D-Link DSR-500, Руководство пользователя

Страница: 24 / 213

Unified Services Router User Manual
22
Figure 7: Co nf iguri ng VLAN me mbership f or a por t
2.3 Configurable Port: DMZ Setup
This router supports one of the physical ports to be configured as a secondary WAN
Ethernet port or a dedicated DMZ port. A DMZ is a subnetwork that is open to the
public but behind the firewall. The DMZ adds an additional layer of security to the
LAN, as specific services/ports t hat are exposed to the internet on the DMZ do not
have to be exposed on the LAN. It is recommended that hosts that must be exposed to
the internet (such as web or email servers) be placed in the DMZ network. Firewall
rules can be allowed to permit access specific services/ports to the DMZ fr om both
the LAN or WAN. In the event of an attack to any of the DMZ nodes, the LAN is not
necessarily vulnerable as well.
Setup > DMZ Setup > DMZ Setup Configuration
DMZ configuration is identical to the LAN configuration. There are no restrictions on
the IP address or subnet assigned to the DMZ port, other than the fact that it cannot
be identical to the IP address given to the LAN interface of this gateway.