NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Planning Manual page 14

Network Planning Guide for ProSafe VPN Firewall Router FVX538
Single Exposed Host: Single WAN Port (Reference Case)
In the single WAN case
fully-qualified domain name if the IP address is dynamic.
Router
netgear.dyndns.org
exposed host
Figure 2-3: Single WAN port case with exposed host
Single Exposed Host: Dual WAN Ports for Improved System Reliability
In the dual WAN port case with failover
failover. A fully-qualified domain name must be used that toggles between the IP addresses of the
WAN ports (i.e., WAN1 or WAN2).
Dual WAN Ports (Before Failover)
Router
netgear.dyndns.org
X
WAN2 port inactive
exposed host
WAN2 IP (N/A)
IP address of active WAN port changes after a failover (use of fully-qualified domain names always required)
Figure 2-4: Dual WAN port case with exposed host, before and after failover
Single Exposed Host: Dual WAN Ports for Load Balancing
In the dual WAN port case for load balancing
is either fixed if the IP address is fixed or a fully-qualified domain name if the IP address is
dynamic.
Note: Load balancing is implemented for outgoing traffic and not for incoming traffic.
Consider making one of the WAN port Internet addresses public and keeping the other
one private in order to maintain better control of WAN port traffic.
2-4
(Figure 2-3), the WAN's Internet address is either fixed IP or a
WAN IP
IP address of WAN port:
FQDN is required for dynamic IP address and is optional for fixed IP address
(Figure
WAN1 IP
X
October 2004
2-4), the WAN's IP address will always change at
Dual WAN Ports (After Failover)
Router
exposed host
(Figure 2-5), the Internet address of each WAN port
WAN1 IP (N/A)
WAN1 port inactive
X X
netgear.dyndns.org
WAN2 IP
Network Planning