NETGEAR CBVG834G, Руководство пользователя для администраторов

Страница: 54 / 82

Wireless Cable Voice Gateway Model CBVG834G Adminstrators User Manual
3-14 Protecting Your Network
v1.0, February 2008
Setting Up a DMZ Host
The Default DMZ Server feature is helpful when using some online games and video conferencing
applications that are incompatible with NAT. The gateway is programmed to recognize some of
these applications and to work properly with them, but there are other applications that may not
function well. In some cases, one local PC can run the application properly if that PC’s IP address
is entered as the Default DMZ Host.
Incoming traffic from the Internet is normally discarded by the gateway unless the traffic is a
response to one of your local computers or a service that you have configured in the Port
Forwarding or Port Triggering screen. Instead of discarding this traffic, you can have it forwarded
to one computer on your network. This computer is called the default DMZ host.
To assign a computer or server to be a DMZ host:
1. From the main menu, under the Advanced heading, select DMZ Host. The DMZ Host screen
displays:
2. In the DMZ Address field, enter the IP address of the computer that you want to assign as a
DMZ host.
3. Click Apply .
To disable the DMZ host, enter 0 (zero), and then click Apply .
If you want the gateway to respond to a ping from the Internet, select the Respond to Ping on
WAN Port check box. This should only be used as a diagnostic tool, since it allows your gateway
to be discovered. Do not select this check box unless you have a specific reason to do so.
Note: For security, you should avoid using the Default DMZ Server feature. When a
computer is designated as the default DMZ server, it loses much of the protection
of the firewall, and is exposed to many exploits from the Internet. If compromised,
the computer can be used to attack your network.
Figure 3-9