Draytek 5500 Series manual DMZ Host, True…

3.3.2 DMZ Host

As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined internal user to be totally exposed to the Internet, which usually helps some special applications such as Netmeeting or Internet Games etc.

Note: The inherent security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest you to add additional filter rules or a secondary firewall.

Click DMZ Host to open the following page:

WAN1	This page allows you to configure Private IP or Active True IP as
	DMZ host.
Private IP	If you choose Private IP as DMZ host, you can type a private IP in
	this box or use Choose PC button to choose the one you want.
MAC Address of the If you choose Active True IP as DMZ host, please type the
True….	MAC address of the one you want.
46	VigorPro5500 Series User’s Guide