ARRIS Consumer Care

SBG6700-AC (v8.6.x): DMZ Host Setup

Printable View

« Go Back

Information

Question

How do I setup a DMZ Host in the SBG6700-AC Cable Gateway?

Answer

The DMZ Host feature allows the Gateway to forward all externally initiated IP traffic (TCP and UDP protocols only) to a default host on the LAN.

This document contains the following sections:

Enabling the DMZ Host
Disabling the DMZ Host

NOTE: If the DMZ Host feature has been enabled, and now it is desired to disable it, skip down to the Disabling the DMZ Host section.

The following are a couple of scenarios in which DMZ Host is useful:

When the port number or protocol in an in-bound application cannot be anticipated. For example, some network games select arbitrary port numbers when a connection is opened.
When all unsolicited traffic needs to be forwarded to a specific LAN host.
When an application does not work well with port triggering.

NOTE 1: It is recommended to manually configure the TCP/IP settings on the server that will be the DMZ host. If this is done, then it is mandatory to configure the following settings:

IP address
Subnet mask
Default gateway
At least one DNS address

If these settings are configured without the default gateway, remote access to the server will not be available, as it will only be accessible from the local network.

NOTE 2: When manually configuring the TCP / IP settings on a device, make sure that the DHCP pool in the SBG6700-AC doesn't include the IP address of the DMZ host. To verify or to adjust the DHCP pool, please refer to Article # 9840 - SBG6700-AC (v8.6.x): LAN Subnet Setup.

Enabling the DMZ Host

Launch a Firefox or Safari browser. Enter http://192.168.0.1 into the address box, and press the Enter key.

NOTE: A browser message on Chrome, Edge, Firefox, and Opera, may appear when accessing the Web Manager. The message includes 192.168.01 uses an unsupported protocol and ERR_SSL_VERSION_OR_CIPHER_MISMATCH. The Web Manager uses an earlier version of the TLS protocol and does not match the version allowed by the web browser. Safari browsers on Apple PC and mobile devices are not impacted. The workaround to access the Web Manager with a PC is to use the Firefox browser and set the TLS version to 1. For workaround instructions refer to article # 19435 - 192.168.0.1 uses an unsupported protocol.
A security or private risk alert may appear on the web browser advising users to proceed with caution when accessing the Web Manager. There is no risk in proceeding to the Web Manager. For instructions to bypass the alert screen, refer to article # 18181 - Alert Message for Web Manager Access.
On the Login page, enter admin or a customized username in the Username field.
Enter password or a customized password in the Password field.

NOTE: On later versions of the SBG6700-AC, the Wi-Fi Security Key is used as the default admin password printed on the bottom white label. For assistance with Web Manager Access, refer to article # 18754 – SBG6700-AC: Web Manager Access.
Click the Login button. The Home page will appear.
Move the mouse cursor over Advanced on the top menu, and select DMZ Host. The Advanced - DMZ Host page will appear.
On the Advanced - DMZ Host page:

a. DMZ Host - Enter the IP Address of the DMZ Host. For example: if the IP address of the server is 192.168.0.10, then enter 10.

b. Click the Apply button.

The SBG6700-AC Gateway is now configured to enable a specific device on the LAN to be the DMZ host.

Disabling the DMZ Host

Launch a Firefox or Safari browser. Enter http://192.168.0.1 into the address box, and press the Enter key.

NOTE: A browser message on Chrome, Edge, Firefox, and Opera, may appear when accessing the Web Manager. The message includes 192.168.01 uses an unsupported protocol and ERR_SSL_VERSION_OR_CIPHER_MISMATCH. The Web Manager uses an earlier version of the TLS protocol and does not match the version allowed by the web browser. Safari browsers on Apple PC and mobile devices are not impacted. The workaround to access the Web Manager with a PC is to use the Firefox browser and set the TLS version to 1. For workaround instructions refer to article # 19435 - 192.168.0.1 uses an unsupported protocol.
A security or private risk alert may appear on the web browser advising users to proceed with caution when accessing the Web Manager. There is no risk in proceeding to the Web Manager. For instructions to bypass the alert screen, refer to article # 18181 - Alert Message for Web Manager Access.
On the Login page, enter admin or a customized username in the Username field.
Enter password or a customized password in the Password field.

NOTE: On later versions of the SBG6700-AC, the Wi-Fi Security Key is used as the default admin password printed on the bottom white label. For assistance with Web Manager Access, refer to article # 18754 – SBG6700-AC: Web Manager Access.
Click the Login button. The Home page will appear.
Move the mouse cursor over Advanced on the top menu and select DMZ Host. The Advanced - DMZ Host page will appear.
On the Advanced - DMZ Host page:

a. DMZ Host - Enter 0.

b. Click the Apply button.