User manual D-LINK DFL-500

[. . . ] D-Link DFL-500 DFLNetwork Security Firewall Manual Building Networks for People DFL-500 User Manual 1 © Copyright 2002 D-Link Systems, Inc. All rights reserved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of D-Link Systems, Inc. DFL-500 User Manual Version 2. 27 31 July 2002 Trademarks Products mentioned in this document are trademarks or registered trademarks of their respective holders. Regulatory Compliance FCC Class A Part 15 CSA/CUS DFL-500 User Manual 2 Table of Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Antivirus protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] The Timeout column displays the time before the next key exchange. The time is calculated by subtracting the time elapsed since the last key exchange from the keylife. Autokey IKE tunnel status Dial-up monitor The IPSec VPN dial-up monitor displays all of the active dial-up tunnels. A dial-up tunnel is an IPSec VPN tunnel created when a remote IPSec VPN gateway or client connects to the Autokey IKE VPN Tunnel with the IP address 0. 0. 0. 0. This VPN tunnel accepts VPN connections from any remote IPSec VPN gateway or client as long as the remote gateway or client can match the VPN tunnel's Authentication Key. To view the status of active dial-up tunnels: · Go to VPN > IPSEC > Dial-up Monitor . The Local IP column is always set to 0. 0. 0. 0/0. 0. 0. 0. The Local Gateway column displays the IP address of the DFL-500 external interface. The Remote Gateway column displays the IP address of the remote VPN gateway or remote IPSec VPN client connected to the tunnel. The Remote IP column displays the IP address of the computer on the internal network behind the remote gateway. DFL-500 User Manual 66 Dial-up Monitor Manual key IPSec VPN between two networks DFL-500 IPSec VPNs can be configured to use Autokey IKE or manual key exchange. In most cases Autokey key exchange is preferred because it is easier to configure and maintain. However, manual key exchange may be necessary in some cases for compatibility with third party VPN products. Use the following procedures to configure a VPN between two networks protected by VPN gateways that use manual key exchange (for an example, see Example VPN between two internal networks). This section describes: · · · Configuring the manual key VPN tunnel Adding source and destination addresses Adding an IPSec VPN policy Configuring the manual key VPN tunnel Complete the following procedure on both VPN gateways: · · · Go to VPN > IPSEC > Manual Key . Select New to add a new manual key VPN tunnel. Configure the VPN tunnel. VPN Tunnel Name Local SPI Remote SPI Remote Gateway Incoming NAT Encryption Algorithm Encryption Key Enter a name for the tunnel. The name can contain numbers (0-9) and upper and lower case letters (A-Z, a-z), and the special characters - and _. Other special characters and spaces are not allowed. If you are configuring a VPN between two DFL-500 gateways, it is recommended that you use the same tunnel name on both sides of the VPN. (Secure Parameter Index) Enter a hexadecimal number of up to eight digits (digits can be 0 to 9, a to f). This number must be added to the Remote SPI at the opposite end of the tunnel. Enter a hexadecimal number of up to eight digits. This number must be added to the Local SPI at the opposite end of the tunnel. [. . . ] · The original product owner must obtain a Return Material Authorization (RMA) number from the Authorized D-Link Service Office and, if requested, provide written proof of purchase of the product (such as a copy of the dated purchase invoice for the product) before the warranty service is provided. DFL-500 User Manual 136 · After an RMA number is issued, the defective product must be packaged securely in the original or other suitable shipping package to ensure that it will not be damaged in transit, and the RMA number must be prominently marked on the outside of the package. · The customer is responsible for all shipping charges to and from D-Link (No CODs allowed). Products sent COD will become the property of D-Link Systems, Inc. Products should be fully insured by the customer and shipped to D-Link Systems Inc. , 53 Discovery Drive, Irvine CA 92618. D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package. [. . . ]