54
INTERNET SECURITY
DMS3-CTC-25-115 v1.0
6
6.2 DMZ
Introduction
The TG-1 Gateway allows you to configure one local device as a De-Militarized Zone (DMZ) host. This
means that:
None of the TG-1 Gateway firewall rules will be applied to this device.
All traffic originating from the Internet will be forwarded to this devices unless there is a port forwarding
rule defined for this type of traffic. Port forwarding rules always have higher priority.
Use a static address for the DMZ host
Make sure that your DMZ host uses a fixed IP address. If you do not do this, the device might get a new IP
address after some time and the port forwarding rule will no longer be applied to the device and another
device may suddenly be acting as DMZ host.
How to configure a device as DMZ host
1
Browse to the TG-1 Gateway GUI.
For more information, see
“4.1 Access from your local network” on page 29
2
Click
WAN Services
. The
WAN services
page appears.
3
In the upper-right corner, click
show advanced
. The
DMZ
section appears.
4
Switch
Enabled
to
.
5
In the
Destination
box, type the IP address of the device that you want to use as DMZ host.
6
Optionally, you can make exceptions on the DMZ by creating port mappings to direct specific traffic to
other devices. To do this, click
Add new port mapping
under
Port forwarding table
.
7
Click
Save
. The DMZ is now active.
