[FAQ ID: 28]What is a DMZ and how to configure DMZ host

Concerne les produits de type: Wireless, ADSL

What is a DMZ
A DMZ (demilitarized Zone) is a conceptual network design where publicly accessible servers are placed on a separate, isolated network segment. The intention of a DMZ is to ensure that publicly accessible servers cannot contact other internal network segments, in the event that a server is compromised.
 
A Firewall is particularly relevant in DMZ implementation, since it is responsible for ensuring that proper policies are in place to protect local networks from the DMZ, while maintaining accessibility to the DMZ.
Due to the non-trivial nature of DMZ implementation, it is not recommended to attempt a DMZ unless you have a strong familiarity with networking. A DMZ is usually not a requirement, but is generally encouraged by security conscientious network administrators.
 
For some home routers, it refers to a DMZ Host. Strictly speaking, this is not a true DMZ (Demilitarized Zone). A home router DMZ host is a host on the internal network that has all ports exposed, except those ports otherwise forwarded. Which is often used a simple method to forward all ports to another firewall /NAT device.
 
How to configure DMZ Host
Step 1
Please login the management page
Open the web browser and type the IP address of the device in the address bar (default is 192.168.1.1/192.168.0.1/192.168.0.254). Press Enter. The default username and password are both admin, click OK to log into the device.
 
Step 2
Configure the DMZ
 
For Wireless Routers and 3G routers
 
Please click Forwarding, click DMZ on the left.
 
You could check Enable for the current DMZ Status, enter the IP address of the PC that is set as DMZ HOST into DMZ Host IP address box, click save.
You could also check Disable for the current DMZ Status, click save.
Please then go to System tools, Highlight on reboot, click on reboot, click on OK button.
 
For ADSL2+ modem router (Broadcom solution)
 
Please click advanced setup, then click NAT, then go to DMZ host.
 
If you want to activate the DMZ host, please enter the IP address of the PC that is set as DMZ HOST into DMZ Host IP address box, click save/apply.
Please then go to Management, Highlight on reboot, click on reboot, then click on OK button.
 
For ADSL2+ modem router (Trendchip solution)
 
Please click advanced setup, then click NAT, then go to DMZ.
 
You could check Enable for DMZ, enter the IP address of the PC that is set as DMZ HOST into DMZ Host IP address box, click save.

You could also check Disable for DMZ, click save.