Page
29
5.10 Firewall
1. DMZ Host Configuration
You can set up your personal computer or network-ready device to be a public or local DMZ
hosts. In general, Internet applications use only one unique port and can pass through a NAT
Router by enabling Virtual Server. However, some special applications need to implement
multiple ports, port ranges, dynamically assigned ports, and special protocols. ZSR0104C
SERIES can support the transparent pass-through of these special applications, such as FTP,
NetMeeting/H.323, MSN Messenger, etc. Enable
Local DMZ Host
when you have
problems running these applications. Besides, you can activate
Public DMZ Host
to set up
a server and retrieve the traffic initiated from the Internet.
A.
Local DMZ Host
To run the special applications, you can assign a device with a LAN IP address as
Local
DMZ Host
. Then any service request of application initiated from the Internet will be
forwarded to the dedicated LAN host with the LAN IP address.
For example, when you want to run NetMeeting to communicate with your friend on the
Internet, he /she cannot find your LAN host due to ZSR0104C SERIES NAT function.
However, after you assign the LAN IP address
192.168.1.2
as the Local DMZ Host, your
friend can call ZSR0104C SERIES Public IP address
140.112.8.8
and the service request of
NetMeeting will be forwarded to your LAN host with the LAN IP address
192.168.1.2
, as