Appendix B Network Planning For Multiple Wan Ports; What To Consider Before You Begin - NETGEAR ProSafe SRX5308 Reference Manual

Network Planning for Multiple WAN
B.
Ports
This appendix describes the factors to consider when planning a network using a firewall that
has more than one WAN port.
This appendix contains the following sections:
•

What to Consider Before You Begin

• Overview of the Planning Process
• Inbound Traffic
• Virtual Private Networks
What to Consider Before You Begin
The VPN firewall is a powerful and versatile solution for your networking needs. To make the
configuration process easier and to understand all of the choices that are available to you,
consider the following before you begin:
1. Plan your network.
a. Determine whether you will use one or several WAN ports. For one WAN port, you
might need a fully qualified domain name either for convenience or to remotely
access a dynamic WAN IP address.
b. If you intend to use several WAN ports, determine whether you will use them in
auto-rollover mode for increased system reliability or load balancing mode for
maximum bandwidth efficiency. See the topics in this appendix for more information.
Your decision has the following implications:
• Fully qualified domain name (FQDN)
- For auto-rollover mode, you will need an FQDN to implement features such as
-
• Protocol binding.
-
-
-
exposed hosts and virtual private networks.
For load balancing mode, you might still need an FQDN either for
convenience or to remotely access a dynamic WAN IP address.
For auto-rollover mode, protocol binding does not apply.
For load balancing mode, decide which protocols should be bound to a
specific WAN port.
You can also add your own service protocols to the list.
306
B