The Roll-Over Case For Firewalls With Dual Wan Ports; The Load Balancing Case For Firewalls With Dual Wan Ports - NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual

Reference Manual for the ProSafe VPN Firewall 200 FVX538
Note: Once the gateway firewall WAN port rolls over, the VPN tunnel collapses and
must be re-established using the new WAN IP address.

The Roll-over Case for Firewalls With Dual WAN Ports

Rollover (Figure 3-1) for the dual WAN port case is different from the single gateway WAN port
case when specifying the IP address. Only one WAN port is active at a time and when it rolls over,
the IP address of the active WAN port always changes. Hence, the use of a fully-qualified domain
name is always required, even when the IP address of each WAN port is fixed.
Dual WAN Ports (Before Rollover)
Router
WAN1 port active
X
WAN2 port inactive
IP address of active WAN port changes after a rollover:
o use of fully-qualified domain names always required
o features requiring fixed IP address blocks not supported
Figure 3-1: Dual WAN ports before and after rollover
Features such as multiple exposed hosts are not supported when using dual WAN port rollover
because the IP addresses of each WAN port must be in the identical range of fixed addresses.

The Load Balancing Case for Firewalls With Dual WAN Ports

Load balancing (Figure
when specifying the IP address. Each IP address is either fixed or dynamic based on the ISP:
fully-qualified domain names must be used when the IP address is dynamic and are optional when
the IP address is static.
Dual WAN Ports (Load Balancing)
Router
netgear1.dyndns.org
netgear2.dyndns.org
Figure 3-2: Dual WAN ports for load balancing
3-2
WAN1 IP
X
WAN2 IP (N/A)
3-2) for the dual WAN port case is similar to the single WAN port case
WAN1 IP
WAN2 IP
January 2005
Dual WAN Ports (After Rollover)
Router
Use of fully-qualified domain names for IP addresses of WAN ports:
o required for dynamic IP addresses
o optional for fixed IP addresses
WAN1 IP (N/A)
WAN1 port inactive
X X
WAN2 port active
WAN2 IP
Network Planning