SNR SNR-VP-6020, Руководство пользователя

Страница: 21 / 44

4.2.4.2. NAT Configuration
NAT is abbreviated from Net Address Translation; it’s a protocol responsible for IP address translation. In
other word, it is responsible for transforming IP and port of private network to public, also is the IP address
mapping which we usually say.
DMZ config
：
In order to make some intranet equipments support better service for extranet, and make internal network
security more effectively, these equipments open to extranet need be separated from the other equipments not
open to extranet by the corresponding isolation method according to different demands. We can provide the
different security level protection in terms of the different resources by building a DMZ region which can
provide the network level protection for the equipments environment, reduce the risk which is caused by
providing service to distrust customer, and is the best position to put public information
The following chart describes the network access control of DMZ
21