11

To connect to the network, make sure the network adapter in your computer is

configured properly. Here’s how to configure the network adapter to obtain an IP

address automatically for the DFL-80 Firewall.

For

Microsoft Windows XP:

Go to

Start

>

right click

on

My Network Places

>

select

Properties

>

Double-click

on

the

Network Connection

associated

with the Ethernet adapter

(i.e., D-Link DFE-530TX+).

APPENDIX

Click

Internet Protocol (TCP/IP)

Click

Properties

Select

Obtain an IP address

automatically

Restart

your computer

(if necessary)

Click

OK

12

For

Apple Macintosh OS X:

Go to

the Apple Menu

Click on

Network

and

Select

System

Preferences

The IP address information,

the Subnet Mask, the Router’s

IP address and the Ethernet

adapter address will appear

Select

Built-in Ethernet

in the Show pull down

menu

Click on

Network

Click on

Apply Now

Select

Using DHCP

in

the Configure pull down

menu

13

APPENDIX (continued)

This example will demonstrate how to create a Virtual Private Network (VPN) between

two remote locations through the Internet. The VPN policy will use IPSec to securely

send/receive encrypted data over the Internet. This example will consist of two DFL-80

VPN Firewalls with a simple setup to enable VPN. The two remote locations in this

example will be called Site A and Site B. Both firewalls must already be set up and able

to communicate with each other.

Please note the differences in the IP addresses for each site.

We will begin by configuring the DFL-80 at Site A . Start by going into the web

configuration. Once in, go to the

VPN

menu. You should now be under

VPN>Autokey

Click

New Entery

Site A

Site B

(WAN)192.170.0.100

(WAN)192.170.0.200

(LAN)192.168.10.1

(LAN)192.168.20.1

DFL-80

14

Name:

Site_A

From Source:

Internal

Subnet/Mask:

192.168.10.0/255.255.255.0

Remote Gateway – Fixed

IP:

192.170.0.200

Subnet/Mask:

192.168.20.0/255.255.255.0

Authentication Method:

Preshare

Preshare Key:

123456

Encapsulation:

Encryption

(ESP)

123456 is an example of a preshare key, please fill in any

secret preshare key you desire. Keep in mind that both

sites require the same preshare key.

There should now be a VPN policy created for Site A. Site A is now complete, we will

now configure Site B with the other DFL-80. Follow the same steps previously with Site

A to create a VPN policy. Please change the appropriate IP information.

Please fill in the appropriate information for Site A.

Click

OK

The IP Address

information used for Site A

and Site B are example IP Addresses Only.

15

Name:

Site_B

From Source:

Internal

Subnet/Mask:

192.168.20.0/255.255.255.0

Remote Gateway – Fixed IP:

192.170.0.100

Subnet/Mask:

192.168.10.0/255.255.255.0

Authentication Method:

Preshare

Preshare Key:

123456

Encapsulation:

Encryption

(ESP)

There should now be a VPN policy created for Site B. After the VPN policies have been

created for the two remote locations, click

Connect

at both Sites to enable the VPN

policy. The two remote locations will authenticate and the VPN status should now say

Connected

. Congratulations, you have created a simple IPSec VPN tunnel. Site A and

Site B should now be able to communicate with each other securely over the Internet.

All IP traffic from the two Sites are now encrypted strongly with 168-bit 3DES

encryption.

Click

OK

Please fill in the appropriate information for Site B

123456 is an example of a preshare key, please fill in any

secret preshare key you desire. Keep in mind that both

sites require the same preshare key.