Netgear FVX538 FVX538 Reference Manual - Page 44

Reference Manual for the ProSafe VPN Firewall 200 FVX538 The purpose of the fully-qualified domain name is this case is to toggle the domain name of the gateway router between the IP addresses of the active WAN port (i.e., WAN1 and WAN2) so that the remote PC client can determine the gateway IP address to establish or re-establish a VPN tunnel. VPN Telecommuter: Dual Gateway WAN Ports for Load Balancing In the case of the dual WAN ports on the gateway VPN firewall (Figure 3-19), the remote PC client initiates the VPN tunnel with the appropriate gateway WAN port (i.e., port WAN1 or WAN2 as necessary to balance the loads of the two gateway WAN ports) because the IP address of the remote NAT router is not known in advance. The chosen gateway WAN port must act as the responder. 10.5.6.0/24 Telecommuter Example (Dual WAN Ports, Load Balancing) Gateway A LAN IP 10.5.6.1 VPN Router (at employer's main office) WAN1 IP bzrouter1.dyndns.org WAN IP NAT Router B bzrouter2.dyndns.org WAN2 IP 0.0.0.0 Fully-Qualified Domain Names (FQDN) - optional for Fixed IP addresses - required for Dynamic IP addresses NAT Router (at telecommuter's home office) Client B Remote PC (running NETGEAR ProSafe VPN Client) Figure 3-19: Dual gateway WAN ports (load balancing case) for VPN telecommuter The IP addresses of the gateway WAN ports can be either fixed or dynamic. If an IP address is dynamic, a fully-qualified domain name must be used. If an IP address is fixed, a fully-qualified domain name is optional. 3-14 January 2005 Network Planning