Chapter 5 Safety Configuration
5.7 Configuring DMZ Host
Short Description
You can configure DMZ to enable the DMZ all-port mapping function. The LAN-side host
provides services through DNAT.
5-9
SJ-20110718134637-002|2011-07-18 (R1.0) ZTE Proprietary and Confidential
ZXA10 F660 Maintenance Management Manual
Context
By default, all the ports are opened.
To configure the DMZ host, perform the following steps:
Steps
1. On the Security tab, select DMS Host, as shown in Figure 5-7.
Figure 5-7 DMZ Host
2. In the right pane, configure the DMZ host parameters.
Table 5-9 lists the DMZ host parameters.
Table 5-9 DMZ Host Parameters
Parameter Description
Enable Select the check box to enable the DMZ host function.
WAN Connection WAN connection used by the LAN-side host to provide services
Enable MAC Mapping Select the check box to enable the MAC mapping function.
If the MAC mapping is enabled, the MAC address of the
computers at the LAN side needs to be specified.
If the MAC mapping is not enabled, the IP address mapping is
used.
DMZ Host IP Address IP address of the LAN-side host
3. Click Submit.
– End of Steps –
Result
The DMZ host is configured.
5-10
SJ-20110718134637-002|2011-07-18 (R1.0) ZTE Proprietary and Confidential
Chapter 5 Safety Configuration
5.8 Configuring Port Forwarding
Short Description
You can configure port forwarding so that a computer from the external network can access
the LAN-side server through the CPE WAN.
Context
To configure port forwarding, perform the following steps:
Steps
1. On the Security tab, select Port Forwarding, as shown in Figure 5-8.
Figure 5-8 Port Forwarding
2. In the right pane, configure the port forwarding parameters.
Table 5-10 lists the port forwarding parameters.
Table 5-10 Port Forwarding Parameters
Parameter Description
Enable Select the check box to enable port forwarding function.
Name Virtual host name, which cannot be null
5-11
SJ-20110718134637-002|2011-07-18 (R1.0) ZTE Proprietary and Confidential
ZXA10 F660 Maintenance Management Manual
Parameter Description
Protocol Protocol of the permitted packet
Default: TCP
WAN Host Start IP Address/WAN IP address segment of the WAN-side host
Host End IP Address
WAN Connection WAN connection
WAN Start Port/WAN End Port Port number range of the WAN-side host
Enable MAC Mapping Select the check box to enable the MAC mapping function.
If the MAC mapping is enabled, the MAC address of the
computers at the LAN side needs to be specified.
If the MAC mapping is not enabled, the IP address
mapping is used.
LAN Host IP Address IP address of the LAN-side host
LAN Host Start Port/LAN Host End Port number range of the LAN-side host
Port
3. Click Add.
– End of Steps –
Result
Port forwarding is configured.
Follow-Up Action
You can also modify or delete the port forwarding configuration, as listed in Table 5-11.
Table 5-11 Port Forwarding Operations
Button Description
To modify the port forwarding configuration
To delete the port forwarding configuration
5-12
SJ-20110718134637-002|2011-07-18 (R1.0) ZTE Proprietary and Confidential
