D-Link DFL-200 - Security Appliance User manual

This product can be set up using
any current web browser, i.e.,
Internet Explorer 6 or Netscape
Navigator 6.
Network Security
Firewall
5V DC Power Adapter
Before You Begin
If you purchased this Network Security Firewall to connect to your high-speed
Internet connection in a secure manner, you must have either an Ethernet-based
Cable or DSL modem with an established Internet account from an Internet
Service Provider (ISP).
Check Your Package Contents
DFL-200 Network Security Firewall
CD-ROM (containing Manual and Warranty)
Ethernet (CAT5 UTP/Straight Through) Cable
Using a power
supply with
a different voltage
rating will damage
this product and void
its warranty.
If any of the above items are missing, please contact your reseller.
DFL-200
©
2004 D-Link Systems, Inc. All rights reserved. Trademarks or registered trademarks are the property of their respective holders. Software and
2004 D-Link Systems, Inc. All rights reserved. Trademarks or registered trademarks are the property of their respective holders. Software and
2004 D-Link Systems, Inc. All rights reserved. Trademarks or registered trademarks are the property of their respective holders. Software and
2004 D-Link Systems, Inc. All rights reserved. Trademarks or registered trademarks are the property of their respective holders. Software and
specifi cations subject to change without notice.
specifi cations subject to change without notice.
specifi cations subject to change without notice.
specifi cations subject to change without notice.
Console Cable (RS 232)

2
Connecting The DFL-200 Network
Security Firewall To Your Network
A.
First, connect the power adapter to the
receptor
at the back panel of the DFL-
receptor at the back panel of the DFL-receptor
200 and then plug the other end of the power adapter to a wall outlet or power
strip. The Power LED will turn
ON
to indicate proper operation.
B.
1. Power off your Cable or DSL modem; some devices may not have a on/off
switch and will require you to unplug the power adapter. Now, the DFL-200
should be powered on and the Cable / DSL modem should be turned off.
2. Cable / DSL modem (Power Off) – DFL-200 (Power On)
Connect an Ethernet cable to the Ethernet jack located on the Cable / DSL
modem. After the Ethernet cable is securely connected, power on the Cable /
DSL modem by turning on the unit or plugging in the power adapter.
3. Cable / DSL modem (Power On) – DFL-200 (Power On)
Insert the other end of the Ethernet cable to the WAN port on the back
panel of the DFL-200. The WAN LED light will illuminate to indicate proper
connection. If the WAN LED is not illuminated, please go back to step B and
repeat its instructions.
C.
Insert an Ethernet cable to one of the
LAN ports on the back panel of the
DFL-200 and connect it to your internal network host. The LED light for the
LAN port on the DFL-200 will illuminate to indicate proper connection
D.
Connect the computer that you will use to confi gure the DFL-200 to the
network hub or switch.
WAN port
This is for
the connection of an
Ethernet cable to the
Cable or DSL modem.
COM Port
Used to
connect to the CLI.
Receptor for
Power Adapter
.
LAN ports
These are
for connecting Ethernet
cables to internal
network hosts.
DMZ port
This is for
the connection of an
Ethernet cable to the
DMZ network.
Reset
system
settings to
factory defaults

3
POWER LED – a solid light
indicates a proper connection
to the power supply.
NETWORK LEDs – a solid light on
the port indicates a connection to an
Ethernet enabled computer. These
LEDs blinks during data transmission.
Restart your computer
To obtain a new IP address from the DFL-200 you wll need
to restart your computer. Make sure that the network adapter
in your computer is confi gured properly fi rst. Instructions on
how to confi gure the network adapter to obtain an IP address
automatically from the DFL-200 can be found in the appendix.
STATUS LED – will fl ash
consistently to indicate that the
DFL-200 is working properly.

4
When you have completed the steps in this
Quick Installation
Guide, your connected network should look similar to this:
Using The Setup Wizard
Open your Web browser
and
Open your Web browser and Open your Web browser
type
“http://192.168.1.1”
into the
URL address box. Then press the
Enter
or
Enter or Enter
Return
key.
The DFL-200 provides Web based confi guration. You can
confi gure your DFL-200 through your Netscape Communicator
or Internet Explorer browser in MS Windows, Macintosh or UNIX
based platforms.
Activate your browser. Then type the IP address of the DFL-200
into the Location (for Netscape) or Address (for IE) fi eld and press
“Enter.” For example: http://192.168.1.1.
(The IP Address shown in the example above is the default
setting. If you have changed the IP Address of the DFL-200
to conform to a network, then input that IP Address in the web
browser, instead of the default IP Address shown.)

5
The Setup Wizard
(continued)
Step 2 - Set timezone
Enter
the password
Enter the password Enter
that you want to use
for the admin account.
Click
NEXT
Step 1 - Set admin password
Select
the appropriate
timezone
Click
NEXT
Enter
the appropriate
Enter the appropriate Enter
dayligt saving time settings.
Here you can choose to either
confi gure your fi rewall over HTTP
or over Secure HTTP (HTTPS).
Welcome to the DFL-200
connection wizard!
Click on
Connect to the unit via
HTTPS instead
to use Secure HTTP
Click
NEXT
to keep
using HTTP.

6
The Setup Wizard
(continued)
If you are unsure of which setting to select, please
contact your Internet Service Provider
Step 3 - Confi gure WAN
interface
Select the appropriate
confi guration for the WAN
interface, if you are unsure of
which setting to select, please
contact your Internet Service
Provider.
Click Next and continue to
step 4 further down.
Click
Next

7
Step 3 - PPPoE
The Setup Wizard
(continued)
Click
Next
Step 3 - Static IP
If you selected Static IP you
have to fi ll out the IP address
information provided to you
by your ISP. You will need to
complete all the required fi elds
except for Secondary DNS
Server. You should probably not
use the numbers displayed in
these fi elds, they are only used
as an example.
Click Next and continue to step
4 further down.
Click
Next
If you selected PPPoE (Point-
to-Point Protocol over Ethernet)
you will have to fi ll out the user
name and password provided
to you by your ISP. The PPPoE
Service Name fi eld should
be left blank unless your ISP
informs you otherwise.
Click Next and continue to step
4 further down.

8
If you selected PPTP you will
need to specify both PPTP
tunnel parameters and Physical
interface parameters.
PPTP tunnel parameters:
Enter the Username, Password
and the PPTP Server IP address
provided by your ISP.
Physical interface parameters:
DHCP
If your Internet Service Provider is
using DHCP you should select the
DHCP radio button.
Static IP
If your Internet Service Provider
is using Static IP you should
select the Static IP radio button
and enter IP Address, choose
a Subnet Mask and enter the
Gateway IP address.
The Setup Wizard
(continued)
Click
Next
Step 3 - PPTP

9
The Setup Wizard
(continued)
Click
Next
Step 3 - Big Pond
If you selected Big Pond you will
have to fi ll out the user name
and password provided to you
by your ISP.
Click Next and continue to step
4 further down.

10
If you want to use the built-in
DHCP Server in the DFL-200,
choose Enable DHCP Server
in this screen. You then need to
specify a range of IP addresses
to hand out to the DHCP clients.
This range is entered in the
format “Start IP – Stop IP” i.e.
192.168.1.100 – 192.168.1.200.
If you don’t want to use the built-
in DHCP Server or confi gure
it later, choose Disable DHCP
Server and click Next when
done.
The Setup Wizard
(continued)
Click
Next
Step 4 - Set up built-in DHCP
server
Click
Next
Step 5 - Confi gure helper
servers
NTP Servers
- If enabled,
specify which NTP Servers
that should be used to
syncronize the fi rewall time
against.
Syslog Servers
– If enabled,
specify where the fi rewall
should log, you can specify
up to two Syslog receivers.
192.168.1.100-192.168.1.200
192.168.1.100-192.168.1.200
192.168.1.100-192.168.1.200