Virtual Private Networks (Vpns - NETGEAR UTM25-100NAS - Prosecure Utm Appliance 25U No Sub Included Reference Manual

ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
Figure B-6

Virtual Private Networks (VPNs)

When implementing virtual private network (VPN) tunnels, a mechanism must be used for
determining the IP addresses of the tunnel end points. The addressing of the firewall's dual WAN
port depends on the configuration being implemented:
Table B-2. IP addressing requirements for VPNs in dual WAN port systems
Configuration and WAN IP address
"VPN Road Warrior (Client-
to-Gateway)"
"VPN Gateway-to-Gateway" Fixed
"VPN Telecommuter (Client-
to-Gateway Through a NAT
Router)"
a. All tunnels must be re-established after a rollover using the new WAN IP address.
Network Planning for Dual WAN Ports (UTM25 Only)
Single WAN Port
Configurations
(Reference Cases)
Fixed Allowed
(FQDN optional)
Dynamic FQDN required
Allowed
(FQDN optional)
Dynamic FQDN required
Fixed Allowed
(FQDN optional)
Dynamic FQDN required
v1.0, September 2009
Dual WAN Port Configurations
Rollover Mode a Load Balancing Mode
FQDN required Allowed
(FQDN optional)
FQDN required FQDN required
FQDN required Allowed
(FQDN optional)
FQDN required FQDN required
FQDN required Allowed
(FQDN optional)
FQDN required FQDN required
B-9