D-Link DFL-80 User Manual - Page 137

Individual, Department, Every worker

Get D-Link DFL-80 PDF manuals and user guides View all D-Link DFL-80 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 137 highlights

Q : Can Admin modify the internal and external interface IP addresses anytime? A: No, because the names in the address table are set according to the IP addresses of internal and external interface cards, and the source address and destination address of policies are set according to address table. The IP addresses of the DFL-80's internal interface and external interface are foundations of administration policies. If the administrator wants to change the DFL-80's IP address, the admin will need to clean up all the administration policies and address table. Q : Are there any rules to follow when setting up administration policies? A: When setting up policies, administrators need to follow [small to big] principle. This means that when the source address, destination address and service items of a policy is the subset of another policy, it is necessary to set policy of the subset first. For example, the sequence to set policies for individual worker, department, and every worker in the company is: Individual > Department > Every worker If subset policies are defined after the main policies, policies defined by the subset became invalid. For example, the new policy is: Every worker > Department > Individual The policies of departments and individuals are subsets of policies of every worker, so policies defined by the latter two are invalid. 137

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
137
Q :
Can Admin modify the internal and external interface IP addresses
anytime?
A :
No, because the names in the address table are set according to the IP
addresses of internal and external interface cards, and the source
address and destination address of policies are set according to address
table. The IP addresses of the DFL-80’s internal interface and external
interface are foundations of administration policies. If the administrator
wants to change the DFL-80’s IP address, the admin will need to clean
up all the administration policies and address table.
Q :
Are there any rules to follow when setting up administration policies?
A :
When setting up policies, administrators need to follow [small to big]
principle. This means that when the source address, destination address
and service items of a policy is the subset of another policy, it is
necessary to set policy of the subset first.
For example, the sequence
to set policies for individual worker, department, and every worker in the
company is:
Individual
>
Department
>
>
>
>
>
Every worker
If subset policies are defined after the main policies, policies defined by
the subset became invalid. For example, the new policy is:
Every worker
>
Department
>
>
>
>
>
Individual
The policies of departments and individuals are subsets of policies of
every worker, so policies defined by the latter two are invalid.