Chapter 10 Network Address Translation (NAT)

 

Table 21 Network > NAT > General (continued)

 

LABEL

DESCRIPTION

 

Number of IPs

Select Single if you have just one public WAN IP address for your ZyXEL Device.

 

 

Select Multiple if you have multiple public WAN IP addresses for your ZyXEL

 

 

Device.

 

 

 

 

DMZ

Click this to configure the DMZ settings. See Section 10.3 on page 83 for more

 

 

details.

 

 

 

 

Virtual Server

Click this to configure port forwarding rules for your ZyXEL Device. See Section

 

 

10.4 on page 84 for more details.

 

 

 

 

IP Address

This is available only when you select Multiple in the Number of IPs field. Click

 

Mapping

this to configure address mapping rules for your ZyXEL Device. See Section 10.5

 

 

on page 86 for more details.

 

 

 

10.3 The DMZ Screen

The DeMilitarized Zone (DMZ) provides a way for public servers (Web, e-mail, FTP, etc.) to be visible to the outside world (while still being protected from DoS (Denial of Service) attacks such as SYN flooding and Ping of Death). These public servers can also still be accessed from the secure LAN.

By default the firewall allows traffic between the WAN and the DMZ, traffic from the DMZ to the LAN is denied, and traffic from the LAN to the DMZ is allowed. Internet users can have access to host servers on the DMZ but no access to the LAN, unless special filter rules allowing access were configured by the administrator or the user is an authorized remote user.

Use this screen to configure a separate independent network from the LAN in which you can put your servers. Click Advanced Setup > NAT > DMZ to open the following screen.

Figure 35 Advanced Setup > NAT > DMZ

The following table describes the labels in this screen.

Table 22 Advanced Setup > NAT > DMZ

LABEL

DESCRIPTION

DMZ setting for

This field displays the PVC you want to configure.

 

 

DMZ

Use this field to enable or disable DMZ.

 

 

DMZ Host IP

Type the IP address for DMZ in dotted decimal notation.

Address

 

 

Note: Make sure the IP addresses of the LAN, WAN and DMZ are

 

on separate subnets.

 

 

SAVE

Click this to save your settings.

 

 

BACK

Click this to return to the previous screen without saving.

 

 

 

83

P-660R-T1 v3 User’s Guide