ProSafe VPN Firewall 200 FVX538 Reference Manual

Configuring the WAN Mode (Required for Dual WAN)

The dual WAN ports of the ProSafe VPN Firewall 200 can be configured on a mutually exclusive basis for either auto-rollover (for increased system reliability) or load balancing (for maximum bandwidth efficiency).

•Auto-Rollover Mode. In this mode, the selected WAN interface is made primary and the other is the rollover link. As long as the primary link is up, all traffic is sent over the primary link. Once the primary WAN interface goes down, the rollover link is brought up to send the traffic.Traffic will automatically roll back to the original primary link once the original primary link is back up and running again.

If you want to use a redundant ISP link for backup purposes, select the WAN port that will act as the primary link for this mode. Ensure that the backup WAN port has also been configured and that you configure the WAN Failure Detection Method to support Auto-Rollover.

•Load Balancing Mode. In this mode the router distributes the outbound traffic equally among the WAN interfaces that are functional.

Note: Scenarios could arise when load balancing needs to be bypassed for certain traffic or applications. Here the traffic needs to go on a specific WAN interface. This is done with the protocol binding rules of that WAN interface. The rule should match the desired traffic.

For both alternatives, you must also set up Network Address Translation (NAT):

•NAT. NAT is the technology which allows all PCs on your LAN to share a single Internet IP address. From the Internet, there is only a single device (the Router) and a single IP address. PCs on your LAN can use any private IP address range, and these IP addresses are not visible from the Internet.

–The Router uses NAT to select the correct PC (on your LAN) to receive any incoming data.

–If you only have a single Internet IP address, you MUST use NAT.

NAT is the default setting.

•Classical Routing. In this mode, the Router performs Routing, but without NAT. To gain Internet access, each PC on your LAN must have a valid Internet IP address.

2-10

Connecting the FVX538 to the Internet

v1.0, August 2006

Page 37 Page 39
Page 38
Image 38
NETGEAR VPN Firewall 200 FVX538 manual Configuring the WAN Mode Required for Dual WAN
Page 37 Page 39

VPN Firewall 200 FVX538 specifications

The NETGEAR VPN Firewall 200 FVX538 is a robust solution designed to meet the networking needs of small to medium-sized businesses. Engineered for resource management and security, this firewall combines the essential features of a VPN (Virtual Private Network) and firewall functionality into a single device, enabling secure, high-speed connectivity for various devices in any organizational environment.

One of the standout features of the FVX538 is its integrated VPN support, capable of handling up to 5 simultaneous VPN connections. This is particularly beneficial for remote workers and branch offices that require secure access to the company network. The device supports IPsec and L2TP VPN protocols, which helps ensure the integrity and confidentiality of data transmitted over the internet.

Another key characteristic of the FVX538 is its advanced firewall capabilities. This unit employs Stateful Packet Inspection (SPI) that scrutinizes incoming and outgoing packets, ensuring that only legitimate traffic is permitted. With customizable access control policies, network administrators can define specific permissions for various users. This feature is crucial for maintaining a secure environment and preventing unauthorized access to sensitive information.

The device also supports multiple WAN (Wide Area Network) connections, allowing for load balancing and failover capabilities. By utilizing two WAN ports, the FVX538 can switch between internet connections seamlessly, ensuring optimal uptime and performance even during network disruptions. Such functionality is essential for businesses that rely on constant connectivity.

Additionally, the FVX538 includes various security features such as Denial of Service (DoS) protection, NAT (Network Address Translation) support, and DHCP (Dynamic Host Configuration Protocol) server functionalities. These features work together to create a secure networking environment while simplifying the management of IP addresses within the network.

The user-friendly web management interface of the FVX538 makes it accessible for network administrators of all skill levels. With comprehensive logging and monitoring capabilities, organizations can keep an eye on network activities, enabling them to react swiftly to any potential threats.

In conclusion, the NETGEAR VPN Firewall 200 FVX538 stands out as a versatile, secure, and efficient solution for businesses looking to enhance their network security and performance. With its combination of VPN capabilities, robust firewall features, and user-friendly management tools, it is a reliable choice for ensuring secure and efficient networking operations.
Top Page Image Contents