NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 330

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
For a single WAN gateway configuration, use ann FQDN when the IP address is dynamic and
either an FQDN or the IP address itself when the IP address is fixed. The situation is different in
dual WAN port gateway configurations.
• Dual WAN ports in auto-rollover mode. A dual WAN port auto-rollover gateway
configuration is different from a single WAN port gateway configuration when you specify the
IP address of the VPN tunnel endpoint. Only one WAN port is active at a time, and when it
rolls over, the IP address of the active WAN port always changes. Therefore, the use of an
FQDN is always required, even when the IP address of each WAN port is fixed.
Note: When the VPN firewall's WAN port rolls over, the VPN tunnel collapses and
must be reestablished using the new WAN IP address. However, you can
configure automatic IPsec VPN rollover to ensure that an IPsec VPN tunnel is
reestablished.
Figure B-7
• Dual WAN ports in load balancing mode. A dual WAN port load balancing gateway
configuration is the same as a single WAN port configuration when you specify the IP address
of the VPN tunnel endpoint. Each IP address is either fixed or dynamic based on the ISP: You
must use FQDNs when the IP address is dynamic, and FQDNs are optional when the IP
address is static.
Figure B-8
B-10 Network Planning for Multiple WAN Ports
v1.0, April 2010