D-Link DFL-300 - Security Appliance User manual

- 1 -
FIREWALL VPN ROUTER
User’s Manual
Doc. No.: 120602-01

- 2 -
Contents
Administration 5
Admin 6
Setting 10
Date/Time 16
Language 17
Logout 18
Software Update 19
Configuration 20
Interface 21
Multiple NAT 25
Hack Alert 32
Route Table 33
DHCP 37
DNS Proxy 39
Dynamic DNS 44
Address 49
Interface 50
Internal Group 54
External 58
External Group 62

- 3 -
DMZ 66
DMZ Group 70
Service 74
Pre-defined 75
Custom 76
Group 80
Schedule 84
Policy 88
Outgoing 89
Incoming 97
External To DMZ & Internal to DMZ 103
DMZ To External & DMZ To Internal 109
VPN 115
Autokey IKE 116
PPTP Server 120
PPTP Client 126
Content filtering 130
URL Blocking 131
General Blocking 135
Virtual Server 136

- 4 -
Mapped IP 138
Virtual Server 142
LOG 150
Traffic Log 151
Event Log 154
Log Report 157
Alarm 160
Traffic Alarm 161
Event Alarm 164
Statistics 167
Status 168
Interface Status 168
ARP Table 169
DHCP Clients 170
Setup Examples 171

- 5 -
Administration
The FIREWALL VPN ROUTER Firewall Administration and monitoring
control is set by the System Administrator. The System Administrator can
add or modify System settings and monitoring mode. The sub Administrators
can only read System settings but not modify them. In Administration, the
System Administrator can:
(1) Add and change the sub Administrator’s names and passwords;
(2) Back up all Firewall settings into local files;
(3) Set up alerts for Hackers invasion.
What is Administration?
“Administration” is the managing of settings such as the privileges of packets
that pass through the firewall and monitoring controls. Administrators may
manage, monitor, and configure firewall settings. All configurations are “read-
only” for all users other than the Administrator; those users are not able to
change any settings for the firewall.
The three sub functions under Administrator are Administrator, Setting,
and Software Update.
Administrator: has control of user access to the firewall. He/she can
add/remove users and change passwords.
Setting: The Administrator may use this function to backup firewall
configurations and export (save) them to an “Administrator” computer or
anywhere on the network; or restore a configuration file to the FIREWALL
VPN ROUTER; or restore the firewall back to default factory settings. Under
Setting, the Administrator may enable e-mail alert notification. This will alert
Administrator(s) automatically whenever the firewall has experienced
unauthorized access or a network hit (hacking or flooding). Once enabled,
an IP address of a SMTP (Simple Mail Transfer protocol) Server is required.
Up to two e-mail addresses can be entered for the alert notifications.
Software Update: Administrators may visit distributor’s web site to
download the latest firmware. Administrators may update the FIREWALL
VPN ROUTER firmware to maximize its performance and stay current with
the latest fixes for intruding attacks.

Firewall Administration setup
On the left hand menu, click on Administration, and then select
Administrator below it. The current list of Administrator(s) shows up.
Settings of the Administration table:
Administrator Name: The username of Administrators for the firewall. The
user admin cannot be removed.
Privilege: The privileges of Administrators (Admin or Sub Admin)
The username of the main Administrator is Administrator with read/write
privilege.
Sub Admins may be created by the Admin by clicking New Sub Admin.
Sub Admins have read only privilege.
Configure: Click Modify to change the “Sub Administrator’s” password and
click Remove to delete a “Sub Administrator.”
- 6 -

Adding a new Sub Administrator:
Step 1. In the Administration window, click the New Sub Admin button to
create a new Sub Administrator.
Step 2. In the Add New Sub Administrator window:
Sub Admin Name: enter the username of new Sub Admin.
Password: enter a password for the new Sub Admin.
Confirm Password: enter the password again.
Step 3. Click OK to add the user or click Cancel to cancel the addition.
- 7 -

Changing the Sub-Administrator’s Password:
Step 1. In the Administration window, locate the Administrator
name you want to edit, and click on Modify in the Configure
field.
Step 2. The Modify Administrator Password window will appear.
Enter in the required information:
Password: enter original password.
New Password: enter new password
Confirm Password: enter the new password again.
Step 3. Click OK to confirm password change or click Cancel to
cancel it.
- 8 -

Removing a Sub Administrator:
Step 1. In the Administration table, locate the Administrator name you want
to edit, and click on the Remove option in the Configure field.
Step 2. The Remove confirmation pop-up box will appear.
Step 3. Click OK to remove that Sub Admin or click Cancel to cancel.
- 9 -

Settings
The Administrator may use this function to backup firewall
configurations and export (save) them to an “Administrator” computer or
anywhere on the network; or restore a configuration file to the device; or
restore the firewall back to default factory settings.
Entering the Settings window:
Click Setting in the Administrator menu to enter the Settings window. The
Firewall Configuration settings will be shown on the screen.
Exporting FIREWALL VPN ROUTER Firewall settings:
Step 1. Under Firewall Configuration, click on the Download button next
to Export System Settings to Client.
Step 2. When the File Download pop-up window appears, choose the
destination place in which to save the exported file. The
Administrator may choose to rename the file if preferred.
- 10 -

Importing Firewall settings:
Step 1. Under Firewall Configuration, click on the Browse button next to
Import System Settings. When the Choose File pop-up window
appears, select the file to which contains the saved Firewall
Settings, then click OK.
Step 2. Click OK to import the file into the Firewall or click Cancel to cancel
importing.
- 11 -

Restoring Factory Default Settings:
Step 1. Select Reset Factory Settings under Firewall Configuration.
Step 2. Click OK at the bottom-right of the screen to restore the factory
settings.
- 12 -

Enabling E-mail Alert Notification:
Step 1. Select Enable E-mail Alert Notification under E-Mail Settings.
This function will enable the Firewall to send e-mail alerts to the
System Administrator when the network is being attacked by
hackers or when emergency conditions occur.
Step 2. SMTP Server IP: Enter SMTP server’s IP address.
Step 3. E-Mail Address 1: Enter the first e-mail address to receive the
alarm notification.
Step 4. E-Mail Address 2: Enter the second e-mail address to receive the
alarm notification. (Optional)
Step 5. Click OK on the bottom-right of the screen to enable E-mail alert
notification.
- 13 -

To-Firewall Packets Log
Select this option to the FIREWALL VPN ROUTER’s To-Firewall
Packets Log. Once this function is enabled, every packet to this appliance
will be recorded for system manager to trace.
- 14 -

Firewall Reboot
Select this option to the FIREWALL VPN ROUTER’s Firewall Reboot.
Once this function is enabled, the firewall will be rebooted.
Step 1. Click Setting in the Administration menu to enter the settings
window.
Step 2. Reboot Firewall：Click Reboot.
Step 3. A confirmation pop-up box will appear.
Step 4. Follow the confirmation pop-up box, click OK to restart firewall or
click Cancel to discard changes.
- 15 -

Date/Time
Step 1. Click System →Date/Time.
Step 2. Click the down arrow bto select the offset time from GMT.
Step 3. Enter the Server IP Address or Server name with which you want to
synchronize.
Step 4. Update system clock every minutes You can set the interval
time to synchronize with outside servers. If you set it to 0, it means the device
will not synchronize automatically.
Step 5. Synchronize system clock with this client: You can synchronize
this Homing Gateway with this client computer by clicking the Sync button.
Step 6. Click the OK button below to change the setting or click Cancel to
discard changes.
- 16 -

Language
The software provides Traditional Chinese Version ，Simplified
Chinese Version and English version for you to choose.
Step 1. Click Language.
Step 2. Select the language version you want Traditional Chinese
Version，Simplified Chinese Version and English
version）.
Step 3. Click OK to change the language version or click Cancel to discard
changes.
- 17 -

Logout the firewall
Select this option to the FIREWALL VPN ROUTER’s Logout the
firewall; this function protects your system while you are away
Step 1. Click Logout the firewall.
Step 2. Click OK to logout or click Cancel to discard the change.
- 18 -

Software Update
Under Software Update, the admin may update the FIREWALL VPN
ROUTER’s software with a newer software.
- 19 -

- 20 -
Configuration
What is System Configuration?
In this section, the Administrator can:
(1) Set up the internal, external and DMZ IP addresses
(2) Set up the Multiple NAT
(3) Set up the Firewall detecting functions
(4) Set up a static route
(5) Set up the DHCP Server
(6) Set up DNS Proxy
(7) Set up Dynamic DNS
Note: After all the settings of the Firewall configuration have been set, the
Administrator can backup the System configuration into the local hard drive
as shown in the Administrator section of this manual under the
heading: 1-2 Settings.