D-Link DFL-100 User Guide

Page of 97
 
Introduction and Overview 
The DFL-100 Firewall/VPN Router creates two separate networks on the 
LAN side of your network 
 by default, a 192.168.0.0 subnet and a 
192.168.1.0 subnet (both with a subnet mask of 255.255.255.0).  The DFL-
100 routes packets between these two subnets and the Internet (or the 
network connected to the DFL-100’s WAN port).  The network address 
information of the WAN network is usually provided by an Internet Service 
Provider (ISP) or a network administrator. 
 
The 192.168.0.0 network.  The three Ethernet ports labeled 
 Local Area 
Network on the front panel, and 1, 2, and on the rear panel 
 are, by default, 
assigned the IP address range between 192.168.0.1 to 192.168.0.254.  So 
computers and other devices connected to these three ports either allow the 
DFL-100’s DHCP server to assign them IP addresses from this range, or you 
can manually assign devices connected to these ports an IP address from this 
range.  Remember that the IP address, 192.168.0.0, is reserved.  The DFL-
100 is assigned 192.168.0.1 
 on the LAN side 
 and is configured from a 
computer (again, on the LAN side of your network) using a web browser, at 
this IP address. 
 
The 192.168.1.0 network.  The port labeled 
 DMZ on both the front and 
rear panel 
 is, by default, assigned the IP address range between 192.168.1.1 
to 192.168.1.254 
 with a subnet mask of 255.255.255.0.  So computers and 
other devices connected to this port must be assigned IP addresses from this 
range.  The DHCP server on the DFL-100 only services the LAN ports, so 
you must manually assign a computer connected to the DMZ port an IP 
address from this range. 
 
You can use this default IP addressing scheme, or configure your own.  It is 
important to note that the three LAN ports and the DMZ port must be on 
different subnets (different ranges of IP addresses) and that the computers 
that are connected to these ports must have IP addresses in the appropriate 
range. 
 
The DMZ port is used to allow computers and devices connected to this port 
more direct access to the Internet.  This is useful for certain applications that 
may conflict with the firewall and Network Address Translation (NAT)