Vpn Road Warrior (Client-To-Gateway - NETGEAR UTM25-100NAS - Prosecure Utm Appliance 25U No Sub Included Reference Manual

ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual

VPN Road Warrior (Client-to-Gateway)

The following situations exemplify the requirements for a remote PC client with no firewall to
establish a VPN tunnel with a gateway VPN firewall such as an UTM:
• Single gateway WAN port
• Redundant dual gateway WAN ports for increased reliability (before and after rollover)
• Dual gateway WAN ports for load balancing
VPN Road Warrior: Single Gateway WAN Port (Reference Case)
In a single WAN port gateway configuration, the remote PC client initiates the VPN tunnel
because the IP address of the remote PC client is not known in advance. The gateway WAN port
must act as the responder.
Figure B-9
The IP address of the gateway WAN port can be either fixed or dynamic. If the IP address is
dynamic, a FQDN must be used. If the IP address is fixed, a FQDN is optional.
VPN Road Warrior: Dual Gateway WAN Ports for Improved Reliability
In a dual-WAN port auto-rollover gateway configuration, the remote PC client initiates the VPN
tunnel with the active WAN port (port WAN1 in
of the remote PC client is not known in advance. The gateway WAN port must act as a responder.
Network Planning for Dual WAN Ports (UTM25 Only)
Figure B-10 on page
v1.0, September 2009
B-12) because the IP address
B-11