Virtual Private Networking; Dual Wan Port Systems; Rollover Vs. Load Balancing Mode - NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual

This chapter describes how to use the virtual private networking (VPN) features of the FVX538
VPN firewall. VPN tunnels provide secure, encrypted communications between your local
network and a remote network or computer.
Tip: When using dual WAN port networks, use the VPN Wizard to configure the basic parameters
and them edit the VPN and IKE Policy screens for the various VPN scenarios.

Dual WAN Port Systems

The dual WAN ports in the FVX538 VPN firewall can be configured for either rollover mode for
increased system reliability or load balancing mode for optimum bandwidth efficiency. This WAN
mode choice then impacts how the VPN features have to be configured.

Rollover vs. Load Balancing Mode

Refer to "Virtual Private Networks (VPNs)" on page 3-5
requirements for VPN in the two WAN modes.
Table 7-1. IP addressing requirements for VPNs in dual WAN port systems
Configuration and WAN IP address
VPN Road Warrior
(client-to-gateway)
VPN Gateway-to-Gateway Fixed
VPN Telecommuter
(client-to-gateway through
a NAT router)
All tunnels must be re-established after a rollover using the new WAN IP address.
*

Virtual Private Networking

Virtual Private Networking
Rollover Mode
Fixed FQDN required
Dynamic FQDN required
FQDN required
Dynamic FQDN required
Fixed FQDN required
Dynamic FQDN required
January 2005
for an overview of the IP addressing
* Load Balancing Mode
Allowed (FQDN optional)
FQDN required
Allowed (FQDN optional)
FQDN required
Allowed (FQDN optional)
FQDN required
Chapter 7
7-1