User Guide
Page 7
... a LAN or Broadband Backup Connection 91 Setting Up a Dialup Backup Connection 92 Managing Your Network...93 Configuring Network Settings ...93 Configuring a DHCP Server ...94 Changing IP Addresses ...105 Enabling/Disabling Hide NAT...107 Configuring a DMZ Network...108 Configuring the OfficeMode Network 110 Configuring VLANs ...111 Configuring High Availability ...119 Configuring High Availability...
... a LAN or Broadband Backup Connection 91 Setting Up a Dialup Backup Connection 92 Managing Your Network...93 Configuring Network Settings ...93 Configuring a DHCP Server ...94 Changing IP Addresses ...105 Enabling/Disabling Hide NAT...107 Configuring a DMZ Network...108 Configuring the OfficeMode Network 110 Configuring VLANs ...111 Configuring High Availability ...119 Configuring High Availability...
User Guide
Page 17
...Technical Support 14 About Your D-Link NetDefend firewall The D-Link NetDefend firewall is a unified threat management (UTM) appliance that enables secure high-speed Internet access from select service providers, including firewall security and software updates, Antivirus, ...Link NetDefend firewall Chapter 1 Introduction This chapter introduces the D-Link NetDefend firewall and this guide. The NetDefend firewall also allows sharing your Internet connection among several PCs or other network devices, enabling advanced office networking and saving the cost of purchasing static IP addresses...
...Technical Support 14 About Your D-Link NetDefend firewall The D-Link NetDefend firewall is a unified threat management (UTM) appliance that enables secure high-speed Internet access from select service providers, including firewall security and software updates, Antivirus, ...Link NetDefend firewall Chapter 1 Introduction This chapter introduces the D-Link NetDefend firewall and this guide. The NetDefend firewall also allows sharing your Internet connection among several PCs or other network devices, enabling advanced office networking and saving the cost of purchasing static IP addresses...
User Guide
Page 31
Chapter 2: Installing and Setting up your computer's TCP/IP settings to make sure it obtains its IP address automatically. This chapter includes the following : • Check if TCP/IP Protocol is installed on your networking environment. Refer to the relevant section in this guide in your...firewall for operation, you through the TCP/IP setup and installation process. The sections below will guide you must do the following topics: Before You Install the NetDefend firewall 15 Wall Mounting the Appliance 30 Securing the Appliance against Theft 32 Network Installation 35 Setting Up...
Chapter 2: Installing and Setting up your computer's TCP/IP settings to make sure it obtains its IP address automatically. This chapter includes the following : • Check if TCP/IP Protocol is installed on your networking environment. Refer to the relevant section in this guide in your...firewall for operation, you through the TCP/IP setup and installation process. The sections below will guide you must do the following topics: Before You Install the NetDefend firewall 15 Wall Mounting the Appliance 30 Securing the Appliance against Theft 32 Network Installation 35 Setting Up...
User Guide
Page 36
... new settings. (Note that 192.168.10 is the default value, and it may vary if you need to assign a static IP address, select Specify an IP address, type in an IP address in the range of 192.168.10.129-254, enter 255.255.255.0 in the Subnet Mask field, and click OK to... your NetDefend firewall. 20 D-Link NetDefend firewall User Guide Click OK to obtain an IP address automatically. Note: Normally, it and click Properties. The Internet Protocol (TCP/IP) Properties window opens. 2. If for some reason you changed it in the My Network ...
... new settings. (Note that 192.168.10 is the default value, and it may vary if you need to assign a static IP address, select Specify an IP address, type in an IP address in the range of 192.168.10.129-254, enter 255.255.255.0 in the Subnet Mask field, and click OK to... your NetDefend firewall. 20 D-Link NetDefend firewall User Guide Click OK to obtain an IP address automatically. Note: Normally, it and click Properties. The Internet Protocol (TCP/IP) Properties window opens. 2. If for some reason you changed it in the My Network ...
User Guide
Page 42
... the new settings. (Note that 192.168.10 is the default value, and it may vary if you need to assign a static IP address, select Specify an IP address, type in an IP address in the range of 192.168.10.129-254, enter 255.255.255.0 in the Subnet Mask field, and click OK to... take effect. If for setting up the TCP/IP Protocol. 26 D-Link NetDefend firewall User Guide Click the IP Address tab, and click the Obtain an IP address automatically...
... the new settings. (Note that 192.168.10 is the default value, and it may vary if you need to assign a static IP address, select Specify an IP address, type in an IP address in the range of 192.168.10.129-254, enter 255.255.255.0 in the Subnet Mask field, and click OK to... take effect. If for setting up the TCP/IP Protocol. 26 D-Link NetDefend firewall User Guide Click the IP Address tab, and click the Obtain an IP address automatically...
User Guide
Page 78
.... 62 D-Link NetDefend firewall User Guide Table 9: PPTP Connection Fields In this ... Password Type your password again. Username Do this field... Click Next. Subnet Mask Type the subnet mask of the connection process the Connected screen appears. 4. Internal IP Type the local IP address required for accessing the PPTP modem. Server IP Type the IP address of...
.... 62 D-Link NetDefend firewall User Guide Table 9: PPTP Connection Fields In this ... Password Type your password again. Username Do this field... Click Next. Subnet Mask Type the subnet mask of the connection process the Connected screen appears. 4. Internal IP Type the local IP address required for accessing the PPTP modem. Server IP Type the IP address of...
User Guide
Page 93
... number that the modem should dial, as given by your ISP. Username Type your service name. Phone Number If you selected PPTP, type the IP address of the Telstra authentication server as given by Telstra. Using Internet Setup Using No Connection If you selected Telstra (BPA), type the... IP address of the PPTP server as given by your ISP has not provided you with a service name, leave this field empty. Confirm password Type your ...
... number that the modem should dial, as given by your ISP. Username Type your service name. Phone Number If you selected PPTP, type the IP address of the Telstra authentication server as given by Telstra. Using Internet Setup Using No Connection If you selected Telstra (BPA), type the... IP address of the PPTP server as given by your ISP has not provided you with a service name, leave this field empty. Confirm password Type your ...
User Guide
Page 94
... this period of your NetDefend firewall. 78 D-Link NetDefend firewall User Guide This option is not acting as a Backup or Master, see Setting Up a Dialup Backup Connection on configuring the appliance as a Backup appliance. IP Address Type the static IP address of time has elapsed, the dialup modem will... connection is available Select this option if you do not want the dialup modem to be transmitted to the Internet). Obtain IP address automatically (using DHCP) Clear this option to the Internet. Connect on page 119. For information, see Configuring High Availability ...
... this period of your NetDefend firewall. 78 D-Link NetDefend firewall User Guide This option is not acting as a Backup or Master, see Setting Up a Dialup Backup Connection on configuring the appliance as a Backup appliance. IP Address Type the static IP address of time has elapsed, the dialup modem will... connection is available Select this option if you do not want the dialup modem to be transmitted to the Internet). Obtain IP address automatically (using DHCP) Clear this option to the Internet. Connect on page 119. For information, see Configuring High Availability ...
User Guide
Page 95
...) slightly lower than your ISP's default gateway. Chapter 4: Configuring the Internet Connection 79 For information on page 151. Type the IP address of your Internet connection's maximum measured upstream speed in order to determine which one provides the best results. Select this ... Default Gateway... Server automatically Primary DNS Server Secondary DNS Server WINS Server QoS Shape Upstream: Link Rate Do this option to enable Traffic Shaper for outgoing traffic. Type the WINS server IP address. It is recommended to try different rates in the field provided. Clear this...
...) slightly lower than your ISP's default gateway. Chapter 4: Configuring the Internet Connection 79 For information on page 151. Type the IP address of your Internet connection's maximum measured upstream speed in order to determine which one provides the best results. Select this ... Default Gateway... Server automatically Primary DNS Server Secondary DNS Server WINS Server QoS Shape Upstream: Link Rate Do this option to enable Traffic Shaper for outgoing traffic. Type the WINS server IP address. It is recommended to try different rates in the field provided. Clear this...
User Guide
Page 96
... ... it in order to control the maximum transmission unit size. It is recommended that you selected PPTP, type the IP address of outbound traffic. Shape Downstream: Link Rate Select this field empty. Advanced External IP If you consult with your Internet connection's maximum measured downstream speed in the field provided. This makes the shaping...
... ... it in order to control the maximum transmission unit size. It is recommended that you selected PPTP, type the IP address of outbound traffic. Shape Downstream: Link Rate Select this field empty. Advanced External IP If you consult with your Internet connection's maximum measured downstream speed in the field provided. This makes the shaping...
User Guide
Page 99
... none of the defined servers respond to pinging, the Internet connection is a way to detect Internet failures that is considered to three servers specified by IP address or DNS name in the 1, 2, and 3 fields. Use this field... Do this option if you have Check Point VPN gateways, and you...be down. For example, if there is a problem with a different router at your DNS servers is considered to three Check Point VPN gateways specified by IP address or DNS name in the 1, 2, and 3 fields. Next hop probing will be reachable, but the Internet might be down . This is selected. ...
... none of the defined servers respond to pinging, the Internet connection is a way to detect Internet failures that is considered to three servers specified by IP address or DNS name in the 1, 2, and 3 fields. Use this field... Do this option if you have Check Point VPN gateways, and you...be down. For example, if there is a problem with a different router at your DNS servers is considered to three Check Point VPN gateways specified by IP address or DNS name in the 1, 2, and 3 fields. Next hop probing will be reachable, but the Internet might be down . This is selected. ...
User Guide
Page 100
... be automatically disconnected when not in use a dialup modem as a primary or secondary Internet connection method. If you chose the Ping Addresses connection probing method, type the IP addresses or DNS names of the desired VPN gateways. Connect a regular or ISDN dialup modem to your NetDefend firewall's serial port. For ... modem 1. To set up a dialup backup connection, see Rear Panel. 2. If you chose the Probe VPN Gateway (RDP) connection probing method, type the IP addresses or DNS names of the desired servers. This is useful in the main menu, and click the Ports tab. 84...
... be automatically disconnected when not in use a dialup modem as a primary or secondary Internet connection method. If you chose the Ping Addresses connection probing method, type the IP addresses or DNS names of the desired VPN gateways. Connect a regular or ISDN dialup modem to your NetDefend firewall's serial port. For ... modem 1. To set up a dialup backup connection, see Rear Panel. 2. If you chose the Probe VPN Gateway (RDP) connection probing method, type the IP addresses or DNS names of the desired servers. This is useful in the main menu, and click the Ports tab. 84...
User Guide
Page 104
... to the Internet. This is given in the format hh:mm:ss, where: hh=hours mm=minutes ss=seconds IP Address Your IP address. Enabled Indicates whether or not the connection is persistent through reboots. 88 D-Link NetDefend firewall User Guide Duration Indicates the connection duration, if active. If you have two Internet connections, you...
... to the Internet. This is given in the format hh:mm:ss, where: hh=hours mm=minutes ss=seconds IP Address Your IP address. Enabled Indicates whether or not the connection is persistent through reboots. 88 D-Link NetDefend firewall User Guide Duration Indicates the connection duration, if active. If you have two Internet connections, you...
User Guide
Page 110
...your network with their network configuration details. If a computer is not configured to obtain an IP address automatically, it is recommended to use a DHCP server on page 129. 94 D-Link NetDefend firewall User Guide For information, see Using Network Objects on the Internet or via a ...operates as a DHCP (Dynamic Host Configuration Protocol) server. If you want to assign it an IP address within the DHCP address range, the DHCP server will not assign this IP address to automatically configure all the devices on the same network segment. Note: You can configure DHCP ...
...your network with their network configuration details. If a computer is not configured to obtain an IP address automatically, it is recommended to use a DHCP server on page 129. 94 D-Link NetDefend firewall User Guide For information, see Using Network Objects on the Internet or via a ...operates as a DHCP (Dynamic Host Configuration Protocol) server. If you want to assign it an IP address within the DHCP address range, the DHCP server will not assign this IP address to automatically configure all the devices on the same network segment. Note: You can configure DHCP ...
User Guide
Page 112
From the DHCP Server list, select Enabled or Disabled. 4. Click OK. If your computer is configured to obtain its IP address automatically (using DHCP), and either the NetDefend DHCP server or another DHCP server is enabled, restart your computer obtains an IP address in the DHCP address range. 96 D-Link NetDefend firewall User Guide Configuring Network Settings The Edit Network Settings page appears. 3. Click Apply. A success message appears 6. If you enabled the DHCP server, your computer. A warning message appears. 5.
From the DHCP Server list, select Enabled or Disabled. 4. Click OK. If your computer is configured to obtain its IP address automatically (using DHCP), and either the NetDefend DHCP server or another DHCP server is enabled, restart your computer obtains an IP address in the DHCP address range. 96 D-Link NetDefend firewall User Guide Configuring Network Settings The Edit Network Settings page appears. 3. Click Apply. A success message appears 6. If you enabled the DHCP server, your computer. A warning message appears. 5.
User Guide
Page 113
... Network Settings Configuring the DHCP Address Range By default, the NetDefend DHCP server automatically sets the DHCP address range. IP addresses outside of IP addresses that the DHCP server can set the DHCP range manually: a. To configure the DHCP address range 1. To set the NetDefend... DHCP range manually. Clear the Automatic DHCP range check box. The DHCP address range is not available for statically addressed...
... Network Settings Configuring the DHCP Address Range By default, the NetDefend DHCP server automatically sets the DHCP address range. IP addresses outside of IP addresses that the DHCP server can set the DHCP range manually: a. To configure the DHCP address range 1. To set the NetDefend... DHCP range manually. Clear the Automatic DHCP range check box. The DHCP address range is not available for statically addressed...
User Guide
Page 114
..., restart your computer. Click Apply. Your computer obtains an IP address in the new DHCP address range. 98 D-Link NetDefend firewall User Guide A warning message appears. 6. If your computer is configured to set the IP address range, select the Automatic DHCP range check box. 5. In the DHCP IP range fields type the desired DHCP range. 4. Configuring Network...
..., restart your computer. Click Apply. Your computer obtains an IP address in the new DHCP address range. 98 D-Link NetDefend firewall User Guide A warning message appears. 6. If your computer is configured to set the IP address range, select the Automatic DHCP range check box. 5. In the DHCP IP range fields type the desired DHCP range. 4. Configuring Network...
User Guide
Page 116
A success message appears 7. Click OK. If your computer. In the Relay to IP field appears. 4. Your computer obtains an IP address in the DHCP address range. 100 D-Link NetDefend firewall User Guide Configuring Network Settings The Automatic DHCP range check box is enabled, restart your computer is configured to obtain its IP address automatically (using DHCP), and either the NetDefend DHCP server or another DHCP server is disabled, and the Relay to IP field, type the IP address of the desired DHCP server. 5. A warning message appears. 6. Click Apply.
A success message appears 7. Click OK. If your computer. In the Relay to IP field appears. 4. Your computer obtains an IP address in the DHCP address range. 100 D-Link NetDefend firewall User Guide Configuring Network Settings The Automatic DHCP range check box is enabled, restart your computer is configured to obtain its IP address automatically (using DHCP), and either the NetDefend DHCP server or another DHCP server is disabled, and the Relay to IP field, type the IP address of the desired DHCP server. 5. A warning message appears. 6. Click Apply.
User Guide
Page 119
... "mail.mydomain.com". For example, if the domain suffix is configured to obtain its IP address automatically (using DHCP), restart your computer is set to "mydomain.com", and the client tries to resolve the name "mail", the suffix will automatically append ... selected. 5. Table 13: DHCP Server Options Fields In this ... If your computer. The DHCP client will be passed to the name, resulting in the DHCP address range. Domain Name Type a default domain suffix that should be automatically appended to DHCP clients.
... "mail.mydomain.com". For example, if the domain suffix is configured to obtain its IP address automatically (using DHCP), restart your computer is set to "mydomain.com", and the client tries to resolve the name "mail", the suffix will automatically append ... selected. 5. Table 13: DHCP Server Options Fields In this ... If your computer. The DHCP client will be passed to the name, resulting in the DHCP address range. Domain Name Type a default domain suffix that should be automatically appended to DHCP clients.
User Guide
Page 120
... Server 1, 2 Other Services Time Server 1, 2 Call Manager 1, 2 Do this option selected. The DNS Server 1 and DNS Server 2 fields appear. Type the IP addresses of the Primary and Secondary DNS servers to pass to DHCP clients instead of the Primary and Secondary NTP servers. To use instead of the... Primary and Secondary VoIP servers. 104 D-Link NetDefend firewall User Guide Configuring Network Settings In this option if you do not want DHCP clients to be assigned the same WINS servers as a DNS relay server and pass its own IP address to DHCP clients. These fields are not ...
... Server 1, 2 Other Services Time Server 1, 2 Call Manager 1, 2 Do this option selected. The DNS Server 1 and DNS Server 2 fields appear. Type the IP addresses of the Primary and Secondary DNS servers to pass to DHCP clients instead of the Primary and Secondary NTP servers. To use instead of the... Primary and Secondary VoIP servers. 104 D-Link NetDefend firewall User Guide Configuring Network Settings In this option if you do not want DHCP clients to be assigned the same WINS servers as a DNS relay server and pass its own IP address to DHCP clients. These fields are not ...