D-Link DFL-1500 [31/271] Nat router mode

DFL-900/1500 User Manual Chapter 1

Quick Start

9 Warning message

After applying the virtual server rule, there will appear two messages as above diagrams. The purpose of the above two message

boxes are trying to remind you to add firewall/NAT rules manually while you add a virtual server rule for your existing server.

Step 9. View the Result

Now any request towards the DFL-1500’s

WAN1 IP (61.2.1.1) with dest. port

44444 will be translated into a request

towards 10.1.1.5 with port 21, and then

be forwarded to the 10.1.1.5. The FTP

server listening at port 21 in 10.1.1.5 will

pick up the request.

ADVANCED SETTINGS > NAT > Virtual Servers

1.9 NAT/Router Mode and Transparent Mode

1.9.1 NAT/Router Mode

When the DFL-1500 is running in NAT/Router mode, you can connect a private network to the internal interface, a DMZ network

to the DMZ interface, and a public network, such as the Internet, to the external interface. Each of these networks must have a

different subnet address. You create security policies to control how the firewall routes packets between DFL-1500 interfaces, and

therefore between the networks connected to the interface. When you switch the DFL-1500 operation mode from NAT/Router mode

to Transparent mode, you have to backup your configuration first, otherwise the original configuration will be deleted inclusive of

all rules, policies, addresses, etc. After system reboots, DFL-1500 will return to the factory default.

In this document, we will introduce you how to setup NAT/Router Mode firewall in the most examples. You can learn the settings

of each feature by them. For more information of how to choose NAT or Route mode in the DFL-1500, please refer Section

7.5.5.

1.9.2 Transparent Mode

When the DFL-1500 is running in Transparent mode, it can be inserted in your network at any point without changing your network

or any of its components. In Transparent mode, you can add Transparent mode rules/policies to accept or deny connections between

interfaces. The firewall will apply those rules/policies to control traffic without modifying the packets in any way. Please make sure

not to connect the LAN1/LAN2/DMZ interfaces to the same Hub while using Transparent mode, otherwise the traffic from the PCs

under LAN1/LAN2/DMZ interfaces may be blocked.

For the DFL-1500 Transparent mode connections, please refer to the following

Figure 1-11.