DMZ Host - A fully exposed LAN Host in fact...and some comments

[Kurt Schumacher]

Configuring a DMZ host is enforcing an IP address in the LAN range - this is ways of from clear reading the online help, just says "The DMZ (Demilitarized Zone) Host feature allows one local user to be exposed to the Internet to use a special-purpose service such as Internet gaming and video-conferencing".  Should say instead something like this: "The DMZ (Demilitarized Zone) Host feature allows one host on the LAN to be exposed to the Internet to use a special-purpose service such as Internet gaming and video-conferencing. Please restrict the WAN to this LAN IP address access by adding firewall rules."

The AG draft on the other hand says when searchin for DMZ host this (p.17, Connecting the Equipment):

STEP 4

To connect a computer or server that will be a DMZ host:

•

RV042 and RV082: Connect an Ethernet cable from the DMZ/Internet port

to the DMZ host.

•

RV016: Connect an Ethernet cable from the DMZ port to the DMZ host.

---

Later on, the AG (p.25 WAN Status) says:

DMZ Host:

It shows the DMZ private IP address of the DMZ host. The

default is Disabled.

This is the "real DMZ Host on the LAN again. Once an IP was added here, it is not possible to "remove" the entry, submitting an empty string does add the .0 LAN IP instead. -> How to reliably remove this entry, or set it to Disabled - exceptdoing a factory reset?!? What about

DMZ Host: It shows the DMZ private IP address of the DMZ host in the LAN. The

default is Disabled.

The confusion becomes complete when continuing reading the AG on Enabling and Configuring a DMZ (p. 32):

NOTE

To enable a DMZ, you must have a unique, public IP address for your DMZ host.

Contact your ISP for more information.

STEP 1

To enable a DMZ and enter the public IP address:

a. Click

Setup > Network in the navigation tree.

b. Scroll down to the

DMZ Setting section. The table displays the DMZ port name

in the Interface column and its IP address in the IP Address column.

c. In the

DMZ Setting section, check the Enable DMZ box.

d. Click the edit icon in the

Config. column. The Edit DMZ Connection page

appears.

It's not that I don't understand the requirements - it's just about the same term is used in three different contexts, and there is no clarification.

And once more even better, there is no such a "Enable DMZ" box, neither in Setup -> Network

DMZ Setting

Interface IP Address Configuration

DMZ 192.168.2.1

nor in the DMZ Setting configuration:

Network

Edit Network Edit DMZ Connection Interface : DMZ Specify DMZ IP Address : Subnet Mask : IP Range for DMZ port : to DMZ Connection Interface : DMZ Specify DMZ IP Address : Subnet Mask : IP Range for DMZ port : to

A big mess - sorry.

[osaleem]

Hi Kurt,

Looked through the router setups on the latest version and saw that the enable check box for DMZ is there.  Also will look into the Help documentation.

Thank you,

Azhi

[Kurt Schumacher]

Just fofr clarification:

In common sense, a DMZ host is a host connected in a DMZ - so a exposed host on the LAN can not be named DMZ host all around.

Of course, I am perfectly aware from the historical background: This was the wording used by some vendors of the simple consumer routers (some might name it pure routers, where the RV0xx is derived from, hard to get rid of this impression in my head as all these details are floating around in the actaul implementation) at the time there were no DMZ ports nor fully DMZ zones and networks - the problem is, that it has not been adopted to theh "new" environment yet.

-Kurt.