Introduction and Overview
The DFL-600 Firewall/VPN Router creates two separate networks on the
LAN side of your network
−
by default, a 192.168.0.0 subnet and a
192.168.1.0 subnet (both with a subnet mask of 255.255.255.0). The DFL-
600 routes packets between these two subnets and the Internet (or the
network connected to the DFL-600’s
WAN
port). An Internet Service
Provider (ISP) or a network administrator provides the network address
information on the WAN network.
The 192.168.0.0 network
−
LAN
. The three Ethernet ports labeled
−
Local
Area Network
on the front panel, and
1, 2,
and
3
on the rear panel
−
are, by
default, assigned the IP address range between 192.168.0.2 to 192.168.0.254.
So computers and other devices connected to these three ports either allow
the DFL-600’s DHCP server to assign them IP addresses from this range, or
you can manually assign devices connected to these ports an IP address from
this range. Remember that the IP address, 192.168.0.0, is reserved. The
DFL-600 is assigned 192.168.0.1
−
on the LAN side
−
and is configured
from a computer (again, on the LAN side of your network) using a web
browser. To connect to the DFL-600’s web-based management utility, type
the IP address
https://192.168.0.1
into the
Address
field of your web browser.
The
https
specifies the secure version of http.
The 192.168.1.0 network
−
DMZ.
The port labeled
−
DMZ
on both the front
and rear panel
−
is, by default, assigned the IP address range between
192.168.1.2 to 192.168.1.254
−
with a subnet mask of 255.255.255.0. So
computers and other devices connected to this port must be assigned IP
addresses from this range. The DHCP server on the DFL-600 only services
the LAN ports, so you must manually assign a computer connected to the
DMZ port an IP address from this range.
You can use this default IP addressing scheme, or you can configure your
own. It is important to note that the three LAN ports and the DMZ port must
be on different subnets (different ranges of IP addresses) and that the
computers that are connected to these ports must have IP addresses in the
appropriate range.