Table of Contents
Advertisement
Check the default gateway setting on that particular computer. Its default gateway must match the internal
address of the DFL-1000.
Q: I checked the default gateway and it matches but I still cannot connect to the Internet.
Make sure that the external address and external gateway of the firewall have been properly set to your
Internet Service Provider's (ISP) specifications. If there is no discrepancy, it would be a good idea to
double check with your ISP that they have provided you with the correct information.
Q: I am having problems setting up my outgoing and incoming policies. The external or internal
addresses cannot be entered in the destination or source lists.
When setting up incoming or outgoing policies, it is important to remember that new addresses cannot be
entered into the Destination or Source fields. New addresses (external or internal) must be added
manually into the external or internal address lists. The choices under the Destination and Source menus
come directly from the address lists.
Q: I want to set up an incoming policy for an FTP server on my DMZ network, but the destination
address list for incoming policies shows only external addresses.
Before creating an incoming policy you need to set up a valid Internet address so that it can be used to
connect to your FTP server. This external address can then be used as the destination in an incoming
policy. See
Controlling connections from the
Q: I want to connect to a TELNET/FTP/WEB server across the Internet. If I set the outgoing policy
service field to TELNET/FTP/HTTP I can't connect.
Try setting the service to ANY. Settings for individual services assume that the standard port for that
service is being used, and only traffic addressed to that port is allowed through. If you are using a non-
standard port this will not work. ANY allows traffic to go to all ports.
Schedules
Q: I need a schedule that will allow access to the Internet overnight, from 9:00 pm to 9:00 am. How
can I do this?
There are two ways:
•
Use two policies with two schedules, one from 9:00 pm to midnight, and one from midnight to 9:00 am.
•
Create a policy allowing access for the whole day, then add another one before it in the policy list
denying access from 9:00 am to 9:00 pm.
VPN
Q: The client to subnet configuration was working, but now it has shut down and I can't recover.
How do I get it back again?
This happens when the tunnel is down and the client software thinks it is still connected. To recover you
must disconnect at the client end.
Q. Why can't I bring up the connection in the case of subnet to subnet configuration?
First check whether you have set up the proper IPSec policy for this connection. If you have, check
whether the authentication keys are same on the local and remote IPSec gateways. Also check whether
the remote gateway address is correct.
DFL-1000 User's Manual
Internet.
113
Advertisement
Table of Contents
