NETGEAR ProSafe FVS124G - Manual (Page 113)

Virtual Private Networking 7-1
202-10085-01, March 2005
Chapter 7
Virtual Private Networking
This chapter describes how to use the virtual private networking (VPN) features of the FVS124G
VPN Firewall. VPN tunnels provide secure, encrypted communications between your local
network and a remote network or computer.
Tip: When using dual WAN port networks, use the VPN Wizard to configure the basic parameters
and them edit the VPN and IKE Policy screens for the various VPN scenarios.
Dual WAN Port Systems
The dual WAN ports in the FVS124G VPN Firewall can be configured for either rollover mode for
increased system reliability or load balancing mode for optimum bandwidth efficiency. This WAN
mode choice then impacts how the VPN features have to be configured.
Rollover vs. Load Balancing Mode
Refer to “Virtual Private Networks (VPNs)” on page 3-5 for an overview of the IP addressing
requirements for VPN in the two WAN modes.
Table 7-1. IP addressing requirements for VPNs in dual WAN port systems
Configuration and WAN IP address Rollover Mode *
* All tunnels must be re-established after a rollover using the new WAN IP address.
Load Balancing Mode
VPN Road Warrior
(client-to-gateway)
Fixed FQDN required Allowed (FQDN optional)
Dynamic FQDN required FQDN required
VPN Gateway-to-Gateway Fixed FQDN required Allowed (FQDN optional)
Dynamic FQDN required FQDN required
VPN Telecommuter
(client-to-gateway through
a NAT router)
Fixed FQDN required Allowed (FQDN optional)
Dynamic FQDN required FQDN required