Filter
Top Products
ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
7-2 Virtual Private Networking Using IPsec Connections
v1.0, September 2009
The diagrams and table below show how the WAN mode selection relates to VPN configuration.
Table 7-1 summarizes the WAN addressing requirements (FQDN or IP address) for a VPN tunnel
in either dual WAN mode.
Figure 7-1
Figure 7-2
Table 7-1. IP Addressing for VPNs in Dual WAN Port Systems
Configuration and WAN IP address Rollover Mode
a
a. All tunnels must be re-established after a rollover using the new WAN IP address.
Load Balancing Mode
VPN “Road Warrior”
(client-to-gateway)
Fixed FQDN required FQDN Allowed (optional)
Dynamic FQDN required FQDN required
VPN “Gateway-to-Gateway” Fixed FQDN required FQDN Allowed (optional)
Dynamic FQDN required FQDN required
VPN “Telecommuter”
(client-to-gateway through a
NAT router)
Fixed FQDN required FQDN Allowed (optional)
Dynamic FQDN required FQDN required
Rest of
UTM25
Functions
UTM25
WAN Port
Functions
UTM25
Rollover
Control
UTM25
WAN 1 Port
WAN 2 Port
Internet
Same FQDN required for both WAN ports
WAN Auto-Rollover: FQDN Required for VPN
Rest of
UTM25
Functions
UTM25
WAN Port
Functions
Load
Balancing
Control
UTM25
WAN 1 Port
WAN 2 Port
Internet
FQDN required for dynamic IP addresses
WAN Load Balancing: FQDN Optional for VPN
FQDN optional for static IP addresses