NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Planning Manual page 21

10.5.6.0/24
Gateway-to-Gateway Example (Single WAN Ports)
Gateway A
LAN IP
10.5.6.1
VPN Router
(at office A)
Figure 2-14: Single gateway WAN ports case for gateway-to-gateway VPN tunnels
The IP address of the gateway WAN ports can be either fixed or dynamic. If an IP address is
dynamic, a fully-qualified domain name must be used. If an IP address is fixed, a fully-qualified
domain name is optional.
VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Improved System
Reliability
In the case of the dual WAN ports on the gateway VPN router
WAN ports at one end can initiate the VPN tunnel with the appropriate gateway WAN port at the
other end as necessary to balance the loads of the gateway WAN ports because the IP addresses of
the WAN ports are known in advance. In this example, port WAN_A1 is active and port WAN_A2
is inactive at Gateway A; port WAN_B1 is active and port WAN_B2 is inactive at Gateway B.
Gateway-to-Gateway Example
10.5.6.0/24
(Dual WAN Ports, Before Failover)
Gateway A
LAN IP
10.5.6.1
VPN Router
(at office A)
Figure 2-15: Dual gateway WAN ports, before failover, for gateway-to-gateway VPN tunnels
Network Planning
Network Planning Guide for ProSafe VPN Firewall Router FVX538
WAN IP
FQDN
netgear.dyndns.org
Fully-Qualified Domain Names (FQDN)
- optional for Fixed IP addresses
- required for Dynamic IP addresses
WAN_A1 IP
netgearA.dyndns.org
netgearB.dyndns.org
X X
WAN_A2 port inactive
WAN_A2 IP (N/A) WAN_B2 IP (N/A)
Fully-Qualified Domain Names (FQDN)
- required for Fixed IP addresses
- required for Dynamic IP addresses
October 2004
Gateway B
WAN IP
22.23.24.25
VPN Router
(at office B)
(Figure 2-15), either of the gateway
WAN_B1 IP
Gateway B
X X
WAN_B2 port inactive
VPN Router
(at office B)
172.23.9.0/24
LAN IP
172.23.9.1
172.23.9.0/24
LAN IP
172.23.9.1
2-11