Configuring The Wan Mode (Required For Dual Wan); Network Address Translation - NETGEAR ProSafe FVS336Gv2 Reference Manual

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
The VPN firewall will attempt to connect to the NETGEAR website. If a successful
connection is made, NETGEAR's website appears.
13. If you intend to use a dual WAN mode, click the WAN2 ISP Settings tab and configure
the WAN2 ISP settings using the same steps as WAN1.
Configuring the WAN Mode (Required for Dual
WAN)
The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN can be
configured on a mutually exclusive basis for either auto-rollover (for increased system
reliability) or load balancing (for maximum bandwidth efficiency), or one port can be disabled.
• Auto-Rollover Mode. The selected WAN interface is made primary and the other is the
rollover link. As long as the primary link is up, all traffic is sent over the primary link. Once
the primary WAN interface goes down, the rollover link is brought up to send the traffic.
Traffic will automatically roll back to the original primary link once the original primary link
is back up and running again. If you want to use a redundant ISP link for backup
purposes, select the WAN port that will act as the primary link for this mode. Ensure that
the backup WAN port has also been configured and that you configure in the WAN Failure
Detection Method section of the WAN Mode screen to support Auto-Rollover.
• Load Balancing Mode. The VPN firewall distributes the outbound traffic equally among
the WAN interfaces that are functional.
Note: Scenarios could arise when load balancing needs to be bypassed
for certain traffic or applications. If certain traffic needs to travel on a
specific WAN interface, configure protocol binding rules for that
WAN interface. The rule should match the desired traffic.
• Single WAN Port Mode. The selected WAN interface is made primary and the other is
disabled.
Whichever WAN mode you choose, you must also choose either NAT or classical routing, as
explained in the following sections.

Network Address Translation

Network Address Translation (NAT) allows all PCs on your LAN to share a single public
Internet IP address. From the Internet, there is only a single device (the VPN firewall) and a
single IP address. PCs on your LAN can use any private IP address range, and these IP
addresses are not visible from the Internet.
• The VPN firewall uses NAT to select the correct PC (on your LAN) to receive any
incoming data.
22 | Chapter 2: Connecting the VPN Firewall to the Internet