SonicWALL's DMZ Port
(also known as an Optional Port) is a separate network
interface on a SonicWALL TZ-170, TZ-180 and TZ-190 firewall
that can be setup as a separate network port for security
purposes. A common use for this port is to use it as a
simple DMZ port to protect servers from general network
users.
Configuring the OPT Interface
You can configure the DMZ
interface in either Transparent Mode or NAT Mode:
•
Transparent Mode enables
the SonicWALL security appliance to bridge the OPT subnet
onto the WAN interface. It requires valid IP addresses for
all computers connected to the OPT interface on your
network, but allows remote access to authenticated users.
You can use the OPT interface in Transparent mode for public
servers and devices with static IP addresses you want
visible outside your SonicWALL security appliance-protected
network.
•
NAT Mode translates the
private IP addresses of devices connected to the OPT
interface to a single, static IP address.
Configuring Transparent Mode
Transparent Mode
requires valid IP
addresses for all computers on your network, and allows
remote access to authenticated users.
To enable Transparent
Mode:
1. Click the Edit
Icon in the line for the OPT interface in the Interfaces
table. The OPT Properties window displays.
2. Select OPT
in Transparent Mode. The OPT and WAN IP addresses are
now identical.
3. To add an
address or range of addresses, click Add below the
address range list. The Add Opt Entry dialog box
displays.
4. Enter a single
IP address or the beginning of a range of IP addresses in
the IP Address From field.
Note:
The address or range
of addresses must be within the available range of IP
addresses for your WAN interface.
5. For a range of
IP addresses, enter the ending address in the IP Address
To field.
6. Click OK
and then click Apply.
Configuring NAT Mode
NAT Enabled
mode gives the OPT
interface a single IP address and a subnet of available IP
addresses. The IP addresses of devices connecting to the OPT
interface are
translated to the single
OPT interface IP address.
1. Click the Edit Icon in
the line for the OPT interface in the Interfaces table. The
OPT Properties window displays.
2. Select OPT in NAT
Mode.
3. Enter an IP address in
the OPT Private Address field.
4. Enter the subnet mask
in the OPT Subnet Mask field.
5. If you want to use the
OPT interface as a DMZ, enter a publicly visible IP address
in the DMZ NAT Many-to-One Public Address field. This
address will be visible to the internet for public servers
in your network.
Click OK.
