D-Link DFL-100 — обзор маршрутизатора с функцией брандмауэра и VPN [9/97]

Превью страниц Страница 9 / 97

Introduction and Overview

The DFL-100 Firewall/VPN Router creates two separate networks on the

LAN side of your network − by default, a 192.168.0.0 subnet and a

192.168.1.0 subnet (both with a subnet mask of 255.255.255.0). The DFL-

100 routes packets between these two subnets and the Internet (or the

network connected to the DFL-100’s WAN port). The network address

information of the WAN network is usually provided by an Internet Service

Provider (ISP) or a network administrator.

The 192.168.0.0 network. The three Ethernet ports labeled − Local Area

Network on the front panel, and 1, 2, and 3 on the rear panel −

are, by default,

assigned the IP address range between 192.168.0.1 to 192.168.0.254. So

computers and other devices connected to these three ports either allow the

DFL-100’s DHCP server to assign them IP addresses from this range, or you

can manually assign devices connected to these ports an IP address from this

range. Remember that the IP address, 192.168.0.0, is reserved. The DFL-

100 is assigned 192.168.0.1 − on the LAN side − and is configured from a

computer (again, on the LAN side of your network) using a web browser, at

this IP address.

The 192.168.1.0 network. The port labeled − DMZ on both the front and

rear panel − is, by default, assigned the IP address range between 192.168.1.1

to 192.168.1.254 − with a subnet mask of 255.255.255.0. So computers and

other devices connected to this port must be assigned IP addresses from this

range. The DHCP server on the DFL-100 only services the LAN ports, so

you must manually assign a computer connected to the DMZ port an IP

address from this range.

You can use this default IP addressing scheme, or configure your own. It is

important to note that the three LAN ports and the DMZ port must be on

different subnets (different ranges of IP addresses) and that the computers

that are connected to these ports must have IP addresses in the appropriate

range.

The DMZ port is used to allow computers and devices connected to this port

more direct access to the Internet. This is useful for certain applications that

may conflict with the firewall and Network Address Translation (NAT)