Filter
Top Products
Network Planning for Multiple WAN Ports (IPv4 Only)
411
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 263.
Virtual Private Networks
• VPN Road Warrior (Client-to-Gateway)
• VPN Gateway-to-Gateway
• VPN Telecommuter (Client-to-Gateway through a NAT Router)
When implementing virtual private network (VPN) tunnels, you need to use a mechanism for
determining the IP addresses of the tunnel endpoints. The addressing of the firewall’s WAN
ports in a dual WAN port auto-rollover or load balancing configuration depends on the
configuration being implemented.
For a single WAN gateway configuration, use an FQDN when the IP address is dynamic and
either an FQDN or the IP address itself when the IP address is fixed. The situation is different
in dual WAN port gateway configurations.
Table 104. IP addressing requirements for VPNs in a dual WAN port configuration
Configuration and WAN IP Address Single WAN Port
Configurations
(Reference Cases)
Dual WAN Port Configurations
Rollover Mode
a
a. After a rollover, all tunnels need to be reestablished using the new WAN IP address.
Load Balancing Mode
VPN Road Warrior
(Client-to-Gateway)
Fixed Allowed
(FQDN optional)
FQDN required Allowed
(FQDN optional)
Dynamic FQDN required FQDN required FQDN required
VPN Gateway-to-Gateway
Fixed Allowed
(FQDN optional)
FQDN required Allowed
(FQDN optional)
Dynamic FQDN required FQDN required FQDN required
VPN Telecommuter
(Client-to-Gateway through
a NAT Router)
Fixed Allowed
(FQDN optional)
FQDN required Allowed
(FQDN optional)
Dynamic FQDN required FQDN required FQDN required