D-Link DFL-600 [9/113] Introduction and overview

Introduction and Overview

The DFL-600 Firewall/VPN Router creates two separate networks on the

LAN side of your network − by default, a 192.168.0.0 subnet and a

192.168.1.0 subnet (both with a subnet mask of 255.255.255.0). The DFL-

600 routes packets between these two subnets and the Internet (or the

network connected to the DFL-600’s WAN port). The network address

information of the WAN network is usually provided by an Internet Service

Provider (ISP) or a network administrator.

The 192.168.0.0 network

−

LAN. The three Ethernet ports labeled − Local

Area Network on the front panel, and 1, 2, and 3 on the rear panel − are, by

default, assigned the IP address range between 192.168.0.2 to 192.168.0.254.

So computers and other devices connected to these three ports either allow

the DFL-600’s DHCP server to assign them IP addresses from this range, or

you can manually assign devices connected to these ports an IP address from

this range. Remember that the IP address, 192.168.0.0, is reserved. The

DFL-600 is assigned 192.168.0.1 − on the LAN side − and is configured

from a computer (again, on the LAN side of your network) using a web

browser, at this IP address. To connect to the DFL-600’s web-based

management utility, type the IP address https://192.168.0.1 into the Address

field of your web browser. The https specifies the secure version of http.

The 192.168.1.0 network

−

DMZ. The port labeled − DMZ on both the front

and rear panel − is, by default, assigned the IP address range between

192.168.1.2 to 192.168.1.254 − with a subnet mask of 255.255.255.0. So

computers and other devices connected to this port must be assigned IP

addresses from this range. The DHCP server on the DFL-600 only services

the LAN ports, so you must manually assign a computer connected to the

DMZ port an IP address from this range.

You can use this default IP addressing scheme, or you can configure your

own. It is important to note that the three LAN ports and the DMZ port must

be on different subnets (different ranges of IP addresses) and that the

computers that are connected to these ports must have IP addresses in the

appropriate range.