User manual D-LINK DFL BROCHURE

[. . . ] 9 Web content filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 NAT/Route mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Transparent mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] 1. 1. 1. 1 ddcHH01887d Configuring remote IPSec VPN gateways The remote IPSec VPN gateways must be DFL IPSec VPN gateways or third-party IPSec VPN gateways running industry standard IPSec Autokey IKE VPN software. Configure the VPN gateway as required to connect to the dial-up VPN gateway using an IPSec VPN configuration. Make sure the gateway configuration includes the settings in Remote IPSec VPN gateway configuration. Remote IPSec VPN gateway configuration Description Tunnel Name Should correspond to the dial-up VPN tunnel name used on the DFL Example Setting Dial-up_VPN DFL User Manual 65 dial-up VPN gateway. Remote Gateway Authentication Key VPN policies and addresses The External IP address of the dial-up VPN gateway. The Client authentication key should match the dial-up VPN gateway tunnel authentication key. Add as required to configure the remote gateway to connect to the dial-up VPN gateway. 1. 1. 1. 1 ddcHH01887d Viewing VPN tunnel status You can use the IPSec VPN tunnel list to view the status of all IPSec Autokey IKE VPN tunnels. For each tunnel, the list shows the status of each tunnel as well as the tunnel time out. To view VPN tunnel status: · Go to VPN > IPSEC > Autokey IKE . The Status column displays the status of each tunnel. If Status is Down the tunnel is not active. Enter the external IP address of the DFL or other IPSec gateway at the opposite end of the tunnel. Select Incoming NAT if you require address translation for the VPN. Make sure you use the same algorithm at both ends of the tunnel. Required for encryption algorithms that include ESP-DES or ESP-3DES. For all DES Encryption algorithms, enter one hexadecimal number of up to 16 digits. Use the same encryption key at both ends of the tunnel For all 3DES encryption algorithms, enter three hexadecimal numbers of up to 16 digits each. Use the same encryption key at both ends of the tunnel. Authentication Key Required for encryption algorithms that include MD5 or SHA1. DFL User Manual 67 For MD5 encryption algorithms, enter two hexadecimal numbers of 16 digits each. Use the same authentication key at both ends of the tunnel. For SHA1 encryption algorithms, enter two hexadecimal numbers one of 16 digits and one of 20 digits. Use the same authentication key at both ends of the tunnel. · Select OK to save the manual key VPN tunnel. Example manual key VPN tunnel Adding source and destination addresses Use the procedure Adding source and destination addresses to configure the source and destination addresses used by the VPN policy. Adding an IPSec VPN policy Use the procedure Adding an IPSec VPN policy to configure the VPN policy that associates the source and destination addresses with the VPN tunnel. Manual key IPSec VPN for remote clients Use the following procedures to configure a VPN that allows remote VPN clients to connect to computers on a Main office internal network (See Example VPN between an internal network and remote clients). Manual key exchange VPNs do not support VPN clients with dynamic IP addresses. The VPN client PC must have industry standard IPSec VPN client software installed. [. . . ] D-Link will not be held responsible and it is the customer's own responsibility for any loss of data and/or whatsoever consequences arising from the use of this software. What You Must Do For Warranty Service: For All warranty services, and any terms and conditions, details can be found at local D-Link website. Any claim under this limited warranty must be submitted in writing before the end of the Warranty Period to an Authorized D-Link Service Office. · The customer must submit as part of the claim a written description of the Hardware defect or Software nonconformance in sufficient detail to allow D-Link to confirm the same. [. . . ]