NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Planning Manual page 24

Network Planning Guide for ProSafe VPN Firewall Router FVX538
10.5.6.0/24
Telecommuter Example (Single WAN Port)
Gateway A
LAN IP
10.5.6.1
VPN Router
(at employer's
main office)
Figure 2-18: Single gateway WAN port case for VPN telecommuter
The IP address of the gateway WAN port can be either fixed or dynamic. If the IP address is
dynamic, a fully-qualified domain name must be used. If the IP address is fixed, a fully-qualified
domain name is optional.
VPN Telecommuter: Dual Gateway WAN Ports for Improved System Reliability
In the case of the dual WAN ports on the gateway VPN router
initiates the VPN tunnel with the active gateway WAN port (port WAN1 in this example) because
the IP address of the remote NAT router is not known in advance. The gateway WAN port must act
as the responder.
Telecommuter Example
10.5.6.0/24
(Dual WAN Ports, Before Failover)
Gateway A
LAN IP
10.5.6.1
VPN Router
(at employer's
main office)
Figure 2-19: Dual gateway WAN ports, before failover, for VPN telecommuter
The IP addresses of the gateway WAN ports can be either fixed or dynamic, but a fully-qualified
domain name must always be used because the active WAN port could be either WAN1 or WAN2
(i.e., the IP address of the active WAN port is not known in advance).
2-14
WAN IP
FQDN
bzrouter.dyndns.org
Fully-Qualified Domain Names (FQDN)
- optional for Fixed IP addresses
- required for Dynamic IP addresses
WAN1 IP
bzrouter1.dyndns.org
X X
WAN2 port inactive
WAN2 IP (N/A)
Fully-Qualified Domain Names (FQDN)
- required for Fixed IP addresses
- required for Dynamic IP addresses
October 2004
NAT Router B
WAN IP
0.0.0.0
NAT Router
(at telecommuter's
home office)
(Figure 2-19), the remote PC client
NAT Router B
WAN IP
0.0.0.0
NAT Router
(at telecommuter's
home office)
Client B
Remote PC
(running NETGEAR
ProSafe VPN Client)
Client B
Remote PC
(running NETGEAR
ProSafe VPN Client)
Network Planning