Quick Reference Guide

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
5-2 Virtual Private Networking Using IPsec
v1.0, January 2010
The diagrams and table below show how the WAN mode selection relates to VPN configuration.
Table 5-1 summarizes the WAN addressing requirements (FQDN or IP address) for your VPN
tunnel in either dual WAN mode.
Figure 5-1
Figure 5-2
Table 5-1. IP Addressing for VPNs in Dual WAN Port Systems
Configuration and WAN IP address Rollover Mode
a
a. All tunnels must be re-established after a rollover using the new WAN IP address.
Load Balancing Mode
VPN Road Warrior
(client-to-gateway)
Fixed FQDN required FQDN Allowed (optional)
Dynamic FQDN required FQDN required
VPN Gateway-to-Gateway Fixed FQDN required FQDN Allowed (optional)
Dynamic FQDN required FQDN required
VPN Telecommuter
(client-to-gateway through
a NAT router)
Fixed FQDN required FQDN Allowed (optional)
Dynamic FQDN required FQDN required
Rest of
Firewall
Functions
Firewall
WAN Port
Functions
Firewall
Rollover
Control
Firewall
WAN 1 Port
WAN 2 Port
Internet
Same FQDN required for both WAN ports
WAN Auto-Rollover: FQDN Required for VPN
Rest of
Firewall
Functions
Firewall
WAN Port
Functions
Load
Balancing
Control
Firewall
WAN 1 Port
WAN 2 Port
Internet
FQDN required for dynamic IP addresses
WAN Load Balancing: FQDN Optional for VPN
FQDN optional for static IP addresses