D-Link DSR-1000AC User Manual - Page 52

Section 5 - Connect to the Internet DMZ This router supports one of the physical ports to be configured as a secondary WAN Ethernet port or a dedicated DMZ port. A DMZ is a sub network that is open to the public but behind the firewall. The DMZ adds an additional layer of security to the LAN, as specific services/ports that are exposed to the internet on the DMZ do not have to be exposed on the LAN. It is recommended that hosts that must be exposed to the internet (such as web or email servers) be placed in the DMZ network. Firewall rules can be allowed to permit access specific services/ports to the DMZ from both the LAN or WAN. In the event of an attack to any of the DMZ nodes, the LAN is not necessarily vulnerable as well. DMZ configuration is identical to the LAN configuration. There are no restrictions on the IP address or subnet assigned to the DMZ port, other than the fact that it cannot be identical to the IP address given to the LAN interface of this gateway. Note: DSR-500/1000/500N/1000N/500AC/1000AC, in order to configure a DMZ port, the router's configurable port must be set to DMZ in the Network > Internet > DMZ Settings page. Note: For DSR-150N and DSR-250N, enabling DMZ will result in port 8 of the LAN switch being used for a dedicated DMZ port. The other 7 LAN ports remain unchanged. 1. Click Network > Internet > WAN2 / DMZ Settings. 2. Select DMZ and click Save. D-Link DSR-Series User Manual 39