Building Networks for People
Network
Security UTM Firewall
This Quick Guide will guide you through the installation Process. You are only moments away from using your new D-Link Network Security Product
DFL-860
DFL-860 Quick Installation Guide
1.Before You Begin
1.1 Check Your Package Contents....................................................................1
2.Indentifying Components
2.1 Front View.................................................................................................2
2.2 LED Indicators...........................................................................................3
2.3 Default Interface Attribute Definition.........................................................3
3.Connecting the DFL-860
3.1 Setting up Firewall to your Network........................................................4
4.Configure DFL-860
4.1 Configure your Computer’s IP..................................................................5
4.2 Using the Setup Wizard.............................................................................6
5.Appendix
5.1 How to Configure Static IP Manually on Microsoft Windows XP..............14
5.2 How to Configure Static IP Manually on Apple MAC OS X...........................15
6.Statement
DFL-860
Before You Begin
1
1.1 Check Your Package Contents
Your NetDefend Network Security UTM Firewall package should contain all the items listed below. If any of these items is found damaged or missing in your package, report it to your reseller immediately for replacement.
DFL-860 NetDefend™ Network Security UTM Firewall
Power Cord
5V DC Power Adapter
Console Cable (RS-232 cable)
Ethernet (CAT5 UTP/Straight Through) Cable
Ethernet (CAT5 UTP/Cross-over) Cable
CD-ROM (containing QIG/Manual )
Rack Mount Brackets
2 x NetDefend UTM Subscription (IPS & Anti-Virus)
DFL-860 Power Cord Power Adapter
01
Rack Mount Brackets Console Cable CD-ROM
Identifying Components
The following illustrates the front panel of the DFL-860 and explains the front panel’s key components:
2.1 Front View
2
1 2 3 4 5 6
1.
2.
3.
4.
5.
Power LED
System LED
WAN Ports
DMZ Port
LAN Ports
6. Console Port
Power indication of the DFL-860.
System status indication of the DFL-860.
These are for the connection of an Ethernet cable to a Cable or DSL modem.
This is for the connection of an Ethernet cable to an DMZ network.
These are for the connection of Ethernet cables to the internal network.
Connects to RS-232 console cable that connects to PC.
The console port is hidden behind a protection coverlid that can be opened by pulling down the lid.
Note:
None of the WAN1 and WAN2 interfaces support Auto MDI/MDI-X
(Automatic cable detection for Straight-through and Crossover function.
02
DFL-860 Quick Installation Guide
2.2 LED Indicators
LED
Power
System
Phone Jack LED light (right)
Status Color Description
Solid green
Light off
Green The device is powered on.
The device is powered off.
Solid green
Light off
Blinking green
Light off
Solid Green
Blinking Green
Green
Green
System is operating properly.
The device is not working.
System is defective, such firmware upgrade fail.
No link
Link present
Port is sending or receiving data.
Phone Jack LED light (left)
Light off
Solid green
Green Port is operating at 10Mbps.
Port is operating at 100Mbps.
2.3 Default Interface Attribute Definition
Wording on
Front plate
WAN1
WAN2
DMZ
Ports: 1~7
Default name in firewall
WAN1
WAN2
DMZ
LAN
Default interface type definition
DHCP client
Static IP
Static IP
Static IP
Default interface
IP Address
N/A
192.168.120.254/24
172.17.100.254/24
192.168.1.1/24
Default
DHCP Status
Enabled
Disable
Disable
Disable
Note:
NetDefendOS only allows Web GUI access from LAN port by default for security consideration. Please refer to user manual for more detail about how to change this configuration.
03
Connecting the DFL-860
3
3.1 Connecting Firewall to Your Network
A . First, connect the power cord to the receptor at the back panel of the DFL-860 and then plug the other end of the power cord to a wall outlet or power strip. Then powered on the DFL-860 using the on/off switch. Now the Power LED will turn ON to indicate proper operation. After the power LED turns on, you need to wait
1-2 minutes for the DFL-860 to boot up completely.
B . Connect an Ethernet cable from the DFL-860 to your Cable/
DSL modem. If the Cable/DSL modem is powered on, wait for the WAN1 LED on the DFL-860 to light up to show a proper connection. Otherwise, turn off your Cable/DSL modem, connect the Ethernet cable from the DFL-860 to your Cable/DSL modem, and turn on the Cable/DSL modem. Some Cable/DSL modems may not have an on/off switch and will require you to unplug the power adapter.
Note:
The default management IP address of the DFL-860 is
192.168.1.1. If you have are using a router that uses DHCP, there may be a conflict if the router uses the same IP address as the DFL-860. If this is the case, either disconnect the DFL-860 from the router and change the management IP address of the
DFL-860, or change the DHCP settings on your router.
C . Insert an Ethernet cable to the LAN1 port on the front panel of the DFL-860 and connect it to a port on your network hub or switch. The LED light above the Ethernet port on the DFL-860 will illuminate to indicate proper connection
D . Connecting the computer that you will use to configure the
DFL-860 to the network hub or switch.
04
05
Configure DFL-860
4
4.1 Configure Your Computer’s IP Address
Make sure that the network adapter in your computer is configured to use a static IP address with 192.168.1.1 as default gateway and
255.255.255.0 as netmask. Instructions on how to configure the network adapter can be found in the appendix.
When you have completed the steps in this Quick Installation
Guide, your connected network should look similar to this:
DMZ
Network
(optional)
Cable/DSL Modem
DFL-860
Switch
Internal
Network
Computer1 Computer2
DFL-860 Quick Installation Guide
4.2 Using the Setup Wizard
The DFL-860 provides Web based configuration. You can configure your DFL-860 through Internet Explorer 6 and later or Firefox 1.0 and later browser in MS Windows, Macintosh or UNIX based platforms.
Activate your browser, and ensure your built-in Pop-Up Blocker has been disabled, so that the Pop-Up Blocker will not block the Startup
Wizard while you initiate the NetDefend Firewall for the first time.
Additionally, in order to reduce the impact of Pop-Up Blocker, a userfriendly mechanism has beem implemented in NetDefend Firewalls. A
"Startup Wizard" button is shown on the toolbar since firmware v2.20.
This button is available on the WebGUI while the appliance is initiated with Configuration Version 1. Once you complete configuration and save/activate the setting, the Startup Wizard button will be removed automatically from the toolbar while you login WebGUI next time.
Now, let's start on WebGUI login, type the IP address of the DFL-860, e.g. https://192.168.1.1, in the Location (for Netscape) or Address (for
IE) field and press "Enter".
Open your Web browser and type https://192.168.1.1 / into the URL address box.
Then press the Enter or
Return key.
Note:
DFL-860 allows either HTTP or a secure HTTPS connection from any management host. However, for security reason, by default only a secure HTTPS connection is allowed.
Log on to the DFL-860 web interface.
To start using the DFL-860 web interface you need to log on using the default username and password.
Type the default
Username/Password
Username: admin
Pasword: admin and click Login
06
DFL-860 Quick Installation Guide
Step1 - Welcome to the DFL-860 setup wizard!
This wizard will guide you through the setup of your DFL-860
Click Next
Step2 - Set up firewall administrator password
First Enter the username that you want to use for the admin account.
Enter the password that you want to use for the admin account.
Click Next
07
Step 3 - Set up time and date
Click Set time and date button for setting device
Click Next
Select the appropriate date
Enter the appropriate time
Click OK
08
DFL-860 Quick Installation Guide
Step 4 - Set up timezone
Select the appropriate timezone.
Enter the appropriate dayligt saving time settings.
Step 5 - Select WAN interface
Select the WAN interface that you want to use.
Click Next
Click Next
09
Step 6 - Configure WAN interface
DFL-860 Quick Installation Guide
Select the appropriate configuration for the
WAN interface,
Click Next and continue to step 7.1 further down.
Note:
If you are unsure of which setting to select, please contact your
Internet Service Provider.
Step 7.1 - WAN Interface Type is Static IP
If you selected Static IP you have to fill out the
IP address information provided to you by your ISP. You will need to complete all the required fields except for
Secondary DNS Server.
Click Next
10
DFL-860 Quick Installation Guide
Step 7.2 - WAN Interface Type is PPPoE
If you selected PPPoE
(Point-to-Point Protocol over Ethernet) you will have to fill out the user name and password provided to you by your
ISP. The PPPoE Service
Name field should be left blank unless your ISP informs you otherwise.
Step 7.3 - WAN Interface Type is PPTP
Enter Username,
Password and the
PPTP Server IP address provided by your ISP.
DHCP: If your ISProvider is using DHCP you should select the DHCP radio button.
Static IP: If your Internet
Service Provider is using
Static IP you should select the Static IP radio button and enter
IP Address, choose a
Subnet Mask and enter the Gateway IP address.
11
Click Next
Click Next
DFL-860 Quick Installation Guide
Step 7.4 - WAN Interface Type is Big Pond
If you selected Big Pond you will have to fill out the user name and password provided to you by your
ISP.
Click Next and continue to step 8.
Click Next
Step 8 - Set up built-in DHCP server
If you want to use the built-in DHCP Server in the DFL-860, choose
Enable DHCP Server in this screen. You then need to specify a range of IP addresses to hand out to the DHCP clients.
This range is entered in the format “Start IP - Stop
IP” i.e. 192.168.0.100 -
192.168.0.200. If you don’t want to use the built-in
DHCP Server or configure it later, choose Disable
DHCP Server.
Click Next
12
DFL-860 Quick Installation Guide
Step 9 - Configure helper servers
NTP Servers
If enabled, specify which
NTP Servers that should be used to syncronize the firewall time
Syslog Servers
If enabled, specify where the firewall should log, you can specify up to two Syslog recievers
Step10 - Setup Wizard Complete
Click Activate to complete your configuration.
Click Next
13
Appendix
5
To connect to the DFL-860 Network Security UTM Firewall, make sure the network adapter in your computer is configured properly. Here is how to configure the network adapter manually to the correct IP-address.
5.1 How to configure Static IP Manually on
Microsoft Windows XP
Go to Start > right click on My Network Places > select Properties >
Right-click on the
Network Connection of the Ethernet adapter connecting to the
DFL-860 and select
Properties.
Click Internet Protocol
(TCP/IP)
Click Properties
14
DFL-860 Quick Installation Guide
Select Use the following IP address
Set IP address to
192.168.1.30,
Subnet mask to
255.255.255.0
and Default gateway to
192.168.1.1
Click OK
Note:
Except for 192.168.1.1, you could set your PC with any IP addresses that same as the 192.168.1.0/ 255.255.255.0 subnet.
5.2 How to Configure Static IP Manually on
Apple Mac OS X
Go to the Apple Menu
Click on Network and Select System
Preferences
Click on Network
15
Select Built-in Ethernet in the show pull down menu
Select Manually in the
Configure pull down menu
DFL-860 Quick Installation Guide
Set IP Address to
192.168.1.30,
Subnet Mask to
255.255.255.0
and Router to
192.168.1.1.
Click on Apply Now
16
17
STATEMENT
6
EMI Statement
FCC Warning
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC
Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this user’s guide, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.
CE Mark Warning
This is a Class B product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures.
Warnung!
Dies ist ein Produkt der Klasse B. Im Wohnbereich kann dieses
Produkt Funkstoerungen verursachen. In diesem Fall kann vom Benutzer verlangt werden, angemessene Massnahmen zu ergreifen.
Precaución!
Este es un producto de Clase B. En un entorno doméstico, puede causar interferencias de radio, en cuyo case, puede requerirse al usuario para que adopte las medidas adecuadas.
Attention!
Ceci est un produit de classe B. Dans un environnement domestique, ce produit pourrait causer des interférences radio, auquel cas l`utilisateur devrait prendre les mesures adéquates.
DFL-860 Quick Installation Guide
Attenzione!
Il presente prodotto appartiene alla classe B. Se utilizzato in ambiente domestico il prodotto può causare interferenze radio, nel cui caso è possibile che l`utente debba assumere provvedimenti adeguati.
VCCI Warning
BSMI Warning
警告使用表
這是乙類的資訊產品，在居住的環境中使用時，可能會造成射頻干擾，在這
種情況下使用者會被要求採取某些適當的對策。
18
