D-Link DFL-1600 - Security Appliance, User Manual

Page: 4 / 552

Table of Contents
Preface ...............................................................................................................14
1. NetDefendOS Overview ....................................................................................16
1.1. Features ................................................................................................16
1.2. NetDefendOS Architecture ......................................................................19
1.2.1. State-based Architecture ...............................................................19
1.2.2. NetDefendOS Building Blocks .......................................................19
1.2.3. Basic Packet Flow ........................................................................20
1.3. NetDefendOS State Engine Packet Flow .....................................................23
2. Management and Maintenance ............................................................................28
2.1. Managing NetDefendOS ..........................................................................28
2.1.1. Overview ...................................................................................28
2.1.2. The Default Administrator Account .................................................29
2.1.3. The Web Interface .......................................................................30
2.1.4. The CLI .....................................................................................34
2.1.5. CLI Scripts .................................................................................43
2.1.6. Secure Copy ...............................................................................46
2.1.7. The Console Boot Menu ...............................................................48
2.1.8. Management Advanced Settings .....................................................50
2.1.9. Working with Configurations .........................................................51
2.2. Events and Logging ................................................................................57
2.2.1. Overview ...................................................................................57
2.2.2. Log Messages .............................................................................57
2.2.3. Creating Log Receivers .................................................................58
2.2.4. Logging to MemoryLogReceiver ....................................................58
2.2.5. Logging to Syslog Hosts ...............................................................58
2.2.6. SNMP Traps ...............................................................................60
2.2.7. Advanced Log Settings .................................................................61
2.3. RADIUS Accounting ..............................................................................62
2.3.1. Overview ...................................................................................62
2.3.2. RADIUS Accounting Messages ......................................................62
2.3.3. Interim Accounting Messages ........................................................64
2.3.4. Activating RADIUS Accounting .....................................................64
2.3.5. RADIUS Accounting Security ........................................................64
2.3.6. RADIUS Accounting and High Availability ......................................64
2.3.7. Handling Unresponsive Servers ......................................................65
2.3.8. Accounting and System Shutdowns .................................................65
2.3.9. Limitations with NAT ...................................................................65
2.3.10. RADIUS Advanced Settings ........................................................65
2.4. Hardware Monitoring ..............................................................................67
2.5. SNMP Monitoring ..................................................................................69
2.5.1. SNMP Advanced Settings .............................................................70
2.6. The pcapdump Command ........................................................................72
2.7. Maintenance ..........................................................................................75
2.7.1. Auto-Update Mechanism ...............................................................75
2.7.2. Backing Up Configurations ...........................................................75
2.7.3. Restore to Factory Defaults ............................................................77
3. Fundamentals ...................................................................................................80
3.1. The Address Book ..................................................................................80
3.1.1. Overview ...................................................................................80
3.1.2. IP Addresses ...............................................................................80
3.1.3. Ethernet Addresses .......................................................................82
3.1.4. Address Groups ...........................................................................83
3.1.5. Auto-Generated Address Objects ....................................................84
3.1.6. Address Book Folders ...................................................................84
3.2. Services ................................................................................................85
3.2.1. Overview ...................................................................................85
3.2.2. Creating Custom Services ..............................................................86
4