Page 11 / 16
Scroll up to view Page 6 - 10
11
To connect to the network, make sure the network adapter in your computer is
configured properly. Here’s how to configure the network adapter to obtain an IP
address automatically for the DFL-80 Firewall.
For
Microsoft Windows XP:
Go to
Start
>
right click
on
My Network Places
>
select
Properties
>
Double-click
on
the
Network Connection
associated
with the Ethernet adapter
(i.e., D-Link DFE-530TX+).
APPENDIX
Click
Internet Protocol (TCP/IP)
Click
Properties
Select
Obtain an IP address
automatically
Restart
your computer
(if necessary)
Click
OK
Page 12 / 16
12
For
Apple Macintosh OS X:
Go to
the Apple Menu
Click on
Network
and
Select
System
Preferences
The IP address information,
the Subnet Mask, the Router’s
IP address and the Ethernet
adapter address will appear
Select
Built-in Ethernet
in the Show pull down
menu
Click on
Network
Click on
Apply Now
Select
Using DHCP
in
the Configure pull down
menu
Page 13 / 16
13
APPENDIX (continued)
This example will demonstrate how to create a Virtual Private Network (VPN) between
two remote locations through the Internet. The VPN policy will use IPSec to securely
send/receive encrypted data over the Internet. This example will consist of two DFL-80
VPN Firewalls with a simple setup to enable VPN. The two remote locations in this
example will be called Site A and Site B. Both firewalls must already be set up and able
to communicate with each other.
Please note the differences in the IP addresses for each site.
We will begin by configuring the DFL-80 at Site A . Start by going into the web
configuration. Once in, go to the
VPN
menu. You should now be under
VPN>Autokey
Click
New Entery
Site A
Site B
(WAN)192.170.0.100
(WAN)192.170.0.200
(LAN)192.168.10.1
(LAN)192.168.20.1
DFL-80
Page 14 / 16
14
Name:
Site_A
From Source:
Internal
Subnet/Mask:
192.168.10.0/255.255.255.0
Remote Gateway – Fixed
IP:
192.170.0.200
Subnet/Mask:
192.168.20.0/255.255.255.0
Authentication Method:
Preshare
Preshare Key:
123456
Encapsulation:
Encryption
(ESP)
123456 is an example of a preshare key, please fill in any
secret preshare key you desire. Keep in mind that both
sites require the same preshare key.
There should now be a VPN policy created for Site A. Site A is now complete, we will
now configure Site B with the other DFL-80. Follow the same steps previously with Site
A to create a VPN policy. Please change the appropriate IP information.
Please fill in the appropriate information for Site A.
Click
OK
The IP Address
information used for Site A
and Site B are example IP Addresses Only.
Page 15 / 16
15
Name:
Site_B
From Source:
Internal
Subnet/Mask:
192.168.20.0/255.255.255.0
Remote Gateway – Fixed IP:
192.170.0.100
Subnet/Mask:
192.168.10.0/255.255.255.0
Authentication Method:
Preshare
Preshare Key:
123456
Encapsulation:
Encryption
(ESP)
There should now be a VPN policy created for Site B. After the VPN policies have been
created for the two remote locations, click
Connect
at both Sites to enable the VPN
policy. The two remote locations will authenticate and the VPN status should now say
Connected
. Congratulations, you have created a simple IPSec VPN tunnel. Site A and
Site B should now be able to communicate with each other securely over the Internet.
All IP traffic from the two Sites are now encrypted strongly with 168-bit 3DES
encryption.
Click
OK
Please fill in the appropriate information for Site B
123456 is an example of a preshare key, please fill in any
secret preshare key you desire. Keep in mind that both
sites require the same preshare key.
19216811.live