Configuring And Enabling The Dmz Port - NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Reference Manual

• IP Address. The IP address alias added to the LAN port of the VPN firewall. This is the
gateway for computers that need to access the Internet.
• Subnet Mask. IPv4 Subnet Mask.
• Action. The Edit link allows you to make changes to the selected entry.
• Select All. Selects all the entries in the Available Secondary LAN IPs table.
• Delete. Deletes selected entries from the Available Secondary LAN IPs table.
3. Type in the IP Address and the Subnet Mask in the respective text fields.
4. Click Add. The Secondary LAN IP address will be added to the Secondary LAN IPs table.
Note: Additional IP addresses cannot be configured in the DHCP server. The hosts on the
secondary subnets must be manually configured with the IP addresses, gateway IP
and DNS server IPs.
Warning: Make sure the secondary IP addresses are different from the LAN, WAN,
DMZ, and any other subnet attached to this VPN firewall.
For example:
WAN1 IP address: 10.0.0.1 with subnet 255.0.0.0
WAN2 IP address: 20.0.0.1 with subnet 255.0.0.0
DMZ IP address: 192.168.10.1 with subnet 255.255.255.0
LAN IP address: 192.168.1.1 with subnet 255.255.255.0
Secondary LAN IP: 192.168.20.1 with subnet 255.255.255.0

Configuring and Enabling the DMZ Port

The De-Militarized Zone (DMZ) is a network which, when compared to the LAN, has fewer
firewall restrictions, by default. This zone can be used to host servers (such as a web server, ftp
server, or e-mail server, for example) and give public access to them. The eighth LAN port on the
VPN firewall can be dedicated as a hardware DMZ port for safely providing services to the
Internet, without compromising security on your LAN.
The DMZ port feature is also helpful when using some online games and videoconferencing
applications that are incompatible with NAT. The VPN firewall is programmed to recognize some
of these applications and to work properly with them, but there are other applications that may not
function well. In some cases, local PCs can run the application properly if those PCs are used on
the DMZ port.
LAN Configuration
ProSafe VPN Firewall 200 FVX538 Reference Manual
v1.0, January 2010
3-11