Unmasked Internet access for servers in the DMZ

While the inverse masquerading described in the previous section allows at least one service of each type (e.g. one web, mail and FTP server) to be exposed, the method is subject to some restrictions.

Note: To prevent attacks from a 'cracked' server on the local network, some devices feature a dedicated DMZ interface (e.g. the LANCOM 7011 VPN). Other models with a 4-port switch are able to separate their LAN ports (either individually or "en bloc") by hardware on the Ethernet level (LANCOM 821 ADSL / ISDN, LANCOM 1511 DSL, LANCOM 1521 ADSL, LANCOM 1621 ADSL / ISDN, LANCOM 1711 VPN, LANCOM 1811 DSL and LANCOM 1821 ADSL).

www.lancom-systems.com

LANCOM Systems GmbH | A Rohde & Schwarz Company | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E‑Mail info@lancom.de

LANCOM Logo