Managing D-Link DFL-1100

When a change is done

to the configuration a new

icon named

Activate

Changes

will appear. When

all changes and administrator

would like to do is done the

changes need to be saved and

activated to take effect, this is

done by clicking on the Activate

Changes button on the Activate

Configuration Changes page.

What will happen is that the

firewall will save the

configuration and reload it,

letting the new changes take

effect. But for the changes to

become permanent the admin

need to login again. This have

to be done before a

configurable timeout has been

reached, this can be set on the

Activate Configuration Changes

page, by choosing the time

from the dropdown menu.

Resetting the DFL1100

To reset the DFL-1100 to

factory default settings you

must shorten pin 7 and 9 (it’s

also possible to shorten 7, 8

and 9) of the serial-console port

directly after powering on the

unit. You will first hear one

beep, which will indicate that

the unit has started to boot.

Keep the pins shortened in until

you hear two consecutive

beeps. After this you can

release the shortened pins and

the DFL-1100 will continue to

load and startup in default

mode, i.e. with 192.168.1.1 on

the LAN interface.

12

Administration Settings

Administrative Access

Ping

– If enabled, specifies who can ping the interface IP of the DFL-1100. Default if

enabled is to allow anyone to ping the interface IP.

Admin

– If enabled allows all users with admin access to connect to the DFL-1100 and

change configuration, can be

HTTPS

or

HTTP and HTTPS

.

Read-Only

– If enabled allows all users with read-only access to connect to the DFL-1100

and look at the configuration, can be

HTTPS

or

HTTP and HTTPS

. If there is no Admin

access specified on an interface and only read-only, admin users can still connect but will be

in read-only mode.

SNMP

– Specifies if SNMP should be allowed or not on the interface, the DFL-1100 only

supports read-only access.

Add ping access to an interface

To add ping access click on the interface you would like to add it to.

Follow these steps to add ping access to an interface.

Step 1.

Click on the interface you would like to add it to.

Step 2.

Enable the

Ping

checkbox.

Step 3.

Specify what networks are allowed to ping the interface, for example

192.168.1.0/24 for a whole network or 172.16.0.1 – 172.16.0.10 for a range.

Click the

Apply

button below to apply the setting or click Cancel to discard changes.

Example:

Add Admin access to an interface

To add admin access click on the interface you would like to add it to. Only users with the

administrator rights can login on an interfaces where there is only admin access enabled.

Follow these steps to add admin access to an interface.

Step 1.

Click on the interface you would like to add it to.

Step 2.

Enable the

Admin

checkbox.

Step 3.

Specify what networks are allowed to ping the interface, for example

192.168.1.0/24 for a whole network or 172.16.0.1 – 172.16.0.10 for a range.

Step 4.

Specify protocol used to access the DFL-1100 from the dropdown menu, either

HTTP and HTTPS (Secure HTTP) or only HTTPS.

Click the

Apply

button below to apply the setting or click Cancel to discard changes.

Example:

14

Add Read-only access to an interface

To add read-only access click on the interface you would like to add it to, note that if you

only have read-only access enable on an interface all users only get read-only access, even if

they are administrators.

Follow these steps to add read-only access to an interface.

Step 1.

Click on the interface you would like to add it to.

Step 2.

Enable the

Read-only

checkbox.

Step 3.

Specify what networks are allowed to ping the interface, for example

192.168.1.0/24 for a whole network or 172.16.0.1 – 172.16.0.10 for a range.

Step 4.

Specify protocol used to access the DFL-1100 from the dropdown menu, either

HTTP and HTTPS (Secure HTTP) or only HTTPS.

Click the

Apply

button below to apply the setting or click Cancel to discard changes.

Example:

Enable SNMP access to an interface

Follow these steps to add read-only SNMP access to an interface.

Step 1.

Click on the interface you would like to add it to.

Step 2.

Enable the

Read-only

checkbox.

Step 3.

Specify what networks are allowed to ping the interface, for example

192.168.1.0/24 for a whole network or 172.16.0.1 – 172.16.0.10 for a range.

Step 4.

Specify the community string used to authenticate against the DFL-1100.

Click the

Apply

button below to apply the setting or click Cancel to discard changes.

Example:

System

Interfaces

Click on

System

in the menu bar, and then click

interfaces

below it.

Change IP of the LAN, DMZ or ETH4 interface

Follow these steps to change the IP of the LAN or DMZ interface.

Step 1.

Choose which interface to

view or change under the Available

interfaces list.

Step 2.

Fill in the IP address of the

LAN

,

DMZ

or

ETH4

interface.

These are the address that will be used to ping the firewall, remotely control it and use as

gateway for the internal hosts or DMZ hosts.

Step 3.

Choose the correct Subnet mask of this interface from the drop down menu.

Click the

Apply

button below to apply the setting or click Cancel to discard changes.