5.10 Firewall

1. DMZ Host Configuration

You can set up your personal computer or network-ready device to be a public or local DMZ hosts. In general, Internet applications use only one unique port and can pass through a NAT Router by enabling Virtual Server. However, some special applications need to implement multiple ports, port ranges, dynamically assigned ports, and special protocols. ZSR0104C SERIES can support the transparent pass-through of these special applications, such as FTP, NetMeeting/H.323, MSN Messenger, etc. Enable Local DMZ Host when you have problems running these applications. Besides, you can activate Public DMZ Host to set up a server and retrieve the traffic initiated from the Internet.

A.Local DMZ Host

To run the special applications, you can assign a device with a LAN IP address as Local DMZ Host. Then any service request of application initiated from the Internet will be forwarded to the dedicated LAN host with the LAN IP address.

For example, when you want to run NetMeeting to communicate with your friend on the Internet, he /she cannot find your LAN host due to ZSR0104C SERIES NAT function. However, after you assign the LAN IP address 192.168.1.2 as the Local DMZ Host, your friend can call ZSR0104C SERIES Public IP address 140.112.8.8 and the service request of NetMeeting will be forwarded to your LAN host with the LAN IP address 192.168.1.2, as

Page 29

Page 36
Image 36
Zonet Technology ZSR0104C Series user manual Firewall, DMZ Host Configuration, Local DMZ Host