Hirschmann BAT54-Rail - Unmasked Internet Access for Server in the DMZ

Routing and WAN connections
BAT54-Rail/F..
Release 7.54 06/08
11.4 IP masquerading
377
The option Masq. in the Service list informs the router, if the local intranet or
DMZ addresses should be hidden behind the IP address of the router:
D IP Masquerading switched off: No masquerading is performed. This
variation is for internet accesses with several static IP addresses (enter
under DMZ IP address and DMZ netmask) to link only servers to the in-
ternet or e.g. to link two intranet subnets via VPN.
D masking Intranet and DMZ (default): This setting has the effect, that all
local addresses are masked. Additionally to the Intranet (LAN) a second
local net with private addresses can be linked to the Internet.
D masking Intranet only: This setting is especially for the internet access
with several static IP addresses. The difference to the case 'IP Masquer-
ading switched off' is that besides the DMZ the intranet address section
with masked private IP addresses is available in the LAN.
The DMZ and the intranet addresses of the BAT are set as follows:
11.4.5 Unmasked Internet access for server in the
DMZ
While the inverse masquerading described in the proceeding paragraph al-
lows to expose at least one service of each type (e.g. one Web, Mail and FTP
server), this method is bound to some restrictions.
Configuration tool Run
LANconfig TCP/IP
General
WEBconfig Expert Configuration
 Setup  TCP-IP
Terminal/Telnet
/setup/TCP-IP
Intranet
(LAN)
DMZ
public IP:
80.146.74.146
DMZ-IP:
192.168.2.1
LAN-IP:
10.0.0.1