Wireless Controller
Figure 24: Multiple VLAN Subnets
2.4
Configurable Port: DMZ Setup
This controller supports one of the physical ports (Option Ports) to be configured as a
secondary Ethernet port or a dedicated DMZ port. A DMZ is a sub network that is open
to the public but behind the firewall. The DMZ adds an additional layer of security to
the LAN, as specific services/ports that are exposed to the internet on the DMZ do not
have to be exposed on the LAN. It is recommended that hosts that must be exposed to
the internet (such as web or email servers) be placed in the DMZ network. Firewall
rules can be allowed to permit access specific services/ports to the DMZ from both the
LAN or Option. In the event of an attack to any of the DMZ nodes, the LAN is not
necessarily vulnerable as well.
Setup > DMZ Setup > DMZ Setup Configuration
DMZ configuration is identical to the LAN configuration. There are no restrictions on
the IP address or subnet assigned to the DMZ port, other than the fact that it cannot be
identical to the IP address given to the LAN interface of this gateway.
46
User Manual