D-Link DFL-1000 User manual

DFL-1000
Workgroup Firewall
User
’ s Manual
Rev. 02 (March, 2002)
D-Link Systems, Inc.
DFL-1000 User’s Manual 1

© Copyright 2002 D-Link Systems, Inc. All rights reserved.
No part of this publication including text, examples, diagrams or illustrations may be reproduced,
transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical or
otherwise, for any purpose, without prior written permission of D-Link Systems, Inc.
DFL-1000 User’s Manual
Version 2.2
28 Mach 2002
Trademarks
Products mentioned in this document are trademarks or registered trademarks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
DFL-1000 User’s Manual 2

Table of Contents
Introducing the DFL-1000..........................................................................9
Firewall...................................................................................................................................................... 9
Network Address Translation (NAT)................................................................................................... 10
Transparent mode .............................................................................................................................. 10
Hacker prevention and protection........................................................................................................... 10
VPN......................................................................................................................................................... 11
Virus and worm protection...................................................................................................................... 11
Web content filtering ............................................................................................................................... 11
Secure installation, configuration, and management .............................................................................12
Web-based manager .......................................................................................................................... 12
Command line interface...................................................................................................................... 13
Logging and reporting......................................................................................................................... 13
About this document ............................................................................................................................... 13
Customer service and technical support ................................................................................................ 14
Installing the DFL-1000............................................................................15
Before you start ...................................................................................................................................... 15
NAT mode install ................................................................................................................................ 15
Transparent Mode Install.................................................................................................................... 16
Unpacking the DFL-1000........................................................................................................................ 17
Mounting the DFL-1000.......................................................................................................................... 17
Powering on the DFL-1000..................................................................................................................... 18
Using the Quick Setup Wizard................................................................................................................ 18
Connecting to the web-based manager .............................................................................................18
Starting the Quick Setup Wizard ........................................................................................................ 19
Reconnecting to the web-based manager.......................................................................................... 19
Configuring the DFL-1000 from the CLI ................................................................................................. 19
Connecting to the CLI......................................................................................................................... 20
Configuring the DFL-1000 to run in NAT mode.................................................................................. 20
Configuring the DFL-1000 to run in Transparent mode ..................................................................... 21
Connecting the DFL-1000 to your network............................................................................................. 22
NAT mode connections ...................................................................................................................... 22
Transparent mode connections.......................................................................................................... 23
Configuring your internal network........................................................................................................... 24
Completing the configuration.................................................................................................................. 24
Configuring the DMZ interface ........................................................................................................... 24
Setting the date and time.................................................................................................................... 25
Firewall Configuration ............................................................................26
Controlling connections from the Internet............................................................................................... 26
Accepting incoming connections in NAT mode .................................................................................. 26
DFL-1000 User’s Manual 3

Accepting incoming connections in Transparent mode...................................................................... 27
Denying incoming connections........................................................................................................... 28
Arranging policies in the incoming policy list ...................................................................................... 29
Controlling connections to the Internet ................................................................................................... 29
Denying connections to the Internet from the internal network .......................................................... 30
Accepting connections to the Internet from the internal network ....................................................... 31
Requiring authentication to connect to the Internet............................................................................32
Arranging policies in the Int to Ext and Outgoing policy list ............................................................... 32
Controlling connections to and from the DMZ ........................................................................................ 33
Policies.................................................................................................................................................... 33
Policy information ............................................................................................................................... 33
Default policy ...................................................................................................................................... 34
Adding policies ................................................................................................................................... 34
Editing policies.................................................................................................................................... 35
Policy matching .................................................................................................................................. 35
Arranging policies in the policy list ..................................................................................................... 35
Addresses............................................................................................................................................... 35
Adding addresses............................................................................................................................... 36
Editing addresses ............................................................................................................................... 36
Organizing addresses into address groups........................................................................................37
Services .................................................................................................................................................. 37
Pre-defined services........................................................................................................................... 38
Providing access to custom services ................................................................................................. 39
Grouping services............................................................................................................................... 39
Schedules ............................................................................................................................................... 40
Creating one-time schedules.............................................................................................................. 40
Creating recurring schedules.............................................................................................................. 41
Applying a schedule to a policy .......................................................................................................... 42
Users and authentication........................................................................................................................ 42
Adding authentication to a policy........................................................................................................ 43
Virtual IPs ............................................................................................................................................... 44
Adding Virtual IPs ............................................................................................................................... 44
IP/MAC binding....................................................................................................................................... 44
Adding IP/MAC binding addresses..................................................................................................... 45
Enabling IP/MAC binding.................................................................................................................... 45
Traffic shaping ........................................................................................................................................ 45
Adding traffic shaping to a policy........................................................................................................ 45
VPN pass through................................................................................................................................... 46
Adding IPSec and PPTP pass through ..............................................................................................46
IPSec VPNs...............................................................................................47
Compatibility with third-party VPN products ........................................................................................... 47
Autokey IPSec VPN between two networks........................................................................................... 47
Creating the VPN tunnel..................................................................................................................... 48
DFL-1000 User’s Manual 4

Adding internal and external addresses ............................................................................................. 49
Adding an IPSec VPN policy .............................................................................................................. 50
Autokey IPSec VPN for remote clients ................................................................................................... 51
Configuring the VPN tunnel for the client VPN...................................................................................52
Adding internal and external addresses ............................................................................................. 53
Adding an IPSec VPN policy .............................................................................................................. 53
Configuring the VPN client ................................................................................................................. 54
Manual key exchange IPSec VPN between two networks..................................................................... 54
Configuring the VPN tunnel................................................................................................................ 55
Adding internal and external addresses ............................................................................................. 55
Adding an IPSec VPN policy .............................................................................................................. 56
Manual key exchange IPSec VPN for remote clients............................................................................. 56
Configuring the VPN tunnel................................................................................................................ 56
Adding internal and external addresses ............................................................................................. 56
Adding an IPSec VPN policy .............................................................................................................. 56
Testing a VPN......................................................................................................................................... 57
PPTP and L2TP VPNs ..............................................................................58
PPTP VPN configuration ........................................................................................................................ 58
Configuring the DFL-1000 as a PPTP server..................................................................................... 59
Configuring a Windows 98 client for PPTP ........................................................................................60
Configuring a Windows 2000 Client for PPTP.................................................................................... 61
Configuring a Windows XP Client to connect to a DFL-1000 PPTP VPN..........................................61
L2TP VPN configuration ......................................................................................................................... 62
Configuring the DFL-1000 as an L2TP server.................................................................................... 63
Configuring a Windows 2000 Client for L2TP .................................................................................... 64
Configuring a Windows XP Client to connect to a DFL-1000 L2TP VPN .......................................... 65
RADIUS authentication for PPTP and L2TP VPNs ................................................................................ 66
Adding RADIUS server addresses ..................................................................................................... 67
Turning on RADIUS authentication for PPTP..................................................................................... 67
Turning on RADIUS authentication for L2TP ..................................................................................... 67
Intrusion detection system (IDS) ............................................................68
Attack prevention .................................................................................................................................... 68
Alert email............................................................................................................................................... 68
Configuring alert email........................................................................................................................ 68
Testing email alerts ............................................................................................................................ 69
Virus protection........................................................................................70
Virus and worm protection for your internal network .............................................................................. 70
Configuring high level virus protection for your internal network........................................................ 71
Configuring medium level virus protection for your internal network ................................................. 72
Configuring low level virus protection for your internal network ......................................................... 73
Configuring worm protection for your internal network....................................................................... 74
Virus and worm protection for incoming connections............................................................................. 74
DFL-1000 User’s Manual 5

High level virus protection for incoming connections ......................................................................... 74
Medium level virus protection for incoming connections .................................................................... 75
Low level virus protection for incoming connections .......................................................................... 76
Worm protection for incoming connections ........................................................................................76
Updating your antivirus database ........................................................................................................... 77
Updating the antivirus database manually ......................................................................................... 77
Configuring automatic antivirus database updates ............................................................................ 77
Displaying virus and worm lists .............................................................................................................. 78
Web content filtering ...............................................................................79
Blocking web pages that contain undesired words ................................................................................79
Enabling the banned word list ............................................................................................................ 79
Adding words to the banned word list ................................................................................................ 79
Temporarily disabling the banned word list ........................................................................................ 80
Temporarily disabling individual words in the banned word list ......................................................... 80
Clearing the banned word list............................................................................................................. 80
Creating the banned word list using a text editor ...............................................................................80
Blocking access to Internet sites ............................................................................................................ 81
Enabling the URL block list................................................................................................................. 81
Adding URLs to the URL block list ..................................................................................................... 81
Temporarily disabling the URL block list ............................................................................................ 81
Temporarily disabling blocking individual URLs.................................................................................81
Clearing the URL block list ................................................................................................................. 82
Creating the URL block list using a text editor ................................................................................... 82
Removing scripts from web pages ......................................................................................................... 82
Logging and reporting.............................................................................84
Configuring logging................................................................................................................................. 84
Recording logs on a remote computer ............................................................................................... 84
Selecting what to log .......................................................................................................................... 85
Log message formats ............................................................................................................................. 85
Traffic log message format................................................................................................................. 86
Event log message format.................................................................................................................. 86
Attack log message format................................................................................................................. 87
Viewing and maintaining logs ................................................................................................................. 88
Viewing logs ....................................................................................................................................... 88
Searching logs.................................................................................................................................... 89
Downloading a log file to the management computer ........................................................................ 89
Deleting all of the messages in an active log ..................................................................................... 90
Deleting a saved log file ..................................................................................................................... 90
Administering the DFL-1000 ...................................................................91
Logging into the web-based manager .................................................................................................... 91
System status ......................................................................................................................................... 91
Changing the operating mode ............................................................................................................ 92
DFL-1000 User’s Manual 6

Upgrading the DFL-1000 firmware ..................................................................................................... 92
Updating your antivirus database....................................................................................................... 92
Displaying the DFL-1000 serial number ............................................................................................. 92
Restoring system settings .................................................................................................................. 93
Restoring system settings to factory defaults..................................................................................... 93
Restarting the DFL-1000 .................................................................................................................... 95
Shutting down the DFL-1000.............................................................................................................. 95
System status monitor ........................................................................................................................ 95
Network configuration............................................................................................................................. 96
Changing IP addresses ...................................................................................................................... 96
Configuring the external interface for DHCP...................................................................................... 96
Configuring the external interface for PPPoE..................................................................................... 96
Changing MTU size to improve network performance ....................................................................... 97
Setting DNS server addresses ........................................................................................................... 97
Controlling management access to the DFL-1000............................................................................. 97
Configuring routing ............................................................................................................................. 98
Enabling RIP server support............................................................................................................... 98
Providing DHCP services to your internal network ............................................................................ 99
System configuration ............................................................................................................................100
Setting system date and time ...........................................................................................................100
Changing web-based manager options............................................................................................ 101
Adding and editing administrator accounts ......................................................................................101
Configuring SNMP............................................................................................................................102
Using the DFL-1000 CLI.........................................................................104
Connecting to the DFL-1000 CLI..........................................................................................................104
Connecting to the DFL-1000 communications port..........................................................................104
Connecting to the DFL-1000 CLI using SSH....................................................................................105
CLI basics .............................................................................................................................................105
Recalling commands ........................................................................................................................105
Editing commands ............................................................................................................................105
Using command shortcuts ................................................................................................................106
Using command help........................................................................................................................106
Installing firmware from a TFTP server ................................................................................................106
Glossary..................................................................................................109
Troubleshooting FAQs ..........................................................................112
General administration..........................................................................................................................112
Network configuration...........................................................................................................................112
Firewall policies ....................................................................................................................................112
Schedules .............................................................................................................................................113
VPN.......................................................................................................................................................113
Virus protection..................................................................................................................................... 114
Web content filtering .............................................................................................................................114
DFL-1000 User’s Manual 7

Logging .................................................................................................................................................114
Technical Support..................................................................................116
DFL-1000 User’s Manual 8

Introducing the DFL-1000
The DFL-1000 is one of a series of new generation all-layer security products that provide comprehensive
protection for your internal network. These products, Application Security Gateways, combine key security
technologies into a dedicated platform designed for high performance and reliability. In a compact, easy
to install and configure package the DFL-1000 combines:
• A fully-configurable firewall
• Hacker attack prevention and protection
• Virtual private networking (VPN)
• Virus protection
• Content filtering
• Easy and secure configuration management
Employing high-performance architecture, a dedicated co-processor, proprietary BIOS and OS firmware,
the DFL-1000 offers the best and highest performance solution for securing your business network.
Firewall
The core function of the DFL-1000 is a state-of-the-art firewall that protects computer networks from the
hostile environment of the Internet. The firewall provides control of security policies through a carefully
designed interface that is easy to use but allows full control even in complex situations.
DFL-1000 security policies include a complete range of options that:
• Control incoming and outgoing traffic
• Block or allow access for all policy options
• Control when individual policies are in effect
• Accept or deny traffic to and from individual addresses
• Control standard and user definable network services individually or in groups
• Require users to enter passwords before gaining access to the Internet
• Include traffic shaping to set priority and guarantee or limit bandwidth for each policy
• Front view of the DFL-1000:
DFL-1000 User’s Manual 9

Network Address Translation (NAT)
In NAT mode, the DFL-1000 is installed as a privacy barrier between the internal network and the Internet.
The firewall provides network address translation to protect the private network. In NAT mode, you can
add a DMZ network to provide public access to Internal servers while protecting them behind the firewall
on a separate internal network.
Features supported in NAT mode include:
• Firewall protection, allow/deny traffic according to source/destination address, service, and time of
day
• VPN, virus protection, and Web content filtering
• IP/MAC binding
• DHCP configuration of the DFL-1000 external network address
• Detailed logging
Transparent mode
Transparent Mode provides even quicker and easier installation when the requirement is to provide
firewall protection to a pre-existing network with public addresses. The internal and external network
interfaces of the DFL-1000 can be in the same network; therefore, the DFL-1000 can be inserted into
your network at any point without the need to make any changes to your network.
Packets arriving at the DFL-1000 are intelligently forwarded to the correct network interface and firewall
policies prevent unauthorized access to your network.
Transparent mode provides the same basic firewall protection as NAT mode. However, more advanced
features such as the DMZ network, VPN, virus scanning, and content filtering are only available in NAT
mode.
Hacker prevention and protection
The DFL-1000 is built to defend your network from network attacks including:
• Distributed Denial-Of-Service (DDOS) attacks
SYN Attack
ICMP Flood
UDP Flood
• IP fragmentation attacks
Ping of Death Attack
Tear Drop Attack
Land Attack
• Port Scan Attack
• IP Source Routing
• IP Spoofing Attack
• Address Sweep Attack
• WinNuke Attack
You can configure email alerts that send an email to the system administrator when the DFL-1000 detects
one of these attacks. You can also configure email alerts to provide real time warnings of ongoing attacks.
Up to three email recipients can be specified.
DFL-1000 User’s Manual 10

VPN
Using the DFL-1000 integrated VPN, you can provide a secure connection between widely separated
office networks or securely link telecommuters or travellers to your office network. The DFL-1000 industry
standard VPN creates an encrypted traffic tunnel between DFL-1000-protected networks or between a
DFL-1000 and third-party VPN products that support IPSec. VPN features include:
• IPSec, ESP security in tunnel mode
• Hardware accelerated encryption using IPSEC, DES, and 3DES (triple-DES)
• HMAC MD5 or HMAC SHA authentication and data integrity
• Automatic IKE (Internet Key Exchange) and manual key exchange
• PPTP for easy connectivity with the VPN standard supported by the most popular operating systems
• L2TP for easy connectivity with a more secure VPN standard also supported by many popular
operating systems
Virus and worm protection
D-Link's DFL-1000 secure gateway solution adds anti-virus and anti-worm functionality to conventional
VPN and firewall. Virus and worm protection screens the information found in web (HTTP protocol) and
email content (SMTP, POP3, and IMAP protocols) for the following types of target files:
• Executable files (exe, bat, and com)
• Visual basic files (vbs)
• Compressed files (zip, gzip, tar, hta, and rar)
• Screen saver files (scr)
• Dynamic link libraries (dll)
• MS Office files
You can configure DFL-1000 virus scanning to block the target files or scan them for viruses and worms.
You can configure three levels of virus protection:
• High level protection removes target files from HTTP transfers and email attachments before they
pass through the firewall
With high level protection turned on, the DFL-1000 does not perform virus scanning. Instead, all files
and attachments are identified and removed from content protocol data streams.
• Medium level protection scans all target files for viruses
You can configure the virus scanning engine to perform up to four different types of virus scans on
each target file.
• Low level protection temporarily suspends virus protection
All target files are forwarded unchanged to their destinations.
You can also configure worm scanning to look for filenames known to be used by worms. For example,
the Nimda worm uses files named readme.exe and sample.exe.
DFL-1000 content virus and worm prevention is transparent to the end user. Client and server programs
require no special configuration, and D-Link high-performance hardware and software ensure there are
no noticeable download delays.
Web content filtering
Using Web content filtering, you can screen for three types of web content:
DFL-1000 User’s Manual 11

• Unwanted content such as adult sites
• Unwanted URLs such as stock quote/trading sites
• Unsecure web content such as:
Java Applets
Cookies
Malicious Scripts
ActiveX
Site blocking is accomplished by scanning URLs or web pages for user defined patterns.
Secure installation, configuration, and management
Installation is quick and simple. All that is required to get the DFL-1000 up and running and protecting
your network is to connect to the web-based manager and use the Quick Setup Wizard to configure the
DFL-1000. You can also perform the basic configuration from the DFL-1000 command line interface (CLI).
When initially connected to your network, the DFL-1000 comes with a default configuration that provides
basic security features. From this foundation you can use the web-based manager to customize the
configuration to meet your needs.
Web-based manager
Using a secure HTTPS connection from any computer running Internet Explorer, you can configure and
manage the DFL-1000. It can also be configured for secure administration from the external network
(Internet).
Configuration changes made with the web-based manager are effective immediately without the need to
reset the firewall or interrupt service.
Once a satisfactory configuration has been established, it can be downloaded and saved. The saved
configuration can be restored at any time.
DFL-1000 User’s Manual 12

The DFL-1000 web-based manager and quick setup wizard:
Command line interface
For troubleshooting and professional scripting, a command line interface is available by connecting a
management computer to the DFL-1000 RS-232 serial connection.
Logging and reporting
The DFL-1000 supports logging of various categories of traffic and of configuration changes. You can
configure logging to:
• Report traffic that connects to the firewall interfaces
• Report network services used
• Report traffic permitted by firewall policies
• Report traffic that was denied by firewall policies
• Report configuration changes
Logs can be sent to a remote syslog server or saved on an optional hard drive installed in the DFL-1000.
About this document
This user manual describes how to install and configure the DFL-1000. This document contains the
following chapters:
• Installing the DFL-1000
• Firewall Configuration describes how to configure firewall policies to enhance firewall protection
• IPSec VPNs describes how to create an IPSec VPN between two internal protected networks and
between an internal network and a client
• PPTP and L2TP VPNs describes how to configure PPTP and L2TP VPNs between the DFL-1000 and
a windows client
• Intrusion detection system (IDS) describes how to configure the DFL-1000 to detect and prevent
common network attacks
• Virus protection describes how use the DFL-1000 to protect your network from viruses and worms
DFL-1000 User’s Manual 13

• Web content filtering describes how to configure Web content filters to prevent unwanted Web
content from passing through the DFL-1000
• Logging and reporting describes how to configure logging and reporting to track activity through the
DFL-1000
• Administering the DFL-1000 describes DFL-1000 management and administrative tasks
• Using the DFL-1000 CLI introduces the DFL-1000 CLI and describes the basics of connecting to and
using the CLI
• The Glossary defines many of the terms used in this document
• Troubleshooting FAQs help you find the information you need if you run into problems
Customer service and technical support
For updated product documentation, technical support information, and other resources, please visit our
web site at http://tsd.dlink.com.tw
You can contact D-Link Technical Support at your local D-Link office:
• See Technical Support
To make it possible for us to provide the support you require, please provide the following information:
• Name
• Company Name
• Location
• Email address
• Telephone Number
• Software Version
• Serial Number
• Detailed description of your problem
DFL-1000 User’s Manual 14

Installing the DFL-1000
This chapter describes how to install the DFL-1000 firewall between your network and the Internet. After
you have completed the procedures in this chapter, your DFL-1000 will be up and running and protecting
your internal network.
This chapter includes:
• Before you start
• Unpacking the DFL-1000
• Mounting the DFL-1000
• Powering on the DFL-1000
• Using the Quick Setup Wizard
Configuring the DFL-1000 from the CLI •
Connecting the DFL-1000 to your network •
Configuring your internal network •
Completing the configuration •
Before you start
Before starting the installation of the DFL-1000, you must decide whether you are going to be running it in
NAT mode or Transparent mode. This choice determines the information that you require to install the
DFL-1000 as well as the installation steps that you perform.
NAT mode install
Use NAT mode configuration information to collect the information required to configure the DFL-1000 to
run in Network Address Translation (NAT) mode.
NAT mode configuration information (Part 1 of 2)
1. Administrator
Password
Specify an administrator password. The password should be difficult to guess. It must be at least
6 characters long and may contain numbers (0-9) and upper and lower case letters (A-Z, a-z), but
no spaces.
2. Internal
Interface
In the space below, record the IP address and netmask to connect the DFL-1000 to your internal
network.
IP Netmask
If your ISP has assigned you a static IP address, put a check mark next to Manual below. Record
the Manual IP address and netmask to connect the DFL-1000 to the internet and record the IP
address of your default internet IP gateway.
If your ISP supplies you with an IP address using DHCP or PPPoE, check the appropriate box
below.
Manual DHCP PPPoE
IP Address* Netmask
Gateway
4. DNS Server
In the space below, record the IP addresses of the primary and secondary DNS servers provided
3. External
Interface
DFL-1000 User’s Manual 15

by your ISP.
Primary Secondary
5. DHCP Server
(optional)
If you plan to use the DFL-1000 as a DHCP server to assign IP addresses to the computers on
your internal network, you must specify the IP address range reserved to be assigned by the
DHCP server.
Starting IP Ending IP
6. Anti-Virus
(optional)
Choose virus protection levels to protect your internal network from viruses. You can set high,
medium, and low protection for web traffic (HTTP), and email traffic (SMTP, POP3, and IMAP).
For information on high, medium, and low protection, see Virus protection.
HTTP High Medium Low
SMTP High Medium Low
POP3 High Medium Low
IMAP High Medium Low
7. DMZ Interface
(Optional)
In the space below, record the IP address and netmask to connect the DFL-1000 to your DMZ
network.
IP Netmask
* The Internal and External IP addresses must be on separate subnets.
Transparent Mode Install
Use Transparent mode configuration information to collect the information required to configure the DFL-
1000 to run in Transparent mode.
Transparent mode configuration information
1. Administrator
Password
Specify an administrator password. The password should be difficult to guess. It must be at
least 6 characters long and may contain numbers (0-9) and upper and lower case letters (A-Z,
a-z), but no spaces.
2. Transparent
Management IP
In the space below, record the IP address and netmask to connect the DFL-1000 to a network
for management. Management can be done from a computer on your internal network or from
a separate network.
Also record the IP address of the default gateway required to connect the DFL-1000 to a
network for management. The default gateway address is not required if the management
computer can be reached without going through a default gateway.
Management IP Netmask
Default Gateway
3. DNS Server In the space below, record the IP addresses of the primary and secondary DNS servers
provided by your ISP.
Primary Secondary
DFL-1000 User’s Manual 16

Unpacking the DFL-1000
The DFL-1000 package contains the following items:
• The DFL-1000 firewall
• A blue cross-over ethernet cable
• A gray regular ethernet cable
• A null-modem cable
• The DFL-1000 Quick Start Guide
• A CD containing this DFL-1000 User Manual
• A power cord
DFL-1000 package contents
Mounting the DFL-1000
The DFL-1000 can be mounted on a standard 19-inch rack. It requires 1 U of vertical space in the rack.
The DFL-1000 can be installed as a free-standing appliance on any stable surface. For free-standing
installation, make sure the appliance has at least 1.5 in. (3.75 cm) of clearance on each side to allow for
adequate air flow and cooling.
Dimensions
• 426 x 252 x 44 mm (Rack mount, 1 U height)
Weight
• 7.25 lb.
Power requirements
• Power Dissipation: 50 W (max)
• AC input voltage: 100 to 240 VAC
• AC input current: 1.6 A
• Frequency: 50 to 60 Hz
DFL-1000 User’s Manual 17

Environmental specifications
• Operating Temperature: 32 to 104 °F (0 to 40 °C)
• Storage Temperature: -13 to 158 °F (-25 to 70 °C)
• Humidity: 5 to 95% non-condensing
Powering on the DFL-1000
To power on the DFL-1000:
• Make sure the power switch on the back of the DFL-1000 is turned off.
• Connect the power cord to the power connection at the back of the DFL-1000.
• Connect the power cord to a power outlet.
• Turn on the power switch.
The DFL-1000 starts up. The Power and Status lights light. The Status light flashes while the DFL-1000 is
starting up and remains lit when the system is up and running.
Using the Quick Setup Wizard
Use the procedures in this section to connect to the web-based manager and use the Quick Start Wizard
to create your initial DFL-1000 configuration.
Connecting to the web-based manager
To connect to the web-based manager you require:
• A computer with an ethernet connection
• Internet Explorer version 4.0 or higher
• A crossover cable or an ethernet hub and two ethernet cables
To connect to the web-based manager:
• Set the IP address of the computer with an ethernet connection to the static IP address 192.168.1.2
and a netmask of 255.255.255.0.
• Using the crossover cable or the ethernet cables and the hub, connect the Internal interface of the
DFL-1000 and the computer ethernet connection.
• Start Internet Explorer and browse to the address https://192.168.1.99 .
The DFL-1000 login page appears.
• Type admin in the Name field and click Login.
DFL-1000 User’s Manual 18

DFL-1000 login page
Starting the Quick Setup Wizard
To start the Quick Setup Wizard:
• Click the Wizard button at the upper right of the web-based manager.
• Select the operating mode: Network Address Translation (NAT) or Transparent.
If you selected Network Address Translation (NAT), use the information that you gathered in NAT
mode configuration information to fill in the wizard fields. Click the next button to step through the
wizard pages.
If you selected Transparent, use the information that you gathered in Transparent mode configuration
information to fill in the wizard fields. Click the next button to step through the wizard pages.
• Confirm your configuration settings and then click Finish and Close.
You have now completed the initial configuration of the DFL-1000, and you can proceed to connect
the DFL-1000 to your network using the information in Connecting the DFL-1000 to your network.
Reconnecting to the web-based manager
After running the Quick Setup Wizard, if you changed the IP address of the internal interface or switched
to Transparent Mode, you must re-connect to the web-based manager using a new IP address:
• In NAT mode if you changed the IP address of the internal interface, browse to https:// followed by the
new IP address of the internal interface
• In Transparent mode, connect to the DMZ interface and browse to https:// followed by the
Transparent mode Management IP address
Otherwise you can reconnect to the web-based manager by browsing to https://192.168.1.99.
Configuring the DFL-1000 from the CLI
To connect to the DFL-1000 CLI you require:
• A computer with an available communications port
• A null modem cable with a 9-pin connector to connect to the communications port on the back panel
of the DFL-1000
• Terminal emulation software such as HyperTerminal for Windows
DFL-1000 User’s Manual 19

The following procedure describes how to connect to the DFL-1000 CLI using Windows HyperTerminal
software. You can use any terminal emulation program.
Connecting to the CLI
• Connect the null modem cable to the communications port of your computer and to the
communications port on the back of the DFL-1000.
• Make sure the DFL-1000 is powered on.
• Start HyperTerminal, enter a name for the connection, and click OK.
• Specify the communications port in the Connect using field and click OK.
• Select the following port settings and click OK:
Bits per second 9600
Data bits 8
Parity None
Stop bits 1
Flow control None
• Press Enter to connect to the DFL-1000 CLI.
The following prompt appears:
D-Link login:
• Type admin and press Enter.
The following prompt appears:
Type ? for a list of commands.
Use the procedures that follow to configure the DFL-1000 for NAT mode or Transparent mode operation.
The NAT mode and Transparent mode procedures are different. Choose the correct ones for your
installation. The NAT mode configuration procedures start next. The Transparent mode configuration
procedures begin at Configuring the DFL-1000 to run in Transparent mode.
Configuring the DFL-1000 to run in NAT mode
The procedures in this section describe how to use the CLI to configure the DFL-1000 to run in NAT
mode.
Configuring NAT mode IP addresses
• Login to the CLI if you are not already logged in.
• Set the IP address and netmask of the Internal interface to the Internal IP Address and Netmask that
you recorded in NAT mode IP addresses. Enter:
set system interface internal ip <IP Address> <Netmask>
Example
set system interface internal ip 192.168.1.1 255.255.255.0
• Set the IP address and netmask of the External interface to the External IP Address and Netmask
that you recorded in NAT mode IP addresses. Enter:
set system interface external ip <IP Address> <Netmask>
Example
set system interface external ip 204.23.1.5 255.255.255.0
• Set the IP address and netmask of the DMZ interface to the DMZ IP Address and Netmask that you
recorded in NAT mode IP addresses. Enter:
DFL-1000 User’s Manual 20