DMZ Host - DMZ Port

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by giffordj, Mar 28, 2007.

  1. giffordj

    giffordj LI Guru Member

    Can someone explain this difference to me.

    DMZ Host to me sounds like a way to expose one host as a DMZ.

    DMZ Port seems to me would be a way to extend a DMZ beyond one host.
  2. vpnuser

    vpnuser LI Guru Member

    Yes, you are pretty much correct. With DMZ port, you can use a switch to connect to multiple PCs as long as you have a public IP address for each PC in the DMZ.
  3. happyhacking

    happyhacking LI Guru Member

    Litle more info, hope this helps

    In fact, the only diference between the DMZ port and any other in LAN space are these 2 default firewall rules:

    Firewall rules copyed from rv016
    Action Source Interface Source Destination
    Deny All Traffic Any DMZ Any ~
    Allow All Traffic Any DMZ Any Any
    The interpretation is quite simple since DMZ cannot open any connection
    with the LAN, but LAN can open connections to DMZ and
    DMZ isnt protected for internal firewall

    Note that this rules can be override and the port will become another
    LAN port instead DMZ
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice