NETGEAR FVX538NA manual Configuring and Enabling the DMZ Port

ProSafe VPN Firewall 200 FVX538 Reference Manual

To reserve an IP address, use the Groups and Hosts screen under the Network Configuration menu, LAN Groups submenu (see “Creating the Network Database” on page 3-6).

Note: The reserved address will not be assigned until the next time the PC contacts the firewall's DHCP server. Reboot the PC or access its IP configuration and force a DHCP release and renew.

Configuring and Enabling the DMZ Port

The De-Militarized Zone (DMZ) is a network which, when compared to the LAN, has fewer firewall restrictions, by default. This zone can be used to host servers (such as a web server, ftp server, or email server, for example) and give public access to them. The eighth LAN port on the router can be dedicated as a hardware DMZ port for safely providing services to the Internet, without compromising security on your LAN.

The DMZ port feature is also helpful when using some online games and videoconferencing applications that are incompatible with NAT. The firewall is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, local PCs can run the application properly if those PCs are used on the DMZ port.

Note: A separate firewall security profile is provided for the DMZ port that is independent of the standard firewall security used for the LAN.

The DMZ Setup screen allows you to set up the DMZ port. It permits you to enable or disable the hardware DMZ port (LAN port 8, see “Router Front Panel” on page 1-6) and configure an IP address and Mask for the DMZ port.

To enable and configure the DMZ port:

1.From the main menu, select Network Configuration and then select DMZ Setup from the submenu. The DMZ Setup screen will display.

2.Check the Do you want to enable DMA Port? radio box.

3.Enter an IP Address and the Subnet mask for the DMZ port. Make sure that the DMZ port IP address and LAN Port IP address are in different subnets (for example, an address outside the LAN Address pool, such as 192.168.1.101).

3-10 LAN Configuration

v1.0, August 2006