Vpn Telecommuter (Client-To-Gateway Through A Nat Router); Vpn Telecommuter: Single Gateway Wan Port (Reference Case) - NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual

Reference Manual for the ProSafe VPN Firewall 200 FVX538
The IP addresses of the gateway WAN ports can be either fixed or dynamic. If an IP address is
dynamic, a fully-qualified domain name must be used. If an IP address is fixed, a fully-qualified
domain name is optional.

VPN Telecommuter (Client-to-Gateway Through a NAT Router)

Note: The telecommuter case presumes the home office has a dynamic IP address and
NAT router.
The following situations exemplify the requirements for a remote PC client connected to the
Internet with a dynamic IP address through a NAT router to establish a VPN tunnel with a gateway
VPN firewall at the company office:
• Single gateway WAN port
• Redundant dual gateway WAN ports for increased reliability (before and after rollover)
• Dual gateway WAN ports used for load balancing

VPN Telecommuter: Single Gateway WAN Port (Reference Case)

In the case of the single WAN port on the gateway VPN firewall
client at the NAT router initiates the VPN tunnel because the IP address of the remote NAT router
is not known in advance. The gateway WAN port must act as the responder.
10.5.6.0/24
Telecommuter Example (Single WAN Port)
Gateway A
LAN IP
10.5.6.1
VPN Router
(at employer's
main office)
Figure 3-16: Single gateway WAN port case for VPN telecommuter
The IP address of the gateway WAN port can be either fixed or dynamic. If the IP address is
dynamic, a fully-qualified domain name must be used. If the IP address is fixed, a fully-qualified
domain name is optional.
3-12
WAN IP
FQDN
bzrouter.dyndns.org
Fully-Qualified Domain Names (FQDN)
- optional for Fixed IP addresses
- required for Dynamic IP addresses
January 2005
(Figure 3-16), the remote PC
NAT Router B
WAN IP
0.0.0.0
NAT Router
(at telecommuter's
home office)
Client B
Remote PC
(running NETGEAR
ProSafe VPN Client)
Network Planning