User Manual

Page 78
Configure Virtual Server Based on DMZ Host
When NAT is enabled, an Internet request from a client within the
private network first goes to the router. Upon receiving a request, the
router keeps track of which client is using which port number. Since any
reply from Internet goes to the router first, the router (from the port
number in the reply packet) knows to which client to forward the reply.
If the router does not recognize the port number, it will discard the reply.
When using DMZ on a PC, any reply not recognized by the router will
be forwarded to the DMZ-enabled PC instead.
You may wish to set up a DMZ host if you intend to use a special-
purpose Internet Service such as an online game for which no port
range information is available. You can also host Web pages or public
information that can be served to the outside world, on the DMZ host.
1. Under the CONFIGURATION
command menu, click on NAT.
You will find the Advanced NAT
Options available near at bottom
of the page.
2. Click the DMZ button to configure
Virtual Servers based on De-
Militarized Zone host.
2. On NAT DMZ IP Address page,
you have to define the Private
IP Address of the DMZ host. In
this example, show private IP
address for the PC placed
within the DMZ is
192.168.168.55
(Enter 0.0.0.0 as the Private IP
Address and it will disable
DMZ).
3. Remember to click Apply
button.
4.
!
NOTE:
When you enable DMZ, the Static IP Address configuration is
recommended for the DMZ host. Otherwise, if the address is
allocated by DHCP, it may change and DMZ will not
function properly.
DMZ allows the host to expose ALL of its ports to the Internet.
The DMZ host is thus susceptible to malicious attacks from
the Internet.