Virtual Demilitarized Zone - Microsoft MN-500 User Manual

Note
If you set the Broadband
Networking Wireless Base
Station to bridging mode, the

virtual demilitarized zone

settings in the Base Station
Management Tool will be
unavailable.
68 Microsoft Broadband Networking Base Station User's Guide
• The IP address of the server computer on your local network. To
determine the IP address assigned to the computer that you will
use as a server, check the DHCP client list on the Home page of
the Base Station Management Tool.
• The inbound and private port numbers and protocol that
correspond to the type of data that your server handles.
Some of the common TCP inbound ports include:
• HTTP Port 80
• FTP Port 21
• Telnet Port 23
• POP3 Port 110
To configure persistent port forwarding
1. Open the Base Station Management Tool, and then click
Security.
2. On the Security menu, click Port Forwarding, and then click
Set up persistent port forwarding.
3. In the Description box, type a description of the server field.
(This step is optional.)
4. In the Inbound port box, type the inbound port to which data
packets sent from the Internet to the server will be passed. The
inbound port can be a single port or a comma-separated list of
ports or port ranges. For example, you could type 4-25, or 243,
or 10, 24-50, 74. You are limited to 256 characters.
5. In the Type box, select the protocol (UDP or TCP) for the port.
6. In the Private IP address box, type the private IP address of the
client computer that is hosting the server.
7. In the Private port boxes, type the private port on the server
that the data will be sent to. To identify the private port number,
consult the documentation for your server software.
8. To save the changes you have made, click Apply, or to delete
the changes, click Cancel.
Virtual Demilitarized Zone
In certain situations, you may want to set up a virtual demilitarized
zone (DMZ) on one of the clients on your network. When you
establish a DMZ, you essentially open all inbound ports and direct
the base station to forward certain inbound data packets (those
that are not in response to a transmission initiated by a LAN client
and not handled through application-triggered or persistent port
forwarding) to a particular computer on your LAN. This computer
becomes the DMZ host.