Dual Wan Port Systems - NETGEAR ProSafe FVS336Gv2 Reference Manual

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2

Dual WAN Port Systems

If two WAN ports are configured for either IPv4 or IPv6, you can enable either auto-rollover
mode for increased system reliability or load balancing mode for optimum bandwidth
efficiency. The selection of the WAN mode determines how you must configure the VPN
features.
If the WAN ports function in auto-rollover mode, you must use fully qualified domain names
(FQDNs) in VPN policies. FQDNs are also required for VPN tunnel failover. If the WAN ports
function in load balancing mode, you cannot configure VPN tunnel failover. In load balancing
mode, FQDNs are optional if the WAN IP addresses are static but mandatory if the WAN IP
addresses are dynamic.
For more information about the IP addressing requirements for VPNs in the dual WAN
modes, see Planning for Virtual Private Networks
For information about how to select and configure a Dynamic DNS service for resolving
FQDNs, see Manage Dynamic DNS Connections
For information about configuring auto-rollover and load balancing, see the following
sections:
• Configure Load Balancing or Auto-Rollover for IPv4 Interfaces
• Configure Auto-Rollover for IPv6 Interfaces
for IPv6 interfaces)
The following diagrams and table show how the WAN mode selection relates to VPN
configuration.
WAN auto-rollover: FQDN required for VPN
Multiple WAN port model
Rest of VPN firewall
VPN firewall
functions
Figure 6. WAN auto-rollover: FQDN required for VPN
WAN load balancing: FQDN required or optional for VPN
Multiple WAN port model
Rest of VPN firewall
VPN firewall
functions
Figure 7. WAN load balancing: FQDN required or optional for VPN
VPN firewall
WAN port rollover
control
functions
Load
WAN port balancing
control
functions
Set Up Virtual Private Networking With IPSec Connections
on page 632.
on page 63.
on page 109 (load balancing is not supported
WAN 1 port
Internet
WAN 2 port
Same FQDN required for both WAN ports
WAN 1 port
Internet
WAN 2 port
FQDN required for dynamic IP addresses
FQDN optional for static IP addresses
333
on page 48