NETGEAR ProSafe FVX538 - Manual (Page 14)

Network Planning Guide for ProSafe VPN Firewall Router FVX538
2-4 Network Planning
October 2004
Single Exposed Host: Single WAN Port (Reference Case)
In the single WAN case ( Figure 2-3 ), the WAN’s Internet address is either fixed IP or a
fully-qualified domain name if the IP address is dynamic.
Figure 2-3: Single WAN port case with exposed host
Single Exposed Host: Dual WAN Ports for Improved System Reliability
In the dual WAN port case with failover ( Figure 2-4 ), the WAN’s IP address will always change at
failover. A fully-qualified domain name must be used that toggles between the IP addresses of the
WAN ports (i.e., WAN1 or WAN2).
Figure 2-4: Dual WAN port case with exposed host, before and after failover
Single Exposed Host: Dual WAN Ports for Load Balancing
In the dual WAN port case for load balancing ( Figure 2-5 ), the Internet address of each WAN port
is either fixed if the IP address is fixed or a fully-qualified domain name if the IP address is
dynamic.
Note: Load balancing is implemented for outgoing traffic and not for incoming traffic.
Consider making one of the WAN port Internet addresses public and keeping the other
one private in order to maintain better control of WAN port traffic.
Router
netgear.dyndns.org
WAN IP
IP address of WAN port:
FQDN is required for dynamic IP address and is optional for fixed IP address
exposed host
Router
netgear.dyndns.org
WAN1 IP
Dual WAN Ports (Before Failover)
WAN2 IP (N/A)
WAN2 port inactive
Router
WAN1 port inactive
WAN1 IP (N/A)
Dual WAN Ports (After Failover)
WAN2 IP
netgear.dyndns.org
IP address of active WAN port changes after a failover (use of fully-qualified domain names always required)
exposed host exposed host
X X
X X