There is a socket on the Vigor 3300’s front panel labelled “DMZ”. This is actually the “WAN1 port” (see here for details). The current Vigor 3300 firmware can use any of the 3 WAN ports for DMZ.
This is configured in the Advanced > NAT > DMZ Host menu option. Click here for more details.