AudioCodes MP-26 series, User Manual

Page: 262 / 464

User's Manual 262 Document #: LTRT-23510
MP-26x/MP-27x Multimedia Home Gateway
14.4 Configuring a DMZ Host
The DMZ (Demilitarized) Host feature allows one local computer to be exposed to the
Internet. Designate a DMZ host to:

Use a special-purpose Internet service, such as an on-line game or video-
conferencing program, that is not present in the Local Servers list and for which no
port range information is available.

To expose one computer to all services, without restriction, irrespective of security.
Warning : A DMZ host is not protected by the firewall and may be vulnerable to attack.
Designating a DMZ host may also put other computers in the home network at risk. When
designating a DMZ host, you must consider the security implications and protect it if
necessary.
An incoming request for access to a service in the home network, such as a Web-server, is
fielded by the device. The device forwards this request to the DMZ host (if one is
designated) unless the service is being provided by another PC in the home network
(assigned in Local Servers), in which case that PC receives the request instead.

To designate a local computer as a DMZ Host:
1. From the menu bar, click the Security menu, and in the screen 'Security', click the
DMZ Host tab; the screen 'DMZ Host' opens.
Figure 14-10: DMZ Host
2. Enter the local IP address of the computer to be designated as a DMZ host. Note that
only one LAN computer can be a DMZ host at any time.
3. Click OK to save your changes and return to the screen 'DMZ Host'.
You can disable the DMZ host so that it does not fully exposed to the Internet, but keep its
IP address recorded on the 'DMZ Host' screen. This may be useful if you wish to disable
the DMZ host but expect that you may want to enable it again in the future.

To disable the DMZ host so that it is not fully exposed to the Internet, clear the check-
box next to the DMZ IP designation and click
OK .

To re-enable the DMZ host later, recheck the check-box.