There is a socket on the Vigor 3300’s front panel labelled “DMZ”.  This is actually the “WAN1 port”  (see here for details). The current Vigor 3300 firmware can use any of the 3 WAN ports for DMZ.

This is configured in the Advanced > NAT > DMZ Host menu option. Click here for more details.