background image

 

 

 

 

Configuration examples for the D-Link 

NetDefend Firewall series  

 

Scenario: How to configure IPSec VPN LAN-to-LAN Tunnel 

 

Platform Compatibility: All NetDefend Firewall Series

 

 
 

Last update: 2008-03-07

 

Overview 

In this document, the notation 

Objects->Address book

 means that in the tree on the left 

side of the screen 

Objects

 first should be clicked (expanded) and then 

Address Book

.  

 
Most of the examples in this document are adapted for the DFL-800. The same settings can 
easily be used for all other models in the series. The only difference is the names of the 
interfaces. Since the DFL-1600 and DFL-2500 has more than one lan interface, the lan 

interfaces are named lan1, lan2 and lan3 not just lan. 
 
The screenshots in this document is from firmware version 2.12.00. If you are using an 
earlier version of the firmware, the screenshots may not be identical to what you see on 
your browser. 

Summary of Contents for NetDefend Firewall Series

Page 1: ...cked expanded and then Address Book Most of the examples in this document are adapted for the DFL 800 The same settings can easily be used for all other models in the series The only difference is the names of the interfaces Since the DFL 1600 and DFL 2500 has more than one lan interface the lan interfaces are named lan1 lan2 and lan3 not just lan The screenshots in this document is from firmware ...

Page 2: ...How to configure IPSec VPN LAN to LAN Tunnel Create one lan to lan IPsec VPN tunnel between firewall A and B ...

Page 3: ...wan1net to 192 168 110 0 24 Go to Objects Address book Add a new Address Folder called RemoteHosts In the new folder add a new IP address Name fwB remotenet IP Address 192 168 2 0 24 Click Ok In the same folder add a new IP address Name fwB remotegw IP Address 192 168 110 2 Click Ok 2 Firewall A Pre shared keys Go to Objects Authentication Objects Add a new Pre Shared Key General Name fwB psk ...

Page 4: ... shared secret Click Ok 3 Firewall A IPsec interface Go to Interfaces IPsec Add a new IPsec Tunnel In the General tab General Name fwB ipsec Local Network lannet Remote Network fwB remotenet Remote Endpoint fwB remotegw Encapsulation Mode Tunnel ...

Page 5: ...ec Life Time 3600 IPsec Life Time 0 In the Authentication tab Authentication Select Pre Shared Key and fwB psk Click Ok 4 Firewall A Rules Go to Rules IP Rules Create a new IP Rules Folder called lan_to_fwB ipsec In the new folder create a new IP Rule In the General tab General ...

Page 6: ...tion Interface fwB ipsec Destination Network fwB remotenet Click Ok Create a second rule in the same folder In the General tab General Name allow_all Action Allow Service all_services Address Filter Source Interface fwB ipsec Source Network fwB remotenet Destination Interface lan Destination Network lannet Click Ok ...

Page 7: ...o 192 168 110 0 24 Go to Objects Address book Add a new Address Folder called RemoteHosts In the new folder add a new IP4 address Name fwA remotenet IP Address 192 168 1 0 24 Click Ok In the same folder add a new IP4 address Name fwA remotegw IP Address 192 168 110 1 Click Ok 6 Firewall B Pre shared keys Go to Objects Authentication Objects Add a new Pre Shared Key General Name fwA psk Shared secr...

Page 8: ...Endpoint fwA remotegw Encapsulation Mode Tunnel Algorithms IKE Algorithms High IKE Life Time 28800 IPsec Algorithms High IPsec Life Time 3600 IPsec Life Time 0 In the Authentication tab Authentication Select Pre Shared Key and fwA psk Click Ok 8 Firewall B Rules Go to Rules IP Rules Create a new IP Rules Folder called lan_to_fwA ipsec In the new folder create a new IP Rule ...

Page 9: ...ce fwA ipsec Destination Network fwA remotenet Click Ok Create a second rule in the same folder In the General tab General Name allow_all Action Allow Service all_services Address Filter Source Interface fwA ipsec Source Network fwA remotenet Destination Interface lan Destination Network lannet Click Ok Save and activate the configuration on firewall B ...

Reviews: