---
title: "D-Link DSR series"
slug: "d-link"
updated: 2026-04-07T09:05:20Z
published: 2026-04-07T09:05:20Z
canonical: "support.perimeter81.com/d-link"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.perimeter81.com/llms.txt
> Use this file to discover all available pages before exploring further.

# D-Link DSR series

<meta charset="utf-8">

## Introduction

This guide will walk you through the process of establishing a Site-to-Site VPN tunnel between your Check Point SASE network and your D-Link environment.

**Breakdown of topics**

1. Pre-requisites
2. Configuration Steps
3. Verifying the Setup
4. Troubleshooting
5. Support Contacts

## Pre-requisites

To successfully follow this guide, ensure that:

1. An active Check Point SASE account and an established network.
2. The Check Point SASE application is installed on the necessary devices.
3. An operational D-Link setup with the required administrative access.

## Configuration Steps

## Configuring the tunnel in the Management Platform

1. Select the network tab from the menu on the left side of the screen. Choose the network that contains the gateway in your network to which you'd like to create the tunnel. Select the three-dotted icon besides the gateway's name and select **Add Tunnel**. ![360010932540ScreenShot2019-08-27at140615.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/360010932540ScreenShot2019-08-27at140615-2(1).png)
2. Select **IPSec Site-2-Site Tunnel** and select **Continue**.
3. In the **General Settings** section, specify these:

- **Name:** Choose whatever name you find suitable for the tunnel.
- **Shared Secret:** Enter a character string of your own or use **Generate**.
- **Public IP/Remote ID:** Enter the public IP from which the D-Link device is connected to the internet.
- **Check Point SASE Gateway Proposal Subnets:** Choose the specified subnet. By default, this should be set to 10.2XX.0.0/16.
- **Remote Gateway Proposal Subnets:** Select **Specified Subnets** and specify according to your local LAN Subnets.

![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/SpecifiedSubnets(4).PNG)

1. In the **Advanced Settings** section, specify these:

- **IKE Version:** V1
- **DPD detection:** 30s
- **DPD timeout:** 10s
- **Phase 1**:
  - **Encryption (Phase 1):** AES256
  - **Integrity (Phase 1):** SHA512
  - **Key Exchange Method:** modp1536
- **Phase 2**:
  - **Encryption (Phase 2):** AES256
  - **Integrity (Phase 2):** SHA512
  - **Key Exchange Method:** modp1536

Leave the rest of the fields with the default values (as shown in the attached image) and click on add a tunnel.

![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DLink_V1_sha512_1536.PNG)

## Configuring the tunnel in the D-Link Web Interface

1. Open the D-link management interface and select the VPN tab.  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Pasted_Image_2_7_22__10_24_AM.png)
2. In the left panel, under '**IPSec VPN**', select '**Policies**.
3. Click '**Add New IPSec Policy**'  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Pasted_Image_2_7_22__10_28_AM.png)
4. Fill in the following information:  
  
**Policy Name**: Enter a name of your choice (ex: P81).  
**Policy Type:**Auto Policy  
**IP Protocol Version**: IPv4  
**IKE Version**: IKEv1  
**L2TP Mode**: None  
**IPSec Mode**: Tunnel Mode  
**Select Local Gateway:**Dedicated WAN  
**Remote Endpoint**: IP Address  
**IP Address / FQDN**: Enter your Check Point SASE gateway IP  
**Enable Config Mode:** Off  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/1(6).png)  
**Enable NetBIOS:** Off  
**Enable RollOver**: Off  
**Protocol**: ESP  
**Enable DHCP:** Off  
**Local IP**: Subnet  
**Local Start IP Address**: Your Local Subnet as defined by D-Link  
**Local Subnet Mask**: Matching Subnet Mask from your D-Link  
**Remote IP**: Subnet  
**Remote Start IP Address:** 10.255.0.0  
**Remote Subnet Mask:**255.255.0.0  
**Enable Keepalive:** Off  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/2(2).png) <meta charset="utf-8">For 'Phase1 (IKE SA Parameters)' enter the following:  
**Exchange Mode**: Main  
**Direction / Type**: Responder  
**NAT Traversal:** Off  
**Local Identifier Type**: Local WAN IP  
**Remote Identifier Type:** Remote WAN IP  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Pasted_Image_2_8_22__9_05_AM(2).png)For 'Encryption Algorithm' select the following:  
**AES-256**: On  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Pasted_Image_2_8_22__9_09_AM.png)For 'Authentication Algorithm' select the following:  
**SHA2-512**: On  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1644329467880.png)**Authentication Method:**Pre-Shared Key  
**Pre-Shared Key**: Enter the same key you entered in the Check Point SASE portal.  
**Diffie-Hellman (DH) Group**: Group 5  
**SA-Lifetime**: 28800  
**Enable Dead Peer Detection:** On  
**Detection Period:** 10  
**Reconnect after failure:** 3  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Pasted_Image_2_8_22__3_01_PM(1).png)For 'Phase2-(Auto Policy Parameters)' enter the following:**SA Lifetime:** 3600 seconds  
And for 'Encryption Algorithm' select the following:  
**AES-256**: On  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1644329952777.png)For 'Integrity Algorithm' enter the following:  
**SHA2-512:**On  
**PFS Key Group**: On  
**DH Group**: Group 5  
Lastly, click '**Save**'  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Pasted_Image_2_8_22__9_21_AM.png)

<meta charset="utf-8">

## Verifying the Setup

After following the above steps, your tunnel should be active. To verify, go to your Check Point SASE dashboard, locate the tunnel you just created, and check the tunnel status. It should indicate that the tunnel is "Up", signifying a successful connection. Next, connect to your network using the Check Point SASE agent and attempt to access one of the resources in your environment.

## Troubleshooting

If you encounter issues during or after the setup, try reviewing your settings to ensure everything matches the instructions. In particular, check the IP addresses and other details you entered during setup. If issues persist, please consult our dedicated support.

## Support Contacts

If you have any difficulties or questions, don't hesitate to contact Check Point SASE's support team. We offer 24/7 chat support on our website at [sase.checkpoint.com](https://www.sase.checkpoint.com/), or you can email us at sase-support@checkpoint.com. We're here to assist you and ensure your VPN tunnel setup is a success.