Product Manual
Page 8
... Using the Wireless Configuration Wizard 176 WPA-PSK ...178 WEP ...180 No Security ...181 Preparing the Wireless Stations...182 Troubleshooting Wireless Connectivity 183 Viewing Reports ...187 Viewing the Event Log ...187 Using the Traffic Monitor ...191 Viewing Traffic Reports ...191 Configuring Traffic Monitor Settings 193 Exporting General Traffic Reports 194 iv D-Link NetDefend firewall...
... Using the Wireless Configuration Wizard 176 WPA-PSK ...178 WEP ...180 No Security ...181 Preparing the Wireless Stations...182 Troubleshooting Wireless Connectivity 183 Viewing Reports ...187 Viewing the Event Log ...187 Using the Traffic Monitor ...191 Viewing Traffic Reports ...191 Configuring Traffic Monitor Settings 193 Exporting General Traffic Reports 194 iv D-Link NetDefend firewall...
Product Manual
Page 9
Contents Viewing Computers ...194 Viewing Connections ...197 Viewing Wireless Statistics...198 Setting Your Security Policy ...203 Default Security Policy ...203 Setting the Firewall Security Level 204 Configuring Servers ...207 Using Rules ...209 Adding and ...
Contents Viewing Computers ...194 Viewing Connections ...197 Viewing Wireless Statistics...198 Setting Your Security Policy ...203 Default Security Policy ...203 Setting the Firewall Security Level 204 Configuring Servers ...207 Using Rules ...209 Adding and ...
Product Manual
Page 17
...the NetDefend firewall, you can subscribe to Know Your NetDefend firewall 11 Contacting Technical Support 14 About Your D-Link NetDefend firewall The D-Link NetDefend firewall is a unified threat management (UTM) appliance that enables secure high-speed Internet access from ...management. Chapter 1: Introduction 1 This chapter includes the following topics: About Your D-Link NetDefend firewall 1 NetDefend Secured by Check Point Product Family includes both wired and wireless models. The D-Link firewall, based on the world-leading Check Point Embedded NGX Stateful Inspection technology,...
...the NetDefend firewall, you can subscribe to Know Your NetDefend firewall 11 Contacting Technical Support 14 About Your D-Link NetDefend firewall The D-Link NetDefend firewall is a unified threat management (UTM) appliance that enables secure high-speed Internet access from ...management. Chapter 1: Introduction 1 This chapter includes the following topics: About Your D-Link NetDefend firewall 1 NetDefend Secured by Check Point Product Family includes both wired and wireless models. The D-Link firewall, based on the world-leading Check Point Embedded NGX Stateful Inspection technology,...
Product Manual
Page 18
... Connectivity The NetDefend series includes the following hardware models: • DFL-CP310 Security VPN Firewall • DFL-CPG310 Wireless Security VPN Firewall You can upgrade your reseller for console access and... dialup modem connection • Supported Internet connection methods: Static IP, DHCP Client, Cable Modem, PPTP Client, PPPoE Client, Telstra BPA login, Dialup • Concurrent firewall connections: 8,000 • DHCP server, client, and relay • MAC cloning 2 D-Link...
... Connectivity The NetDefend series includes the following hardware models: • DFL-CP310 Security VPN Firewall • DFL-CPG310 Wireless Security VPN Firewall You can upgrade your reseller for console access and... dialup modem connection • Supported Internet connection methods: Static IP, DHCP Client, Cable Modem, PPTP Client, PPPoE Client, Telstra BPA login, Dialup • Concurrent firewall connections: 8,000 • DHCP server, client, and relay • MAC cloning 2 D-Link...
Product Manual
Page 19
...• Traffic Shaping • VLAN Support (requires Power Pack) • Dynamic Routing (requires Power Pack) The NetDefend DFL-CPG310 firewall includes the following additional features: • Wireless LAN interface with dual diversity antennas supporting up to 108 Mbps (Super G) and Extended Range (XR) • Integrated... USB print server • Wireless QoS (WMM) Firewall The NetDefend series includes the following features: • Check Point Firewall-1 Embedded NGX firewall with Application...
...• Traffic Shaping • VLAN Support (requires Power Pack) • Dynamic Routing (requires Power Pack) The NetDefend DFL-CPG310 firewall includes the following additional features: • Wireless LAN interface with dual diversity antennas supporting up to 108 Mbps (Super G) and Extended Range (XR) • Integrated... USB print server • Wireless QoS (WMM) Firewall The NetDefend series includes the following features: • Check Point Firewall-1 Embedded NGX firewall with Application...
Product Manual
Page 20
... Management: SMP • NTP automatic time setting • TFTP Rapid Deployment • Local diagnostics tools: Ping, WHOIS, Packet Sniffer, VPN Tunnel Monitor, Connection Table Monitor, Wireless Monitor, Active Computers Display, Local Logs 4 D-Link NetDefend firewall User Guide
... Management: SMP • NTP automatic time setting • TFTP Rapid Deployment • Local diagnostics tools: Ping, WHOIS, Packet Sniffer, VPN Tunnel Monitor, Connection Table Monitor, Wireless Monitor, Active Computers Display, Local Logs 4 D-Link NetDefend firewall User Guide
Product Manual
Page 23
...use either Microsoft Internet Explorer 5.5 or higher, or Mozilla Firefox 1.0 or higher. • When using the DFL-CPG310, an 802.11b, 802.11g or 802.11 Super G wireless card installed on each wireless station Chapter 1: Introduction 7 head screws • USB extension cable Network Requirements • A broadband Internet ... or crossed cable, when cascading an additional hub or switch to the NetDefend firewall. NetDefend Features and Compatibility The DFL-CPG310 also includes: • Two antennas • Wall mounting kit, including two plastic conical anchors and two cross-
...use either Microsoft Internet Explorer 5.5 or higher, or Mozilla Firefox 1.0 or higher. • When using the DFL-CPG310, an 802.11b, 802.11g or 802.11 Super G wireless card installed on each wireless station Chapter 1: Introduction 7 head screws • USB extension cable Network Requirements • A broadband Internet ... or crossed cable, when cascading an additional hub or switch to the NetDefend firewall. NetDefend Features and Compatibility The DFL-CPG310 also includes: • Two antennas • Wall mounting kit, including two plastic conical anchors and two cross-
Product Manual
Page 28
... USB RS232 WAN DMZ/ WAN2 LAN 1-4 ANT 1/ ANT 2 Description A button used for connecting computers or other network devices Antenna connectors, used to connect the supplied wireless antennas 12 D-Link NetDefend firewall User Guide Reboots the NetDefend firewall • Long press (7 seconds).
... USB RS232 WAN DMZ/ WAN2 LAN 1-4 ANT 1/ ANT 2 Description A button used for connecting computers or other network devices Antenna connectors, used to connect the supplied wireless antennas 12 D-Link NetDefend firewall User Guide Reboots the NetDefend firewall • Long press (7 seconds).
Product Manual
Page 52
... NetDefend firewall, you have configured your NetDefend firewall to a USB port at the hinges, so that they point upwards. 7. In wireless models, prepare the NetDefend firewall for configuring your Internet connection. For information on setting up network printers, see Setting up Network Printers... b. If desired, you have logged on page 424. b. Connect the other automatically. Connect one end of these steps separately. 36 D-Link NetDefend firewall User Guide Warning: Verify that came with a print server, you can exit the Setup Wizard and perform each other end to...
... NetDefend firewall, you have configured your NetDefend firewall to a USB port at the hinges, so that they point upwards. 7. In wireless models, prepare the NetDefend firewall for configuring your Internet connection. For information on setting up network printers, see Setting up Network Printers... b. If desired, you have logged on page 424. b. Connect the other automatically. Connect one end of these steps separately. 36 D-Link NetDefend firewall User Guide Warning: Verify that came with a print server, you can exit the Setup Wizard and perform each other end to...
Product Manual
Page 53
... Internet Wizard on page 54 Setting the Time on your NetDefend firewall Setting the Time on the Appliance on page 397 Setting up a wireless network (DFL-CPG310 only) Configuring a Wireless Network on page 161 Installing the Product Key Upgrading Your Software Product on page 379 Registering your NetDefend firewall Registering Your NetDefend firewall on...
... Internet Wizard on page 54 Setting the Time on your NetDefend firewall Setting the Time on the Appliance on page 397 Setting up a wireless network (DFL-CPG310 only) Configuring a Wireless Network on page 161 Installing the Product Key Upgrading Your Software Product on page 379 Registering your NetDefend firewall Registering Your NetDefend firewall on...
Product Manual
Page 137
... Gateway's DHCP server will be disabled until the gateway becomes active. • The two WLAN networks can share the same SSID and wireless frequency. • The WLAN interface cannot serve as the synchronization interface. For example, if the DMZ is the synchronization interface, then ...synchronization only. It may be connected to each other. Note: You can configure HA for the WLAN network: • A passive appliance's wireless transmitter will start answering DHCP requests only if the Active Gateway fails. Chapter 5: Managing Your Network 121 Note: If you configure HA for ...
... Gateway's DHCP server will be disabled until the gateway becomes active. • The two WLAN networks can share the same SSID and wireless frequency. • The WLAN interface cannot serve as the synchronization interface. For example, if the DMZ is the synchronization interface, then ...synchronization only. It may be connected to each other. Note: You can configure HA for the WLAN network: • A passive appliance's wireless transmitter will start answering DHCP requests only if the Active Gateway fails. Chapter 5: Managing Your Network 121 Note: If you configure HA for ...
Product Manual
Page 153
... 16: Network Object Fields for this computer Select this ... You must then fill in the External IP field. For information about MAC Filtering, see Configuring a Wireless Network on page 161. Perform Static NAT (Network Address Translation) Select this option to map the local computer's IP address to specify your computer. External...
... 16: Network Object Fields for this computer Select this ... You must then fill in the External IP field. For information about MAC Filtering, see Configuring a Wireless Network on page 161. Perform Static NAT (Network Address Translation) Select this option to map the local computer's IP address to specify your computer. External...
Product Manual
Page 168
...a class has reached its model: • Simplified Traffic Shaper. Includes a fixed set of traffic shaping, depending on page 165. 152 D-Link NetDefend firewall User Guide DiffServ marks packets as 512 kilobit per second. Note: You can define up to a specific rate, such as belonging ...to other classes. You can prioritize wireless traffic from WMM-compliant multimedia applications, by Peer-To-Peer file-sharing applications may use together. Each class also has a "Delay Sensitivity...
...a class has reached its model: • Simplified Traffic Shaper. Includes a fixed set of traffic shaping, depending on page 165. 152 D-Link NetDefend firewall User Guide DiffServ marks packets as 512 kilobit per second. Note: You can define up to a specific rate, such as belonging ...to other classes. You can prioritize wireless traffic from WMM-compliant multimedia applications, by Peer-To-Peer file-sharing applications may use together. Each class also has a "Delay Sensitivity...
Product Manual
Page 177
... recommended to configure the WLAN via Ethernet and not via a wireless connection, because the wireless connection could be broken after making a change to set up a wireless internal network. You can define a wireless internal network called a WLAN (wireless LAN) network, when using the DFL-CPG310. Overview Chapter 7 Configuring a Wireless Network This chapter describes how to the configuration. Chapter 7: Configuring...
... recommended to configure the WLAN via Ethernet and not via a wireless connection, because the wireless connection could be broken after making a change to set up a wireless internal network. You can define a wireless internal network called a WLAN (wireless LAN) network, when using the DFL-CPG310. Overview Chapter 7 Configuring a Wireless Network This chapter describes how to the configuration. Chapter 7: Configuring...
Product Manual
Page 178
...Link NetDefend firewall User Guide The DFL-CPG310 supports the latest 802.11g standard (up to 54Mbps) and is tightly integrated with the firewall and hardware-accelerated VPN. In addition, the NetDefend firewall supports a special extended range (XR) mode that allows up to 108Mbps with Super G compatible stations. About the Wireless...meters indoors, and up to 1 km (3200 ft) outdoors, with XR-enabled wireless stations (actual range depends on the Super G mode refer to: http://www.super-ag.com. The DFL-CPG310 transmits in 802.11b/g access point that is backwards compatible with the older 802....
...Link NetDefend firewall User Guide The DFL-CPG310 supports the latest 802.11g standard (up to 54Mbps) and is tightly integrated with the firewall and hardware-accelerated VPN. In addition, the NetDefend firewall supports a special extended range (XR) mode that allows up to 108Mbps with Super G compatible stations. About the Wireless...meters indoors, and up to 1 km (3200 ft) outdoors, with XR-enabled wireless stations (actual range depends on the Super G mode refer to: http://www.super-ag.com. The DFL-CPG310 transmits in 802.11b/g access point that is backwards compatible with the older 802....
Product Manual
Page 179
...) which you can still limit access from the WLAN by creating firewall rules. See Using RADIUS Authentication on page 368 Chapter 7: Configuring a Wireless Network 163 It is not recommended, because it allows unauthorized users to encrypt the data. All messages are passed in the WEP protocol. Note...Note: To use this security method, you must use a pre-shared key to connect to your WLAN network, although you want to authenticate wireless users, but do not need to access your network. This option is provided for compatibility with the same WEP key. 802.1X: RADIUS authentication...
...) which you can still limit access from the WLAN by creating firewall rules. See Using RADIUS Authentication on page 368 Chapter 7: Configuring a Wireless Network 163 It is not recommended, because it allows unauthorized users to encrypt the data. All messages are passed in the WEP protocol. Note...Note: To use this security method, you must use a pre-shared key to connect to your WLAN network, although you want to authenticate wireless users, but do not need to access your network. This option is provided for compatibility with the same WEP key. 802.1X: RADIUS authentication...
Product Manual
Page 180
... not require an authentication server. Note: The appliance and the wireless stations must first configure a RADIUS server which want to authenticate and encrypt wireless data, but do not want to authenticate wireless stations using both WPA and WPA2. 164 D-Link NetDefend firewall User Guide Wireless Security Protocols Security Protocol WPA: RADIUS authentication, encryption WPA-PSK...
... not require an authentication server. Note: The appliance and the wireless stations must first configure a RADIUS server which want to authenticate and encrypt wireless data, but do not want to authenticate wireless stations using both WPA and WPA2. 164 D-Link NetDefend firewall User Guide Wireless Security Protocols Security Protocol WPA: RADIUS authentication, encryption WPA-PSK...
Product Manual
Page 181
... connections from your internal networks, and to install SecuRemote on each computer in Network Installation on page 368. 3. Prepare the appliance for a wireless connection as a VPN Server on page 168. For information, see Internal VPN Server on page 302 and Setting Up Your NetDefend firewall as described...In the WLAN network's row, click Edit. Manually Configuring a WLAN To manually configure a WLAN network 1. The My Network page appears. 4. Chapter 7: Configuring a Wireless Network 165 For information on configuring RADIUS servers, see Basic WLAN Settings Fields on page 303.
... connections from your internal networks, and to install SecuRemote on each computer in Network Installation on page 368. 3. Prepare the appliance for a wireless connection as a VPN Server on page 168. For information, see Internal VPN Server on page 302 and Setting Up Your NetDefend firewall as described...In the WLAN network's row, click Edit. Manually Configuring a WLAN To manually configure a WLAN network 1. The My Network page appears. 4. Chapter 7: Configuring a Wireless Network 165 For information on configuring RADIUS servers, see Basic WLAN Settings Fields on page 303.
Product Manual
Page 183
Manually Configuring a WLAN 8. Complete the fields using the information in Basic WLAN Settings Fields on page 172. A warning message appears, telling you that you are about to change your network settings. Click Apply. New fields appear. 10. To configure advanced settings, click Show Advanced Settings and complete the fields using the information in Advanced WLAN Settings Fields on page 168. 9. Chapter 7: Configuring a Wireless Network 167
Manually Configuring a WLAN 8. Complete the fields using the information in Basic WLAN Settings Fields on page 172. A warning message appears, telling you that you are about to change your network settings. Click Apply. New fields appear. 10. To configure advanced settings, click Show Advanced Settings and complete the fields using the information in Advanced WLAN Settings Fields on page 168. 9. Chapter 7: Configuring a Wireless Network 167
Product Manual
Page 184
See Preparing the Wireless Stations on page 182. Table 24: WLAN Settings Fields In this ... Country Select the country where you enable the Hide the Network Name (SSID) option. ... Address Type the IP address of government regulations. 168 D-Link NetDefend firewall User Guide Subnet Mask Type the WLAN's internal network range. This name will be up to wireless stations passing near your wireless network. Prepare the wireless stations. Do this field... A success message appears. 12. Wireless Settings Network Name (SSID) Type the network name...
See Preparing the Wireless Stations on page 182. Table 24: WLAN Settings Fields In this ... Country Select the country where you enable the Hide the Network Name (SSID) option. ... Address Type the IP address of government regulations. 168 D-Link NetDefend firewall User Guide Subnet Mask Type the WLAN's internal network range. This name will be up to wireless stations passing near your wireless network. Prepare the wireless stations. Do this field... A success message appears. 12. Wireless Settings Network Name (SSID) Type the network name...