D-Link DRO-210i manual WAN Interface, DMZ Settings, Maximum Transmission Unit

Page 14

Interfaces

Select Interface DMZ to configure DMZ Settings as explained below.

Web UI

DMZ Settings

IP Address

Enter the IP address of the DMZ interface

 

 

Subnet Mask

Enter the subnet mask of the DMZ interface

 

 

To add a DMZ Server in the network, the administrator can

a)Assign Private IP Addresses to the DMZ network. And configure a One-To-One NAT entry to map a Global IP Address to the Private DMZ Server IP Address. Refer NAT Configuration for more details.

b)Or assign Private IP Addresses to the DMZ network. And configure a Virtual Server entry to map a Global IP Address/Port to the Private DMZ Server IP Address/Port. Refer Virtual Server Configuration for more details.

c)Or assign Global IP Address to the DMZ network. And add a NAT Exception (i.e disable NAT) between WAN and DMZ.

Note: To make the private DMZ Server accessible from the internet, use One-To-One NAT only when multiple services are hosted by a single DMZ Server. When only one

￿service is provided by the DMZ Server, it is preferable to use Virtual Server feature. This would enable you to save the number of Global IP Addresses required to expose your DMZ services.

2.4WAN Interface

This Interface is used for WAN Connectivity through an ISP. Typically ISPs support 3 modes of WAN Connectivity – Static, Dynamic and PPPoE. The WAN Interface configurations for these modes are explained in the following sections. These configurations are explained for WAN1 interface, and the same explanation holds good for WAN2 also.

Maximum Transmission Unit:

MTU (or Maximum Transmission Unit) is the largest sized packet that can be transmitted through the internet. A higher MTU brings higher bandwidth efficiency. However large packets can block up a slow interface for some time, increasing the lag on other packets. Packets with sizes greater than the MTU will be fragmented by the router.

￿ Caution: Follow the ISP’s advice on whether to change the default MTU value and what to change it to.

Dlink DRO-210i User Guide

14

Image 14
Contents DRO-210i Table Of Contents Virtual Private Network About This Manual BoldDlink DRO-210i User Guide Product OverviewProduct Overview DRO-210i Package Contents Hardware DetailsFront Panel Rear Panel Software Features RoutingVPN Tools Disabled WAN2/DMZ Port ConfigurationOptional Port Configuration InterfacesDMZ Interface LAN SettingsLAN Interface Forgot LAN IP ?Maximum Transmission Unit DMZ SettingsWAN Interface IP Settings for WAN1 Interface Static ModeDynamic Mode Dhcp Settings for WAN1 InterfacePPPoE Mode Unnumbered InterfacesPPPoE Settings for WAN1 Interface Dhcp Server DHCP, DNS and TimeDhcp DHCP, DNS and TimeDhcp Static Mapping Dhcp Static MappingDhcp Relay Dhcp RelayDNS Proxy Settings DNS ProxySystem Time Settings TimeRouting RoutingStatic Routing Static RoutingDynamic Routing RIP Settings Routing Table Routing TablePolicy Based Routing Policy Based RoutingTo the same destination High Availability Auto BackupBackup Configuration High AvailabilityEthernet Link Detection Load Balancing ConfigurationLoad Balancing Ethernet WAN Link Detection Network Address Translation NAT Interface ConfigurationNAT Interface Configuration NATNAT Exception NAT ConfigurationNAT Configuration Virtual Server/NAPT Virtual ServerNAT Exception SIP ALG Configuration SIP-ALGNAT Table NAT Session TableFirewall Interface ConfigurationFirewall Interface Configuration Firewall PoliciesPolicy Rules Policy RulesInbound Policies Permitted ServicesInbound Policies Permitted Services Inbound PoliciesAdd Permitted IP Rule Outbound PoliciesIP Permitted Rules Outbound Policies Outbound PoliciesIP Blocked Rules Blocked ServicesOutbound Policies Service Blocked Rule Add Blocked IP RuleOutbound Policies Untrusted Domain Domain FilterUntrusted Domain Trusted DomainCookie Filter Web FilterJava Filter ActiveX FilterFile Extension Filter Keyword FilterKeyword Exception Add Blocked MAC Address MAC FilterBlocking Log Blocking Log TableIDS Configuration Intrusion DetectionIDS Configuration Intrusion Log Table Intrusion LogBlack List Black List TableVirtual Private Network Virtual Private NetworkIPSec Passthrough IPSec Tunnel or PassthroughPeer-To-Peer IPSec TunnelVirtual Private Network Same IKE Encryption algorithm on both ends of a VPN tunnel IPSec Server Configurations IPSec ServerMaximum life duration is 86400 seconds Limitation Tunnel Remote ID ConfigurationTunnel Table IPSec Status IPSec StatusIPSec Log IPSec Log TableQuality of Service Quality of ServiceClass Configuration HTB QoS ConfigurationsQuality of Service Filter Configuration QoS Filter ConfigurationsType Of Service/DiffServ TOS/DiffServQuality of Service Device Information AdministrationAdministration Device InfoTraffic Statistics Traffic StatisticsSession Log Session Log Password ChangeSysLog System LogSystem Change PasswordPassword Recovery SystemUpdate Firmware/Configuration Upload/DownloadPing Test Remote AccessRemote Access Ping TestAdministration Dlink DRO-210i User Guide General Frequently Asked QuestionsFrequently Asked Questions Q6. What is the purpose of Dhcp Server Auto Configuration? DHCP, DNSRouting High AvailabilityFirewall Frequently Asked Questions 11.6 NAT Q21. What are the call features supported by SIP-ALG? 11.7 VPN11.8 QoS Frequently Asked Questions