45
9.3 DMZ
9.3.1 Overview
Youcanseta certaincomputerasaDMZHosttofreethecomputerfromanyrestrictioninthe
processofaccessingtheinternet.Therefore,theDMZHostcanobtainbetterinternetexperience.
Forexample,avideomeetingandonlinegamescanbesmootheronaDMZhost.
WhenacomputerissetasaDMZhost,itiscompletelyexposedtotheinternet,whichmeansthat
thecomputerwillnotbeprotectedbythefirewalloftherouter.
ADMZhostcanbeeasilyusedbyhackerstoattackthelocalnetwork.DonotsetDMZhost
randomly.
Securitysoftware,anti‐virussoftwareandsystemfirewallmayaffecttheDMZfunction.Please
disablethesesafetymeasuresduringtheuseofDMZfunction.
Parameter Description
DMZHost ItspecifiestheIPaddressofthedevicethatissetasaDMZhost.
9.3.2 AccesstheLANwithanIPaddressfromtheinternet
Networkrequirement
AssumethatyouhaveaFTPserverundertheLANoftherouter,andyouwanttosharethe
resourcesontheservertoallowfamily memberstoaccessthoseresourcesfromtheinternet.
Solution
YoucanmeettherequirementwiththeDMZhostfunction.
Assumethat:
TheIPaddressoftheFTPserver:192.168.0.101.
TheMACaddressofthehostoftheFTPserver:D4:61:DA:1B:CD:89.
TheserviceportoftheFTPserver:21.