D-Link DFL-1100 Product Manual - Page 133

Firewall > Policy, DMZ->WAN, No NAT - requires public IP addresses on DMZ network, Apply, WAN

Page 133 highlights

Disable NAT on the DMZ Interface: By default the DFL-1100 is enabled to perform NAT on both LAN and DMZ interfaces. Disable NAT on the DMZ interface. Navigate to Firewall > Policy in the web-based configuration. Click on DMZ->WAN to modify the behavior of the DMZ interface. Select the No NAT - requires public IP addresses on DMZ network radio button. After making configuration changes click on the Apply button to save those changes. To allow services on the DMZ interface to be accessible from the WAN, incoming policies must be defined to allow those services. This can be done through the WAN->DMZ section in the Firewall Policy configuration section. Once all changes are final, those changes must be activated. Click on the Activate button under the left-hand-side menu. Follow the on-screen instructions to finalize your configuration.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144

Disable NAT on the DMZ Interface:
By default the DFL-1100 is enabled to perform NAT on both LAN and DMZ interfaces.
Disable NAT on the DMZ interface.
Navigate to
Firewall > Policy
in the web-based configuration.
Click on
DMZ->WAN
to
modify the behavior of the DMZ interface.
Select the
No NAT – requires public IP addresses on DMZ network
radio button.
After making configuration changes click on the
Apply
button to save those changes.
To allow services on the DMZ interface to be accessible from the WAN, incoming policies
must be defined to allow those services.
This can be done through the
WAN->DMZ
section in
the Firewall Policy configuration section.
Once all changes are final, those changes must be activated.
Click on the
Activate
button under the left-hand-side menu.
Follow the on-screen instructions to finalize your
configuration.