D-Link DFL-260 - NetDefend - Security Appliance User manual

Network
Security UTM Firewall
This Quick Guide will guide you through the installation Process. You are
only moments away from using your new D-Link Network Security Product
Building Networks for People
DFL-260

1.Before You Begin
1.1 Check Your Package Contents....................................................................1
2.Indentifying Components
2.1 FrontView.................................................................................................2
2.2 Rear View.................................................................................................2
2.3 LED Indicators...........................................................................................3
2.4 DefaultInterface AttributeDefinition..........................................................3
3.Connecting the DFL-260
3.1 Setting up Firewall to your Network...........................................................4
4.Configure DFL-260
4.1 Configure your Computer’s IP...................................................................5
4.2 UsingtheSetupWizard..............................................................................6
5.Appendix
5.1 How to Configure Static IP Manually on Microsoft Windows XP...............14
5.2 How to Configure Static IP Manually on Apple MAC OS X............................15
6.Statement
DFL-260 Quick Installation Guide

1.1 Check Your Package Contents
Your NetDefend Network Security UTM Firewall package should
contain all the items listed below. If any of these items is found
damaged or missing in your package, report it to your reseller
immediately for replacement.
DFL-260 NetDefend™ Network Security UTM Firewall
5V DC Power Adapter
Console Cable (RS-232 cable)
Ethernet (CAT5 UTP/Straight Through) Cable
Ethernet (CAT5 UTP/Cross-over) Cable
CD-ROM (containing QIG/Manual )
2 x NetDefend UTM Subscription (IPS & Anti-Virus)
DFL-260
Before You Begin 1
01
DFL-260
Power Adapter
Console Cable CD-ROM
Ethernet Cable
(Cross-over)
Ethernet Cable
(Straight-Through)
NetDefend UTM
Subscription

Identifying Components 2
The following illustrates the front panel of the DFL-260 and
explains the front panel’s key components:
2.1 Front View
02
1. Power LED
2. Status LED
3. WAN LED
4. DMZ LED
5. LAN LED
Power indication of the DFL-260.
System status indication of the DFL-260.
WAN port status indication of the DFL-260.
DMZ port status indication of the DFL-260.
LAN port status indication of the DFL-260.
Note:
WAN interface do not support Auto MDI/MDI-X
(Automatic cable detection for Straight-through and Crossover
function).
1 2 3 4 5
2.2 Rear View
1. Console Port
2. LAN Ports
3. DMZ Port
4. WAN Port
5. Reset
6. Power Receptor
Connects to RS-232 console cable that connects to PC.
These are for the connection of Ethernet cables to the internal network.
This is for the connection of an Ethernet cable to an DMZ network.
This is for the connection of an Ethernet cable to a Cable or DSL modem.
This is for resetting system conguration to factory defaults.
This is for the connection of the power adaper to a wall outlet or power strip.
1 3 4 62 5

2.4 Default Interface Attribute Definition
Note:
For security reason, default only allow LAN interface (192.168.1.1)
that can login into rewall GUI from Web browser. You also can
modify this conguration after login into rewall GUI. About the
detail set up procedure, please refer to the user’s manual.
DFL-260 Quick Installation Guide
03
Wording on
Front plate
Default name
in rewall
Default interface
type denition
Default interface
IP Address
Default
DHCP Status
WAN WAN DHCP client N/A Enabled
DMZ DMZ Static IP 172.17.100.254/24 Disable
Ports: 1~4 LAN Static IP 192.168.1.1/24 Disable
2.3 LED Indicators
Status
Solid green
Light off
Solid green
Light off
Blinking green
Solid green
Blinking green
Light off
Solid green
Blinking green
Light off
Solid green
Blinking green
Light off
Description
The device is powered on.
The device is powered off.
System is operating properly.
The device is not working.
System is defective, such rmware
upgrade fail.
Link present
Port is sending or receiving data.
No link
Link present
Port is sending or receiving data.
No link
Link present
Port is sending or receiving data.
No link
Color
Green
Green
Green
Green
Green
LED
Power
Status
WAN
DMZ
LAN

3.1 Connecting Firewall to Your Network
A. First, connect the power cord to the receptor on the back panel
of the DFL-260 and then plug the other end of the power cord
to a wall outlet or power strip. After the power LED turns on, you
need to wait 1-2 minutes for the DFL-260 to boot up completely.
B. Connect an Ethernet cable from the DFL-260 to your Cable/
DSL modem. If the Cable/DSL modem is powered on, wait
for the WAN LED on the DFL-260 to light up to show a proper
connection. Otherwise, turn off your Cable/DSL modem, connect
the Ethernet cable from the DFL-260 to your Cable/DSL modem,
and turn on the Cable/DSL modem. Some Cable/DSL modems
may not have an on/off switch and will require you to unplug the
power adapter.
Note:
The default management IP address of the DFL-260 is
192.168.1.1. If you have are using a router that uses DHCP,
there may be a conict if the router uses the same IP address as
the DFL-260. If this is the case, either disconnect the DFL-260
from the router and change the management IP address of the
DFL-260, or change the DHCP settings on your router.
C. Insert an Ethernet cable to the LAN1 port on the rear panel of
the DFL-260 and connect it to a port on your network hub or
switch. The LAN port LED light on the DFL-260 will illuminate to
indicate proper connection
D. Connecting the computer that you will use to congure the
DFL-260 to the network hub or switch.
Connecting the DFL-260 3
04

4.1 Configure Your Computer’s IP Address
Make sure that the network adapter in your computer is congured
to use a static IP address with 192.168.1.1 as default gateway and
255.255.255.0 as netmask. Instructions on how to congure the
network adapter can be found in the appendix.
When you have completed the steps in this Quick Installation
Guide, your connected network should look similar to this:
Configure DFL-260 4
05
Cable/DSL Modem
DFL-260
Switch
Internal
Network
DMZ
Network
(optional)
Computer1 Computer2

4.2 Using the Setup Wizard
The DFL-260 provides Web based conguration. You can
congure your DFL-260 through Internet Explorer 6 and later
or Firefox 1.0 and later browser in MS Windows, Macintosh or
UNIX based platforms. Activate your browser. Then type the
IP address of the DFL-260 into the Location/Address eld and
press “Enter.”
(The IP Address shown in the example above is the default
setting. If you have changed the IP Address of the DFL-260
to conform to a network, then input that IP Address in the web
browser, instead of the default IP Address shown.)
Log on to the DFL-260 web interface.
To start using the DFL-260 web interface you need to log on
using the default username and password.
DFL-260 Quick Installation Guide
Open your Web
browser and type
https://192.168.1.1 /
into the URL address
box. Then press the
Enter or Return key.
Type the default
Username/Password
Username: admin
Pasword: admin
and click Login
06
Note:
DFL-260 allows either HTTP or a secure HTTPS connection from
any management host. However, for security reasons, by default
only a secure HTTPS connection is allowed. For more information
about conguring connection setting, please refer to the Firewall
User Manual.
Note:
In order for the Setup Wizard to run properly, make sure IE Pop-Up
Blocker is turned off or click Temporarily Allow Pop-ups when the
Information Bar in IE noties you that a pop-up has been blocked.

Step1 - Welcome to the DFL-260 setup wizard!
Step2 - Set up rewall administrator password
First Enter the
username that you want
to use for the admin
account.
Enter the password
that you want to use
for the admin account.
DFL-260 Quick Installation Guide
This wizard will guide
you through the setup of
your DFL-260
Click Next
07
Click Next

2
Step 3 - Set up time and date
Click Set time and date
button for setting device
08
Click Next
Select the appropriate
date Enter the appropriate
time
Click OK
DFL-260 Quick Installation Guide

Step 4 - Set up timezone
Step 5 - Select WAN interface
Select the appropriate
timezone.
Enter the appropriate
dayligt saving time
settings.
Select the WAN
interface that you want
to use.
09
Click Next
Click Next
DFL-260 Quick Installation Guide

Step 6 - Congure WAN interface
Select the appropriate
conguration for the
WAN interface,
Click Next and
continue to step 7.1
further down.
Note:
If you are unsure of which setting to select, please contact your
Internet Service Provider.
Step 7.1 - WAN Interface Type is Static IP
If you selected Static IP
you have to ll out the
IP address information
provided to you by
your ISP. You will need
to complete all the
required elds except for
Secondary DNS Server.
10
Click Next
DFL-260 Quick Installation Guide

Step 7.2 - WAN Interface Type is PPPoE
Step 7.3 - WAN Interface Type is PPTP
If you selected PPPoE
(Point-to-Point Protocol
over Ethernet) you will
have to ll out the user
name and password
provided to you by your
ISP. The PPPoE Service
Name eld should be left
blank unless your ISP
informs you otherwise.
Enter Username,
Password and the
PPTP Server IP address
provided by your ISP.
DHCP:If your ISProvider
is using DHCP you
should select the DHCP
radio button.
Static IP:If your Internet
Service Provider is using
Static IP you should
select the Static IP
radio button and enter
IP Address, choose a
Subnet Mask and enter
the Gateway IP address.
11
Click Next
Click Next
DFL-260 Quick Installation Guide

Step 7.4 - WAN Interface Type is Big Pond
Step 8 - Set up built-in DHCP server
If you selected Big Pond
you will have to ll out the
user name and password
provided to you by your
ISP.
Click Next and continue
to step 8.
If you want to use the
built-in DHCP Server in
the DFL-260, choose
Enable DHCP Server
in this screen. You then
need to specify a range
of IP addresses to hand
out to the DHCP clients.
This range is entered in
the format “Start IP - Stop
IP” i.e. 192.168.0.100 -
192.168.0.200. If you don’t
want to use the built-in
DHCP Server or congure
it later, choose Disable
DHCP Server.
12
Click Next
Click Next
DFL-260 Quick Installation Guide

Step 9 - Congure helper servers
Step10 - Setup Wizard Complete
NTP Servers
If enabled, specify which
NTP Servers that should
be used to syncronize
the rewall time
Syslog Servers
If enabled, specify
where the rewall should
log, you can specify up
to two Syslog recievers
Click Activate to
complete your
conguration.
13
Click Next
DFL-260 Quick Installation Guide

Appendix 5
To connect to the DFL-260 Network Security UTM Firewall,
make sure the network adapter in your computer is congured
properly. Here is how to congure the network adapter
manually to the correct IP-address.
Go to Start > right click
on My Network Places >
select Properties >
Right-click on the
Network Connection
of the Ethernet adapter
connecting to the
DFL-260 and select
Properties.
Click Internet Protocol
(TCP/IP)
Click Properties
5.1 How to configure Static IP Manually on
Microsoft Windows XP
14

Note:
Except for 192.168.1.1, you could set your PC with any IP
addresses that same as the 192.168.1.0/ 255.255.255.0 subnet.
Select Use the
following IP address
Set IP address to
192.168.1.30,
Subnet mask to
255.255.255.0
and Default gateway to
192.168.1.1
Click OK
Go to the Apple Menu
Click on Network
and Select System
Preferences
Click on Network
DFL-260 Quick Installation Guide
5.2 How to Configure Static IP Manually on
Apple Mac OS X
15

Set IP Address to
192.168.1.30,
Subnet Mask to
255.255.255.0
and Router to
192.168.1.1.
Click on Apply Now
DFL-260 Quick Installation Guide
Select Built-in Ethernet
in the show pull down
menu
Select Manually in the
Congure pull down
menu
16

STATEMENT 6
EMI Statement
FCC Warning
This equipment has been tested and found to comply with the
limits for a Class A digital device, pursuant to Part 15 of the FCC
Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in
a commercial environment. This equipment generates, uses, and
can radiate radio frequency energy and, if not installed and used
in accordance with this manual, may cause harmful interference to
radio communications. Operation of this equipment in a residential
area is likely to cause harmful interference in which case the user
will be required to correct the interference at his own expense.
CE Mark Warning
This is a Class A product. In a domestic environment, this product
may cause radio interference in which case the user may be required
to take adequate measures.
Warnung!
Dies ist ein Produkt der Klasse A. Im Wohnbereich kann dieses
Produkt Funkstoerungen verursachen. In diesem Fall kann
vom Benutzer verlangt werden, angemessene Massnahmen zu
ergreifen.
Precaución!
Este es un producto de Clase A. En un entorno doméstico, puede
causar interferencias de radio, en cuyo case, puede requerirse al
usuario para que adopte las medidas adecuadas.
Attention!
Ceci est un produit de classe A. Dans un environnement domestique,
ce produit pourrait causer des interférences radio, auquel cas
l`utilisateur devrait prendre les mesures adéquates.
17

Attenzione!
Il presente prodotto appartiene alla classeA. Se utilizzato in ambiente
domestico il prodotto può causare interferenze radio, nel cui caso è
possibile che l`utente debba assumere provvedimenti adeguati.
VCCI Warning
BSMI Warning
警告使用表
這是甲類的資訊產品，在居住的環境中使用時，可能會造成射頻干擾，在這
種情況下使用者會被要求採取某些適當的對策。
DFL-260 Quick Installation Guide
18
VCCI Warning