Configuring a DMZ Network

In addition to the LAN network, you can define a second internal network called a DMZ (demilitarized zone) network.

For information on default security policy rules controlling traffic to and from the DMZ, see Default Security Policy.

To configure a DMZ network

1. Connect the DMZ computer to the DMZ port.

   If you have more than one computer in the DMZ network, connect a hub or switch to the DMZ port, and connect the DMZ computers to the hub.

2. Click Network in the main menu, and click the Ports tab.

   The Ports page appears.

3. Next to the DMZ/WAN2 port, click Edit.

   The Port Setup page appears.

4. In the Assign to network drop-down list, select DMZ.
5. Click Apply.

   A warning message appears.

6. Click OK.
7. Click Network in the main menu, and click the My Network tab.

   The My Network page appears.

8. In the DMZ network's row, click Edit.

   The Edit Network Settings page appears.

9. In the Mode drop-down list, select Enabled.

   The fields are enabled.

10. In the IP Address field, type the IP address of the DMZ network's default gateway.

    Note: The DMZ network must not overlap other networks.

11. In the Subnet Mask drop-down list, select the DMZ's internal network range.
12. If desired, enable or disable Hide NAT.

    See Enabling/Disabling Hide NAT.

13. If desired, configure a DHCP server.

    See Configuring a DHCP Server.

14. Click Apply.

    A warning message appears.

15. Click OK.

    A success message appears.