D-Link DFL-1000 User manual

Quick Install Guide
DFL-1000
Version 2.27
1. Before you start
The DFL-1000 has the following settings when first powered on.
Operating Mode: NAT/Route
Administrator Account: User name: admin
Password: (none)
Internal Interface: IP: 192.168.1.99
Netmask: 255.255.255.0
External Interface: Manual: IP: 192.168.100.99
Netmask: 255.255.255.0
Default Gateway: (none)
Primary DNS Server: 207.194.200.1
Secondary DNS Server: 207.194.200.129
DMZ Interface: IP: 10.10.10.1
Netmask: 255.255.255.0
Use the following table to gather the information you need to customize basic settings for your DFL-
1000.
Administrator Password:
Internal Interface: IP: _____._____._____._____
Netmask: _____._____._____._____
External Interface: Manual: IP: _____._____._____._____
Netmask: _____._____._____._____
Default Gateway: _____._____._____._____
Primary DNS Server: _____._____._____._____
Secondary DNS
Server: _____._____._____._____
Internal Server
Settings: Web Server:
_____._____._____._____
Mail Server: SMTP:
_____._____._____._____
POP3: _____._____._____._____
FTP Server:
_____._____._____._____
If you provide access from the Internet to a web server, mail server, or FTP
server installed on an internal network, add the IP addresses of the servers
here.

2. Advanced settings
Use the following table for the information to customize advanced DFL-1000 settings that can be
configured using the setup wizard.
External
Interface: DHCP: If your ISP supplies you with an IP address using DHCP no further
information is required.
PPPoE: User name:
Password:
If your ISP supplies you with an IP address using PPPoE, record your PPPoE user
name and password. You can configure the external interface for PPPoE using the
setup wizard.
DHCP Server
Settings: Starting IP:
_____._____._____._____
Ending IP: _____._____._____._____
Netmask: _____._____._____._____
Default Route:
_____._____._____._____
DNS IP: _____._____._____._____
The DFL-1000 contains a DHCP server that you can configure to automatically set
the addresses of the computers on your internal network. You can configure the
DHCP server using the setup wizard.
Use the following table to record the IP address and netmask of the DFL-1000 DMZ interface if you
are configuring it during installation.
DMZ:
IP:
_____._____._____._____
Netmask:
_____._____._____._____

3. DFL-1000 package contents
4. Powering up your DFL-1000
1. Install your DFL-1000 as a free-standing appliance on any stable surface.
Make sure it has at least 1.5 in. (3.75 cm) of clearance on each side to allow for adequate air
flow and cooling.
The DFL-1000 can also be installed in a standard 19-inch rack. It requires 1 U of vertical
space in the rack.
2. Make sure the power switch on the back is turned off.
3. Connect the power cord to the power connection at the back of the DFL-1000.
4. Connect the power cable to a power outlet.
5. Turn on the power switch.
The DFL-1000 starts up. The Power and Status lights light. The Status light flashes while the
DFL-1000 is starting up and remains lit when the system is up and running.
5. DFL-1000 LED indicators
LED State Description

Power
Green The DFL-1000 is powered on.
Off The DFL-1000 is powered off.
Status
Flashing Red The DFL-1000 is starting up.
Red The DFL-1000 is running normally.
Off The DFL-1000 is powered off.
Internal
External
DMZ
indicator lights
Green The correct cable is in use, and the connected equipment
has power.
Flashing
Green Network activity at this interface.
Off No link established.
Internal
External
DMZ
interfaces
Green The correct cable is in use, and the connected equipment
has power.
Flashing
Amber Network activity at this interface.
Off No link established.
6. Using the Firewall Setup Wizard
To run the Setup Wizard, you must connect to the DFL-1000 web- based manager. You require:
• A management computer with an ethernet connection
• Internet Explorer version 4.0 or higher
• A crossover cable or an ethernet hub and two ethernet cables
To run the Setup Wizard:
1. Set the IP address of the computer with an ethernet connection to the static IP address
192.168.1.2 and a netmask of 255.255.255.0.
2. Using the crossover cable or the ethernet hub and cables, connect the internal interface of the
DFL-1000 to the computer ethernet connection.

3. Start Internet Explorer version 4.0 or higher. Type https://192.168.1.99 into the Address field
and press Enter.
Your browser connects to the web- based manager and the DFL-1000 login page appears.
4. Type admin in the Name field and select Login.
5. Select the Wizard button at the upper right of the web- based manager to start the setup
wizard.
6. Use the information you gathered on the first two pages of this Quick Install Guide to fill in the
wizard fields as required. Select next to step through the wizard pages.
7. Confirm your configuration settings and then select Finish and Close.
You are ready to connect the DFL-1000 to your network.
7. Basic configuration using the CLI
As an alternative to the setup wizard, you can use the command line interface (CLI) to configure the
DFL-1000.
To use the CLI:
1. Connect one end of the null-modem cable to the DFL-1000 Console (RS-232 serial)
connector and connect the other end to a serial port of a management computer or terminal.
2. On the management computer, start a terminal program such as HyperTerminal.
3. Set the Baud Rate (bps) to 9600, Data bits to 8, Parity to None, Stop bits to 1, and flow control
to None.
4. Press Enter to connect to the DFL-1000.

5. At the D-Link Login: prompt, type admin and press Enter twice.
6. Set the internal interface to the Internal IP Address and netmask.
For example, to set the internal interface to IP address 192.168.1.1 and netmask to
255.255.255.0 enter:
set system interface internal ip 192.168.1.1 255.255.255.0
7. Set the external interface to the External IP Address and Netmask.
For example, to set the Manual IP address to 204.23.1.5 and netmask to 255.255.255.0 enter:
set system interface external ip 204.23.1.5 255.255.255.0
To set the external interface to use PPPoE and to set the PPPoE user name to username
and the PPPoE password to password enter:
set system interface external pppoe enable username
password
To set the external interface to use DHCP enter:
set system interface external dhcp enable
8. Set the DMZ interface to the DMZ IP Address and Netmask.
For example, to set the DMZ interface to IP address 10.10.10.2 and netmask to
255.255.255.0 enter:
set system interface dmz ip 10.10.10.2 255.255.255.0
Note: If your address changes have placed the DMZ on the same subnet as the Internal or
External interfaces you must change the DMZ address to a different IP address.
9. To check your changes, enter:
get system interface
10. Set the default route to the Default Gateway IP address.
For example to set the default route to 204.23.1.2 enter:
set system route add 0.0.0.0 0.0.0.0 gw 204.23.1.2 dev
external
Once these addresses are set, you are ready to connect the DFL-1000 to your network.

8. Connecting the DFL-1000
There are three 10/100 BaseTX connectors on the DFL-1000:
• Internal for connecting to your internal network
• External for connecting to your public switch or router and the Internet
• DMZ for connecting to a DMZ network
To connect the DFL-1000:
1. Connect the Internal interface to the hub or switch connected to your internal network.
2. Connect the External interface to the public switch or router provided by your Internet Service
Provider.
3. Optionally connect the DMZ interface to your DMZ network.
9. Advanced configuration
You have completed the basic network setup of your DFL-1000. By default all traffic originating from
your Internal network is allowed to reach the Internet, and all traffic originating from the Internet is
blocked from reaching your internal network.
You can continue configuring the DFL-1000 by connecting to the web-based manager from the
internal network. Browse to https:// followed by the IP address of the DFL-1000 internal interface.
You can now customize your DFL-1000 configuration using the information in the DFL-1000 User
Manual and in the DFL-1000 web- based manager online help.

You can:
• Customize the firewall configuration
• Add and configure IPSec, PPTP, and L2TP VPNs
• Configure the Network Intrusion Detection (NIDS)
• Customize virus and worm protection
• Configure logging and reporting
• Customize the DFL-1000 system configuration
Configuring the DMZ interface
Use the following procedure to change the IP address of the DMZ interface. Using the web- based
manager:
• Go to System > Network > Interface.
• For the dmz interface, select Modify .
• Change IP address and netmask as required.
• Select Apply.
Transparent mode
This Quick Install Guide describes how to configure the DFL-1000 to run in Network Address
Translation (NAT) mode. You can also configure the DFL-1000 to run in Transparent mode. Refer to
the Transparent mode installation chapter of the DFL-1000 User Manual.
10. Troubleshooting
Reconnecting to the web- based manager
If you changed the IP address of the internal interface, you must reconnect to the web- based
manager by browsing to https:// followed by the new IP address. You may also have to change the
IP address of the management computer to be on the same subnet as the internal interface.

Restarting the DFL-1000
At any time during the installation process if the DFL-1000 is not responding correctly, you can shut it
down and restart it.
Using the web-based manager:
• Go to System > Status.
• Select Restart.
Using the CLI:
• Enter the command.
execute reboot
You can cycle the power on the DFL-1000 using the power switch on the back of the unit.
Resetting the DFL-1000 to the factory default configuration
If restarting does not solve the problem, you can restore the DFL-1000 to its factory default
configuration.
Using the web-based manager:
• Go to System > Status.
• Select Restore Factory Defaults and select OK.
The DFL-1000 restarts with the configuration that it had when first powered on.
Using the CLI:
• Enter the command.
execute reset
The DFL-1000 restarts with the configuration that it had when first powered on.