Reference Manual for the ProSafe VPN Firewall FVS114
8-2
Advanced Configuration
202-10098-01, April 2005
•
Default DMZ Server
: Specifying a Default DMZ Server allows you to set up a computer or
server that is available to anyone on the Internet for services that you haven't defined. There
are security issues with doing this, so only do this if you're willing to risk open access. If you
do not assign a Default DMZ Server, the router discards any incoming service requests which
are undefined.
To assign a computer or server to be a DMZ server:
a.
Click the Default DMZ Server checkbox
b.
Type the IP address for that server.
c.
Click Apply.
•
Respond To Ping On Internet Port
: If you want the router to respond to a 'Ping' from the
Internet, click this check box. This can be used as a diagnostic tool. Again, like the DMZ
server, this can be a security problem. You shouldn't check this box unless you have a specific
reason to do so.
•
MTU Size
: The normal MTU (Maximum Transmit Unit) value for most Ethernet networks is
1500 Bytes, or 1492 Bytes for PPPoE connections. For some ISPs you may need to reduce the
MTU. But this is rarely required, and should not be done unless you are sure it is necessary for
your ISP connection.
•
Port Speed
: In most cases, your router can automatically determine the connection speed of
the Internet (WAN) port. If you cannot establish an Internet connection and the Internet LED
blinks continuously, you may need to manually select the port speed.
If you know that the Ethernet port on your broadband modem supports 100BaseT, select
100M; otherwise, select 10M.
Default DMZ Server
Incoming traffic from the Internet is normally discarded by the firewall unless the traffic is a
response to one of your local computers or a service for which you have configured an inbound
rule. Instead of discarding this traffic, you can have it forwarded to one computer on your network.
This computer is called the Default DMZ Server.
The Default DMZ Server feature is helpful when using some online games and videoconferencing
applications that are incompatible with NAT. The firewall is programmed to recognize some of
these applications and to work properly with them, but there are other applications that may not
function well. In some cases, one local PC can run the application properly if that PC’s IP address
is entered as the Default DMZ Server.
19216811.live