Enable DMZ:
If an application has trouble working from behind the router, you can
expose one computer to the Internet and run the application on that computer.
Note: Placing a computer in the DMZ may expose that computer to a variety of
security risks. Use of this option is only recommended as a last resort.
DMZ IP Address:
Specify the IP address of the computer on the LAN that you want
to have unrestricted Internet communication. If this computer obtains it’s IP address
automatically using
DHCP
, be sure to make a
DHCP reservation
on the
Basic ->
DHCP
page so that the IP address of the
DMZ machine
does not change.
After you’ve completed all modifications or deletions, you must click the
Save
Settings
button at the top of the page to save your changes. The router must reboot
before new settings will take effect. You will be prompted to
Reboot the Device
or
Continue
. If you need to make additional settings changes, click
Continue
. If you are
finished with your configuration settings, click the
Reboot the Device
button.
3.9.5
Non-UDP/ TCP/ IMCP LAN Sessions
When a LAN application that uses a protocol other than UDP, TCP, or ICMP initiates a
session to the Internet, the router's NAT can track such a session, even though it
does not recognize the protocol. This feature is useful because it enables certain
applications (most importantly a single VPN connection to a remote host) without the
need for an
Application Layer Gateway
.
Note that this feature does not apply to the DMZ host (if one is enabled). The DMZ
host always handles these kinds of sessions
.
Enable:
Enabling this option enables single VPN connections to a remote host. (But,
for multiple VPN connections, the appropriate VPN ALG must be used.) Disabling this
option, however, only disables VPN if the appropriate VPN ALG is also disabled.
3.9.6
Application Level Gateway (ALG) Configuration
Here you can enable or disable ALGs. Some protocols and applications require special
handling of the IP payload to make them work with network address translation
(NAT). Each ALG provides special handling for a specific protocol or application. A
number of ALGs for common applications are enabled by default.
Page 41 of 92