port of private network to public, also is the IP address mapping which we
usually say.
DMZ config
：
In order to make some intranet equipments support better service for extranet,
and make internal network security more effectively, these equipments open to
extranet need be separated from the other equipments not open to extranet by the
corresponding isolation method according to different demands. We can provide
the different security level protection in terms of the different resources by
building a DMZ region which can provide the network level protection for the
equipments environment, reduce the risk which is caused by providing service to
distrust customer, and is the best position to put public information
The following chart describes the network access control of DMZ.
