INNACOMM W3100V, User Manual

Page: 59 / 133

58
Figure 2 DMZ host
The demilitarized military zone (DMZ) host feature allows one local computer to be
exposed to the Internet. This function is applicable for:
=
Users who want to use a special-purpose Internet service, such as an
on-line game or video conferencing program, that is not presented in the port
forwarding list and for which no port range information is available.
=
Users who are not concerned with security and wish to expose one
computer to all services without restriction.
Note : A DMZ host is not protected by the firewall and may be vulnerable to attack.
This may also put other computers in the home network at risk. Hence,
when designating a DMZ host, you must consider the security implications
and protect it if necessary.
You can set up a client in your local network as a so-called DMZ host. Your device
then forwards all incoming data traffic from the Internet to this client. You can, for
example, operate your own Web server on one of the clients in your local network
and make it accessible to Internet users. As the exposed host, the local client is
directly visible to the Internet and therefore particularly vulnerable to attacks (for
example, hacker attacks). Enable this function only when necessary (for example,
to operate a Web server) and when other functions (for example, port forwarding)
are inadequate. In this case, you should take appropriate measures for the clients
concerned.
Note : Only one PC per public IP address can be set up as an exposed host.
Adding a DMZ Host
Step 1 To set up a PC as a DMZ host, select Advanced Setup > NAT > DMZ
host .
Figure 3 DMZ host configuration
Step 2 Enter the local IP address of the PC that is to be enabled as an exposed
host.