Dell NSA 2600 User Manual

Getting Started Guide

Dell SonicWALL Network Security Appliances

NETWORK SECURITY

NSA 2600

For localized product information, see page 48.

ᴹޣᵜൠӗ૱ؑ᚟ˈ䈧৲➗ㅜ亥Ǆ

䝻䞊䜹䝷䜲䝈䛥䜜䛯〇ရ䛾᝟ሗ䛻䛴䛔䛶䛿䚸㻠㻥㻌䝨䞊䝆䜢ཧ↷䛧䛶䛟䛰䛥䛔䚹

Ь˲߭ࢿ૽ࢽؿЕ૓ࢇձˈଜۿࡁ

Para informação localizada do produto, veja página 50.

Notes, Cautions, and Warnings

NOTE: A NOTE indicates important information that helps you make better use of your system.

CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

Trademarks: Dell™, the DELL logo, SonicWALL™, and all other SonicWALL product and service names and slogans are trademarks of Dell, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies and are the sole property of their respective manufacturers.

2014 – 04 P/N 232-002067-53 Rev. A

| 1

In this Guide

The Dell SonicWALL NSA 2600 appliance is designed to be the most scalable, reliable, and best performing multifunction appliance in its class.

This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL NSA 2600.

Chapter 1 Sections Include

"Introduction to the NSA Appliance" on

page 5

Chapter 2 Sections Include

"Configuring the Appliance" on page 11 • "Determining the WAN Type" on page 12

• "NSA 2600 Package Contents" on page 6

• "The Front Panel" on page 7

• "The Back Panel" on page 8

• "Using this Getting Started Guide" on page 9

• "System Requirements" on page 12

• "Recording Configuration Information" on page 13

• "Initial Setup" on page 14

• "Troubleshooting Your Connections" on page 19

2 | In this Guide

Chapter 3 Sections Include

"Registering, Licensing, and Upgrading" on

page 21

• "Using MySonicWALL" on page 22

• "Creating a MySonicWALL Account" on page 22

• "Registration Overview" on page 23

• "Registering in SonicOS" on page 23

• "Alternative Registration Options" on page 24

• "Security Services and Software" on page 25

• "Activating & Managing Licenses Using MySonicWALL" on page 26

• "Upgrading Firmware" on page 27

Chapter 4 Sections Include

"Deployment Scenarios" on page 31 • "Advanced Deployment Scenarios" on page 32

• "Configuring NAT Mode Gateway" on page 36

• "Configuring a Stateful HA Pair" on page 37

• "Configuring L2 Bridge Mode" on page 43

Additional Information

The following sections provide additional information for the Dell SonicWALL NSA 2600 appliance.

• "Support and Training Options" on page 45

• "Product Safety and Regulatory Information" on page 51

In this Guide | 3

4 | In this Guide

Introduction to the NSA Appliance

In this Section:

This section describes the items shipped with the Dell SonicWALL NSA 2600 appliance, provides front and rear illustrations of the NSA appliance, and includes a flow diagram illustrating the steps for setting up the appliance.

• "NSA 2600 Package Contents" on page 6

• "The Front Panel" on page 7

• "The Back Panel" on page 8

• "Using this Getting Started Guide" on page 9

| 5

NSA 2600 Package Contents

Getting Started Guide

Dell SonicWALL Network Security Appliance

NETWORK SECURITY

NSA 2600

SonicWALL NSA 2600

CONSOLE

SDHC

MGMT

X6 X4

1GE

X2 X0

X1X3X5X7

ALARM

TEST

PWR

Expansion Module

Before you begin the setup process, verify that your package contains the following items:

1. One Dell SonicWALL NSA 2600 appliance

2. Two Rack Mount Ear Kits

3. One serial CLI cable

4. One Ethernet cable

5. One power cord*

6. One Dell SonicWALL NSA 2600 Getting Started Guide

*The included power cord is approved for use only in specific countries or regions. Before usin g a power cord, verify t hat it is rated and app roved for use in your location. The power cord is for AC mains installation only. See Safety and Regulatory Informa tion for more in formation.

Missing Items? If any items are missing from your package, contact Dell SonicWALL Support: Web: http://www.sonicwall.com/us/Support.html Email: customer_service@sonicwall.com

6 | NSA 2600 Package Contents

The Front Panel

SonicWALL NSA 2600

CONSOLE

SDHC

MGMT

X6 X4

1GE

X2 X0

X1X3X5X7

ALARM

TEST

PWR

Expansion Module

Console Port

USB Ports (2)

Reset Button

LED Indicators

MGMT Port (1 GE)

X0-X7 (1 GE)

Access the SonicOS Command Line Interface (CLI) via the enclosed serial CLI cable

For 3G/4G/Analog modem adaptor support

Press and hold for several seconds to set the appliance into Safe Mode.

High-speed copper Gigabit Ethernet ports

Expansion Module Bay

For Dell SonicWALL-approved expansion modules

Power: Blue: Indicates power supply is operating correctly Yellow: Indicates power supply is disconnected

Test: Quick Blinking Yellow: Initializing Slow Blinking Yellow: Safe Mode Solid Yellow: Test mode

Alarm: Indicates alarm activity in Red LED M0: Indicates Expansion Module 0 activity in Red LED

1 Gigabit Ethernet Management Interface

SDHC Port

Secure Digital High-Capacity (SDHC) port for future use

The Front Panel | 7

The Back Panel

I o

Fans (2)

Power Supply

Dual auto-throttling fans for system temperature control

Provides power to the Dell SonicWALL appliance by plugging in the AC cord and switching the appliance on

Note: See "Safety and Regulatory Information" on page 52 for important additional information on power supply requirements for the

Dell SonicWALL NSA 2600 appliance.

8 | The Back Panel

Using this Getting Started Guide

Verify

Pre-Configuration

Requirements

Start Up

Management

Computer

Perform Initial

Setup

Appliance in

SonicOS

Complete

Deployment

Configuration

Create a

MySonicWALL

Account

Configuration Process

Registration, Licensing, and Deployment Process

The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 2600 appliance.

Using this Getting Started Guide | 9

10 | Using this Getting Started Guide

Configuring the Appliance

In this Section:

This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and procedures.

• "Determining the WAN Type" on page 12

• "System Requirements" on page 12

• "Recording Configuration Information" on page 13

• "Initial Setup" on page 14

• "Connecting to the Internet" on page 17

• "Troubleshooting Your Connections" on page 19

Determining the WAN Type

Before configuring your NSA appliance, you will need to determine the type of WAN connection your setup will use. SonicOS supports the following types:

• Static—Configures the appliance for a network that uses static IP addresses.

• DHCP—Configures the appliance to request IP settings from a DHCP server on the Internet.

• PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is typically used with a DSL modem. If your ISP requires desktop software, a username, and password, select NAT with PPPoE mode.

• PPTP—Point-to-Point Tunneling Protocol (PPTP) is used for encrypted connections to a remote server. PPTP typically supports older Microsoft Windows implementations requiring tunneling connectivity.

• L2TP—Layer 2 Tunneling Protocol (L2TP) uses IPsec to connect to a L2TP server and encrypts all data transmitted from the client to the server. It does not encrypt network traffic to other destinations. If L2TP is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

Note: For more information regarding other supported WAN

types such as Wire Mode or Tap Mode, refer to the SonicOS Administrator’s Guide.

System Requirements

Before beginning the setup process, verify that you have:

• An Internet connection

• A Web browser supporting Java Script and HTTP uploads.

Accepted Browser Browser Version Number

Internet Explorer 8.0 and higher

Chrome 18.0 and higher

Firefox 16.0 and higher

Safari 5.0 and higher

12 | Determining the WAN Type

Recording Configuration Information

Use this section to record your configuration information. Be sure to keep for future reference.

The default MGMT interface IP address is 192.168.1.254. Registration Information

Ethernet WAN IP Address:

_____._____._____._____

Select a static IP address for your Ethernet WAN. This setting only

applies if you are already using an ISP that assigns a static IP address.

Administrator Information

Admin Name: Select an administrator account name.

(default is admin)

Serial Number: Record the serial number found on

Authentication Code: Record the authentication code found

the bottom panel of your Dell SonicWALL appliance.

on the bottom panel of your Dell SonicWALL appliance.

Networking Information

LAN IP Address:

_____._____._____._____ Subnet Mask:

_____._____._____._____

Select a static IP address for your Dell SonicWALL appliance that is within the range of your local network. (default is 192.168.168.168)

Record the subnet mask for the local network. Client devices connecting through the appliance are assigned IP addresses in this network. (default is 192.168.168.0)

Admin Password: Select an administrator password.

(default is password)

Internet Service Provider (ISP) Information

Record the following information about your current Internet service:

If you are connecting with

DHCP

If you are connecting with Static IP

No information is usually required. However, some providers may require a Host Name:

_________________________________ IP Address: _____._____._____._____

Subnet Mask:_____._____._____._____ Default Gateway: _____._____._____._____ Primary DNS: _____._____._____._____ DNS 2 (optional): _____._____._____._____ DNS 3 (optional): _____._____._____._____

Recording Configuration Information | 13

Initial Setup

MGMT

Dell SonicWALL Appliance

Management Computer

Ethernet

120V AC (U.S.)

SonicWALL NSA 2600

CONSOLE

SDHC

MGMT

X6 X4

1GE

X2 X0

X1X3X5X7

ALARM

TEST

PWR

Expansion Module

The diagram below illustrates how to connect your management computer to the Dell SonicWALL NSA 2600 appliance for initial setup.

14 | Initial Setup

MGM

The following sections provide initial configuration information and instructions for connecting your Dell SonicWALL NSA 2600 appliance for initial setup.

• "Connecting the MGMT Port" on page 15

• "Applying Power to the NSA 2600" on page 15

• "NSA 2600 LED Activity" on page 15

• "Using the Setup Wizard" on page 16

Connecting the MGMT Port

1. Using the provided Ethernet cable, connect one end of the cable to the computer you are using to manage the Dell SonicWALL NSA appliance.

2. Connect the other end of the Ethernet cable to the MGMT port on your Dell SonicWALL NSA appliance.

Applying Power to the NSA 2600

Connect the AC power cord from the Dell SonicWALL NSA appliance into an appropriate power outlet.

For further information regarding power requirements, refer to

"Product Safety and Regulatory Information" on page 51 of this

document.

NSA 2600 LED Activity

The Power LEDs on the front panel illuminate blue when the appliance is powered on.

The Test LED or Alarm LED may illuminate and blink while the appliance performs a series of diagnostic tests. When these LEDs are no longer illuminated and the Power LEDs remain steadily lit, the Dell SonicWALL NSA 2600 appliance is ready for configuration. This typically occurs within a few minutes of turning on the power.

If the Test or Alarm LEDs remain lit after the NSA 2600 has completed powering on, restart the appliance by disconnecting the power, waiting 1 minute, then connecting the power again.

For a connected MGMT or X0 - X7 port, the Link LED for the port illuminates green or amber depending on the link throughput speed, indicating an active connection:

• Amber indicates 1 Gbps

• Green indicates 100 Mbps

• An unlit left LED with the right LED lit indicates 10 Mbps

Initial Setup | 15

Using the Setup Wizard

When you are ready to begin initial setup, configure your management computer with a static IP address on the

192.168.1.0/24 subnet, such as 192.168.1.20. This allows your computer to connect to SonicOS via the MGMT interface.

Note: Be sure to disable pop-up blocking software, or set your

Web browser to allow pop-ups and cookies.

To access the SonicOS management interface:

1. With your computer connected to the appliance MGMT port, start your Web browser and navigate to the default MGMT interface IP address: <http://192.168.1.254>.

2. Launch the Dell SonicWALL Setup Wizard by clicking the first Here link. This wizard helps you quickly configure the Dell SonicWALL appliance to secure your Internet connection.

3. Follow the on-screen prompts to complete the Dell SonicWALL Setup Wizard.

4. A Setup Wizard Summary page displays at the end of the wizard. Verify the inform at i on you’ve entered is correct, then click Apply.

5. Once completed, a Setup Wizard Completion notice displays.

6. Click Close.

7. Continue to "Connecting to the Internet" on page 1 7 to connect the appliance for Internet access and then refer to

"Registering, Licensing, and Upgrading" on page 21 to

begin the registration process.

16 | Initial Setup

Connecting to the Internet

After initial setup is complete, connect the LAN and WAN interfaces for access to external networks or the Internet. You cannot reach the Internet or other WAN destinations while connected to the MGMT interface. For Internet access, connect to X0 or another configured LAN interface.

Note: Internet connectivity is needed for the recommended

product registration process.

Connecting the LAN Port

1. Connect one end of an Ethernet cable to your computer or to your local network switch or other networking device.

2. Connect the other end of the Ethernet cable to the X0

(LAN) port on your Dell SonicWALL NSA appliance.

Connecting the WAN Port

1. Connect one end of an Ethernet cable to your Internet connection. If you have a router, DSL modem, or cable modem, connect the Ethernet cable to a LAN port on the router or modem.

2. Connect the other end of the Ethernet cable to the X1

(WAN) port on your Dell SonicWALL NSA appliance.

Testing Your Internet Connection

Use the following steps to test your Internet connection:

1. After you exit the Setup Wizard, connect your computer to the X0 (LAN) port.

2. Point your browser to the X0 IP address configured during initial setup, or to the default <http://192.168.168.168>.

3. When the login page appears, log into the SonicOS management interface as admin, using the configured password or the default, password.

4. Open a command prompt window on your computer and enter the command: ping sonicwall.com

5. Open another Web browser and navigate to: <http://www.sonicwall.com>.

If you can view the Dell SonicWALL home page, you have configured your Dell SonicWALL NSA 2600 correctly.

If you cannot view the Dell SonicWALL home page, try one of these solutions:

• Renew your management station DHCP address or restart

your management station to accept new network settings from the DHCP server in the Dell SonicWALL appliance.

• Restart your Internet router to communicate with the DHCP

client in the Dell SonicWALL appliance.

Note: WAN connectivity issues are unrelated to completion of

the MySonicWALL registration process.

Connecting to the Internet | 17

+ 40 hidden pages