Series 3: How do I add a device to the DMZ of my CradlePoint router?

Beverly McRae

If you are unsure of CradlePoint Series or Model number, please click here.

This article was written based on firmware version 5.0.0.


Typically all computers connected to a router are protected by the router’s firewall.  In order to allow a computer on the Internet to connect through the router to a specific computer it is necessary to either manually forward the required ports, Port Forwarding on a Series 3 CradlePoint, or place the device/computer on the CradlePoint’s Demilitarized Zone (DMZ).

The CradlePoint’s routers DMZ opens all ports that are not already reserved and passes them to a single device/computer attached to the routers LAN.  This essentially places the device/computer outside the CradlePoint’s firewall.  This setting is often used to allow gaming consoles to host online games.

Any port forwarding rules or enabled administrative ports have a higher priority than the DMZ rule.


Before adding a computer to the DMZ it is important to ensure that the device/computer is always assigned the same IP address from the Cradlepoint router.  To ensure that the device/computer is always assigned the same IP address from the Cradlepoint router Add a DHCP reservation on a Series 3 CradlePoint.  Verify that the device/computer receives the correct IP address from the router.

  1. Log into the router’s setup page (login instructions).
  2. If your router has a Basic Mode / Advanced Mode toggle button beneath the CradlePoint logo on the top left-hand side (e.g. MBR95, CTR35), you will need to set it to Advanced Mode.
  3. Then, click on the Network Settings tab then select Firewall.                                                    User-added image
  4. Expand the ADVANCED DMZ (DeMilitarized Zone) section.
  5. Check the Enabled box then enter the device/computer IP address into the IP Address field.User-added image
  6. Click Apply to save settings.

The device/computer is now outside of the routers firewall.  Any connection originating from the Internet that does not have an applicable port forwarding rule will be passed directly to the device/computer in the DMZ.

Share Article: