ZyXEL Communications LTE3202-M430, User Manual, Page: 74 / 117

Chapter 10 NAT
LTE3202-M430 User’s Guide
74
10.3 The DMZ Screen
The DeMilitarized Zone (DMZ) auto-negotiating 10/100 Mbps Ethernet port provides a way for public
servers (Web, e-mail, FTP, etc.) to be visible to the outside world (while still being protected from DoS
(Denial of Service) attacks such as SYN flooding and Ping of Death). These public servers can also still be
accessed from the secure LAN.
By default the firewall allows traffic between the WAN and the DMZ, traffic from the DMZ to the LAN is
denied, and traffic from the LAN to the DMZ is allowed. Internet users can have access to host servers on
the DMZ but no access to the LAN, unless special filter rules allowing access were configured by the
administrator or the user is an authorized remote user.
Click Configuration > NAT > DMZ to open the following screen.
Figure 51 Configuration > NAT > DMZ
The following table describes the labels in this screen.
10.4 The ALG Screen
Some NAT routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass
through NAT by examining and translating IP addresses embedded in the data stream. When the LTE
Device registers with the SIP register server, the SIP ALG translates the LTE Device’s private IP address
inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if
your LTE Device is behind a SIP ALG.
To enable and disable the SIP ALG in the LTE Device, click Configuration > NAT > ALG . The screen
appears as shown.
Table 33 Configuration > NAT > DMZ
LABEL DESCRIPTION
DMZ
Enable DMZ Select this to enable DMZ on the LTE3202-M430.
DMZ IP address Type the IP address of your LTE3202-M430’s DMZ port in dotted decimal notation.
Note: Make sure the IP addresses of the LAN, WAN and DMZ are on separate subnets.
Apply Click Apply to save your changes back to the LTE3202-M430.
Cancel Click Cancel to reload the previous configuration for this screen.