User's Guide

3e-531AP Wireless Access Point
Chapter 4: Gateway Con guration
29000125-001 C
57
Demilitarized Zone (DMZ)
The
Demilitarized Zone (DMZ) host allows one computer on the
Private Network to be totally exposed to the wired net work or Internet
for un re strict ed two-way communication. This con g u ra tion is typ i cal ly
used when a computer is operating a proprietary client software or 2-way
com mu ni ca tion such as
video-tele con fer enc ing, where multiple TCP port
as sign ments are required for com mu ni ca tion. To assign a PC the DMZ
host status,  ll in the Private IP address which is identi ed as the ex posed
host and click the
Apply
button. However, any Internet user who knows
the WAN IP address of the gateway can connect to the DMZ host since
the  rewall feature is disabled for this device, causing a potential security
risk to data residing on that host.
Again, it is recommended that IP addresses of DMZ host computers
on the Private Network be manually (statically) assigned to coincide with
a static DMZ host mapping to that speci c IP address. DMZ hosts should
not rely on the dynamic IP assignment of DHCP server function which
could create incorrectly mapped IP address assignments to non-DMZ
hosts.