Filter
Top Products
ProSafe VPN Firewall 200 FVX538 Reference Manual
C-18 Network Planning for Dual WAN Ports
v1.0, August 2006
VPN Telecommuter: Single Gateway WAN Port (Reference Case)
In the case of the single WAN port on the gateway VPN firewall (Figure C-17), the remote PC
client at the NAT router initiates the VPN tunnel because the IP address of the remote NAT router
is not known in advance. The gateway WAN port must act as the responder.
The IP address of the gateway WAN port can be either fixed or dynamic. If the IP address is
dynamic, a fully-qualified domain name must be used. If the IP address is fixed, a fully-qualified
domain name is optional.
VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability
In the case of the dual WAN ports on the gateway VPN firewall (Figure C-18), the remote PC
client initiates the VPN tunnel with the active gateway WAN port (port WAN1 in this example)
because the IP address of the remote NAT router is not known in advance. The gateway WAN port
must act as the responder.
Figure C-17
Figure C-18
Gateway A
bzrouter.dyndns.org
10.5.6.0/24
10.5.6.1
WAN IP
WAN IP
LAN IP
Client B
FQDN 0.0.0.0
VPNRouter
(atemployer's
mainoffice)
Telecommuter Example (Single WAN Port)
NAT Router B
NATRouter
(attelecommuter's
homeoffice)
RemotePC
(runningNETGEAR
ProSafeVPNClient)
Fully-QualifiedDomainNames(FQDN)
-optionalforFixedIPaddresses
-requiredforDynamicIPaddresses
Gateway A
WAN2 port inactive
10.5.6.0/24
10.5.6.1
WAN1 IP
WAN IP
LAN IP
Client B
0.0.0.0
VPNRouter
(atemployer's
mainoffice)
Telecommuter Example
(Dual WAN Ports, Before Rollover)
NAT Router B
NATRouter
(attelecommuter's
homeoffice)
RemotePC
(runningNETGEAR
ProSafeVPNClient)
Fully-QualifiedDomainNames(FQDN)
-requiredforFixedIPaddresses
-requiredforDynamicIPaddresses
WAN2 IP (N/A)
bzrouter1.dyndns.org
X
X