ZyXEL Communications 2 Plus User Manual

 Chapter 9 DMZ Screens

ZyWALL 2 Plus User’s Guide

The following figure shows a simple network setup with public IP addresses on the WAN and 
DMZ and private IP addresses on the LAN. Lower case letters represent public IP addresses 
(like a.b.c.d for example). The LAN port and connected computers (A through C) use private 
IP addresses that are in one subnet. The DMZ port and connected servers (D through F) use 
public IP addresses that are in another subnet. The public IP addresses of the DMZ and WAN 
ports are in separate subnets.

Figure 114   DMZ Public Address Example

The following figure shows a network setup with both private and public IP addresses on the 
DMZ. Lower case letters represent public IP addresses (like a.b.c.d for example). The LAN 
port and connected computers (A through C) use private IP addresses that are in one subnet. 
The DMZ port and server F use private IP addresses that are in one subnet. The private IP 
addresses of the LAN and DMZ are on separate subnets. The DMZ port and connected servers 
(D and E) use public IP addresses that are in one subnet. The public IP addresses of the DMZ 
and WAN are on separate subnets.
Configure one subnet (either the public or the private) in the Network > DMZ screen (see 

) and configure the other subnet in the Network > DMZ > IP Alias 

screen (see 

) to use this kind of network setup. You also need to 

configure NAT for the private DMZ IP addresses.