ProSafe VPN Firewall 200 FVX538 Reference Manual
Network Planning for Dual WAN Ports C-7
v1.0, August 2006
The Roll-over Case for Firewalls With Dual WAN Ports
Rollover (Figure C-2) for the dual WAN port case is different from the single gateway WAN port
case when specifying the IP address. Only one WAN port is active at a time and when it rolls over,
the IP address of the active WAN port always changes. Hence, the use of a fully-qualified domain
name is always required, even when the IP address of each WAN port is fixed.
Features such as multiple exposed hosts are not supported when using dual WAN port rollover
because the IP addresses of each WAN port must be in the identical range of fixed addresses.
The Load Balancing Case for Firewalls With Dual WAN Ports
Load balancing (Figure C-3) for the dual WAN port case is similar to the single WAN port case
when specifying the IP address. Each IP address is either fixed or dynamic based on the ISP: fully-
qualified domain names must be used when the IP address is dynamic and are optional when the IP
address is static.
Figure C-2
Figure C-3
Router
WAN1 port active
WAN1 IP
Dual WAN Ports (Before Rollover)
WAN2 IP (N/A)
WAN2 port inactive
Router
WAN1 port inactive
WAN1 IP (N/A)
Dual WAN Ports (After Rollover)
WAN2 IP
WAN2 port active
IPaddressofactiveWANportchangesafterarollover:
o useoffully-qualifieddomainnamesalwaysrequired
o featuresrequiringfixedIPaddressblocksnotsupported
X
X
XX
Router
netgear1.dyndns.org
WAN1 IP
Dual WAN Ports (Load Balancing)
WAN2 IP
netgear2.dyndns.org
Useoffully-qualifieddomainnamesforIPaddressesofWANports:
o requiredfordynamicIPaddresses
o optionalforfixedIPaddresses