ZyXEL P-660R-T1 v3s User Guide - Page 83

The DMZ Screen, Advanced Setup > NAT

Page 83 highlights

Chapter 10 Network Address Translation (NAT) Table 21 Network > NAT > General (continued) LABEL DESCRIPTION Number of IPs Select Single if you have just one public WAN IP address for your ZyXEL Device. Select Multiple if you have multiple public WAN IP addresses for your ZyXEL Device. DMZ Click this to configure the DMZ settings. See Section 10.3 on page 83 for more details. Virtual Server Click this to configure port forwarding rules for your ZyXEL Device. See Section 10.4 on page 84 for more details. IP Address Mapping This is available only when you select Multiple in the Number of IPs field. Click this to configure address mapping rules for your ZyXEL Device. See Section 10.5 on page 86 for more details. 10.3 The DMZ Screen The DeMilitarized Zone (DMZ) provides a way for public servers (Web, e-mail, FTP, etc.) to be visible to the outside world (while still being protected from DoS (Denial of Service) attacks such as SYN flooding and Ping of Death). These public servers can also still be accessed from the secure LAN. By default the firewall allows traffic between the WAN and the DMZ, traffic from the DMZ to the LAN is denied, and traffic from the LAN to the DMZ is allowed. Internet users can have access to host servers on the DMZ but no access to the LAN, unless special filter rules allowing access were configured by the administrator or the user is an authorized remote user. Use this screen to configure a separate independent network from the LAN in which you can put your servers. Click Advanced Setup > NAT > DMZ to open the following screen. Figure 35 Advanced Setup > NAT > DMZ The following table describes the labels in this screen. Table 22 Advanced Setup > NAT > DMZ LABEL DESCRIPTION DMZ setting for This field displays the PVC you want to configure. DMZ Use this field to enable or disable DMZ. DMZ Host IP Address Type the IP address for DMZ in dotted decimal notation. Note: Make sure the IP addresses of the LAN, WAN and DMZ are on separate subnets. SAVE Click this to save your settings. BACK Click this to return to the previous screen without saving. P-660R-Tx v3s User's Guide 83

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216

Chapter 10 Network Address Translation (NAT)
P-660R-Tx v3s User’s Guide
83
10.3
The DMZ Screen
The DeMilitarized Zone (DMZ) provides a way for public servers (Web, e-mail, FTP, etc.) to
be visible to the outside world (while still being protected from DoS (Denial of Service)
attacks such as SYN flooding and Ping of Death). These public servers can also still be
accessed from the secure LAN.
By default the firewall allows traffic between the WAN and the DMZ, traffic from the DMZ to
the LAN is denied, and traffic from the LAN to the DMZ is allowed. Internet users can have
access to host servers on the DMZ but no access to the LAN, unless special filter rules
allowing access were configured by the administrator or the user is an authorized remote user.
Use this screen to configure a separate independent network from the LAN in which you can
put your servers. Click
Advanced Setup > NAT
>
DMZ
to open the following screen.
Figure 35
Advanced Setup > NAT > DMZ
The following table describes the labels in this screen.
Number of IPs
Select
Single
if you have just one public WAN IP address for your ZyXEL Device.
Select
Multiple
if you have multiple public WAN IP addresses for your ZyXEL
Device.
DMZ
Click this to configure the DMZ settings. See
Section 10.3 on page 83
for more
details.
Virtual Server
Click this to configure port forwarding rules for your ZyXEL Device. See
Section
10.4 on page 84
for more details.
IP Address
Mapping
This is available only when you select
Multiple
in the
Number of IPs
field. Click
this to configure address mapping rules for your ZyXEL Device. See
Section 10.5
on page 86
for more details.
Table 21
Network > NAT > General (continued)
LABEL
DESCRIPTION
Table 22
Advanced Setup > NAT > DMZ
LABEL
DESCRIPTION
DMZ setting for
This field displays the PVC you want to configure.
DMZ
Use this field to enable or disable DMZ.
DMZ Host IP
Address
Type the IP address for DMZ in dotted decimal notation.
Note: Make sure the IP addresses of the LAN, WAN and DMZ are
on separate subnets.
SAVE
Click this to save your settings.
BACK
Click this to return to the previous screen without saving.