D-Link DFL-800 - Security Appliance Instructions d'installation et d'utilisation

D-Link International

Confidential and proprietary

D-Link And TheGreenBow Solution

L-

-8

Version 2.00

(2009-5-28)

D-Link International

Confidential and proprietary

Revision History

Date Rev. Description Editor

2009-4-24 1.0

Interoperability Compliance Testing Negotiate mode for

Phase1 and Phase2 using TheGreenBow VPN Client

software and D-Link product’s DFL-800. John Yoong

2009-5-28 2.0 Added the function VPN User Authentication using

TheGreenBow VPN Client software (X-Auth) and DFL- 800

(External Radius Server) and changed the network

diagram. John Yoong

1. Introduction

The objective of this document is to provide a guide describing how to configure the

devices to achieve the same environment as show at the network topology.

Users of this document are expected to already possess basic knowledge of D-Link

devices and TheGreenBow VPN software, and are familiar with how to perform basic

configurations. Only important configurations, such as those pertaining to interfacing and

integrating, will be described in this document.

For purpose of reference, configuration files for each device are available for download.

2. Audience

This document is intended for project engineers or end users that need to implement

DFL series and TheGreenBow software at the sites.

3. Objective

This topology consist the scenarios that integrates using TheGreenBow VPN program

and D-Link Firewall and demonstrate integrations and network solutions to OBUs, and in

addition, to Partners and Customers from D-Link International.

4. List of Equipment and Software

The table below shows the devices information.

Device No. Device Name Device Model Firmware

1 TheGreenBow VPN Client Software - 4.6x

2 Netdefend IPS Firewall DFL-800 2.20.03.08-8257

3 WinRadius Radius Server - 4.00

D-Link International

Confidential and proprietary

5. Network Diagram

Note: Router is set to allow IPSec pass through.

6. Configurations

In this document, we will only describe the main configurations for this Scenario. The

configurations setting for all the D-Link products will not be described here and for more

detail about the product you can download their user guide.

1) TheGreenBow VPN Client (IPSec) and D-Link Security Solutions

(VPN Client ÆDFL-800)

2) TheGreenBow VPN Client (XAuth) and D-Link Security Solutions

(VPN Client ÆDFL-800 ÆRadius Server)

6.1 TheGreenBow VPN Client (IPSec) and D-Link Security Solutions

(VPN Client ÆDFL-800)

In this scenario the user can connect back to the headquarter database by using

TheGreenBow VPN Client connection to DFL-800.

All configurations are based on DFL-800 (F/W: 2.20.03.08-8257) and TheGreenBow

VPN Client (F/W: 4.60.0.0)

D-Link International

Confidential and proprietary

The steps in this configuration are:

•Setup DFL-800 for VPN tunneling

•Setup Pre-shared Key

•Phase 1 and Phase 2 algorithms setup

•Setting up IPSec-Tunnel

•Setup IP Rules

•Setup TheGreenBow VPN Client software

•Setup Phase 1

•Setup Phase 2

6.1.1) Setup DFL-800 for VPN tunneling

6.1.1.1) Setup Pre-Shared Key

1) Login to the DFL-800 and click “Authenticate Objects” and add a

new “Pre-shared Key” and fill in the passphrase and name.

D-Link International

Confidential and proprietary

6.1.1.2) Phase 1 and Phase 2 algorithms setup

1) At the “IKE Algorithms”, select the Encryption and Integrity

algorithms for your phase 1 authenticate.

2) Next is the “IPSec Algorithms”, select the Encryption and

Integrity algorithms for the Phase 2.

D-Link International

Confidential and proprietary

6.1.1.3) Setting up IPSec-Tunnel

1) After we finish setting up the algorithms, next we will need to

create the “IPSec-Tunnel” as show below.

2) Next, click on the “Authentication” tab and select the “Pre-

Shared Key” you have setup at the steps 1.

D-Link International

Confidential and proprietary

3) After selecting the Pre-Shared Key, next is to enable the

“Dynamically add route” at the routing tab.

4) Last step is to make sure the DH Group at the IKE setting is the

same setting for the TheGreenBow VPN Client software.

6.1.1.4) Setup IP Rules

Now is to setup the IP Rules so there the DFL-800 knows where

to direct all the traffic to.

1) First add a new interface group name “IPSec-LAN” by grouping

up “IPSec-Tunnel” and “LAN”.

D-Link International

Confidential and proprietary

2) Next, click “IP Rules” and add a new IP rule as show below.

D-Link International

Confidential and proprietary

6.1.2) Setup TheGreenBow VPN Client Software

6.1.2.1) Setup Phase 1

1) Right click on the “Root” to add a new “Phase1”, next fill in the IP

address for this VPN client and Remote gateway IP follow by

Preshared Key and IKE setting.

Note: the Preshared Key and IKE must be the same setting set in the DFL-800.

D-Link International

Confidential and proprietary

6.1.2.2) Setup Phase 2

1) Right click on the “Phase1” to add a new “Phase2”, next fill in the

VPN Client address for this VPN client and Remote gateway IP

follow by ESP setting.

Note: the ESP Encryption and Authentication setting must be the same in the

DFL-800 IPSec-Tunnel.

Autres manuels pour DFL-800 - Security Appliance

Table des matières

Autres manuels D-Link Pare-feu

D-Link

D-Link DFL-500 Manuel utilisateur

D-Link

D-Link NetDefend DFL-800 Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-260 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-1000 Manuel utilisateur

D-Link

D-Link DFL-1100 - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-600 Manuel utilisateur

D-Link

D-Link NetDefend SOHO DFL-160 Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link NetDefend DFL-1660 Manuel utilisateur

D-Link

D-Link DFL-200 - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-1660-IPS-12 Manuel utilisateur

D-Link

D-Link NetDefend DFL-260E Manuel utilisateur

D-Link

D-Link DFL-200 - Security Appliance Manuel utilisateur

D-Link

D-Link D DFL-500 DFL-500 Manuel utilisateur

D-Link

D-Link DFL-870 Manuel utilisateur

D-Link

D-Link NetDefend DFL-260E Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Mode d’emploi

D-Link

D-Link DFL-1100 - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-800 - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Manuel utilisateur

D-Link

D-Link DFL-600 Manuel utilisateur

D-Link

D-Link NetDefendOS Manuel utilisateur

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Mode d’emploi

Manuels Pare-feu populaires d'autres marques

Cisco

Cisco S190 Manuel utilisateur

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Cisco

Cisco 3110 Manuel

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur