NETGEAR DG814 DSL manual Security, DMZ Server

Page 73

Reference Manual for the Model DG814 DSL Modem Internet Gateway

Security

DMZ Server

Incoming traffic from the Internet is normally discarded by the gateway unless the traffic is a response to one of your local computers or a service that you have configured in the Port Forwarding menu. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the Default DMZ Server.

The Default DMZ Server feature is helpful when using some online games and videoconferencing applications that are incompatible with NAT. The gateway is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, one local PC can run the application properly if that PC’s IP address is entered as the Default DMZ Server.

The Security menu, shown in Figure 7-2, allows the configuration of a Default DMZ Server.

Figure 7-2.

Security menu.

Note: For security, you should avoid using the Default DMZ Server feature. When a computer is designated as the Default DMZ Server, it loses much of the protection of the gateway, and is exposed to many exploits from the Internet. If compromised, the computer can be used to attack your network.

To assign a computer or server to be a Default DMZ server:

1.Click Default DMZ Server.

2.Type the IP address for that server.

3.Click Apply.

Advanced Configuration of the Gateway

7-5

Image 73
Contents NETGEAR, Inc Trademarks World Wide Web Page Contents Chapter Preparing Your Network Chapter Maintenance Appendix a Technical Specifications Figure B-1 Page Table B-1 Xii Technical Support Related Publications About This GuideXiv About This Guide Special Message Formats Typographical ConventionsPage Chapter Introduction Key FeaturesAbout the Gateway Introduction Security Content FilteringAutosensing 10/100 Ethernet TCP/IP Easy Installation and ManagementMaintenance and Support Introduction Package Contents Chapter Setting Up the HardwareLocal Network Hardware Requirements Access RequirementGateway’s Front Panel PC RequirementsLED Descriptions Gateway’s Rear PanelConnecting the Gateway Typical installation Connecting to your Local Ethernet NetworkAdsl through a modular RJ-11 wall jack Connecting to Your Adsl Service and Telephone ProviderVerifying Power Connecting the Power AdapterAdsl through other wall jacks Setting Up the Hardware Preparing Your Personal Computers for IP Networking Chapter Preparing Your NetworkInstall or Verify Windows Networking Components Configuring Windows 95, 98, and ME for IP NetworkingPreparing Your Network Selecting Internet Access Method Assign TCP/IP configuration by DhcpVerifying TCP/IP Properties Windows Configuring Windows NT or 2000 for IP NetworkingVerifying TCP/IP Properties Configuring the Macintosh for IP NetworkingMacOS 8.6 or MacOS Verifying TCP/IP Properties Macintosh Your Internet AccountAccount Information Login ProtocolsObtaining ISP Configuration Information Windows Obtaining ISP Configuration Information Macintosh Ready for ConfigurationRestarting the Network Preparing Your Network Accessing the Web Configuration Manager Chapter Basic Configuration of the GatewayLogin window opens as shown in -1below Browser-based configuration main menu Configuration using the Setup Wizard Setup Wizard menu for Dynamic IP address Configuring for Dynamic IP AccountSetup Wizard menu for Fixed IP address Configuring for Fixed IP AccountSetup Wizard menu for PPPoE login accounts Configuring for an Account with LoginManual Configuration Completing the Configuration Basic Configuration of the Gateway Configuring for Content Filtering Chapter Content FilteringLogs Block Sites Schedule Mail Content Filtering Gateway Status Chapter MaintenanceThis screen shows the following parameters Dhcp This screen shows the following statistics PPPoE Status screen Ping Status screen Attached DevicesRestore and Backup the Configuration Configuration File Settings ManagementErase the Configuration Changing the Configuration PasswordGateway Upgrade menu Gateway UpgradeMaintenance Configuring for Port Forwarding to Local Servers Advanced Configuration of the Gateway Add a Custom Service Local Web and FTP Server Example Edit or Delete a Port Forwarding EntryTip Multiple Computers for Half Life, Kali or Quake NAT Status DMZ Server SecurityRespond to Ping on Internet WAN Port Dynamic DNSLAN IP Setup Menu LAN IP SetupUse router as Dhcp server LAN TCP/IP SetupStatic Routes Static Route Summary Table Static Route Example Advanced Configuration of the Gateway Basic Functioning Chapter TroubleshootingPWR LED Not On Test LED Never Blinks or LED Stays On Troubleshooting the Web Configuration InterfaceAdsl link Troubleshooting the ISP ConnectionWAN LED Green or Blinking Green WAN LED Blinking YellowWAN LED Off Obtaining a WAN IP AddressTroubleshooting Internet Browsing Troubleshooting PPPoE or PPPoATesting the LAN Path to Your Gateway Troubleshooting a TCP/IP Network Using a Ping UtilityPing -n 10 IP address Testing the Path from Your PC to a Remote DeviceProblems with Date and Time Restoring the Default Configuration and PasswordUsing the Default Reset button General Specifications Appendix a Technical SpecificationsLAN Appendix B Networks and Routing Basics What is a Router?Basic Router Concepts IP Addresses and the Internet Routing Information ProtocolClass E Class E addresses are for experimental use Subnet Addressing NetmaskFigure B-2. Example of Subnetting a Class B Address Table B-1. Netmask Notation Translation Table for One Octet Private IP Addresses Single IP Address Operation Using NATFigure B-3. Single IP Address Operation Using NAT Domain Name Server MAC Addresses and Address Resolution ProtocolIP Configuration by Dhcp Ethernet Cabling Uplink Switches, Crossover Cables, and MDI/MDIX SwitchingCable Quality Glossary For example Internet Through the network Auto MDI/MDI-X1-4, 2-6, B-11, B-12 DMZ 1-3, 5-2 MDI/MDI-X1-4, 2-6, B-11, B-12 NTP 5-6 Xiii, B-7 1631 xiv, B-8