Considerations For Dual Wan Port Systems - NETGEAR ProSAFE SRX5308 Reference Manual

Considerations for Dual WAN Port Systems

If two WAN ports are configured for either IPv4 or IPv6, you can enable either auto-rollover
mode for increased system reliability or load balancing mode for optimum bandwidth
efficiency. The selection of the WAN mode determines how you need to configure the VPN
features.
The use of fully qualified domain names (FQDNs) in VPN policies is mandatory when the
WAN ports function in auto-rollover mode or load balancing mode, and is also required for
VPN tunnel failover. When the WAN ports function in load balancing mode, you cannot
configure VPN tunnel failover. An FQDN is optional when the WAN ports function in load
balancing mode if the IP addresses are static, but mandatory if the WAN IP addresses are
dynamic.
See Virtual Private Networks
requirements for VPNs in the dual WAN modes.
For information about how to select and configure a Dynamic DNS service for resolving
FQDNs, see Configure Dynamic DNS
configuration, see
The following diagrams and table show how the WAN mode selection relates to VPN
configuration.
WAN auto-rollover: FQDN required for VPN
Multiple WAN Port Model
Rest of
VPN firewall
functions
Figure 123.
WAN load balancing: FQDN optional for VPN
Multiple WAN Port Model
Rest of
VPN firewall
functions
Figure 124.
Virtual Private Networking Using IPSec and L2TP Connections
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
on page 421 for more information about the IP addressing
on page 49. For information about WAN mode
Configure the IPv4 WAN Mode
VPN firewall
VPN firewall
WAN port rollover
control
functions
VPN firewall
Load
WAN port balancing
control
functions
on page 29.
WAN 1 port
WAN 2 port
Same FQDN required for both WAN ports
WAN 1 port
WAN 2 port
FQDN required for dynamic IP addresses
FQDN optional for static IP addresses
202
Internet
Internet