Table of Contents
Advertisement
The port redirection can only be applied to external users only - i.e. the
incoming traffic. The Internet users behind your LAN can not access
your external public IP address and come back in; the internal users
shall access the server on its local private IP address, or you can set
up an alias in a Windows hosts file. Please only redirect the ports you
know you have to forward rather than forward all ports. Otherwise, you
will compromise the firewall-type security initially deployed by the NAT
facility.
5.2.2 DMZ Host Setup
The Port Redirection can direct UDP/TCP traffic on particular ports
to specified internal clients on the LAN. However, other IP protocols,
for example Protocols 50 (ESP) and 51 (AH) do not have port
numbers so you cannot decide which local client to forward the data
to. Vigor router has a facility called DMZ host that you can specify a
single local client (with private IP address) to which ALL unsolicited
data on all protocols shall be forwarded. Regular web surfing and
other such Internet activities from other clients will continue to work
without inappropriate interruption.
The inherent security properties of NAT are somewhat bypassed if you
set up DMZ host. You can consider adding additional filter rules or a
secondary firewall.
Click DMZ Host Setup to open the setup page, as shown below.
The DMZ Host setting allows a defined internal user to be exposed to
the Internet in order to use some special purpose applications such
as Netmeeting or Internet Games etc. Each item in the setup page
is described below.
NAT Setup
5-5
Advertisement
Table of Contents
