• February 24, 2025, 01:23:07 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Help with our DFL 210 ,am a newbie ..  (Read 6560 times)

ipe

  • Level 1 Member
  • *
  • Posts: 7
Help with our DFL 210 ,am a newbie ..
« on: March 24, 2010, 07:38:22 PM »

Good day every one..

Just want to ask the guru out here.  We purchased a 4 DFL 210 net defend to  connect our three remote campuses  to our main campus as a back-up for our  leased line connection.  I did successfully connected the three campus but only  the pc's directly connected to the equipment  ( pc used for configuring the firewall) are seeing each other. When  I tried to connect to our  server  particularly our intranet mail  and our school system  I cant connect.  sorry  for this kind of  question but am only a freshman when it comes to this  field.. Please  do need an expert help.
Logged

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Re: Help with our DFL 210 ,am a newbie ..
« Reply #1 on: March 24, 2010, 09:19:03 PM »

Check Rules > IP rules. You should have NAT rules for your server's network.
Logged
BR, Alexandr Danilov

ipe

  • Level 1 Member
  • *
  • Posts: 7
Re: Help with our DFL 210 ,am a newbie ..
« Reply #2 on: March 24, 2010, 11:52:46 PM »

Sir I've cheked the rule.. yeas we had it configure with NAT..
Logged

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Re: Help with our DFL 210 ,am a newbie ..
« Reply #3 on: March 25, 2010, 07:45:54 AM »

Please describe your networks or (better) make schema...
Logged
BR, Alexandr Danilov

ipe

  • Level 1 Member
  • *
  • Posts: 7
Re: Help with our DFL 210 ,am a newbie ..
« Reply #4 on: March 25, 2010, 04:52:43 PM »

Ok here it goes hope this is correct:

We got 4 names:

name
Logged

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Re: Help with our DFL 210 ,am a newbie ..
« Reply #5 on: March 25, 2010, 11:51:16 PM »

Please describe more detail...
Logged
BR, Alexandr Danilov

ipe

  • Level 1 Member
  • *
  • Posts: 7
Re: Help with our DFL 210 ,am a newbie ..
« Reply #6 on: March 29, 2010, 11:22:27 PM »

here's the set up
         name                action     src_if             src_net           Des_if          Des_net        service
1     lan_to_wan                                   
2     ping_fw             Allow      any               all-nets     core                     all-nets     ping-inbound
3     IPSec_allow_AB     Allow      LAN_IPSec_AB  all-nets     LAN_IPSec_AB     all-nets     all_services
4     IPSec_allow_AC     Allow      LAN_IPSec_AC  all-nets     LAN_IPSec_AC     all-nets     all_services
5     IPSec_allow_AD     Allow      LAN_IPSec_AD  all-nets     LAN_IPSec_AD     all-nets     all_services
 

for the lan_to_wan

         name                  action     src_if       src_net           Des_if       Des_net        service
1   drop_smb-all                Drop      lan            lannet      wan      all-nets      smb-all
2  allow_ping-outbound    NAT     lan          lannet     wan             all-nets     ping-outbound
3  allow_ftp-passthrough  NAT     lan           lannet     wan             all-nets     ftp-passthrough
4  allow_standard       NAT     lan           lannet     wan             all-nets     all_tcpudp
5  allow_all                     Allow        lan           lannet   LAN_IPSec_AB  VPN_rmtNetBGilpuyat     all_services
6  allow_all                   Allow  IPSec_to_remote_B     VPN_remoteNet_B_Gil_puyat     lan     lannet     all_services
Logged

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Re: Help with our DFL 210 ,am a newbie ..
« Reply #7 on: March 30, 2010, 02:20:56 AM »

So... As i see, you had configured everything correct. As result, you can access remote networks by IP addresses. To see it, use WINS server for all computers in all networks (because NetBIOS uses broadcasts).

And... As i understood, you want to connect your intranet systems, to wan? Could you please make schema with addresses?
Logged
BR, Alexandr Danilov