Dmz Host - Draytek vigor2960 series User Manual

Alias
Protocol
Public Port Start/
Public Port End
Private IP
Private IP Start /
Private IP End
Private Port
Apply
Cancel
4. Enter all of the settings and click Apply.
5. A new profile has been added onto Port Redirection table.
4 . 4 . 2 D M Z H o s
4 . 4 . 2 D M Z H o s
In computer networks, a DMZ (De-Militarized Zone) is a computer host or small network
inserted as a neutral zone between a company's private network and the outside public
network. It prevents outside users from getting direct access to company network. A DMZ is
an optional and more secure approach to a firewall and effectively acts as a proxy server as
well. In a typical DMZ configuration for a small company, a separate computer (or host in
network terms) receives requests from users within the private network for access to Web
sites or other companies accessible on the public network. The DMZ host then initializes
sessions for these requests on the public networks . However, the DMZ host is not able to
initiate a session back into the private network. It can only forward packets that have already
been requested. Users of the public network outside the company can access only the DMZ
host. The DMZ may typically also have the company's Web pages so these could be
served to the outside world. If an outside user penetrated the DMZ host's security, only the
Web pages will be corrupted but other company information would not be exposed.
Vigor2960 Series User's Guide
Single Alias – You have to type one IP address used for IP
Alias.
All – All the IP address can be treated as IP Alias.
WAN IP alias that can be selected and used for port
redirection. Before using it, please go to WAN>>General
Setup and enable the wan1 profile. Add several IP addresses
under Static mode for wan1.
Choose the protocol used for the entry.
It is available when Range to One or Range to Range
(port) or Range to Range (IP) is selected as Port
Redirection Mode.
Type the starting/ending number of the public port.
For Range-to-One, set both Start and End values with the
same value.
Specify the private IP address of the internal host providing
the service. Simply type the private IP used for this entry.
It is available when Range to Range (IP) is selected as Port
Redirection Mode.
Type the starting/ending IP address.
Type a port number for such profile.
Click it to save and exit the dialog.
Click it to exit the dialog without saving anything.
t
t
161