Table of ContentsPreviousNextIndexSearch Knowledge Base

Complete PDF manual
PDF of this chapter


Configuring and Enabling the DMZ Port

The De-Militarized Zone (DMZ) is a network which, when compared to the LAN, has fewer firewall restrictions, by default. This zone can be used to host servers (such as a web server, ftp server, or email server, for example) and give public access to them. The eighth LAN port on the router can be dedicated as a hardware DMZ port for safely providing services to the Internet, without compromising security on your LAN.

The DMZ port feature is also helpful when using some online games and videoconferencing applications that are incompatible with NAT. The firewall is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, local PCs can run the application properly if those PCs are used on the DMZ port.

Note: A separate firewall security profile is provided for the DMZ port that is independent of the standard firewall security used for the LAN.

The DMZ Setup screen allows you to set up the DMZ port. It permits you to enable or disable the hardware DMZ port (LAN port 8, see Router Front Panel) and configure an IP address and Mask for the DMZ port.

To enable and configure the DMZ port:

  1. From the main menu, select Network Configuration and then select DMZ Setup from the submenu. The DMZ Setup screen will display.
  2. Check the Do you want to enable DMA Port? radio box.
  3. Enter an IP Address and the Subnet mask for the DMZ port. Make sure that the DMZ port IP address and LAN Port IP address are in different subnets (for example, an address outside the LAN Address pool, such as 192.168.1.101).
  4. Figure 3-5

  5. If desired, Enable the DHCP Server (Dynamic Host Configuration Protocol), which will provide TCP/IP configuration for all computers connected to the router's DMZ network. Then configure the following items:
    1. Starting IP Address - This box specifies the first of the contiguous addresses in the IP address pool.
    2. Ending IP Address - This box specifies the last of the contiguous addresses in the IP address pool.
    3. WINS Server - This box specifies the Windows Internet Naming Service Server IP.
    4. Lease Time - This box specifies the Lease time to be given to the DHCP Clients.
    5. Enable DNS Proxy - If enabled, the VPN firewall will as a DNS for address resolution.
  6. Click Reset to cancel changes made on this screen and revert to the previous settings.
  7. Click Apply to save your settings. The DMZ LED next to LAN port 8 (see Router Front Panel) will light up indicating that the DMZ port has been enabled.
  8. If another device on your DMZ network will be the DHCP server, or if you will manually configure all devices, leave the Disable option (default) checked.

To define the DMZ WAN Rules and LAN DMZ Rules, see Setting DMZ WAN Rules and Setting LAN DMZ Rules, respectively.


NETGEAR, Inc.
http://www.netgear.com
Table of ContentsPreviousNextIndexSearch Knowledge Base