|
Q.
What's True IP DMZ ?
1. Introduction
The Vigor router has a DMZ function that specifies a ( private
IP ) host as the DMZ host. Both the source port and the destination
port of a packet between the DMZ and the Internet will be
kept intact and only the DMZ's private IP be changed to the
router's WAN IP and vice versa.
For multi-NAT function, where multiple WAN IPs can be assigned to the router, each WAN IP can be matched to a unique DMZ host.
Even though port numbers are not translated, IP addresses only NAT still causes trouble to some applications where IPs are hidden in the payload of a packet. This problem is particularly true for home users that use heavily the game and/or multi-media applications.
In some cities of China, the broadband services require strict Web login/Authentication before any Internet access can be through. It is expected that a True-IP DMZ host can carry out the login/authentication smoothly.
This chapter describes a new scheme that assign directly the router's WAN IP to the DMZ host, hereafter called the True-IP DMZ. To make things simple, we'll limit the True-IP DMZ function to be enabled on a router that has only one WAN IP, fixed or dynamic. This will fit most home users' environments. If the router is configured with multiple WAN IPs, the True-IP DMZ function will automatically switched off.
The following sections describe the web configuration for setting up the True-IP DMZ facility, including specific configuration information and any limitation they have.
Use the following setup links to configure the DMZ Host Setup functions.
2. DMZ Host Setup Configuration
After clicking the DMZ Host Setup, the associated web configuration appears as shown below. There are three options available in the pull-down menu.
None: If the "None" option is selected, both the upper and lower half blocks will be grayed. Now the DMZ Host function is inactive.
Private IP: Specify a (private IP) host as the DMZ host. When the "Private-IP" option is chosen, the lower half block of the MAC address entry will be grayed.
Active True IP: Enable the True-IP DMZ function. When the "True-IP" option is chosen, the upper half block of the Private IP entry will be grayed.
Note: When the router is assigned with multiple WAN IPs (via the "WAN IP Alias" button), the True-IP DMZ function will be automatically switched off.
2.1 Private IP Configuration
Select Private IP from the pull-down menu.
The lower half block of the MAC address entry will be grayed.
Private IP: Enter the private IP address
of the DMZ host.
Choose PC: Click this button and then
a window consisting of a list of private IP addresses of all
hosts in your LAN network will automatically pop up. Select
one private IP address in the list to be the DMZ host.
2.2 True-IP DMZ Configuration
Select Active True IP from the pull-down
menu. The upper half block of the Private IP entry will be
grayed.
MAC Address of the True IP DMZ Host: Enter the MAC address
of the DMZ host.
Note: When the router is assigned with
multiple WAN IPs (via the "WAN IP Alias" button), the True-IP
DMZ function will be automatically switched off.
|
|
|
Page last modified : 13 October 2008 |