Network Planning for Multiple WAN Ports (IPv4 Only)
405
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
• Protocol binding.
- F
or auto-rollover mode, protocol binding does not apply.
- F
or load balancing mode, decide which protocols should be bound to a
specific WAN port.
- Y
ou can also add your own service protocols to the list.
2. Set up your
accounts.
a. Obt
ain active Internet services such as DSL broadband accounts, and locate the
Internet service provider (ISP) configuration information.
• I
n this manual, the WAN side of the network is presumed to be provisioned as
shown in the following figure, with two ISPs connected to the VPN firewall through
separate physical facilities.
• Each W
AN port needs to be configured separately, whether you are using a
separate ISP for each WAN port or you are using the same ISP to route the traffic
of both WAN ports.
Figure 258.
• If your ISP charges by the volume of data traffic each month, consider enabling
the VPN firewall’s traffic meter to monitor or limit your traffic.
b. Con
tact a Dynamic DNS service, and register FQDNs for one or both WAN ports.
3. Plan your net
work management approach.
• T
he VPN firewall can be managed remotely, but you need to enable remote
management locally after each factory default reset.
NETGEAR strongly advises you to change the default management p
assword to a
strong password before enabling remote management.
• Y
ou can choose various WAN options if the factory default settings are not suitable for
your installation. These options include enabling a WAN port to respond to a ping,
and setting MTU size, port speed, and upload bandwidth.
4. Prep
are to physically connect the firewall to your cable or DSL modems and a computer.
Instructions for connecting the VPN firewall are in the ProSafe Gigabit Quad WAN SSL VPN
Firewall SRX5308 Installation Guide.
ISP 1
ISP 2
Internet
WAN port 1
WAN port 2
Customer premises
Physical facility 1
Physical facility 2
Route diversity
VPN
Firewall