Draytek Vigor 2925 Series User Manual page 249

The security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest
you to add additional filter rules or a secondary firewall.
Click DMZ Host to open the following page. You can set different DMZ host for each WAN
interface. Click the WAN tab to switch into the configuration page for that WAN.
Available settings are explained as follows:
Item
Private IP
Choose PC
Description
Choose Private IP or Active True IP first.
Active True IP selection is available for WAN1 only.
Enter the private IP address of the DMZ host, or click Choose
PC to select one.
Click this button and then a window will automatically pop
up, as depicted below. The window consists of a list of private
IP addresses of all hosts in your LAN network. Select one
private IP address in the list to be the DMZ host.
When you have selected one private IP from the above dialog,
the IP address will be shown on the following screen. Click
OK to save the setting.
237
Vigor2925 Series User's Guide