NETGEAR FVS336Gv1 - ProSafe Dual WAN Gigabit Firewall Reference Manual page 96

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
The diagrams and table below show how the WAN mode selection relates to VPN configuration.
WAN Auto-Rollover: FQDN Required for VPN
Firewall
Rest of
Firewall WAN Port
Functions Functions
Figure 5-1
WAN Load Balancing: FQDN Optional for VPN
Firewall
Rest of Firewall
Firewall WAN Port
Functions Functions
Figure 5-2
Table 5-1 summarizes the WAN addressing requirements (FQDN or IP address) for your VPN
tunnel in either dual WAN mode.
Table 5-1. IP Addressing for VPNs in Dual WAN Port Systems
Configuration and WAN IP address
VPN Road Warrior
(client-to-gateway)
VPN Gateway-to-Gateway Fixed
VPN Telecommuter
(client-to-gateway through
a NAT router)
a. All tunnels must be re-established after a rollover using the new WAN IP address.
5-2
Firewall
Firewall
Rollover
Control
Load
Balancing
Control
Rollover Mode
Fixed FQDN required
Dynamic FQDN required
FQDN required
Dynamic FQDN required
Fixed FQDN required
Dynamic FQDN required
v1.0, January 2010
WAN 1 Port
Internet
WAN 2 Port
Same FQDN required for both WAN ports
WAN 1 Port
Internet
WAN 2 Port
FQDN required for dynamic IP addresses
FQDN optional for static IP addresses
Load Balancing Mode
a
FQDN Allowed (optional)
FQDN required
FQDN Allowed (optional)
FQDN required
FQDN Allowed (optional)
FQDN required
Virtual Private Networking Using IPsec