Filter
Top Products
Network Planning for Multiple WAN Ports (IPv4 Only)
418
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
The IP address of the gateway WAN port can be either fixed or dynamic. If the IP address is
dynamic, you need to use an FQDN. If the IP address is fixed, an FQDN is optional.
VPN Telecommuter: Dual-Gateway WAN Ports for Improved Reliability
In a gateway configuration with dual WAN ports that function in auto-rollover mode, the
remote computer client initiates the VPN tunnel with the active gateway WAN port (port
WAN1 in the following figure) because the IP address of the remote NAT router is not known
in advance. The gateway WAN port needs to act as the responder.
Figure 275.
The IP addresses of the gateway WAN ports can be either fixed or dynamic, but you always
need to use an FQDN because the active WAN port could be either WAN1 or WAN2 (that is,
the IP address of the active WAN port is not known in advance).
After a rollover of the WAN port has occurred, the previously inactive gateway WAN port
becomes the active port (port WAN2 in the following figure), and the remote computer needs
to reestablish the VPN tunnel. The gateway WAN port needs to act as the responder.
Figure 276.
The purpose of the FQDN is to toggle the domain name of the gateway between the IP
addresses of the active WAN port (that is, WAN1 and WAN2) so that the remote computer
client can determine the gateway IP address to establish or reestablish a VPN tunnel.