table to gather the information you need to customize basic settings for your DFL-

1000.

Administrator Password:

Internal Interface: IP: _____._____._____._____

Netmask: _____._____._____._____

External Interface: Manual: IP: _____._____._____._____

Netmask: _____._____._____._____

Default Gateway: _____._____._____._____

Primary DNS Server: _____._____._____._____

Secondary DNS

Server: _____._____._____._____

Internal Server

Settings: Web Server:

_____._____._____._____

Mail Server: SMTP:

_____._____._____._____

POP3: _____._____._____._____

FTP Server:

_____._____._____._____

If you provide access from the Internet to a web server, mail server, or FTP

server installed on an internal network, add the IP addresses of the servers

here.

2. Advanced settings

Use the following table for the information to customize advanced DFL-1000 settings that can be

configured using the setup wizard.

External

Interface: DHCP: If your ISP supplies you with an IP address using DHCP no further

information is required.

PPPoE: User name:

Password:

If your ISP supplies you with an IP address using PPPoE, record your PPPoE user

name and password. You can configure the external interface for PPPoE using the

setup wizard.

DHCP Server

Settings: Starting IP:

_____._____._____._____

Ending IP: _____._____._____._____

Netmask: _____._____._____._____

Default Route:

_____._____._____._____

DNS IP: _____._____._____._____

The DFL-1000 contains a DHCP server that you can configure to automatically set

the addresses of the computers on your internal network. You can configure the

DHCP server using the setup wizard.

Use the following table to record the IP address and netmask of the DFL-1000 DMZ interface if you

are configuring it during installation.

DMZ:

IP:

_____._____._____._____

Netmask:

_____._____._____._____

3. DFL-1000 package contents

4. Powering up your DFL-1000

1. Install your DFL-1000 as a free-standing appliance on any stable surface.

Make sure it has at least 1.5 in. (3.75 cm) of clearance on each side to allow for adequate air

flow and cooling.

The DFL-1000 can also be installed in a standard 19-inch rack. It requires 1 U of vertical

space in the rack.

2. Make sure the power switch on the back is turned off.

3. Connect the power cord to the power connection at the back of the DFL-1000.

4. Connect the power cable to a power outlet.

5. Turn on the power switch.

The DFL-1000 starts up. The Power and Status lights light. The Status light flashes while the

DFL-1000 is starting up and remains lit when the system is up and running.

5. DFL-1000 LED indicators

LED State Description

Power

Green The DFL-1000 is powered on.

Off The DFL-1000 is powered off.

Status

Flashing Red The DFL-1000 is starting up.

Red The DFL-1000 is running normally.

Off The DFL-1000 is powered off.

Internal

External

DMZ

indicator lights

Green The correct cable is in use, and the connected equipment

has power.

Flashing

Green Network activity at this interface.

Off No link established.

Internal

External

DMZ

interfaces

Green The correct cable is in use, and the connected equipment

has power.

Flashing

Amber Network activity at this interface.

Off No link established.

6. Using the Firewall Setup Wizard

To run the Setup Wizard, you must connect to the DFL-1000 web- based manager. You require:

• A management computer with an ethernet connection

• Internet Explorer version 4.0 or higher

• A crossover cable or an ethernet hub and two ethernet cables

To run the Setup Wizard:

1. Set the IP address of the computer with an ethernet connection to the static IP address

192.168.1.2 and a netmask of 255.255.255.0.

2. Using the crossover cable or the ethernet hub and cables, connect the internal interface of the

DFL-1000 to the computer ethernet connection.

3. Start Internet Explorer version 4.0 or higher. Type https://192.168.1.99 into the Address field

and press Enter.

Your browser connects to the web- based manager and the DFL-1000 login page appears.

4. Type admin in the Name field and select Login.

5. Select the Wizard button at the upper right of the web- based manager to start the setup

wizard.

6. Use the information you gathered on the first two pages of this Quick Install Guide to fill in the

wizard fields as required. Select next to step through the wizard pages.

7. Confirm your configuration settings and then select Finish and Close.

You are ready to connect the DFL-1000 to your network.

7. Basic configuration using the CLI

As an alternative to the setup wizard, you can use the command line interface (CLI) to configure the

DFL-1000.

To use the CLI:

1. Connect one end of the null-modem cable to the DFL-1000 Console (RS-232 serial)

connector and connect the other end to a serial port of a management computer or terminal.

2. On the management computer, start a terminal program such as HyperTerminal.

3. Set the Baud Rate (bps) to 9600, Data bits to 8, Parity to None, Stop bits to 1, and flow control

to None.

4. Press Enter to connect to the DFL-1000.

5. At the D-Link Login: prompt, type admin and press Enter twice.

6. Set the internal interface to the Internal IP Address and netmask.

For example, to set the internal interface to IP address 192.168.1.1 and netmask to

255.255.255.0 enter:

set system interface internal ip 192.168.1.1 255.255.255.0

7. Set the external interface to the External IP Address and Netmask.

For example, to set the Manual IP address to 204.23.1.5 and netmask to 255.255.255.0 enter:

set system interface external ip 204.23.1.5 255.255.255.0

To set the external interface to use PPPoE and to set the PPPoE user name to username

and the PPPoE password to password enter:

set system interface external pppoe enable username

password

To set the external interface to use DHCP enter:

set system interface external dhcp enable

8. Set the DMZ interface to the DMZ IP Address and Netmask.

For example, to set the DMZ interface to IP address 10.10.10.2 and netmask to

255.255.255.0 enter:

set system interface dmz ip 10.10.10.2 255.255.255.0

Note: If your address changes have placed the DMZ on the same subnet as the Internal or

External interfaces you must change the DMZ address to a different IP address.

9. To check your changes, enter:

get system interface

10. Set the default route to the Default Gateway IP address.

For example to set the default route to 204.23.1.2 enter:

set system route add 0.0.0.0 0.0.0.0 gw 204.23.1.2 dev

external

Once these addresses are set, you are ready to connect the DFL-1000 to your network.

8. Connecting the DFL-1000

There are three 10/100 BaseTX connectors on the DFL-1000:

• Internal for connecting to your internal network

• External for connecting to your public switch or router and the Internet

• DMZ for connecting to a DMZ network

To connect the DFL-1000:

1. Connect the Internal interface to the hub or switch connected to your internal network.

2. Connect the External interface to the public switch or router provided by your Internet Service

Provider.

3. Optionally connect the DMZ interface to your DMZ network.

9. Advanced configuration

You have completed the basic network setup of your DFL-1000. By default all traffic originating from

your Internal network is allowed to reach the Internet, and all traffic originating from the Internet is

blocked from reaching your internal network.

You can continue configuring the DFL-1000 by connecting to the web-based manager from the

internal network. Browse to https:// followed by the IP address of the DFL-1000 internal interface.

You can now customize your DFL-1000 configuration using the information in the DFL-1000 User

Manual and in the DFL-1000 web- based manager online help.

You can:

• Customize the firewall configuration

• Add and configure IPSec, PPTP, and L2TP VPNs

• Configure the Network Intrusion Detection (NIDS)

• Customize virus and worm protection

• Configure logging and reporting

• Customize the DFL-1000 system configuration

Configuring the DMZ interface

Use the following procedure to change the IP address of the DMZ interface. Using the web- based

manager:

• Go to System > Network > Interface.

• For the dmz interface, select Modify .

• Change IP address and netmask as required.

• Select Apply.

Transparent mode

This Quick Install Guide describes how to configure the DFL-1000 to run in Network Address

Translation (NAT) mode. You can also configure the DFL-1000 to run in Transparent mode. Refer to

the Transparent mode installation chapter of the DFL-1000 User Manual.

10. Troubleshooting

Reconnecting to the web- based manager

If you changed the IP address of the internal interface, you must reconnect to the web- based

manager by browsing to https:// followed by the new IP address. You may also have to change the

IP address of the management computer to be on the same subnet as the internal interface.

Restarting the DFL-1000

At any time during the installation process if the DFL-1000 is not responding correctly, you can shut it

down and restart it.

Using the web-based manager:

• Go to System > Status.

• Select Restart.

Using the CLI:

• Enter the command.

execute reboot

You can cycle the power on the DFL-1000 using the power switch on the back of the unit.

Resetting the DFL-1000 to the factory default configuration

If restarting does not solve the problem, you can restore the DFL-1000 to its factory default

configuration.

Using the web-based manager:

• Go to System > Status.

• Select Restore Factory Defaults and select OK.

The DFL-1000 restarts with the configuration that it had when first powered on.

Using the CLI:

• Enter the command.

execute reset

The DFL-1000 restarts with the configuration that it had when first powered on.

Autres manuels pour DFL-1000

Table des matières

Autres manuels D-Link Pare-feu

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link D DFL-500 DFL-500 Manuel utilisateur

D-Link

D-Link NetDefend SOHO DFL-160 Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link NetDefend DFL-1660 Manuel utilisateur

D-Link

D-Link DFL-1100 - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-1000 Manuel utilisateur

D-Link

D-Link DFL-600 Manuel utilisateur

D-Link

D-Link NetDefend DFL-800 Manuel utilisateur

D-Link

D-Link NetDefend DFL-260E Manuel utilisateur

D-Link

D-Link DFL-1600 - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-1000 Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-210-IPS-12 Manuel utilisateur

D-Link

D-Link NetDefend DFL-CP310 Mode d’emploi

D-Link

D-Link DFL-800 - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-500 Manuel utilisateur

D-Link

D-Link DFL-1100 - Security Appliance Manuel utilisateur

D-Link

D-Link NetDefendOS Manuel utilisateur

D-Link

D-Link DFL-1660-IPS-12 Manuel utilisateur

D-Link

D-Link NetDefend DFL-260E Manuel utilisateur

D-Link

D-Link DFL-600 Manuel utilisateur

D-Link

D-Link NetDefend DFL-860E Manuel utilisateur

Manuels Pare-feu populaires d'autres marques

Cisco

Cisco S190 Manuel utilisateur

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Cisco

Cisco 3110 Manuel

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur