Product Manual
Page 8
Contents Modifying Port Assignments ...147 Modifying Link Configurations 149 Resetting Ports to Defaults...150 Using Traffic Shaper...151 Overview ...151 Setting Up Traffic Shaper ...153 Predefined QoS Classes ...154 Adding... Restoring Traffic Shaper Defaults 160 Configuring a Wireless Network ...161 Overview ...161 About the Wireless Hardware in Your NetDefend firewall 162 Wireless Security Protocols ...163 Manually Configuring a WLAN ...165 Using the Wireless Configuration Wizard 176 WPA-PSK ...178 WEP ...180 No Security ...181 Preparing the Wireless Stations...182 Troubleshooting Wireless...
Contents Modifying Port Assignments ...147 Modifying Link Configurations 149 Resetting Ports to Defaults...150 Using Traffic Shaper...151 Overview ...151 Setting Up Traffic Shaper ...153 Predefined QoS Classes ...154 Adding... Restoring Traffic Shaper Defaults 160 Configuring a Wireless Network ...161 Overview ...161 About the Wireless Hardware in Your NetDefend firewall 162 Wireless Security Protocols ...163 Manually Configuring a WLAN ...165 Using the Wireless Configuration Wizard 176 WPA-PSK ...178 WEP ...180 No Security ...181 Preparing the Wireless Stations...182 Troubleshooting Wireless...
Product Manual
Page 10
... from Your Service Center 289 Web Filtering ...290 Enabling/Disabling Web Filtering 290 Selecting Categories for Blocking 291 Temporarily Disabling Web Filtering 292 Automatic and Manual Updates...294 Checking for Software Updates when Remotely Managed 294 Checking for Software Updates when Locally Managed 295 Working With VPNs...297 Overview ...297 Site... ...307 Adding and Editing VPN Sites ...308 Configuring a Remote Access VPN Site 311 Configuring a Site-to-Site VPN Gateway 324 Deleting a VPN Site ...340 vi D-Link NetDefend firewall User Guide
... from Your Service Center 289 Web Filtering ...290 Enabling/Disabling Web Filtering 290 Selecting Categories for Blocking 291 Temporarily Disabling Web Filtering 292 Automatic and Manual Updates...294 Checking for Software Updates when Remotely Managed 294 Checking for Software Updates when Locally Managed 295 Working With VPNs...297 Overview ...297 Site... ...307 Adding and Editing VPN Sites ...308 Configuring a Remote Access VPN Site 311 Configuring a Site-to-Site VPN Gateway 324 Deleting a VPN Site ...340 vi D-Link NetDefend firewall User Guide
Product Manual
Page 15
Each task is used for command and button names. You can perform the task using these products... About Your D-Link NetDefend firewall About This Guide To make finding information in this icon appears... Boldface type is marked with an icon indicating the NetDefend product ...: If this manual easier, some types of information are marked with the Power Pack only Chapter 1: About This Guide xi Warning: Warnings are denoted by indented text and preceded by the Warning icon. Note: Notes are denoted by indented text and preceded by the Note icon. DFL-CP310 or DFL-CPG310, with or...
Each task is used for command and button names. You can perform the task using these products... About Your D-Link NetDefend firewall About This Guide To make finding information in this icon appears... Boldface type is marked with an icon indicating the NetDefend product ...: If this manual easier, some types of information are marked with the Power Pack only Chapter 1: About This Guide xi Warning: Warnings are denoted by indented text and preceded by the Warning icon. Note: Notes are denoted by indented text and preceded by the Note icon. DFL-CP310 or DFL-CPG310, with or...
Product Manual
Page 65
... Internet connection. Using the NetDefend Portal Table 7: Status Bar Fields This field... The NetDefend firewall is down. • Establishing Connection. The Internet connection has been manually disabled. For information on configuring a secondary Internet connection, see Configuring the Internet Connection on page 53. Chapter 3: Getting Started 49 Connection probing is OK. •...
... Internet connection. Using the NetDefend Portal Table 7: Status Bar Fields This field... The NetDefend firewall is down. • Establishing Connection. The Internet connection has been manually disabled. For information on configuring a secondary Internet connection, see Configuring the Internet Connection on page 53. Chapter 3: Getting Started 49 Connection probing is OK. •...
Product Manual
Page 79
To configure the Internet connection using Internet Setup 1. Click Network in the main menu, and click the Internet tab. 2. Next to manually configure your Internet connection. Using Internet Setup Using Internet Setup Internet Setup allows you to the desired Internet connection, click Edit. Chapter 4: Configuring the Internet Connection 63
To configure the Internet connection using Internet Setup 1. Click Network in the main menu, and click the Internet tab. 2. Next to manually configure your Internet connection. Using Internet Setup Using Internet Setup Internet Setup allows you to the desired Internet connection, click Edit. Chapter 4: Configuring the Internet Connection 63
Product Manual
Page 113
... Settings page appears. 3. Click Network in the main menu, and click the My Network tab. Chapter 5: Managing Your Network 97 Note: Setting the DHCP range manually is the range of the DHCP address range are reserved for the OfficeMode network. Clear the Automatic DHCP range check box. The DHCP address range... address range. If desired, you can assign to network devices. IP addresses outside of IP addresses that the DHCP server can set the DHCP range manually: a. The My Network page appears. 2. To set the NetDefend DHCP range...
... Settings page appears. 3. Click Network in the main menu, and click the My Network tab. Chapter 5: Managing Your Network 97 Note: Setting the DHCP range manually is the range of the DHCP address range are reserved for the OfficeMode network. Clear the Automatic DHCP range check box. The DHCP address range... address range. If desired, you can assign to network devices. IP addresses outside of IP addresses that the DHCP server can set the DHCP range manually: a. The My Network page appears. 2. To set the NetDefend DHCP range...
Product Manual
Page 122
.... • A success message appears. 7. For information on configuring TCP/IP, see TCP/IP Settings on page 24, on page 20. 106 D-Link NetDefend firewall User Guide A warning message appears. 6. Do one of the following: • If your computer is configured to obtain its IP address ...'s internal IP address and by the subnet mask. Click Apply. Your computer obtains an IP address in the new range. • Otherwise, manually reconfigure your computer. For example, if the NetDefend firewall's internal IP address is 192.168.10.*. 5. Configuring Network Settings Note: The internal ...
.... • A success message appears. 7. For information on configuring TCP/IP, see TCP/IP Settings on page 24, on page 20. 106 D-Link NetDefend firewall User Guide A warning message appears. 6. Do one of the following: • If your computer is configured to obtain its IP address ...'s internal IP address and by the subnet mask. Click Apply. Your computer obtains an IP address in the new range. • Otherwise, manually reconfigure your computer. For example, if the NetDefend firewall's internal IP address is 192.168.10.*. 5. Configuring Network Settings Note: The internal ...
Product Manual
Page 165
...Managing Your Network 149 Modifying Link Configurations Managing Ports By default, the NetDefend automatically detects the link speed and duplex. Click Apply. If desired, you can manually restrict the NetDefend firewall's ports to automatically detect the link speed and duplex. In the Link Configuration drop-down list to ...the right of the port, do one of the following: • Select the desired link speed and duplex. •...
...Managing Your Network 149 Modifying Link Configurations Managing Ports By default, the NetDefend automatically detects the link speed and duplex. Click Apply. If desired, you can manually restrict the NetDefend firewall's ports to automatically detect the link speed and duplex. In the Link Configuration drop-down list to ...the right of the port, do one of the following: • Select the desired link speed and duplex. •...
Product Manual
Page 168
... Quality of the leftover bandwidth. You can assign network traffic to their class. These packets are then granted priority on page 165. 152 D-Link NetDefend firewall User Guide See Manually Configuring a WLAN on the public network according to each class, but enables you cannot modify the classes, delete them , and create new...
... Quality of the leftover bandwidth. You can assign network traffic to their class. These packets are then granted priority on page 165. 152 D-Link NetDefend firewall User Guide See Manually Configuring a WLAN on the public network according to each class, but enables you cannot modify the classes, delete them , and create new...
Product Manual
Page 177
You can define a wireless internal network called a WLAN (wireless LAN) network, when using the DFL-CPG310. See Manually Configuring a WLAN on page 176. • Manual configuration. Guides you can configure a WLAN network in Your NetDefend firewall 162 Wireless Security Protocols 163 Manually Configuring a WLAN 165 Using the Wireless Configuration Wizard 176 Preparing the Wireless Stations 182...
You can define a wireless internal network called a WLAN (wireless LAN) network, when using the DFL-CPG310. See Manually Configuring a WLAN on page 176. • Manual configuration. Guides you can configure a WLAN network in Your NetDefend firewall 162 Wireless Security Protocols 163 Manually Configuring a WLAN 165 Using the Wireless Configuration Wizard 176 Preparing the Wireless Stations 182...
Product Manual
Page 181
... click Edit. Prepare the appliance for a wireless connection as a VPN Server on page 35. 2. Chapter 7: Configuring a Wireless Network 165 Manually Configuring a WLAN Note: For increased security, it is recommended to enable the NetDefend internal VPN Server for users connecting from the WLAN to ...the LAN are encrypted and authenticated. Manually Configuring a WLAN To manually configure a WLAN network 1. For information on security modes, see Using RADIUS Authentication on page 302 and Setting Up ...
... click Edit. Prepare the appliance for a wireless connection as a VPN Server on page 35. 2. Chapter 7: Configuring a Wireless Network 165 Manually Configuring a WLAN Note: For increased security, it is recommended to enable the NetDefend internal VPN Server for users connecting from the WLAN to ...the LAN are encrypted and authenticated. Manually Configuring a WLAN To manually configure a WLAN network 1. For information on security modes, see Using RADIUS Authentication on page 302 and Setting Up ...
Product Manual
Page 182
If desired, enable or disable Hide NAT. Manually Configuring a WLAN The Edit Network Settings page appears. 5. In the Mode drop-down list, select Enabled. The fields are enabled. 6. See Enabling/Disabling Hide NAT on page 94. 166 D-Link NetDefend firewall User Guide If desired, configure a DHCP server. See Configuring a DHCP Server on page 107. 7.
If desired, enable or disable Hide NAT. Manually Configuring a WLAN The Edit Network Settings page appears. 5. In the Mode drop-down list, select Enabled. The fields are enabled. 6. See Enabling/Disabling Hide NAT on page 94. 166 D-Link NetDefend firewall User Guide If desired, configure a DHCP server. See Configuring a DHCP Server on page 107. 7.
Product Manual
Page 183
New fields appear. 10. Click Apply. Manually Configuring a WLAN 8. Chapter 7: Configuring a Wireless Network 167 To configure advanced settings, click Show Advanced Settings and complete the fields using the information in Advanced WLAN Settings Fields on page 168. 9. A warning message appears, telling you that you are about to change your network settings. Complete the fields using the information in Basic WLAN Settings Fields on page 172.
New fields appear. 10. Click Apply. Manually Configuring a WLAN 8. Chapter 7: Configuring a Wireless Network 167 To configure advanced settings, click Show Advanced Settings and complete the fields using the information in Advanced WLAN Settings Fields on page 168. 9. A warning message appears, telling you that you are about to change your network settings. Complete the fields using the information in Basic WLAN Settings Fields on page 172.
Product Manual
Page 184
See Preparing the Wireless Stations on page 182. IP Address Type the IP address of government regulations. 168 D-Link NetDefend firewall User Guide Wireless Settings Network Name (SSID) Type the network name (SSID) that identifies your access point, unless you are located. Do this .... 12. Prepare the wireless stations. It can be visible to 32 alphanumeric characters long and is case-sensitive. Table 24: WLAN Settings Fields In this ... Manually Configuring a WLAN 11. Click OK.
See Preparing the Wireless Stations on page 182. IP Address Type the IP address of government regulations. 168 D-Link NetDefend firewall User Guide Wireless Settings Network Name (SSID) Type the network name (SSID) that identifies your access point, unless you are located. Do this .... 12. Prepare the wireless stations. It can be visible to 32 alphanumeric characters long and is case-sensitive. Table 24: WLAN Settings Fields In this ... Manually Configuring a WLAN 11. Click OK.
Product Manual
Page 185
... Mbps). You can prevent older wireless stations from slowing down your network, by the maximum bandwidth (such as 108 Mbps). Chapter 7: Configuring a Wireless Network 169 Manually Configuring a WLAN In this mode, only 802.11g stations will be able to connect. • 802.11b/g (11/54 Mbps). When using this mode, 802...
... Mbps). You can prevent older wireless stations from slowing down your network, by the maximum bandwidth (such as 108 Mbps). Chapter 7: Configuring a Wireless Network 169 Manually Configuring a WLAN In this mode, only 802.11g stations will be able to connect. • 802.11b/g (11/54 Mbps). When using this mode, 802...
Product Manual
Page 186
... appear. The list of channels is hard to use the Random button. It can reduce the transmission power. To avoid this ... Manually Configuring a WLAN In this passphrase as well. 170 D-Link NetDefend firewall User Guide This is another wireless network in the vicinity, the two networks may interfere with this field... Note...
... appear. The list of channels is hard to use the Random button. It can reduce the transmission power. To avoid this ... Manually Configuring a WLAN In this passphrase as well. 170 D-Link NetDefend firewall User Guide This is another wireless network in the vicinity, the two networks may interfere with this field... Note...
Product Manual
Page 187
... devices, but the key need not be selected as well. Note: You can access the WLAN network. The possible key lengths are: • 64 Bits. Manually Configuring a WLAN In this field... Only wireless stations using WPA2, by selecting one WEP key. The key length is the default. Note: Some wireless card...
... devices, but the key need not be selected as well. Note: You can access the WLAN network. The possible key lengths are: • 64 Bits. Manually Configuring a WLAN In this field... Only wireless stations using WPA2, by selecting one WEP key. The key length is the default. Note: Some wireless card...
Product Manual
Page 188
.... The key is composed of some products, such as Microsoft Windows XP, and attempt to connect to rely on this setting alone for security. 172 D-Link NetDefend firewall User Guide Any device within range can still discover your network. Hide the SSID. Hide the Network Name (SSID) Specify whether you want...
.... The key is composed of some products, such as Microsoft Windows XP, and attempt to connect to rely on this setting alone for security. 172 D-Link NetDefend firewall User Guide Any device within range can still discover your network. Hide the SSID. Hide the Network Name (SSID) Specify whether you want...
Product Manual
Page 189
... MAC address filtering. This is not recommended to enable MAC address filtering, by a determined attacker. Therefore, it is the default. Chapter 7: Configuring a Wireless Network 173 Manually Configuring a WLAN In this ... Only MAC addresses that you want to rely on page 129. • No. Note: MAC address filtering does not provide strong...
... MAC address filtering. This is not recommended to enable MAC address filtering, by a determined attacker. Therefore, it is the default. Chapter 7: Configuring a Wireless Network 173 Manually Configuring a WLAN In this ... Only MAC addresses that you want to rely on page 129. • No. Note: MAC address filtering does not provide strong...
Product Manual
Page 190
... To provide antenna diversity, each wireless security appliance has two antennas. The ANT 2 antenna is always used for communicating. • ANT 2. Manually Configuring a WLAN In this ... Otherwise, set the threshold to a low value (around 2000), to reduce error penalty and increase overall throughput... (around 1000), to reduce overhead. The default value is the default. • ANT 1. This is 2346. 174 D-Link NetDefend firewall User Guide The ANT 1antenna is always used for communicating. Signals that the IP packet be split into smaller fragments.
... To provide antenna diversity, each wireless security appliance has two antennas. The ANT 2 antenna is always used for communicating. • ANT 2. Manually Configuring a WLAN In this ... Otherwise, set the threshold to a low value (around 2000), to reduce error penalty and increase overall throughput... (around 1000), to reduce overhead. The default value is the default. • ANT 1. This is 2346. 174 D-Link NetDefend firewall User Guide The ANT 1antenna is always used for communicating. Signals that the IP packet be split into smaller fragments.