D-Link DFL-M510 User manual

Network Security Solution http://www.dlink.com
DFL-M510
Security
Security
Information Security gateway(ISG)
User Manual

i
Before You Begin
Before you begin using this manual, take a look at the copyright, trademark, and
safety information in this section.
Copyright
This publication, including all photographs, illustrations and software, is protected
under international copyright laws, with all rights reserved. Neither this manual, nor
any of the material contained herein, may be reproduced without written consent of
D-Link.
Copyright 2006
Version 1.02
Disclaimer
The information in this document is subject to change without notice. The manufacturer
makes no representations or warranties with respect to the contents hereof and
specifically disclaim any implied warranties of merchantability or fitness for any
particular purpose. The manufacturer reserves the right to revise this publication and
to make changes from time to time in the content hereof without obligation of the
manufacturer to notify any person of such revision or changes.
Trademark Recognition
MSN ( ) is a registered trademark of Microsoft Corporation
ICQ () is a registered trademark of ICQ Inc.
Yahoo ( ) is a registered trademark of Yahoo! Inc.
QQ () is a registered trademark of TENCENT Inc.
Skype ()is a registered trademark of Skype Technologies.
IRC ( ) is a registered trademark of mIRC Co. Ltd.
Odigo ( ) is a registered trademark of Comverse Technology, Inc.
Rediff ( )is a registered trademark of rediff.com India Limited.
ezPeer () is a registered trademark of Eastern Sky Ltd.
Kuro ( ) is a registered trademark of music.com.tw Int.

ii
Gnutella ( ) is a registered trademark of OSMB, LLC
Kazza ( ) is a registered trademark of Sharman Networks
BitTorrent ( ) is a registered trademark of BitTorrent, Inc.
DirectConnect ( ) is a registered trademark of Neo Modus Inc.
PP365 ( ) is a registered trademark of pp365.com Inc.
WinMX ( ) is a registered trademark of Frontcode Technologies
GetRight ( ) is a registered trademark of Headlight Software. Inc.
MS Media Player ( ) is a registered trademark of Microsoft Corporation
iTunes ( ) is a registered trademark of Apple Computer, Inc.
Winamp ( ) is a registered trademark of Nullsoft Inc.
Player365 ( ) is a registered trademark of Live365, Inc.
D-Link is a registered trademark of D-Link Systems, Inc.
Java is a trademarks or registered trademark of Sun Microsystems, Inc. in the United
States and other countries.
All other product names used in this manual are the properties of their respective
owners and are acknowledged.
Federal Communications Commission (FCC)
This equipment has been tested and found to comply with the limits for a Class A
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential installation.
This equipment generates, uses, and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful interference
to radio communications. However, there is no guarantee that interference will not
occur in a particular installation. If this equipment does cause harmful interference to
radio or television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one or more of the
following measures:
zReorient or relocate the receiving antenna.
zIncrease the separation between the equipment and the receiver.
zConnect the equipment onto an outlet on a circuit different from that to which the receiver
is connected.
zConsult the dealer or an experienced radio/TV technician for help.

iii
Shielded interconnect cables and a shielded AC power cable must be employed with
this equipment to ensure compliance with the pertinent RF emission limits governing
this device. Changes or modifications not expressly approved by the system's
manufacturer could void the user's authority to operate the equipment.
Declaration of Conformity
This device complies with part 15 of the FCC rules. Operation is subject to the
following conditions:
zThis device may not cause harmful interference, and
zThis device must accept any interference received, including interference that may
cause undesired operation.
Safety Certifications
CE, C-Tick, TUV, UL
About this Manual
This manual provides information for setting up and configuring the DFL-M510. This
manual is intended for network administrators.
Safety Information
READ THIS IMPORTANT SAFETY INFORMATION SECTION. RETAIN THIS
MANUAL FOR REFERENCE. READ THIS SECTION BEFORE SERVICING.
CAUTION:
To reduce the risk of electric shock, this device should only be serviced by qualified
service personnel.
zFollow all warnings and cautions in this manual and on the unit case.
zDo not place the unit on an unstable surface, cart, or stand.
zAvoid using the system near water, in direct sunlight, or near a heating device.
zDo not place heavy objects such as books or bags on the unit.
zOnly use the supplied power cord.

iv

Table of Contents
Chapter 1:
Getting Started with the DFL-M510 ------------------------------------------------- 1
Identifying Components ..........................................................................................1
Front View ............................................................................................................... 1
Rear View ................................................................................................................ 2
Configuring the DFL-M510 .....................................................................................3
Configuration Through the Command Line Interface ............................................... 3
Configuration Through a Web-based Interface ....................................................... 7
Running the Setup Wizard .....................................................................................9
Toolbar ....................................................................................................................10
Wizard .................................................................................................................10
Setup Wizard ..................................................................................11
Policy Wizard ..................................................................................15
Tools ...................................................................................................................21
Backup ...........................................................................................................21
Reset ..............................................................................................................22
Upgrade .........................................................................................................23
Debug .............................................................................................................24
Status ..................................................................................................................24
System Status .................................................................................26
Logging Status..................................................................................28
Report for Network status ................................................................30
Policy Status ...................................................................................32
Pattern Status ...............................................................................................36
Chapter 2:
System ----------------------------------------------------------------------------------------- 37
The System Screen .......................................................................................................... 37
The Date & Time Screen .............................................................................................. 38
The Remote Management Screen ............................................................................... 40
The Log Setting Screen ................................................................................................ 42
Chapter 3:
Interfaces ....................................................................................................... 45
The Interface Screen ....................................................................................................... 45
Network Setting Tab .............................................................................................. 46
Interface Tab ......................................................................................................... 52
Parameter Tab ...................................................................................................... 54
VLAN Tab .............................................................................................................. 59

vi
Chapter 4:
User Authentication ---------------------------------------------------------------------- 63
The Use Authentication Screen ...................................................................................... 63
Accounts ................................................................................................................63
Chapter 5:
Objects ------------------------------------------------------------------------------------------66
The Objects Screen ...........................................................................................................66
The Setup Hosts Tab ............................................................................................ 67
Exporting a Host Database ................................................................................... 70
The Setup Groups Tab .......................................................................................... 72
Assign Hosts to Groups ......................................................................................... 73
Chapter 6:
Policy --------------------------------------------------------------------------------------------75
The Policy Setting Screen ................................................................................................76
The Template Setting Tab ..................................................................................... 80
The Assign Policy Tab ........................................................................................... 83
The Policy Viewer Tab .......................................................................................... 87
User Defined Pattern ................................................................................................ 88
Defining a Pattern by Protocol ............................................................................... 89
Defining a Pattern by Server ................................................................................. 91
The Schedule Screen ............................................................................................... 93
Message Setting ....................................................................................................... 94
Keyword Filter ........................................................................................................... 96
Pattern Update ......................................................................................................... 97
Chapter 7:
Real Time Monitor ------------------------------------------------------------------------- 98
The Real Time Monitor Screen ................................................................................ 98
Monitoring Real Time Traffic ................................................................................. 99
Monitoring Real Time Application .........................................................................100
Common Network Protocol ..................................................................................101
Health Checking ...................................................................................................102
EIM .......................................................................................................................103
Two Levels Top 10 Analysis ................................................................................ 104
Chapter 8:
Traffic Shaping ----------------------------------------------------------------------------111
Traffic Shaping Policy for Applications ................................................................ 112
Traffic Shaping Policy for User Groups ............................................................... 113

vii
Appendix A:
The Command Line Interface -------------------------------------------------------115
Terminal/SSH (Secure Shell) Connection .............................................................. 115
Getting Started .....................................................................................................116
CLI Command List ................................................................................................116
Help Command ....................................................................................................117
Get Command ......................................................................................................119
Set Command ......................................................................................................120
“set system” command ................................................................... 120
“set time” command ....................................................................... 124
“set state” command ...................................................................... 125
“set remote” command ................................................................... 126
“set interface” command ............................................................................ 129
History Command .................................................................................................129
Exit Command ......................................................................................................130
Reboot Command ................................................................................................130
Reset Command ..................................................................................................131
Ping Command .....................................................................................................131
Appendix B:
Glossary --------------------------------------------------------------------------------------132
Appendix C:
Features and Specifications --------------------------------------------------------137
Hardware Specification .............................................................................................137
Features Specification ..............................................................................................137
LCM Module ..............................................................................................................139
Other Specifications .................................................................................................140
Mechanic & ID Design Front LED indicators ............................................................141
Physical Environment ...............................................................................................142
Index -------------------------------------------------------------------------------------------143

1
CHAPTER 1: GETTING STARTED WITH THE DFL-M510
The DFL-M5 10 is a transparent network device. To ensure there is no disruption to your
network, it can be installed in In-Line mode with a hardware bypass function enabled.
The hardware bypass ensures that if the DFL-M510 crashes, or experiences a power out
or some other problem; your network is still up and running. This allows your network
administrator to begin monitoring selected PCs, while checking for anything that may
upset your current network environment. Refer to the Quick Installation Guide for
instructions on connecting the DFL-M510 to your network. This section covers the
following topics:
z“Identifying Components” on page 1
z“Configuring the DFL-M510” on page 3
z“Running the Setup Wizard” on page 9
Before using this manual, take a look at the copyright, trademark, and
safety information section. See “Before you Begin”on page i.
IDENTIFYING COMPONENTS
The following illustrations show the front and rear of the DFL-M510.
FRONT VIEW
LCM BUTTON DESCRIPTION
The LCM buttons are described below.
Button Name Description
Up Scroll Up
Down Scroll Down
ESC Go back to the previous screen
Enter Next screen

2
STATUS LEDS
The following table describes the status LEDs on the front of the DFL-M510.
Function Naming Color Status LED Description
Off Power off
Power Power Green
On Power
Off Power off (System not ready)
System System Green
On System ready and running ok
Off Hardware bypass is not enabled
Bypass Bypass Red
On Hardware bypass is enabled
Off Ethernet link OK and the speed is 10Mbps
Inbound
(Left) Green
On Ethernet link OK and the speed is 100Mbps
Off No packets sending/receiving
On Link
Inbound
(Right)
Inbound
(LAN)
Green
Blinking Activity, port is sending/receiving data
Off Ethernet link ok, and the speed is 10Mbps
Outbound
(Left) Green
On Ethernet link ok, and the speed is 100Mbps
Off No packets sending/receiving
On Link
Outbound
(Right)
Outbound
(WAN)
Green
Blinking Activity, port is sending/receiving data
REAR VIEW
1Power socket
2Power switch

3
Detailed information on the LCM can be found in the Appendix.
See “Appendix A: The Command Line Interface” on page 115.
CONFIGURING THE DFL-M510
Before managing the DFL-M510, it must be initialized. This procedure is accomplished
through the DFL-M510 Command Line Interface. Access to the Command Line
Interface can be made either through SSH or from a terminal connected directly to the
DFL-M510.
You can use Hyper Terminal, SSH v2 or browser to set up the IP parameters of the
DFL-M510. The following are the default settings:
IP Address 192.168.1.1
Subnet Mask 255.255.255.0
Default Gateway 192.168.1.254
User name admin
Password admin
CONFIGURATION THROUGH THE COMMAND LINE INTERFACE
Configure the DFL-M510 using the following parameters.
The IP address shown below is only an example. Instead use the IP
address for your network.
IP Address 192.168.9.231
Subnet Mask 255.255.255.0
Default Gateway 192.168.9.254
1. Connect one end of the RS-232 cable to the console port on the DFL-M510 and the
other end to the COM1 or COM2 port on the PC. (The pin-out definitions are shown
below.)
Terminal Emulation VT-100, ANSI, or auto
Bit per Second 115200

4
Data Bits 8
Parity None
Stop Bits 1
Flow Control Nine
2. To open a connection in Windows 95/98/NT/2000/XP go to, Program Files
Accessory →Communications →Super Terminal.
3. Once you access the Command Line Interface (CLI) with a terminal connection,
press any key. The following prompt appears:
4. Type in the username and password.

5
5. Use the get system command to get information on the DFL-M510.
6. Use the set system ip command to set the IP address.

6
7. After the system reboots, use set system gateway to set the default gateway.
8. After setting the IP address, Mask and Gateway, use the get system command to
get correct information. Use the web-based interface to configure other parameters.
See “Configuration Through a Web-based Interface” on page 7.

7
CONFIGURATION THROUGH A WEB-BASED INTERFACE
The DFL-M510 GUI is a Web-based application that allows you to manage the
DFL-M510. The GUI is a Java™applet application. Before accessing the GUI from any
PC, you must install Java Run Time Environment (J2RE V1.4.2 or above). Then you
can log on to the DFL-M510 from any computer on the network via a Web browser. You
can download J2RE from www.java.com or you can download it from the link within the
DFL-M510 GUI.
The PC you log in from must have the following system requirements:
zMicrosoft Windows XP professional operation systems
zDevice with Internet connection
zCPU: Intel Pentium4 2.0G or 100% compatible
zMemory: 512MB RAM or above
zJava Run Time Environment (J2RE V1.4.2 or above)
Refer to the following to log on to the DFL-M510.
1. Open your Web browser and type the IP address into the Address Bar:
http://192.168.1.1. The login screen appears.
2. Click on the link to download the Java Runtime Environment.

8
3. Click Run to start the installation. Follow the onscreen prompts to complete the
installation. The following Security Warning appears.
4. Click Always to continue and prevent this screen appearing again. The login screen
appears.
The IP address shown above is only an example. Instead use the IP
address for your network.
5. Type in the default account name admin and the default password admin, choose
your preferred language and click Login.

9
Language support on the DFL-M510 includes English, Traditional
Chinese and Simplified Chinese.
For security reasons, you should change the default password to a
more secure password after you have completed the setup. See
Chapter 4 “User Authentication” on page 63.
6. After two or three minutes, the GUI opens on the DFL-M510 main screen.
7. To log out click the Close button at the top-right of the screen.
RUNNING THE SETUP WIZARD
The Setup Wizard helps you to quickly apply basic settings for the DFL-M510. You will
need the following information for your network to complete the Setup Wizard:
zIP Address
zSubnet Mask
zDefault Gateway

10
zDNS Server
Regarding how to configure DFL-M510 via Setup Wizard, see the “Wizard” section on
page 11 for more detail.
The first time you log on to the DFL-M510, the Setup Wizard starts
automatically.
TOOLBAR
The Toolbar provides many handy and frequent-use functions for you. These functions
are mainly divided into three categories: Wizard,Tools and Status, illustrated as
below.
The Wizard, including Setup Wizard and Policy Wizard, guides you step-by-step to
complete the entire procedure, helps you easily configure the essential system
information and policy configuration for DFL-M510.
For system maintenance, several handy tools such as Backup, Reset, Upgrade, and
Debug, are provided in the Tools, enable you to quickly maintain the system
configuration.
The Status is the most fabulous function you may frequently utilize, for instance,
System information, Logging information and Report for network status. The current
status of the supported application DFL-M510 can monitor and manage is provided in
the Policy Status. Also, you can obtain the information of pattern version in the
Pattern Status.
WIZARD
The Wizard provides a handy ways for you to quickly apply system and policy settings
for the DFL-M510. On DFL-M510, two wizards shown as below are provided - Setup
Wizard and Policy Wizard.

11
SETUP WIZARD
When initializing the DFL-M510 first time, the Setup Wizard will launch automatically
after you logon the device. The Setup Wizard will guide you step-by-step through the
entire procedure. After the procedure is completed, the basic system information for
DFL-M510 is configured.
To run the Setup Wizard:
1. Go to Toolbar, click Wizard, Setup Wizard. The Setup Wizard window appears.
ClickNext to continue.