NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Planning Manual page 17

For the single gateway WAN port case, the mechanism is to use a fully-qualified domain name
(FQDN) when the IP address is dynamic and to use either an FQDN or the IP address itself when
the IP address is fixed. The situation is different when dual gateway WAN ports are used in a
failover-based system.
• Failover Case for Dual Gateway WAN Ports
Failover (Figure 2-8) for the dual gateway WAN port case is different from the single gateway
WAN port case when specifying the IP address of the VPN tunnel end point. Only one WAN
port is active at a time and when it fails over, the IP address of the active WAN port always
changes. Hence, the use of a fully-qualified domain name is always required, even when the IP
address of each WAN port is fixed.
Note: Once the gateway router WAN port fails over, the VPN tunnel collapses and must
be re-established using the new WAN IP address.
Dual WAN Ports (Before Failover)
Gateway
WAN2 port inactive
VPN Router
IP address of active WAN port changes after a failover (use of fully-qualified domain names always required)
Figure 2-8: Dual gateway WAN ports before and after failover
• Load Balancing Case for Dual Gateway WAN Ports
Load balancing (Figure
gateway WAN port case when specifying the IP address of the VPN tunnel end point. Each IP
address is either fixed or dynamic based on the ISP: fully-qualified domain names must be
used when the IP address is dynamic and are optional when the IP address is static.
Dual WAN Ports (Load Balancing)
Gateway
netgear1.dyndns.org
netgear2.dyndns.org
VPN Router
Figure 2-9: Dual gateway WAN ports for load balancing
Network Planning
Network Planning Guide for ProSafe VPN Firewall Router FVX538
WAN1 IP
netgear.dyndns.org
X X
WAN2 IP (N/A)
2-9) for the dual gateway WAN port case is the same as the single
WAN1 IP
WAN2 IP
October 2004
Dual WAN Ports (After Failover)
Gateway
VPN Router
IP addresses of WAN ports same as single
WAN port case (use of fully-qualified domain
names required for dynamic IP addresses
and optional for fixed IP addresses)
WAN1 IP (N/A)
WAN1 port inactive
X X
netgear.dyndns.org
WAN2 IP
2-7