beautypg.com

ZyXEL Communications ZyWALL 2 Plus User Manual

Page 173

background image

Chapter 9 DMZ Screens

ZyWALL 2 Plus User’s Guide

173

Multicast

Select IGMP V-1 or IGMP V-2 or None. IGMP (Internet Group Multicast Protocol)

is a network-layer protocol used to establish membership in a Multicast group - it

is not used to carry user data. IGMP version 2 (RFC 2236) is an improvement

over version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would

like to read more detailed information about interoperability between IGMP

version 2 and version 1, please see sections 4 and 5 of RFC 2236.

DHCP Setup

DHCP

DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows

individual clients (workstations) to obtain TCP/IP configuration at startup from a

server. Unless you are instructed by your ISP, leave this field set to Server.

When configured as a server, the ZyWALL provides TCP/IP configuration for the

clients. When set as a server, fill in the IP Pool Starting Address and Pool Size

fields.
Select Relay to have the ZyWALL forward DHCP requests to another DHCP

server. When set to Relay, fill in the DHCP Server Address field.
Select None to stop the ZyWALL from acting as a DHCP server. When you

select None, you must have another DHCP server on your LAN, or else the

computers must be manually configured.

IP Pool Starting

Address

This field specifies the first of the contiguous addresses in the IP address pool.

Pool Size

This field specifies the size, or count of the IP address pool.

DHCP Server

Address

Type the IP address of the DHCP server to which you want the ZyWALL to relay

DHCP requests. Use dotted decimal notation. Alternatively, click the right mouse

button to copy and/or paste the IP address.

DHCP WINS

Server 1, 2

Type the IP address of the WINS (Windows Internet Naming Service) server that

you want to send to the DHCP clients. The WINS server keeps a mapping table

of the computer names on your network and the IP addresses that they are

currently using.

Windows

Networking

(NetBIOS over

TCP/IP)

Allow between

DMZ and LAN

Select this check box to forward NetBIOS packets from the LAN to the DMZ and

from the DMZ to the LAN. If your firewall is enabled with the default policy set to

block DMZ to LAN traffic, you also need to configure a DMZ to LAN firewall rule

that forwards NetBIOS traffic.
Clear this check box to block all NetBIOS packets going from the LAN to the

DMZ and from the DMZ to the LAN.

Allow between

DMZ and WAN

Select this check box to forward NetBIOS packets from the DMZ to the WAN and

from the WAN to the DMZ.
Clear this check box to block all NetBIOS packets going from the DMZ to the

WAN and from the WAN to the DMZ.

Allow between

DMZ and WLAN

Select this check box to forward NetBIOS packets from the WLAN to the DMZ

and from the DMZ to the WLAN. If your firewall is enabled with the default policy

set to block DMZ to WLAN traffic and WLAN to DMZ traffic, you also need to

configure DMZ to WLAN and WLAN to DMZ firewall rules that forward NetBIOS

traffic.
Clear this check box to block all NetBIOS packets going from the WLAN to the

DMZ and from the DMZ to the WLAN.

Apply

Click Apply to save your changes back to the ZyWALL.

Reset

Click Reset to begin configuring this screen afresh.

Table 38 NETWORK > DMZ (continued)

LABEL

DESCRIPTION