Network Planning for Dual WAN Ports (Multiple WAN Port Models Only)
576
ProSecure Unified Threat Management (UTM) Appliance
Features such as multiple exposed hosts are not supported in auto-rollover mode
because the IP address of each WAN port needs to be in the identical range of fixed
addresses.
• Dual WAN ports in load balancing mode. Load balancing for a UTM with dual WAN
ports is similar to a single WAN gateway configuration when you specify the IP address.
Each IP address is either fixed or dynamic based on the ISP: You need to use FQDNs
when the IP address is dynamic, but FQDNs are optional when the IP address is static.
Figure 336.
Inbound Traffic
Incoming traffic from the Internet is usually discarded by the UTM unless the traffic is a
response to one of your local computers or a service for which you have configured an
inbound rule. Instead of discarding this traffic, you can configure the UTM to forward it to one
or more LAN hosts on your network.
The addressing of the UTM’s dual WAN port depends on the configuration being
implemented.
Inbound Traffic to a Single WAN Port System
The Internet IP address of the UTM’s WAN port needs to be known to the public so that the
public can send incoming traffic to the exposed host when this feature is supported and
enabled.
In the single WAN case, the WAN’s Internet address is either fixed IP or an FQDN if the IP
address is dynamic.
Table 151. IP addressing requirements for exposed hosts in dual WAN port systems
Configuration and
WAN IP address
Single WAN port
(reference case)
Dual WAN port cases
Rollover mode Load balancing mode
Inbound traffic
• Port forwarding
• Port triggering
Fixed Allowed
(FQDN optional)
FQDN required Allowed
(FQDN optional)
Dynamic FQDN required FQDN required FQDN required
To Next Page
Loading...
Need help?
General