Справочник Пользователя для 3e Technologies International Inc. 531AP

The Demilitarized Zone (DMZ) host allows one computer on the 

Private Network to be totally exposed to the wired net work or Internet 

for un re strict ed two-way communication. This con fi g u ra tion is typ i cal ly 

used when a computer is operating a proprietary client software or 2-way 

com mu ni ca tion such as video-tele con fer enc ing, where multiple TCP port 

as sign ments are required for com mu ni ca tion. To assign a PC the DMZ 

host status, fi ll in the Private IP address which is identifi ed as the ex posed 

host and click the Apply button. However, any Internet user who knows 

the WAN IP address of the gateway can connect to the DMZ host since 

the fi rewall feature is disabled for this device, causing a potential security 

risk to data residing on that host. 

Again, it is recommended that IP addresses of DMZ host computers 

on the Private Network be manually (statically) assigned to coincide with 

a static DMZ host mapping to that specifi c IP address. DMZ hosts should 

not rely on the dynamic IP assignment of DHCP server function which 

could create incorrectly mapped IP address assignments to non-DMZ 

hosts.