Public Addresses (DMZ)
A DMZ (Demilitarized Zone) is a physical or logical subnet that provides an additional layer of security between an internal network and the external Internet. The main function of a DMZ is to intercept external attacks and prevent them from reaching the internal network.
Configure DMZ
- Centro Business 2.0
- Centro Business 3.0
The Centro Business 2.0 provides two different DMZ options, which can be activated as follows:
- On the router portal under Network → Public Addresses
- Activate the desired DMZ option
Public IP addresses on all LAN ports (DHCP) With this option, the DMZ is activated on all LAN ports (incl. WLAN) of the Centro Business. The local LAN of the router can no longer be used in this mode.
Public IP addresses on LAN Port 1 (DMZ) With this option, the DMZ is activated on LAN Port 1. The local LAN of the Centro Business can continue to be used on Ports 2–4 as well as via WLAN.
The Centro Business 3.0 provides two different DMZ options, which can be activated as follows:
- On the router portal under Network → Public Addresses
- Activate the desired DMZ option
Public IP addresses on all LAN ports (DHCP) With this option, the DMZ is activated on all LAN ports (incl. WLAN) of the Centro Business. The local LAN of the router can no longer be used in this mode.
Public IP addresses on LAN Port 5 (DMZ) With this option, the DMZ is activated on LAN Port 5. The local LAN of the Centro Business can continue to be used on Ports 1–4 as well as via WLAN.
Limitations
- Not available with BNS/EC-S contract
FAQ - DMZ
What are the advantages of a DMZ?
- Improved security: By placing publicly accessible servers in the DMZ, the internal network is protected from direct attacks from the Internet.
- Isolation of services: Services such as web servers, email servers, and DNS servers can be isolated in the DMZ, which simplifies the security and management of these services.
- Flexibility: The DMZ offers a flexible environment where new services and applications can be tested and deployed without endangering the internal network.
Specifics:
- Access from the DMZ to the network (LAN) is blocked.
- Access from the LAN to the DMZ takes place via the public IP addresses.
- Access to the router portal takes place via the LAN network or remote access.
- Access from the DMZ to the router portal is not possible.
info
Is something missing here? Feedback is welcome! pilot@swisscom.com Please describe the area where content is expected or what could be improved.