Hi,

I may be missing something here, but when I enable the 'DMZ Port' under 'LAN / General Setup', which physical port does the DMZ appear on?

Thanks in advance,

Triode.

Is this not done under NAT >> DMZ Host ?

https://www.draytek.com/en/faq/faq-connectivity/connectivity.nat/how-to-set-dmz-host/

It looks like that method is for setting the DMZ host in a specific WAN.

At the bottom of my 2862 LAN/General Setup page it says that DMZ is default bound to P4. Does yours not say something similar?

Piste Basher wrote: At the bottom of my 2862 LAN/General Setup page it says that DMZ is default bound to P4. Does yours not say something similar?

Looking at the emulator, I see what you mean, but it does not mention anything about the DMZ port at the bottom of the same setup page for the 2925.

The DMZ subnet is mapped to port 1 on the 2925.

However (and it took me a while to figure this out), the router doesn't actually forward all incoming traffic to the DMZ subnet when you enable it, you still have to forward all required ports manually as per this KB:

https://www.draytek.com/en/faq/faq-connectivity/connectivity.lan/whats-the-difference-between-dmz-host-and-dmz-subnet/

To allow WAN hosts to access servers on the DMZ subnet, the network administrator must set up Port Redirection or Open Ports rules to the those servers.

I assumed this would happen automatically by virtue of it being called 'DMZ subnet', but apparently that's not the case... Since I only have one machine in the DMZ subnet, I simply used the DMZ host option on top of this to open it up to the world.