Quick Reference Guide

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
Network Planning for Dual WAN Ports B-15
v1.0, January 2010
After a rollover of a gateway WAN port, the previously inactive gateway WAN port becomes the
active port (port WAN_A2 in this example) and one of the gateway VPN firewalls must re-
establish the VPN tunnel.
The purpose of the fully-qualified domain names is this case is to toggle the domain name of the
failed-over gateway firewall between the IP addresses of the active WAN port (i.e., WAN_A1 and
WAN _A2 in this example) so that the other end of the tunnel has a known gateway IP address to
establish or re-establish a VPN tunnel.
VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Load Balancing
In the case of the dual WAN ports on the gateway VPN firewall, either of the gateway WAN ports
at one end can be programmed in advance to initiate the VPN tunnel with the appropriate gateway
WAN port at the other end as necessary to manage the loads of the gateway WAN ports because
the IP addresses of the WAN ports are known in advance.
Figure B-15
Figure B-16