| 摘要 |
A method for accessing a demilitarized zone (DMZ) host in a local access network (LAN) includes: configuring a mapping relationship between public IP addresses obtained from a wide area network (WAN) side and private IP addresses of demilitarized zone hosts at a LAN side; after receiving an access request sent by a client at the WAN side, modifying a destination IP address in the access request to the private IP address of a corresponding demilitarized zone host at the LAN side according to the configured mapping relationship, and sending the modified access request to the demilitarized zone host; receiving a reply message returned by the demilitarized zone host, modifying a source IP address contained in the reply message to a public IP address of a client at the WAN side, and sending the modified reply message to the WAN side. The present invention also discloses a corresponding apparatus. The scheme disclosed in the embodiment of the present invention can be used to improve the utilization efficiency of IP addresses at the WAN side and enhance the security of DMZ hosts, and also provide relatively great convenience for the access of the WAN side. |
