Vpn Telecommuter - Client-To-Gateway Through A Nat Router - NETGEAR ProSafe FVS336Gv2 Reference Manual

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Figure 28. Gateway-to-gateway example in a dual WAN port configuration with load balancing
The IP addresses of the gateway WAN ports can be either fixed or dynamic. If an IP address
is dynamic, you must use an FQDN. If an IP address is fixed, an FQDN is optional.
VPN Telecommuter - Client-to-Gateway Through a NAT
Router
Note: The telecommuter case presumes that the home office has a dynamic
IP address and NAT router.
The following situations exemplify the requirements for a remote computer client connected
to the Internet with a dynamic IP address through a NAT router to establish a VPN tunnel with
a gateway VPN firewall at the company office:
• Single-gateway WAN port
• Redundant dual-gateway WAN ports for increased reliability (before and after rollover)
• Dual-gateway WAN ports for load balancing
VPN Telecommuter: Single-Gateway WAN Port - Reference Case
In a single WAN port gateway configuration, the remote computer client at the NAT router
initiates the VPN tunnel because the IP address of the remote NAT router is not known in
advance. The gateway WAN port must act as the responder.
Network Planning for Multiple WAN Ports
638