Quick Reference Guide

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
B-8 Network Planning for Dual WAN Ports
v1.0, January 2010
In the single WAN case, the WAN’s Internet address is either fixed IP or a fully-qualified domain
name if the IP address is dynamic.
Inbound Traffic to Dual WAN Port Systems
The IP address range of the VPN firewall’s WAN port must be both fixed and public so that the
public can send incoming traffic to the multiple exposed hosts when this feature is supported and
enabled.
Inbound Traffic: Dual WAN Ports for Improved Reliability
In the dual WAN port case with rollover, the WAN’s IP address will always change at rollover. A
fully-qualified domain name must be used that toggles between the IP addresses of the WAN ports
(that is, WAN1 or WAN2).
Inbound Traffic: Dual WAN Ports for Load Balancing
In the dual WAN port case for load balancing, the Internet address of each WAN port is either
fixed if the IP address is fixed or a fully-qualified domain name if the IP address is dynamic.
Figure B-4
Figure B-5
Note: Load balancing is implemented for outgoing traffic and not for incoming traffic.
Consider making one of the WAN port Internet addresses public and keeping the
other one private in order to maintain better control of WAN port traffic.