Netgear FVS336Gv2 – ProSafe Dual WAN Gigabit Firewall with SSL & IPSec VPN 참조 매뉴얼

다운로드
페이지 691
 Network Planning for Multiple WAN Ports
625
 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
What to Consider Before You Begin
The following sections provide information about planning and requirements:
Planning Overview
The VPN firewall is a powerful and versatile solution for your networking needs. To make the 
configuration process easier and to understand all of the choices that are available to you, 
consider the following before you begin:
1. 
Plan your network.
a. Determine whether you will use one or several WAN ports. For one WAN port, you 
might need a fully qualified domain name either for convenience or to remotely 
access a dynamic WAN IP address.
b.  If you intend to use several WAN ports, determine whether you will use them in 
auto-rollover mode for increased system reliability or load balancing mode for 
maximum bandwidth efficiency. See the topics in this appendix on page 
 for 
more information. Your decision has the following implications:
Fully qualified domain name (FQDN)
-
For auto-rollover mode, you need an FQDN to implement features such as 
exposed hosts and virtual private networks. 
-
For load balancing mode, you might still need an FQDN either for 
convenience or to remotely access a dynamic WAN IP address.
Protocol binding
-
For auto-rollover mode, protocol binding does not apply.
-
For load balancing mode, decide which protocols will be bound to a specific 
WAN port. 
-
You can also add your own service protocols to the list.
2. 
Set up your accounts.
a. Obtain active Internet services such as DSL broadband accounts and locate the 
Internet service provider (ISP) configuration information.
In this manual, the WAN side of the network is presumed to be provisioned as 
shown in the following figure, with two ISPs connected to the VPN firewall through 
separate physical facilities. 
Each WAN port must be configured separately, whether you are using a separate 
ISP for each WAN port or you are using the same ISP to route the traffic of both 
WAN ports.