D-Link DWC-1000 User Manual - Page 46

Wireless Controller User Manual Edi t: Th e Ed it b u t t o n will lin k t o t h e Po rt VLA N Co n fig u rat io n p ag e, allo win g y o u t o make ch an g es t o t h e s elect ed p o rt VLA N at t rib u t es . Figure 21: M ultiple VLAN Subne ts 2.4 Configurable Port: DMZ Setup This controller s upports one of the physical ports (Option Ports) to be configured as a s eco n d ary Et h ern et p o rt o r a d ed icat ed DM Z p o rt . A DM Z is a s u b n et wo rk t h at is open to the public but behind the firewall. The DMZ adds an additional layer of s ecu rit y t o t h e LA N, as s p ecific s ervices/po rts t h at are exp o sed t o t h e in t ern et o n t h e DM Z d o n o t h av e t o b e exp o sed o n t h e LA N. It is reco mmen d ed t h at h o s t s t h at mu s t b e exp o s ed t o t h e in t ern et (s u ch as web o r email s erv ers ) b e p laced in t h e DM Z n et wo rk. Firewall ru les can b e allo wed t o p ermit access s p ecific s ervices/p o rt s t o t h e DM Z fro m b o t h t h e LA N o r Op t io n . In t h e ev en t o f an at t ack t o an y o f t h e DM Z n o d es , t h e LA N is n o t n eces s arily v u ln erab le as well. Setup > DMZ Setup > DMZ Setup Configuration DM Z co n fig u ratio n is id en tical t o t h e LA N co n fig u ratio n. Th ere are n o rest rictio ns on the IP addres s or s ubnet as signed to the DMZ port, other than the fact that it cannot b e id en t ical t o t h e IP ad d res s g iv en t o t h e LA N in t erface o f t h is g at eway . 44