Cradlepoint COR IBR1100/IBR1150 Manual page 51

CradlePoint COR IBR1100/IBR1150 – Manual
A DMZ host is effectively not firewalled in the sense that any computer on the Internet may attempt to remotely access network services at the DMZ IP address. Typical uses
involve running a public Web server or sharing files.
Input the IP Address of a single device in your network to create a DeMilitarized Zone for that device. To ensure that the IP address of the selected device remains
consistent, go to the "Reservations" section under Network Settings → DHCP Server and reserve the IP address for the device.
Use caution when enabling the DMZ feature, as it can threaten the security of your network. Only use DMZ as a last resort.
Remote Admin. Access
Enable Remote Administration Access Control: Selecting this option allows you to make remote administration tools available to only the specified IP addresses.
Access from all other IP addresses will be blocked. This option only filters IP addresses: you must enable Remote Management separately (System Settings →
Administration).
The services affected by this include remote HTTP, HTTPS, SNMP, and SSH configuration tools. This does not impact LAN-based administration, i.e., devices within your
network still have administration access. The individual remote administration services can be enabled under System Settings → Administration: select the Remote
Management tab.
Add/Edit Allowed Remote Access Addresses
IP Address: The IP address that will be allowed to access administrative services through the WAN.
Netmask (Optional): The netmask allows you to specify what IP address sets will be allowed access. If this field is left empty a netmask of 255.255.255.255 is used,
which means that only the single specified IP address has remote administration access.
Application Gateways
Enabling an application gateway makes pinholes through the firewall. This may be required for some applications to function, or for an application to improve functionality or
add features.
10/13/2014 51