Draytek Vigor2860 Series User Manual page 137

The security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest
you to add additional filter rules or a secondary firewall.
Click DMZ Host to open the following page. You can set different DMZ host for each WAN
interface. Click the WAN tab to switch into the configuration page for that WAN.
Available settings are explained as follows:
Item
Private IP
Choose PC
Description
Choose Private IP or Active True IP first.
Active True IP selection is available for WAN1 only.
Enter the private IP address of the DMZ host, or click Choose
PC to select one.
Click this button and then a window will automatically pop
up, as depicted below. The window consists of a list of private
IP addresses of all hosts in your LAN network. Select one
private IP address in the list to be the DMZ host.
127 Vigor2860 Series User's Guide