Draytek Vigor 2200V, Руководство пользователя

Страница: 45 / 143

NAT Setup
5-5
The port redirection can only be applied to external users only - i.e.
the incoming traffic. The Internet users behind your LAN can not
access your external public IP address and come back in; the internal
users shall access the server on its local private IP address, or you can
set up an alias in a Windows hosts file. Please only redirect the ports
you know you have to forward rather than forward all ports. Otherwise,
you will compromise the firewall-type security initially deployed by the
NAT facility.
5.2.2 DMZ Host Setup
The Port Redirection can direct UDP/TCP traffic on particular ports to
specified internal clients on the LAN. However, other IP protocols, for
example Protocols 50 (ESP) and 51 (AH) do not have port numbers so
you can not decide which local client to forward the data to. Vigor
router has a facility called DMZ host which you can specify a single local
client (with private IP address) to which ALL unsolicited data on all
protocols shall be forwarded. Regular web surfing and other such
Internet activities from other clients will continue to work without
inappropriate interruption.