Netgear FVS124G FVS124G Reference Manual - Page 43
VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability, Telecommuter Example
UPC - 606449040531
View all Netgear FVS124G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 43 highlights
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability In the case of the dual WAN ports on the gateway VPN firewall (Figure 3-17), the remote PC client initiates the VPN tunnel with the active gateway WAN port (port WAN1 in this example) because the IP address of the remote NAT router is not known in advance. The gateway WAN port must act as the responder. 10.5.6.0/24 Telecommuter Example (Dual WAN Ports, Before Rollover) Gateway A LAN IP 10.5.6.1 VPN Router (at employer's main office) WAN1 IP bzrouter1.dyndns.org WAN IP X X WAN2 port inactive WAN2 IP (N/A) 0.0.0.0 Fully-Qualified Domain Names (FQDN) - required for Fixed IP addresses - required for Dynamic IP addresses NAT Router B NAT Router (at telecommuter's home office) Client B Remote PC (running NETGEAR ProSafe VPN Client) Figure 3-17: Dual gateway WAN ports, before rollover, for VPN telecommuter The IP addresses of the gateway WAN ports can be either fixed or dynamic, but a fully-qualified domain name must always be used because the active WAN port could be either WAN1 or WAN2 (i.e., the IP address of the active WAN port is not known in advance). After a rollover of the gateway WAN port (Figure 3-18), the previously inactive gateway WAN port becomes the active port (port WAN2 in this example) and the remote PC must re-establish the VPN tunnel. The gateway WAN port must act as the responder. 10.5.6.0/24 Telecommuter Example (Dual WAN Ports, After Rollover) Gateway A LAN IP 10.5.6.1 VPN Router (at employer's main office) WAN1 IP (N/A) WAN1 port inactive X X bzrouter2.dyndns.org WAN2 IP WAN IP 0.0.0.0 Fully-Qualified Domain Names (FQDN) - required for Fixed IP addresses - required for Dynamic IP addresses NAT Router B NAT Router (at telecommuter's home office) Remote PC must re-establish VPN tunnel after a rollover Client B Remote PC (running NETGEAR ProSafe VPN Client) Figure 3-18: Dual gateway WAN ports, after rollover, for VPN telecommuter Network Planning 202-10085-01, March 2005 3-13