Configuring A Dmz Host; Configuring Advanced Firewall Settings; Configuring One-To-One Network Address Translation (Nat) - Cisco RV120W Administration Manual

Configuring the Firewall

Configuring a DMZ Host

Configuring a DMZ Host
STEP 1
STEP 2
STEP 3
STEP 4

Configuring Advanced Firewall Settings

Cisco RV120W Administration Guide
The Cisco RV120W supports DMZ options. A DMZ is a sub-network that is open to
the public but behind the firewall. DMZ allows you to redirect packets going to
your WAN port IP address to a particular IP address in your LAN. It is
recommended that hosts that must be exposed to the WAN (such as web or e-mail
servers) be placed in the DMZ network. Firewall rules can be allowed to permit
access to specific services and ports to the DMZ from both the LAN or WAN. In
the event of an attack on any of the DMZ nodes, the LAN is not necessarily
vulnerable as well.
You must configure a fixed (static) IP address for the endpoint that will be
designated as the DMZ host. The DMZ host should be given an IP address in the
same subnet as the router's LAN IP address but it cannot be identical to the IP
address given to the LAN interface of this gateway.
Choose Firewall > DMZ Host.
Check the Enable box to enable DMZ on the network.
Enter the IP address for the endpoint that will receive the redirected packets. This
is the DMZ host.
Click Save. You must then configure firewall rules for the zone. See
Custom Services, page
This page allows you to configure many advanced firewall settings.

Configuring One-to-One Network Address Translation (NAT)

One-to-one NAT is a way to make systems behind a firewall that are configured
with private IP addresses appear to have public IP addresses.
To configure one-to-one NAT, choose Firewall > Advanced Settings > One-to-One
NAT. The One-to-One-NAT Rules Table lists the available One-To-One NAT rules
that have been configured. It displays the following fields:
83.
4
Creating
80