Setting up a default dmz server, Setting up a default dmz server -8 – NETGEAR wndr3700 User Manual

Page 80

Advertising
background image

RangeMax™ Dual Band Wireless-N Gigabit Router WNDR3700 User Manual

Customizing Your Network Settings

5-8

v1.3, October 2009

Setting Up a Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and
videoconferencing applications that are incompatible with Network Address Translation (NAT).
The router is programmed to recognize some of these applications and to work correctly with
them, but there are other applications that might not function well. In some cases, one local
computer can run the application correctly if that computer’s IP address is entered as the default
DMZ server.

Incoming traffic from the Internet is usually discarded by the router unless the traffic is a response
to one of your local computers or a service that you have configured in the Port Forwarding/Port
Triggering screen. Instead of discarding this traffic, you can have it forwarded to one computer on
your network. This computer is called the default DMZ server.

The WAN Setup screen lets you configure a default DMZ server.

To assign a computer or server to be a default DMZ server:

1. Click the Default DMZ Server check box.

2. Type the IP address.

NAT Filtering

Network Address Translation (NAT) determines how the router processes
inbound traffic. Secured NAT provides a secured firewall to protect the
computers on the LAN from attacks from the Internet, but might prevent some
Internet games, point-to-point applications, or multimedia applications from
functioning. Open NAT provides a much less secured firewall, but allows
almost all Internet applications to function.

Disable SIP ALG

Select this feature if you have a SIP (Session Initiation Protocol) telephone or
other SIP base devices, and you want them to communicate with other
people. If you have been unable to build a successful SIP connection,
selecting this check box allows for such a connection without compromising
other SIP ALG (Application-level gateway) firewall settings, such as Disable
SPI Firewall. If you are not using SIP devices, leave this check box
unchecked.

Warning: DMZ servers pose a security risk. A computer designated as the default DMZ

server loses much of the protection of the firewall and is exposed to exploits
from the Internet. If compromised, the DMZ server computer can be used to
attack other computers on your network.

Table 5-2. WAN Setup Settings

Setting

Description

Advertising
This manual is related to the following products: