| 摘要 |
A method for accessing a demilitarized zone (DMZ) host on a local area network (LAN) comprises: configuring a mapping relationship between a public network IP address obtained from a wide area network (WAN) side and a private network IP address of a DMZ host at a LAN side; after receiving an access request sent by a client at the WAN side, modifying a destination IP address in the access request to the private network IP address of the corresponding DMZ host at the LAN side according to the configured mapping relationship, and sending the modified access request to the DMZ host; receiving a reply packet returned by the DMZ host, modifying a source IP address contained in the reply packet to the public network IP address of the client at the WAN side, and sending the modified reply packet to the WAN side. Also disclosed is a corresponding apparatus. According a scheme disclosed by embodiments of the present invention, security of the DMZ host is improved, while usage efficiency of IP addresses at the WAN side is improved, facilitating access from the WAN side. |
