The DMZ port is used to allow computers and devices connected to this port
to have more direct access to the Internet. This is useful for certain
applications that may conflict with the firewall and Network Address
Translation (NAT) features of the DFL-600. Computers and devices
connected to the DMZ port will not have the level of protection that the LAN
ports can provide, however. It is recommended that computers and devices
connected to the DFL-600’s DMZ port have some type of firewall software
installed and running to provide these devices with at least some level of
protection from unwanted intrusions from the Internet.
The Wide Area Network (WAN) side of the DFL-600 is anything connected
to the WAN port. This is normally an Ethernet connection to a Cable or DSL
modem that, in turn, provides a connection to the Internet. There are three
different methods for your ISP to provide the necessary network address
information to your DFL-600.
It can be useful when configuring your DFL-600 Firewall/VPN Router to
think of the LAN side (all computers or devices connected to the three LAN
ports or the DMZ port) and the WAN side (all computers or devices
connected to the WAN port – the Internet). The WAN side of the router is
connected to some device that ultimately allows a connection to the Internet,
while the LAN side is connected to your computers or other network devices
(such as a switch or hub) that ultimately allows users access to the both the
Internet and any other devices on your LAN (such as a printer or scanner).
The network information (including the IP address) required by the WAN
side of the DFL-600 is either obtained automatically from your ISP (or other
network device on the WAN side) or is entered manually. The DFL-600
allows three methods for this information to be obtained, as follows:
Dynamic − your ISP uses the Dynamic Host Configuration Protocol (DHCP)
to provide the network information. Some ISP’s may require you to enter an
assigned Host Name, as well.
Static IP Address − your ISP assigns you an IP address that never changes.
This is more common in businesses that lease dedicated connections. If your
ISP uses this type of connection, you must manually enter the assigned IP