The Dmz Screen; The Alg Screen - ZyXEL Communications LTE3202-M430 User Manual

10.3 The DMZ Screen

The DeMilitarized Zone (DMZ) auto-negotiating 10/100 Mbps Ethernet port provides a way for public
servers (Web, e-mail, FTP, etc.) to be visible to the outside world (while still being protected from DoS
(Denial of Service) attacks such as SYN flooding and Ping of Death). These public servers can also still be
accessed from the secure LAN.
By default the firewall allows traffic between the WAN and the DMZ, traffic from the DMZ to the LAN is
denied, and traffic from the LAN to the DMZ is allowed. Internet users can have access to host servers on
the DMZ but no access to the LAN, unless special filter rules allowing access were configured by the
administrator or the user is an authorized remote user.
Click Configuration > NAT > DMZ to open the following screen.
Figure 51 Configuration > NAT > DMZ
The following table describes the labels in this screen.
Table 33 Configuration > NAT > DMZ
LABEL
DMZ
Enable DMZ
DMZ IP address
Apply
Cancel

10.4 The ALG Screen

Some NAT routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass
through NAT by examining and translating IP addresses embedded in the data stream. When the LTE
Device registers with the SIP register server, the SIP ALG translates the LTE Device's private IP address
inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if
your LTE Device is behind a SIP ALG.
To enable and disable the SIP ALG in the LTE Device, click Configuration > NAT > ALG. The screen
appears as shown.
Chapter 10 NAT
DESCRIPTION
Select this to enable DMZ on the LTE3202-M430.
Type the IP address of your LTE3202-M430's DMZ port in dotted decimal notation.
Note: Make sure the IP addresses of the LAN, WAN and DMZ are on separate subnets.
Click Apply to save your changes back to the LTE3202-M430.
Click Cancel to reload the previous configuration for this screen.
LTE3202-M430 User's Guide
74