EnGenius Technologies ESR9855G - Manual (Page 79)

79
79
Enable anti-spoof checking: Check this box to enable anti-spoof checking. Enabling this option can provide protection from certain
kinds of "spoofing" attacks. However, please be noted that for some modems, the WAN connection may be lost when this option is
enabled. In that case, it may be necessary to change the LAN subnet to something other than 192.168.0.x (192.168.2.x, for example),
to re-establish the WAN connection.
Enable DMZ Host: Check this box to enable DMZ host. DMZ host is a demilitarized zone used to provide Internet services without
sacrificing unauthorized access to its local private network. Typically, the DMZ host contains devices accessible to Internet traffic,
such as web, FTP, email and DNS servers.
DMZ IP Address: Specify the IP address of the DMZ host.
Non-UDP/TCP/ICMP LAN Sessions: Check this box to enable this feature. When a LAN application that uses a protocol other than
UDP, TCP, or ICMP initiates a session to the Internet, the router's NAT can track such a session, even though it does not recognize
the protocol. This feature is useful because it enables certain applications (most importantly a single VPN connection to a remote host)
without the need for an ALG.
Note: This feature does not apply to the DMZ host (if one is enabled). The DMZ host always handles these kinds of sessions.
Enabling this option (the default setting) only enables single VPN connections to a remote host. (But, for multiple VPN connections,
the appropriate VPN ALG must be used.) Disabling this option, however, will disable VPN if the appropriate VPN ALG is also disabled.