Vpn Telecommuter: Dual Gateway Wan Ports For Load Balancing - NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual

Reference Manual for the ProSafe VPN Firewall 200 FVX538
The purpose of the fully-qualified domain name is this case is to toggle the domain name of the
gateway router between the IP addresses of the active WAN port (i.e., WAN1 and WAN2) so that
the remote PC client can determine the gateway IP address to establish or re-establish a VPN
tunnel.

VPN Telecommuter: Dual Gateway WAN Ports for Load Balancing

In the case of the dual WAN ports on the gateway VPN firewall
client initiates the VPN tunnel with the appropriate gateway WAN port (i.e., port WAN1 or WAN2
as necessary to balance the loads of the two gateway WAN ports) because the IP address of the
remote NAT router is not known in advance. The chosen gateway WAN port must act as the
responder.
Telecommuter Example
10.5.6.0/24
(Dual WAN Ports, Load Balancing)
Gateway A
LAN IP
10.5.6.1
VPN Router
(at employer's
main office)
Figure 3-19: Dual gateway WAN ports (load balancing case) for VPN telecommuter
The IP addresses of the gateway WAN ports can be either fixed or dynamic. If an IP address is
dynamic, a fully-qualified domain name must be used. If an IP address is fixed, a fully-qualified
domain name is optional.
3-14
WAN1 IP
bzrouter1.dyndns.org
bzrouter2.dyndns.org
WAN2 IP
Fully-Qualified Domain Names (FQDN)
- optional for Fixed IP addresses
- required for Dynamic IP addresses
January 2005
(Figure 3-19), the remote PC
NAT Router B
WAN IP
0.0.0.0
NAT Router
(at telecommuter's
home office)
Client B
Remote PC
(running NETGEAR
ProSafe VPN Client)
Network Planning