How do I put a computer in the DMZ?

Question

I simply want to put one computer on the internal LAN network in the DMZ. I don't want to be able to access it from the private LAN. This seems simple, but I've been reading, and trying to create rules to do this, and I can't get it to work. I think I'm probably making it much more complicated in my head than it really is. 
 Port 1 is LAN. Port 2 is WAN. Where do I get from there? Thanks

lferrara · Accepted Answer

Zbrett, 
 by default DMZ already exists, so you need to configure an additional port and assign it to DMZ zone. Create a LAN to DMZ zone in order to access servers in DMZ zone and a DMZ to WAN zone to allow access to internet. 
 Think DMZ zone like an additional zone, so same rules are needed. Make sure then to move computers/Servers to DMZ and assign them the same network address. 
 Connect the DMZ port (from XG) to Computers using another Switch or create VLANs layer 2. You can connect both LAN and DMZ devices on the same swtich but it is not a good deal (security reason).

lferrara · Answer

Zbrett, 
 you can use your actual switch and plug the new DMZ port. Anyway on the market you can find nice managed switch VLAN capable for less than 100$. You only need VLAN layer 2 and XG will route and inspect the traffic.