D-Link DFL-80 User manual

1
DFL-80
4-Port Ethernet
VPN Firewall
5V DC Power Adapter
©2003D-LinkSystems,Inc.Allrightsreserved.Trademarksorregisteredtrademarksarethepropertyoftheirrespectiveholders.Softwareand
specificationssubjecttochangewithoutnotice.DFL-80. 03142003
Before You Begin
1. IfyoupurchasedthisFirewalltoshareyourhigh-speedInternetconnectionwith
othercomputers,youmusthaveeitheranEthernet-basedCableorDSLmodem
withanestablishedInternetaccountfromanInternet Service Provider (ISP).
2. It’s best to use the same computer that is connected to your modem for configuring
the DFL-80 VPN Firewall. The DFL-80 acts as a DHCP server and will assign all
the necessary IP address information on your network. See Appendix at the end
of this Quick Installation Guide or the Manual on the CD-ROM for setting each
network adapter to automatically obtain an IP address.
Check Your Package Contents
DFL-80 4-Port Ethernet VPN Firewall
CD-ROM (containing Manual and Warranty)
Ethernet (Straight Through) Cable
Using a power supply
with a different voltage
rating will damage and void
the warranty of this product.
If any of the above items are missing, please contact your reseller.
This product can be set up using
any current web browser, i.e.,
Internet Explorer 6 or Netscape
Navigator 6.2.3.
PartNo. IG-BDFL80

2
Connecting The DFL-80 Firewall To Your
Network
Reset Button
Pressing this button restores
the Firewall to its original
factory default settings.
A.Receptorfor
Power Adapter.
B.EXTERNAL PORT
This is for the connection of an Ethernet
cable to the Cable or DSL modem
C. LAN PORTS These are
theconnectionsforEthernet
cablesto Ethernet enabled
computers.
D. DMZ Port
This is for the connection
toNetwork Servers.
A. First, connect the power adapter to the receptor at the back panel of the DFL-
80 and then plug the other end of the power adapter to a wall outlet or power
strip.The Power LED will turn ON to indicate proper operation.
B. 1. Power off your Cable or DSL modem; some devices maynothave an on/off
switchandwillrequireyou to unplug the power adapter. Now,the DFL-80 should
bepowered on and the Cable / DSL modem should be turned off.
2.Cable/DSL modem (Power Off) – DFL-80 (Power On)
Connect an Ethernet cable to the Ethernet jack located on the Cable / DSL
modem.After the Ethernet cable is securely connected, power on the Cable /
DSLmodem by turning on the unit or plugging in the power adapter.
3.Cable / DSL modem (PowerOn) – DFL-80 (PowerOn)
Insert the other end of the Ethernet cable to the EXTERNAL PORT on the back
panelof the DFL-80. The EXTERNAL LED light will illuminate to indicateproper
connection. If the EXTERNAL LED is not illuminated, please go back to step B
and repeat its instructions.
C. Insert an Ethernet cable to LAN port 1 on the back panel of the DFL-80 and an
available Ethernet port on the network adapter in the computer you will use to
configure the DFL-80. The LED light for LAN Port 1 will illuminate to indicate
properconnection. (Note:TheLAN Portson the DFL-80areAuto-MDI/MDIX.
Meaningyoucanusea straight-through or crossover-Ethernet cable to the LAN
Ports.)
D. DMZ port is used to connect to a DMZ network which contains Network Servers.

3
Restart Your Computer
Connecting Additional Computers To
The DFL-80
Usingadditional Ethernet (CAT5 UTP) cables, connect your
Ethernet-equippedcomputers to the remaining Ethernet LAN ports
on the back panel of the DFL-80
POWER LED – a solid
lightindicates a proper
connection to the
powersupply.
LOCALNETWORK LEDs – a
solid light on the port indicates
a connection to an Ethernet
enabledcomputer on ports 1-4.
This LED blinks during data
transmission.
External LED – a solid
light indicates connection
on the WAN port. This
LEDblinksduring data
transmission.
DMZ LED – a solid light
indicates connection on the
DMZ port. This LED blinks
duringdatatransmission.

4
When you have completed the steps in this Quick Installation
Guide, your connected network should look similar to this:
Using The Setup Wizard
Thelog-on pop-upscreenwillappear.
Open your Web browser and
type “http://192.168.1.1” intothe
URLaddress box. Thenpressthe
Enter orReturn key.
Type “admin” for the username and
“admin” for the password
ClickOK

5
The Setup Wizard (continued)
Once you have logged in, the
Home screen will appear.
You will see the following screens
Set up your new password.
You have the option to establish
apassword, for theAdmin
account
Click Setup Wizard
Click Next
Click Next

6
The Setup Wizard (continued)
Select your Internet Connection.
You will be prompted to select the
typeof Internet connection for your
network.
Click Next
Choose your time zone based
fromGMT time. Click onAssist to
select your time zone from the
availableselections.
Click Next
If you are unsure of which setting to
select, please contact your Internet
Service Provider.

7
The Setup Wizard (continued)
If your ISP requires a Static IP
Address,and this option is
selected, then this screen will
appear:
Enterthe IP address information
originallyprovided to you by your
ISP. You will need to complete all
therequired fields.
If you selected Dynamic IP
Address,this screen will
appear: (Usedmainly for
CableInternetservice.)
This setup should be done on
the computer that is registered
on the ISP’s network.
Click the“Clone MAC Address”
button to automatically copy the
MAC address of the network
adapter in your computer. You can
also manually type in the MAC
address.
Click Next
Click Next
Please continue to the last part of step 4, Set Outgoing Policy.
Please continue to the last part of step 4, Set Outgoing Policy.

8
The Setup Wizard (continued)
If your ISP uses PPPoE (Point-
to-PointProtocol over Ethernet),
and this option is selected, then
this screen will appear: (Used
mainlyfor DSL Internetservice.)
Please be sure to remove any
existing PPPoE client software
installed on your computers.
Enter in the username and
passwordprovided to you by
your ISP.
Click Next
Click Next
Set Outgoing Policy. You will be
prompted to select the type of
Internetconnection for your
network.
Make sure that Any Services
is selected.

9
Your Setup is Complete!
ClickRestart
Please wait for the DFL-80 to
savethe changes and reboot.
Whenthe DFL-80 has finished
rebooting,you will be brought
back to the main web page.

10
Test Internet Connection.
You will be returned to the main web page.
For additional settings or information, refer to the Manual located on the CD.
Then relaunch yourWebbrowser(i.e.,Internet Explorer or Netscape Navigator),
to link to your favorite Web site to test your Internet connection.
Click toExit

11
To connect to the network, make sure the network adapter in your computer is
configuredproperly.Here’show to configure the network adapter to obtainan IP
address automaticallyfor the DFL-80 Firewall.
For Microsoft Windows XP:
Go to Start > right click on
My Network Places >
select Properties > Double-click on
the Network Connection associated
withtheEthernetadapter
(i.e.,D-LinkDFE-530TX+).
APPENDIX
Click Internet Protocol (TCP/IP)
ClickProperties
Select Obtain an IP address
automatically
Restart your computer
(ifnecessary)
ClickOK

12
For Apple Macintosh OS X:
Go to the Apple Menu
Click on Network
andSelect System
Preferences
TheIP address information,
the Subnet Mask, the Router’s
IP address and the Ethernet
adapteraddress will appear
Select Built-in Ethernet
in the Show pull down
menu
Click on
Network
Click on Apply Now
Select Using DHCP in
the Configure pull down
menu

13
APPENDIX (continued)
Thisexamplewill demonstrate how to create a Virtual Private Network (VPN) between
two remote locations through the Internet. The VPN policy will use IPSec to securely
send/receiveencrypted data over the Internet. This example will consist of two DFL-80
VPN Firewalls with a simple setup to enable VPN. The two remote locations in this
example will be called SiteAand Site B. Both firewalls must already be set up and able
to communicate with each other.
Please note the differences in the IP addresses for each site.
We will begin by configuring the DFL-80 at SiteA. Start by going into the web
configuration. Once in, go to the VPN menu.You should now be under VPN>Autokey
Click New Entery
SiteA Site B
(WAN)192.170.0.100 (WAN)192.170.0.200
(LAN)192.168.10.1 (LAN)192.168.20.1
DFL-80

14
Name: Site_A
From Source: Internal
Subnet/Mask:
192.168.10.0/255.255.255.0
Remote Gateway – Fixed
IP:192.170.0.200
Subnet/Mask:
192.168.20.0/255.255.255.0
Authentication Method:
Preshare
Preshare Key: 123456
Encapsulation: Encryption
(ESP)
123456 is an example of a preshare key, please fill in any
secret preshare key you desire. Keep in mind that both
sites require the same preshare key.
There should now be a VPN policy created for SiteA. SiteAis now complete, we will
now configure Site B with the other DFL-80. Follow the same steps previously with Site
Ato create a VPN policy. Please change the appropriate IP information.
Pleasefill in the appropriate information for SiteA.
ClickOK
The IPAddress information used for SiteA
and Site B are example IPAddresses Only.

15
Name: Site_B
From Source: Internal
Subnet/Mask:
192.168.20.0/255.255.255.0
Remote Gateway – Fixed IP:
192.170.0.100
Subnet/Mask:
192.168.10.0/255.255.255.0
Authentication Method:
Preshare
Preshare Key: 123456
Encapsulation: Encryption
(ESP)
There should now be a VPN policy created for Site B.After the VPN policies have been
created for the two remote locations, click Connect at both Sites to enable the VPN
policy. The two remote locations will authenticate and the VPN status should now say
Connected. Congratulations, you have created a simple IPSec VPN tunnel. SiteAand
Site B should now be able to communicate with each other securely over the Internet.
All IP traffic from the two Sites are now encrypted strongly with 168-bit 3DES
encryption.
Click OK
Pleasefill in the appropriate information for Site B
123456 is an example of a preshare key, please fill in any
secret preshare key you desire. Keep in mind that both
sites require the same preshare key.

16
Technical Support
You can find software updates and user documentation on the D-Link website.
D-Linkprovidesfreetechnicalsupportforcustomers within the United Statesand
withinCanada for the duration of the warranty period on this product.
U.S. and Canadian customers can contact D-Link technical support through our
website,or by phone.
Tech Support for customers within the United States:
D-Link Technical Support over the Telephone:
[phone]
24 hours a day, seven days a week.
D-Link Technical Support over the Internet:
http://support.dlink.com
email:[email protected]
Tech Support for customers within Canada:
D-Link Technical Support over the Telephone:
[phone]
Monday to Friday 8:30am to 9:00pm EST
D-Link Technical Support over the Internet:
http://support.dlink.ca
email:[email protected]