HP R100-Series, Руководство по настройке и администрированию

Страница: 102 / 142

102 NAT configuration
DMZ settings
If you have a client PC that cannot run an Internet application properly from behind the firewall,
you can open the client up to unrestricted two-way Internet access. This may be necessary if the
NAT feature is causing problems with an application, such as a game or video conferencing
application. The DMZ feature allows all traffic from the public WAN that is destined for a
specified computer (wired or wireless) on the private LAN, to pass through the router's firewall.
Note that the router's virtual server feature allows the forwarding of a specific port, whereas the
DMZ feature forwards all ports/protocols to the specified IP addresses.
Caution
Use this feature on a temporary basis. The computer in the DMZ is not protected from hacker
attacks.
To put a computer in the DMZ, enter the last digits of its LAN IP address in the Client PC IP
Address field. Enter the IP address (if known) on the Internet that will be used to access the
DMZ computer into the Public IP Address field. This allows the computer on the Internet to
access the DMZ computer through this address without firewall protection.
For the first line setting (line 1), the Public IP address is set to 0.0.0.0, which means it uses the
router’s default WAN IP address. The router only allows one DMZ server to be accessed by all
public IPs (many to one NAT). For all other line settings, if you have more than one DMZ server,
you have to set the public IP address and specify the IP address of the DMZ server on the local
network (one to one NAT).
This page includes the following settings:
Enable
Enables the DMZ feature for the router.
Public IP
The IP address for the DMZ computer that is used to access it from the Internet. When using the
0.0.0.0 setting, the router’s default WAN IP address is used.