Chapter
8
98 Chapter 8: Managing Data Devices
Using the Services Router Advanced Interface
Linksys One Communications Solution

Exposing a Network Device as a DMZ Host

You can allow access to a network device that you want to act as a network Demilitarized
Zone (DMZ) host. The DMZ is a dedicated host that receives all inbound traffic from the
WAN with one exception: it does not receive traffic directed to the host servers and services
configured in the Firewall Management window. A DMZ host also does not receive traffic
related to LAN-side initiated connections to the Internet. These connections are managed
dynamically at the firewall. The DMZ host receives all of the “unsolicited” inbound traffic
from the Internet that isn’t specifically configured to go to other network servers.
When a server is a DMZ host, it can receive any inbound traffic from the Internet, and it is
treated by the Linksys One network as being outside of the firewall. This option should only
be used if you need hosting services that are not listed above and understand the security
implications of a DMZ host.
To expose a network server as a DMZ host:
1. Define a static IP address for each device or service. See the ”Adding DNS Names for
Static IP Devices” section on page 95.
2. Click the Data Devices > Firewall tab.
3. Select the IP address for the Site DMZ host drop-down box.
4. Click Commit. Your change takes effect immediately.
Using the Services Router Advanced Interface
The Data Devices > SVR tab opens the Services Router advanced interface. For more details
on using this interface, refer to the CPE Advanced Administration Guide, available on the
IMPORTANT: A Demilitarized Zone
(DMZ) host is not protected by the
firewall and may be vulnerable to
attack. Designating a DMZ host can
also put other computers in the network
at risk. When designating a DMZ host,
consider the security implications and
protect the network if necessary.