Dell NSA 4600, NSA 5600, NSA 3600 User Manual

Getting Started Guide

Dell SonicWALL Network Security Appliances

NETWORK SECURITY

NSA 5600 / 4600 / 3600

For localized product information, see page 48.

ᴹޣᵜൠӗ૱ؑ᚟ˈ䈧৲➗ㅜ亥Ǆ

䝻䞊䜹䝷䜲䝈䛥䜜䛯〇ရ䛾᝟ሗ䛻䛴䛔䛶䛿䚸㻠㻥㻌䝨䞊䝆䜢ཧ↷䛧䛶䛟䛰䛥䛔䚹

Ь˲߭ࢿ૽ࢽؿЕ૓ࢇձˈଜۿࡁ

Para informação localizada do produto, veja página 50.

Notes, Cautions, and Warnings

NOTE: A NOTE indicates important information that helps you make better use of your system.

CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

Trademarks: Dell™, the DELL logo, SonicWALL™, and all other SonicWALL product and service names and slogans are trademarks of Dell, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies and are the sole property of their respective manufacturers.

2014 – 04 P/N 232-002214-51 Rev. A

| 1

In this Guide

The Dell SonicWALL NSA 5600/4600/3600 appliances are designed to be the most scalable, reliable, and best performing multifunction appliances in their class.

This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL NSA 5600/4600/3600.

Chapter 1 Sections Include

Introduction to the NSA Appliances, page 5 • NSA 5600/4600/3600 Package Contents, page 6

• The Front Panel, page 7

• The Back Panel, page 8

• Using this Getting Started Guide, page 9

Chapter 2 Sections Include

Configuring the Appliance, page 11 • Determining the WAN Type, page 12

• System Requirements, page 12

• Recording Configuration Information, page 13

• Initial Setup, page 14

• Troubleshooting Your Connections, page 19

2 | In this Guide

Chapter 3 Sections Include

Registering, Licensing, and Upgrading, page 21 • Using MySonicWALL, page 22

• Creating a MySonicWALL Account, page 22

• Registration Overview, page 23

• Registering in SonicOS, page 23

• Alternative Registration Options, page 24

• Security Services and Software, page2 5

• Activating & Managing Licenses Using MySonicWALL, page 26

• Upgrading Firmware, page 27

Chapter 4 Sections Include

Deployment Scenarios, page 31 • Advanced Deployment Scenarios, page 32

• Configuring NAT Mode Gateway, page 36

• Configuring a Stateful HA Pair, page 37

• Configuring L2 Bridge Mode, page 43

Additional Information

The following sections provide additional information for the Dell SonicWALL NSA 5600/4600/3600 appliances.

• Support and Training Options, page 45

• Rack Mounting Instructions, page 51

• Product Safety and Regulatory Information, page 57

In this Guide | 3

4 | In this Guide

Introduction to the NSA Appliances

In this Section:

This section describes the items shipped with the Dell SonicWALL NSA 5600/4600/3600 appliance, provides front and rear illustrations of the NSA appliance, and includes a flow diagram illustrating the steps for setting up the appliance.

• NSA 5600/4600/3600 Package Contents, page 6

• The Front Panel, page 7

• The Back Panel, page 8

• Using this Getting Started Guide, page 9

| 5

NSA 5600/4600/3600 Package Contents

Getting Started Guide

Dell SonicWALL Network Security Appliance

NETWORK SECURITY

NSA 5600 / 4600 / 3600

SonicWALL NSA 5600

CONSOLE

SDHC

MGMT

X17

X16

X14 X12 X10 X8 X6 X4

1GE

10GE

X2 X0

X1X3X5X7

X9X11X13X15

ALARM

TEST

PWR

Before you begin the setup process, verify that your package contains the following items:

1. One Dell SonicWALL NSA 5600/4600/3600 appliance

2. One Rack Mounting Kit

3. One serial CLI cable

4. One Ethernet cable

5. One power cord*

6. One Dell SonicWALL NSA 5600/4600/3600 Getting Started Guide

*The included power cord is approved for use only in specific countries or regions. Before usin g a power cord, verify t hat it is rated and app roved for use in your location. The power cord is for AC mains installation only. See Safety and Regulatory Informa tion for more in formation.

Missing Items? If any items are missing from your package, contact Dell SonicWALL Support: Web: http://www.sonicwall.com/us/Support.html Email: customer_service@sonicwall.com

6 | NSA 5600/4600/3600 Package Contents

The Front Panel

SonicWALL NSA 5600

CONSOLE

SDHC

MGMT

X17

X16

X14 X12 X10 X8 X6 X4

1GE

10GE

X2 X0

X1X3X5X7

X9X11X13X15

ALARM

TEST

PWR

Console Port

USB Ports (2)

Reset Button

LED Indicators

Management Port (1 GE)

X0-X11 (1 GE)

Access the SonicOS Command Line Interface (CLI) via the enclosed serial CLI cable

For 3G/4G/Analog modem adaptor support

Press and hold for several seconds to set the appliance into Safe Mode.

High-speed copper Gigabit Ethernet ports

Power: Blue: I ndicates power supply is operating correctly Yellow: Indicates power supply is disconnected

Test: Quick Blinking Yellow: Initializing Slow Blinking Yellow: SafeMode Solid Yellow: Test mode

Alarm: Indicates alarm activity in Red LED M0: Indicates Expansion Module 0 activity in Red LED

1 Gigabit Ethernet Management Interface

SDHC Port

Secure Digital High-Capacity (SDHC) port for future use

X12-X15 (1 GE SFP)

X16-X17 (10 GE SFP+)

1 Gigabit Ethernet hot-pluggable SFP interfaces for high-speed ber or copper Ethernet communication

10 Gigabit Ethernet hot-pluggable ports

The Front Panel | 7

The Back Panel

I o

Expansion Bay

Fans (2)

Power Supply

For Dell SonicWALL-approved expansion modules

Dual auto-throttling fans for system temperature control

Provides power to the Dell SonicWALL appliance by plugging in the AC adaptor and switching the appliance on

Note: See Safety and Regulatory Information, page 58 for important additional information on power supply requirements for the Dell

SonicWALL NSA 5600/4600/3600 appliance.

8 | The Back Panel

Using this Getting Started Guide

Verify

Pre-Configuration

Requirements

Start Up

Management

Computer

Perform Initial

Setup

Appliance in

SonicOS

Complete

Deployment

Configuration

Create a

MySonicWALL

Account

Configuration Process

Registration, Licensing, and Deployment Process

The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 5600/4600/ 3600 appliance.

Using this Getting Started Guide | 9

10 | Using this Getting Started Guide

Configuring the Appliance

In this Section:

This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and procedures.

• Determining the WAN Type, page 12

• System Requirements, page 12

• Recording Configuration Information, page 13

• Initial Setup, page 14

• Connecting to the Internet, page 17

• Troubleshooting Your Connections, page 19

Determining the WAN Type

Before configuring your NSA appliance, you will need to determine the type of WAN connection your setup will use. SonicOS supports the following types:

• Static—Configures the appliance for a network that uses static IP addresses.

• DHCP—Configures the appliance to request IP settings from a DHCP server on the Internet.

• PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is typically used with a DSL modem. If your ISP requires desktop software, a username, and password, select NAT with PPPoE mode.

• PPTP—Point-to-Point Tunneling Protocol (PPTP) is used for encrypted connections to a remote server. PPTP typically supports older Microsoft Windows implementations requiring tunneling connectivity.

• L2TP—Layer 2 Tunneling Protocol (L2TP) uses IPsec to connect to a L2TP server and encrypts all data transmitted from the client to the server. It does not encrypt network traffic to other destinations. If L2TP is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

Note: For more information regarding other supported WAN

types such as Wire Mode or Tap Mode, refer to the SonicOS Administrator’s Guide.

System Requirements

Before beginning the setup process, verify that you have:

• An Internet connection

• A Web browser supporting Java Script and HTTP uploads.

Accepted Browser Browser Version Number

Internet Explorer 8.0 and higher

Chrome 18.0 and higher

Firefox 16.0 and higher

Safari 5.0 and higher

12 | Determining the WAN Type

Recording Configuration Information

Use this section to record your configuration information. Be sure to keep for future reference.

The default MGMT interface IP address is 192.168.1.254. Registration Information

Ethernet WAN IP Address:

_____._____._____._____

Select a static IP address for your Ethernet WAN. This setting only

applies if you are already using an ISP that assigns a static IP address.

Administrator Information

Admin Name: Select an administrator account name.

(default is admin)

Serial Number: Record the serial number found on

Authentication Code: Record the authentication code found

the bottom panel of your Dell SonicWALL appliance.

on the bottom panel of your Dell SonicWALL appliance.

Networking Information

LAN IP Address:

_____._____._____._____

Subnet Mask:

_____._____._____._____

Select a static IP address for your Dell SonicWALL appliance that is within the range of your local network. (default is 192.168.168.168)

Record the subnet mask for the local network. Client devices connecting through the appliance are assigned IP addresses in this network. (default is 192.168.168.0)

Admin Password: Select an administrator password.

(default is password)

Internet Service Provider (ISP) Information

Record the following information about your current Internet service:

If you are connecting with

DHCP

If you are connecting with Static IP

No information is usually required. However, some providers may require a Host Name:

_________________________________ IP Address: _____._____._____._____

Subnet Mask:_____._____._____._____ Default Gateway: _____._____._____._____ Primary DNS: _____._____._____._____ DNS 2 (optional): _____._____._____._____ DNS 3 (optional): _____._____._____._____

Recording Configuration Information | 13

Initial Setup

MGMT

Dell SonicWALL Appliance

Management Computer

Ethernet

120V AC (U.S.)

SonicWALL NSA 5600

CONSOLE

SDHC

MGMT

X17

X16

X14 X12 X10 X8 X6 X4

1GE

10GE

X2 X0

X1X3X5X7

X9X11X13X15

ALARM

TEST

PWR

The diagram below illustrates how to connect your management computer to the Dell SonicWALL NSA 5600/4600/3600 appliance for initial setup.

14 | Initial Setup

MGM

This section provides initial configuration information and instructions for connecting your Dell SonicWALL NSA 5600/ 4600/3600 appliance. See the following sections:

• Connecting the MGMT Port, page 15

• Applying Power to the NSA 5600/4600/3600, page 15

• NSA 5600/4600/3600 LED Activity, page 15

• Using the Setup Wizard, page 16

Connecting the MGMT Port

1. Using the provided Ethernet cable, connect one end of the cable to the computer you are using to manage the Dell SonicWALL NSA appliance.

2. Connect the other end of the Ethernet cable to the MGMT port on your Dell SonicWALL NSA appliance.

NSA 5600/4600/3600 LED Activity

The Power LEDs on the front panel illuminate blue when the appliance is powered on.

The Test LED or Alarm LED may illuminate and blink while the appliance performs a series of diagnostic tests. When these LEDs are no longer illuminated and the Power LEDs remain steadily lit, the Dell SonicWALL NSA 5600/4600/3600 appliance is ready for configuration. This typically occurs within a few minutes of connecting the power.

If the Test or Alarm LEDs remain lit after the NSA 5600/4600/ 3600 has completed powering on, restart the appliance by disconnecting the power, waiting 1 minute, then connecting the power again.

Applying Power to the NSA 5600/4600/3600

Connect the AC power cord from the Dell SonicWALL NSA appliance into an appropriate power outlet.

For further information regarding power requirements, refer to

Product Safety and Regulatory Information, page 57 of this

document.

For a connected MGMT or X0 - X11 port, the Link LED for the port illuminates green or amber depending on the link throughput speed, indicating an active connection:

• Amber indicates 1 Gbps

• Green indicates 100 Mbps

• A unlit left LED with the right LED lit indicates 10 Mbps

Initial Setup | 15

Using the Setup Wizard

When you are ready to begin initial setup, configure your management computer with a static IP address on the

192.168.1.0/24 subnet, such as 192.168.1.20. This allows your computer to connect to SonicOS via the MGMT interface.

Note: Be sure to disable pop-up blocking software, or set your

Web browser to allow pop-ups and cookies.

To access the SonicOS management interface, follow the steps listed:

1. With your computer connected to the appliance MGMT port, start your Web browser and navigate to the default MGMT interface IP address: <http://192.168.1.254>.

2. Launch the Dell SonicWALL Setup Wizard by clicking the first Here link. This wizard helps you quickly configure the Dell SonicWALL appliance to secure your Internet connection.

3. Follow the on-screen prompts to complete the Dell SonicWALL Setup Wizard.

4. A Setup Wizard Summary page displays at the end of the wizard. Verify the inform at i on you’ve entered is correct, then click Apply.

5. Once completed, a Setup Wizard Completion notice displays.

6. Click Close.

7. Continue to Connecting to the Internet, page 17 to connect the appliance for Internet access and then refer to

Registering, Licensing, and Upgrading, page 21 to begin

the registration process.

16 | Initial Setup

Connecting to the Internet

After initial setup is complete, connect the LAN and WAN interfaces for access to external networks or the Internet. You cannot reach the Internet or other WAN destinations while connected to the MGMT interface. For Internet access, connect to X0 or another configured LAN interface.

Note: Internet connectivity is needed for the recommended

product registration process.

Connecting the LAN Port

1. Connect one end of an Ethernet cable to your computer or to your local network switch or other networking device.

2. Connect the other end of the Ethernet cable to the X0

(LAN) port on your Dell SonicWALL NSA appliance.

Connecting the WAN Port

1. Connect one end of an Ethernet cable to your Internet connection. If you have a router, DSL modem, or cable modem, connect the Ethernet cable to a LAN port on the router or modem.

2. Connect the other end of the Ethernet cable to the X1

(WAN) port on your Dell SonicWALL NSA appliance.

Testing Your Internet Connection

Use the following steps to test your WAN connection:

1. After you exit the Setup Wizard, connect your computer to the X0 (LAN) port.

2. Point your browser to the X0 IP address configured during initial setup, or to the default <http://192.168.168.168>.

3. When the log in page appears, log into the SonicOS management interface as admin, using the configured password or the default, password.

4. Open a command prompt window on your computer and enter the command: ping sonicwall.com

5. Open another Web browser and navigate to: <http://www.sonicwall.com>.

If you can view the Dell SonicWALL home page, you have configured your Dell SonicWALL NSA 5600/4600/3600 correctly. If you cannot view the Dell SonicWALL home page, try one of these solutions:

• Renew your management station DHCP address or restart

your management station to accept new network settings from the DHCP server in the Dell SonicWALL appliance.

• Restart your Internet router to communicate with the DHCP

client in the Dell SonicWALL appliance.

Note: WAN connectivity issues are unrelated to completion of

the MySonicWALL Registration process.

Connecting to the Internet | 17

Internet Access

Dell SonicWALL Appliance

120V AC (U.S.)

SonicWALL NSA 5600

CONSOLE

SDHC

MGMT

X17

X16

X14 X12 X10 X8 X6 X4

1GE

10GE

X2 X0

X1X3X5X7

X9X11X13X15

ALARM

TEST

PWR

X0 (LAN)

X1 (WAN)

Internet

Ethernet

The diagram below illustrates how to connect your computer to the Dell SonicWALL NSA 5600/4600/3600 appliance for Internet access.

18 | Connecting to the Internet

Troubleshooting Your Connections

Use the suggestions in this section to troubleshoot your MGMT and LAN connections.

T roubleshooting Your MGMT Connection

If you cannot connect to the Dell SonicWALL NSA 5600/4600/ 3600 or the Setup Wizard does not display, consider the following:

• Did you correctly enter the Dell SonicWALL NSA 5600/4600/ 3600 management IP address beginning with “http://” or “https://” in your Web browser?

• Did you try restarting your management station while it is connected to the Dell SonicWALL appliance?

• Are the Local Area Connection settings on your computer set to a static IP address on the 192.168.1.0/24 subnet?

• Is the Ethernet cable connected to your computer and to the MGMT port on your appliance?

• Is the connector clip on your network cable properly seated in the port of the security appliance?

T roubleshooting Your LAN Connection

If you do not see the SonicOS log in prompt when you point your browser to the X0 (LAN) IP address, consider the following:

• Did you correctly enter the IP address for the Dell SonicWALL NSA 5600/4600/3600 X0 interface into your Web browser, beginning with “http://” or “https://”?

• Did you try restarting your management station while it is connected to the Dell SonicWALL appliance?

• Are the Local Area Connection settings on your computer set to one of the following?:

• Obtain an IP address automatically using DHCP

• A static IP address on the default LAN subnet (192.168.168.0/24)

• A static IP address on the configured LAN subnet if you changed it during initial setup

• Do you have the Ethernet cable connected to your computer and to the X0 (LAN) port on your appliance?

• Is the connector clip on your network cable properly seated in the port of the security appliance?

Troubleshooting Your Connections | 19

+ 44 hidden pages