71

DI-624M User’s Manual

D-Link Systems, Inc.

Frequently Asked Questions

Step 3:

Check

Enabled

to activate entry.

Step 4:

Enter a name for your virtual server entry.

Step 5:

Next to

Private IP

, enter the IP Address of the computer on your local network

that you want to allow the incoming service to.

Step 6:

Choose

Protocol Type

- either TCP, UDP, or both. If you are not sure, select

both.

Step 7:

Enter the port information next to

Private Port

and

Public Port

. The private and

public ports are usually the same. The public port is the port seen from the WAN side,

and the private port is the port being used by the application on the computer within

your local network.

Step 8:

Enter the

Schedule

information.

Step 9:

Click

Apply

and then click

Continue

.

Note: Make sure DMZ host is disabled. If DMZ is enabled, it will disable all Virtual

Server entries.

Because our routers use NAT (Network Address Translation), you can only open a

specific port to one computer at a time. For example: If you have 2 web servers on your

network, you cannot open port 80 to both computers. You will need to configure 1 of the

web servers to use port 81. Now you can open port 80 to the first computer and then

open port 81 to the other computer.

72

DI-624M User’s Manual

D-Link Systems, Inc.

Frequently Asked Questions

6

What is DMZ?

Demilitarized Zone:

In computer networks, a DMZ (demilitarized zone) is a computer host or small network

inserted as a neutral zone between a company´s private network and the outside public

network. It prevents outside users from getting direct access to a server that has company

data. (The term comes from the geographic buffer zone that was set up between North

Korea and South Korea following the UN police action in the early 1950s.) A DMZ is an

optional and more secure approach to a firewall and effectively acts as a proxy server

as well.

In a typical DMZ configuration for a small company, a separate computer (or host in

network terms) receives requests from users within the private network for access to

Web sites or other companies accessible on the public network. The DMZ host then

initiates sessions for these requests on the public network. However, the DMZ host is

not able to initiate a session back into the private network. It can only forward packets

that have already been requested.

Users of the public network outside the company can access only the DMZ host. The

DMZ may typically also have the company´s Web pages so these could be served to

the outside world. However, the DMZ provides access to no other company data. In the

event that an outside user penetrated the DMZ hosts security, the Web pages might be

corrupted but no other company information would be exposed. D-Link, a leading maker

of routers, is one company that sells products designed for setting up a DMZ

7 How do I configure the DMZ Host?

The DMZ feature allows you to forward all incoming ports to one computer on the local

network. The DMZ, or Demilitarized Zone, will allow the specified computer to be

exposed to the Internet. DMZ is useful when a certain application or game does not

work through the firewall. The computer that is configured for DMZ will be completely

vulnerable on the Internet, so it is suggested that you try opening ports from the Virtual

Server or Firewall settings before using DMZ.

Step 1:

Find the IP address of the computer you want to use as the DMZ host.

To find out how to locate the IP Address of the computer in Windows XP/2000/ME/9x or

Macintosh operating systems please refer to Step 4 of the first question in this section

(Frequently Asked Questions).

73

DI-624M User’s Manual

D-Link Systems, Inc.

Frequently Asked Questions

Step 2:

Log into the web based configuration of the router by typing in the IP Address of

the router (default:192.168.0.1) in your web browser. The username is

admin

(all

lowercase) and the password is

blank

(nothing)

Step 3:

Click the

Advanced

tab and then click on the

DMZ

button. Select

Enable

and

type in the IP Address you found in step 1.

Step 4:

Click

Apply

and then

Continue

to save the changes.

Note: When DMZ is enabled, Virtual Server settings will still be effective. Remember,

you cannot forward the same port to multiple IP Addresses, so the Virtual Server settings

will take priority over DMZ settings.

74

DI-624M User’s Manual

D-Link Systems, Inc.

Frequently Asked Questions

8 Ho

w do I open a rang

e of por

ts on m

y DI-624M using

Firewall rules?

Step 1:

Access the router’s Web configuration by entering the router’s IP Address in

your Web browser. The default IP Address is

192.168.0.1

. Login using your password.

The default username is

“admin”

and the password is blank.

If you are having difficulty accessing Web management, please see the first question in

this section.

Step 2:

From the Web management Home page, click the

Advanced

tab then click the

Firewall

button.

Step 3:

Click on

Enabled

and type in a name for the new rule.

Step 4:

Choose

WAN

as the

Source

and enter a range of IP Addresses out on the

internet that you would like this rule applied to. If you would like this rule to allow all

internet users to be able to access these ports, then put an

Asterisk

in the first box and

leave the second box empty.

Step 5:

Select

LAN

as the

Destination

and enter the IP Address of the computer on

your local network that you want to allow the incoming service to. This will not work with

a range of IP Addresses.

75

DI-624M User’s Manual

D-Link Systems, Inc.

Frequently Asked Questions

Step 6:

Enter the port or range of ports that are required to be open for the incoming

service.

Step 7:

Click

Apply

and then click

Continue

.

Note: Make sure DMZ host is disabled.

Because our routers use NAT (Network Address Translation), you can only open a

specific port to one computer at a time. For example: If you have 2 web servers on your

network, you cannot open port 80 to both computers. You will need to configure 1 of the

web servers to use port 81. Now you can open port 80 to the first computer and then

open port 81 to the other computer.

9

What are vir

tual ser

ver

s?

A Virtual Server is defined as a service port, and all requests to this port will be redirected

to the computer specified by the server IP. For example, if you have an FTP Server (port

21) at 192.168.0.5, a Web server (port 80) at 192.168.0.6, and a VPN server at

192.168.0.7, then you need to specify the following virtual server mapping table:

10 Ho

w do I use

PC An

ywhere

with m

y DI-624M r

outer?

You will need to open 3 ports in the Virtual Server section of your D-Link router.

Step 1:

Open your web browser and enter the IP Address of the router (192.168.0.1).

Step 2:

Click on

Advanced

at the top and then click

Virtual Server

on the left side.

Server Port

Server IP

Enable

21

192.168.0.5

X

80

192.168.0.6

X

1723

192.168.0.7

X