Draytek Vigor2920n User Manual page 150

The security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest
you to add additional filter rules or a secondary firewall.
Click DMZ Host to open the following page:
DMZ Host for WAN2 and WAN3 is slightly different with WAN1. Active True IP selection
is available for WAN1 only.
See the following figure.
If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in
WAN2 interface, you will find them in Aux. WAN IP for your selection.
Vigor2920 Series User's Guide
138