NETGEAR genie Advanced Home
36
N900 Wireless Dual Band Gigabit Router R4500
•
Default DMZ Server
. This feature is sometimes helpful when you are playing online
games or videoconferencing. Be careful when using this feature because it makes the
firewall security less effective. For more information, see the following section,
Default
DMZ Server
.
•
Respond to Ping on Internet Port
. If you want the router to respond to a ping from
the Internet, select this check box. Use this only as a diagnostic tool because it allows
your router to be discovered. Do not select this check box unless you have a specific
reason.
•
Disable IGMP Proxying
. IGMP proxying allows a computer on the local area network
(LAN) to receive the multicast traffic it is interested in from the Internet. You can select
this check box to disable the feature if you do not need it.
•
MTU Size (in bytes)
. The normal MTU (maximum transmit unit) value for most
Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some
ISPs, you might need to reduce the MTU. This is rarely required, and should not be
done unless you are sure that it is necessary for your ISP connection. See
Change
the MTU Size
on page 37.
•
NAT Filtering
. Network Address Translation (NAT) determines how the router
processes inbound traffic. Secured NAT provides a secured firewall to protect the
computers on the LAN from attacks from the Internet, but might prevent some Internet
games, point-to-point applications, or multimedia applications from functioning. Open
NAT provides a much less secured firewall, but allows almost all Internet applications
to function.
Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and
videoconferencing applications that are incompatible with Network Address Translation
(NAT). The router is programmed to recognize some of these applications and to work
correctly with them, but other applications might not function well. In some cases, one local
computer can run the application correctly if that computer’s IP address is entered as the
default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the
default DMZ server loses much of the protection of the firewall and
is exposed to exploits from the Internet. If compromised, the DMZ
server computer can be used to attack other computers on your
network.
The router discards incoming traffic from the Internet unless the traffic is a response to one of
your local computers or a service that you have configured in the Port Forwarding/Port
Triggering screen. Instead of discarding this traffic, you can have the router forward traffic to
one computer on your network. This computer is called the default DMZ server.