NETGEAR UTM5EW-100NAS, STM150EW-100NAS manual VPN Road Warrior Client-to-Gateway, 630

ProSecure Unified Threat Management (UTM) Appliance

For a single WAN gateway configuration, use an FQDN when the IP address is dynamic and either an FQDN or the IP address itself when the IP address is fixed. The situation is different in dual WAN port gateway configurations.

•Dual WAN ports in auto-rollover mode. A dual WAN port auto-rollover gateway configuration is different from a single WAN port gateway configuration when you specify the IP address of the VPN tunnel endpoint. Only one WAN port is active at a time, and when it rolls over, the IP address of the active WAN port always changes. Therefore, the use of an FQDN is always required, even when the IP address of each WAN port is fixed.

Note: When the UTM’s WAN port rolls over, the VPN tunnel collapses and need to be reestablished using the new WAN IP address. However, you can configure automatic IPSec VPN rollover to ensure that an IPSec VPN tunnel is reestablished.

Figure 364.

•Dual WAN ports in load balancing mode. A dual WAN port load balancing gateway configuration is the same as a single WAN port configuration when you specify the IP address of the VPN tunnel endpoint. Each IP address is either fixed or dynamic based on the ISP: You need to use FQDNs when the IP address is dynamic, and FQDNs are optional when the IP address is static.

Figure 365.

VPN Road Warrior (Client-to-Gateway)

The following situations exemplify the requirements for a remote VPN client with no firewall to establish a VPN tunnel with a gateway VPN firewall such as an UTM:

•Single-gateway WAN port

•Redundant dual-gateway WAN ports for increased reliability (before and after rollover)

•Dual-gateway WAN ports for load balancing

Network Planning for Dual WAN Ports (Multiple WAN Port Models Only)

630