Configuring OPT Addresses

SonicWALL appliances protect users by preventing Internet users from accessing systems within the LAN (WorkPort). However, this security also prevents users from reaching servers intended for public access, such as Web and mail servers.

To allow these services, many SonicWALL models have a special Demilitarized Zone (DMZ) port (also known as the HomePort) which is used for public servers. The DMZ sits between the LAN (WorkPort) and the Internet. Servers on the DMZ are publicly accessible, but are protected from denial of service attacks such as SYN Flood and Ping of Death.

Although the DMZ port is optional, it is strongly recommended for public servers or when connecting the servers directly to the Internet where they are not protected.

NOTE: Some newer SonicWALL appliances have one or more OPT ports that can be configured as a DMZ port. For more information, refer to Overview of Interfaces .

Each server on the DMZ port or HomePort requires a unique, publishable Internet IP address. The ISP that provides your Internet connection should be able to provide these addresses.

To add OPT IP addresses, complete the following steps:

1	Expand the Network tree and click DMZ Addresses or HomePort Addresses.

2	The DMZ/HomePort Addresses page displays.

 

3	Select from the following:

•	If the devices on the DMZ uses fixed IP addresses, select OPT in Standard Mode. Then, enter the starting IP address in the Addr Range Begin field, the ending IP address in the Addr Range End field, and click Add Range. Repeat this step for each range of IP addresses.

•	To enter a single IP address, enter the IP address in the Addr Range Begin field.

•	If the devices on the DMZ or HomePort will use NAT, select OPT in NAT Mode and complete the following:

•	Enter the private internal IP address assigned to the DMZ or HomePort interface in the OPT Private Address field.

•

Assign a subnet mask in the DMZ or HomePort Subnet Mask field. The LAN (WorkPort) and OPT can have the same subnet mask, but the subnets must be different. For instance, the LAN subnet can be 192.168.0.1 with a subnet mask of 255.255.255.0, and the DMZ subnet can be 172.16.18.1 with a subnet mask of 255.255.255.0.

•	To define a DMZ or HomePort public IP address that is used to access devices on the DMZ interface, enter an IP address in the OPT NAT Many to One Public Address field (Optional).

4	Select from the following:

•	Enter a single IP address in the Addr Range Begin field.

•	Enter a range of IP addresses in the Addr Range Begin field and the ending IP address in the Addr Range End field.

5	Click Add Range.

6	To enter additional IP addresses and IP address ranges, repeat Steps <Blue XRef>3 and <Blue XRef>4

7	When you are finished, click Update. The settings are changed for each selected SonicWALL appliance. To clear all screen settings and start over, click Reset.