NETGEAR WNDR3400 user manual Setting Up a Default DMZ Server

	N600 Wireless Dual Band Router WNDR3400 User Manual
Table 5-2. WAN Setup Settings
Setting	Description
NAT Filtering	Network Address Translation (NAT) determines how the router processes
	inbound traffic. Secured NAT provides a secured firewall to protect the
	computers on the LAN from attacks from the Internet, but might prevent some
	Internet games, point-to-point applications, or multimedia applications from
	functioning. Open NAT provides a much less secured firewall, but allows
	almost all Internet applications to function.
Disable SIP ALG	Select this feature if you have a SIP (Session Initiation Protocol) telephone or
	other SIP base devices, and you want them to communicate with other
	people. If you have been unable to build a successful SIP connection,
	selecting this check box allows for such a connection without compromising
	other SIP ALG (Application-level gateway) firewall settings, such as Disable
	SPI Firewall. If you are not using SIP devices, leave this check box
	unchecked.

Setting Up a Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation (NAT). The router is programmed to recognize some of these applications and to work correctly with them, but there are other applications that might not function well. In some cases, one local computer can run the application correctly if that computer’s IP address is entered as the default DMZ server.

Warning: DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the firewall and is exposed to exploits from the Internet. If compromised, the DMZ server computer can be used to attack other computers on your network.

Incoming traffic from the Internet is usually discarded by the router unless the traffic is a response to one of your local computers or a service that you have configured in the Port Forwarding/Port Triggering screen. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the default DMZ server.

The WAN Setup screen lets you configure a default DMZ server. To assign a computer or server to be a default DMZ server:

1.Click the Default DMZ Server check box.

2.Type the IP address.

Customizing Your Network Settings 5-8

v1.0, August 2010