112
While creating multiple Virtual Server rules, the prior rules have higher priority. The Virtual server rules have precedence
over the DMZ one while both rules exist. Example 1 and 2 demonstrate proper usage of DMZ and Virtual Server rules.
Example 1
:
All connections should be redirected to
192.168.2.12
while DMZ is enabled. Since Virtual Server rules
have precedence over the DMZ rule all connections to TCP port 22 will be directed to TCP port 22 of 192.168.2.10
and remaining connections to port TCP
20~80
will be redirected to port TCP
20~80
of
192.168.2.11
DMZ Enabled : 192.168.2.12
Rule
Protocol
Private IP
Private Port
Public Port
1 TCP
192.168.2.10 22
22
2 TCP 192.168.2.11 20:80
20:80
Example 2 :
All connections should be redirected to
192.168.2.12
while DMZ is enabled. Since Virtual Server rules
have precedence over the DMZ rule all other connections to TCP port
20~80
will be redirected to port
20~80
of
192.168.2.11
. The rule 2 won’t take effect.
DMZ Enabled : 192.168.2.12
Rule
Protocol
Private IP
Private Port
Public Port
1 TCP 192.168.2.11 20:80
20:80
2 TCP
192.168.2.10 22
22