Inbound Traffic To A Dual Wan Port System - NETGEAR ProSAFE SRX5308 Reference Manual

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 265.

Inbound Traffic to a Dual WAN Port System

The IP address range of the VPN firewall's WAN port needs to be both fixed and public so
that the public can send incoming traffic to the multiple exposed hosts when this feature is
supported and enabled.
Inbound Traffic: Dual WAN Ports for Improved Reliability
In a dual WAN port auto-rollover configuration, the WAN port's IP address always changes
when a rollover occurs. You need to use an FQDN that toggles between the IP addresses of
the WAN ports (that is, WAN1 or WAN2).
Figure 266.
Inbound Traffic: Dual WAN Ports for Load Balancing
In a dual WAN port load balancing configuration, the Internet address of each WAN port is
either fixed if the IP address is fixed or an FQDN if the IP address is dynamic (see the
following figure).
Note: Load balancing is implemented for outgoing traffic and not for
incoming traffic. To maintain better control of WAN port traffic,
consider to make one of the WAN port Internet addresses public and
to keep the other one private.
Network Planning for Multiple WAN Ports
420