ICR-1601
95
2.5.4 DMZ & Pass Through
DMZ (De Militarized Zone) Host is a host that is exposed to the Internet cyberspace but still within the
protection of firewall by router device. So, the function allows a computer to execute 2-way communication
for Internet games, Video conferencing, Internet telephony and other special applications. In some cases
when a specific application is blocked by NAT mechanism, you can indicate that LAN computer as a DMZ
host to solve this problem.
The DMZ function allows you to ask the router pass through all normal packets to the DMZ host behind
the NAT router only when these packets are not expected to receive by applications in the router or by
other client hosts in the Intranet. Certainly, the DMZ host is also protected by the router firewall. Activate
the feature and specify the DMZ host with a host in the Intranet when needed.
DMZ Scenario
When the network administrator wants to set
up some service daemons in a host behind NAT
gateway to allow remote users request for
services from server actively, you just have to
configure this host as DMZ Host. As shown in
the diagram, there is an X server installed as
DMZ host, whose IP address is 10.0.75.100.
Then, remote user can request services from
X server just as it is provided by the gateway
whose global IP address is 118.18.81.33. The
gateway will forward those packets, not
belonging to any configured virtual server or
applications, directly to the DMZ host.
To Next Page
Loading...
