Zyxel ZyWALL 2WG Guia De Inicio Rapido página 10

5 DMZ
The DeMilitarized Zone (DMZ) allows public servers (web, e-mail, FTP, etc.) to be visible to the outside world
and still have firewall protection from DoS (Denial of Service) attacks.
You can assign TCP/IP configuration via DHCP to computers connected to the DMZ ports. Otherwise,
configure the computers with static IP addresses (in the same subnet as the DMZ port's IP address) and DNS
server addresses. Use the ZyWALL's DMZ IP address as the default gateway.
Do the following to configure the DMZ if the ZyWALL is in routing mode.
Note: You do not need to configure DMZ with bridge mode, skip to section 7.
1 Click NETWORK > DMZ in the navigation panel.
2 Specify an IP address and subnet mask for the
DMZ interface.
If you use private IP addresses on the DMZ, use
NAT to make the servers publicly accessible (see
section 6).
A public IP address must be on a separate subnet
from the WAN port's public IP address. If you do
not configure NAT for the public IP addresses on
the DMZ, the ZyWALL routes traffic to the public
IP addresses on the DMZ without performing NAT.
This may be useful for hosting servers for NAT
unfriendly applications.
3 Click Apply.
4 By default, LAN/DMZ ports 1 to 4 are all LAN
ports. To configure a port as a DMZ port, click the
Port Roles tab, select its radio button next to DMZ
and click Apply.
6 NAT
NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network
to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL
translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ).
The following example allows access from the WAN1 to an HTTP (web) server on the DMZ. The server has a
private IP address of 10.0.0.20.
ENGLISH
9