NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Reference Manual page 213

ProSafe VPN Firewall 200 FVX538 Reference Manual
VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Improved Reliability
In the case of the dual WAN ports on the gateway VPN firewall, either of the gateway WAN ports
at one end can initiate the VPN tunnel with the appropriate gateway WAN port at the other end as
necessary to balance the loads of the gateway WAN ports because the IP addresses of the WAN
ports are known in advance. In this example, port WAN_A1 is active and port WAN_A2 is inactive
at Gateway A; port WAN_B1 is active and port WAN_B2 is inactive at Gateway B.
Figure B-14
The IP addresses of the gateway WAN ports can be either fixed or dynamic, but a fully-qualified
domain name must always be used because the active WAN ports could be either WAN_A1,
WAN_A2, WAN_B1, or WAN_B2 (i.e., the IP address of the active WAN port is not known in
advance).
After a rollover of a gateway WAN port, the previously inactive gateway WAN port becomes the
active port (port WAN_A2 in this example) and one of the gateway VPN firewalls must re-
establish the VPN tunnel.
Figure B-15
Network Planning for Dual WAN Ports B-15
v1.0, January 2010