Dell SonicWALL NSA 6600 Getting Started Manual

Getting Started Guide

Dell SonicWALL Network Security Appliances

NETWORK SECURITY

NSA 6600

NSA_6600_GSG.book Page 1 Wednesday, April 3, 2013 4:52 PM

NSA_6600_GSG.book Page 2 Wednesday, April 3, 2013 4:52 PM

| 1

Notes, Cautions, and Warnings

© 2013 Dell Inc.

Trademarks: Dell™, the DELL logo, SonicWALL™, SonicWALL GMS™, SonicWALL Analyzer™, Aventail™, Reassembly-Free Deep
Packet Inspection™, Dynamic Security for the Global Network™, SonicWALL Dynamic Support 24x7™, SonicWALL Comprehensive
Gateway Security Suite™, SonicWALL McAfee Client/Server Anti-Virus Suite™, and all other SonicWALL product and service names
and slogans are trademarks of Dell Inc.

Microsoft Windows, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation.

Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.

2013 – 04 P/N 232-002213-50 Rev. A

NOTE: A NOTE indicates important information that helps you make better use of your system.

CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

NSA_6600_GSG.book Page 1 Wednesday, April 3, 2013 4:52 PM

2 | In this Guide

In this Guide

Welcome to the Dynamic Security for the Global Network™. The Dell SonicWALL NSA 6600 is designed to be the most scalable,
reliable, and best performing multifunction appliance in its class.

This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL NSA 6600.

Chapter 1 Sections Include

Introduction to the NSA 6600, page 5 • NSA 6600 Package Contents, page 6

• The Front Panel, page 7

• The Back Panel, page 8

• Using this Getting Started Guide, page 9

• Using MySonicWALL, page 10

• Creating a MySonicWALL Account, page 10

Chapter 2 Sections Include

Configuring the Appliance, page 11 • Determining the WAN Type, page 12

• System Requirements, page 12

• Recording Configuration Information, page 13

• Initial Setup, page 14

• Troubleshooting & Testing Your Connections, page 16

NSA_6600_GSG.book Page 2 Wednesday, April 3, 2013 4:52 PM

In this Guide | 3

Additional Information

The following sections provide addition information for the Dell SonicWALL NSA 6600 appliance.

• Support and Training Options, page 39

• Rack Mounting Instructions, page 43

• Product Safety and Regulatory Information, page 49

Chapter 3 Sections Include

Registering, Licensing, and Upgrading, page 17 • Registering Overview, page 18

• Registering in SonicOS, page 18

• Alternative Registration Options, page 19

• Licensing Security Services, page 20

• Activating & Managing Licenses Using MySonicWALL, page 21

• Upgrading Firmware, page 22

Chapter 4 Sections Include

Deployment Scenarios, page 25 • Advanced Deployment Scenarios, page 26

• Configuring NAT Mode Gateway, page 30

• Configuring a Stateful HA Pair, page 31

• Configuring L2 Bridge Mode, page 37

NSA_6600_GSG.book Page 3 Wednesday, April 3, 2013 4:52 PM

4 | In this Guide

NSA_6600_GSG.book Page 4 Wednesday, April 3, 2013 4:52 PM

| 5

Introduction to the NSA 6600

In this Section:

This section describes the items shipped with the Dell SonicWALL NSA 6600 appliance, provides front and rear illustrations of the
NSA 6600, and explains how to create a MySonicWALL account.

• NSA 6600 Package Contents, page 6

• The Front Panel, page 7

• The Back Panel, page 8

• Using this Getting Started Guide, page 9

• Using MySonicWALL, page 10

• Creating a MySonicWALL Account, page 10

1

NSA_6600_GSG.book Page 5 Wednesday, April 3, 2013 4:52 PM

6 | NSA 6600 Package Contents

NSA 6600 Package Contents

Before you begin the setup process, verify that your package contains the following items:

1. One Dell SonicWALL NSA 6600 appliance

2. One Rack Mounting Kit

3. One serial CLI cable

4. One Ethernet cable

5. One power cord*

6. One Dell SonicWALL NSA 6600 Getting Started Guide

*The included power cord(s) are approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location. The
power cords are for AC mains installation only. Field conversion DC power cable is different, see Safety and Regulatory Information for more information.

Missing Items? If any items are missing from your package, contact Dell SonicWALL Support:
Web: http://www.sonicwall.com/us/Support.html
Email: [e-mail]

Getting Started Guide

Dell SonicWALL Network Security Appliance

NETWORK SECURITY

NSA 6600

1

4

5

6

3

2

SonicWALL NSA 6600

CONSOLE

SDHC

MGMT

X19 X17

X16

X14 X12 X10 X8 X6 X4

1GE1GE

10GE

BYPASS
STATUS

X2 X0

X1X3X5X7

X9X11X13X15

X18

M0

ALARM

TEST

PWR

NSA_6600_GSG.book Page 6 Wednesday, April 3, 2013 4:52 PM

The Front Panel | 7

The Front Panel

SonicWALL NSA 6600

CONSOLE

SDHC

MGMT

X19 X17

X16

X14 X12 X10 X8 X6 X4

1GE1GE

10GE

BYPASS
STATUS

X2 X0

X1X3X5X7

X9X11X13X15

X18

M0

ALARM

TEST

PWR

Console Port

USB Ports (2)

Reset Button

LED Indicators

Management Port

X0-X7 (1 GE)

Bypass Status

Access the SonicOS Command Line Interface
(CLI) via the enclosed serial CLI cable

For 3G/4G/Analog modem adaptor support

Press and hold for several seconds to set the
appliance into Safe Mode.

High-speed copper
Gigabit Ethernet ports

Turns on when
fail-to-wire bypass
mode is active

Power: Blue: Indicates power supplies are operating correctly
Yellow: Indicates a disconnected power supply

Test: Quick Blinking Yellow: Initializing
Slow Blinking Yellow: SafeMode
Solid Yellow: Test mode

Alarm: Indicates alarm activity in Red LED
M0: Indicates Expansion Module 0 activity in Red LED

1 Gigabit Ethernet
Management Interface

SDHC Port

Secure Digital High-Capacity (SDHC) port
for future use

X8-X15 (1 GE SFP)

X16-X19 (10 GE SFP+)

1 Gigabit Ethernet hot-pluggable
SFP interfaces for high-speed fiber or
copper Ethernet communication

10 Gigabit Ethernet hot-pluggable ports

*X16, X18, and X19 are designated with a ‘dot’ to
signify ports with a direct uplink to the appliance
CPU for maximum throughput ; X17 shares the
CPU uplink with X0-X15.

NSA_6600_GSG.book Page 7 Wednesday, April 3, 2013 4:52 PM

8 | The Back Panel

The Back Panel

Warning: Warning of Potential Hazard from Fan

This manual contains specific warning and caution statements where they apply. Please read the Safety Instructions before
use! See the Product Safety and Regulatory Information section, on page 49.

I
o

Expansion Bay

Fans (2)

Power Supply

For Dell SonicWALL-approved
expansion modules

Dual auto-throttling fans for system
temperature control

Provides power to the Dell SonicWALL appliance
by plugging in the AC adaptor and switching the
appliance on

NSA_6600_GSG.book Page 8 Wednesday, April 3, 2013 4:52 PM

Using this Getting Started Guide | 9

Using this Getting Started Guide

The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 6600
appliance.

NSA_6600_GSG.book Page 9 Wednesday, April 3, 2013 4:52 PM

10 | Using MySonicWALL

Using MySonicWALL

Dell SonicWALL requires a MySonicWALL account prior to
configuring your appliance. If you already have a
MySonicWALL account, you can continue to the Configuring

the Appliance section, on page 11.

MySonicWALL is used during registration of your
Dell SonicWALL appliance and to activate or purchase licenses
for security services, support, or software specific to your
Dell SonicWALL device.

For a High Availability configuration, MySonicWALL provides a
way to associate a backup unit that can share security service
licenses with your primary appliance.

Note: MySonicWALL registration information is not sold or

shared with any other company.

Creating a MySonicWALL Account

A MySonicWALL account is required in order to register the
NSA 6600 appliance. Create a new MySonicWALL account
from any computer by navigating to:

<http://www.mysonicwall.com>.

To create a MySonicWALL account:

1. In your Web browser, navigate to

<http://www.mysonicwall.com>.

2. In the login screen, click the Register Now link.

3. Complete the Registration form, and then click Register.

4. Verify that the information is correct, and then click
Submit.

5. To confirm your account was created, click Continue.

NSA_6600_GSG.book Page 10 Wednesday, April 3, 2013 4:52 PM

11

Configuring the Appliance

In this Section:

This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and
procedures.

• Determining the WAN Type, page 12

• System Requirements, page 12

• Recording Configuration Information, page 13

• Initial Setup, page 14

• Troubleshooting & Testing Your Connections, page 16

2

NSA_6600_GSG.book Page 11 Wednesday, April 3, 2013 4:52 PM

12 | Determining the WAN Type

Determining the WAN Type

Before configuring your Dell SonicWALL NSA 6600 appliance,
you will need to determine the type of WAN connection your
setup will use. Dell SonicWALL supports the following types:

• Static—Configures the appliance for a network that uses
static IP addresses.

• DHCP—Configures the appliance to request IP settings from
a DHCP server on the Internet.

• PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is
typically used with a DSL modem. If your ISP requires
desktop software, a username, and password, select NAT
with PPPoE mode.

• PPTP—Point-to-Point Tunneling Protocol (PPTP) is used to
connect to a remote server. PPTP typically supports older
Microsoft Windows implementations requiring tunneling
connectivity.

Note: For more information regarding other WAN types, such

as Layer 2 Tunneling Protocol (L2TP), Wire Mode, or
Tap Mode, please refer to the SonicOS Administrator’s
Guide.

System Requirements

Before beginning the setup process, verify that you have:

• An Internet connection

• A Web browser supporting Java Script and HTTP uploads.

Accepted Browser Browser Version Number

Internet Explorer 8.0 and higher

Chrome 18.0 and higher

Firefox 16.0 and higher

Safari 5.0 and higher

NSA_6600_GSG.book Page 12 Wednesday, April 3, 2013 4:52 PM

Recording Configuration Information | 13

Recording Configuration Information

Use this section to record your configuration information. Be
sure to keep for future reference.

Registration Information

Networking Information

Administrator Information

Internet Service Provider (ISP) Information

Record the following information about your current Internet
service:

Serial Number: Record the serial number found on

the bottom panel of your
Dell SonicWALL appliance.

Authentication Code: Record the authentication code found

on the bottom panel of your
Dell SonicWALL appliance.

LAN IP Address:

_____._____._____._____

Select a static IP address for your
Dell SonicWALL appliance that is
within the range of your local network.

Subnet Mask:

_____._____._____._____

Record the subnet mask for the local
subnet where you are installing your
Dell SonicWALL appliance.

Ethernet WAN IP Address:

_____._____._____._____

Select a static IP address for your
Ethernet WAN. This setting only

applies if you are already using an
ISP that assigns a static IP address.

Admin Name: Select an administrator account name.

(default is admin)

Admin Password: Select an administrator password.

(default is password)

If you are
connecting with

DHCP

No information is usually required. However,
some providers may require a Host Name:

_________________________________

If you are
connecting with
Static IP

IP Address: _____._____._____._____

Subnet Mask:_____._____._____._____

Default Gateway: _____._____._____._____

Primary DNS: _____._____._____._____

DNS 2 (optional): _____._____._____._____

DNS 3 (optional): _____._____._____._____

NSA_6600_GSG.book Page 13 Wednesday, April 3, 2013 4:52 PM

14 | Initial Setup

Initial Setup

This section provides initial configuration information and
instructions for connecting your Dell SonicWALL NSA 6600
appliance. See the following sections:

• Connecting the LAN Port, page 14

• Connecting the WAN Port, page 14

• Applying Power to the NSA 6600, page 14

• Accessing the Management Interface & Setup Wizard,

page 15

• Testing Your WAN Connection, page 16

Connecting the LAN Port

1. Using the provided Ethernet cable, connect one end of the

cable to the computer you are using to manage the Dell
SonicWALL NSA 6600 appliance.

2. Connect the other end of the Ethernet cable to the X0

(LAN) port on your Dell SonicWALL NSA 6600 appliance.

Connecting the WAN Port

1. Connect one end of an Ethernet cable to your Internet

connection.

2. Connect the other end of the Ethernet cable to the X1

(WAN) port on your Dell SonicWALL NSA 6600 appliance.

Applying Power to the NSA 6600

Connect the power cord from the Dell SonicWALL NSA 6600
appliance into appropriate power outlets.

For further information regarding power requirements, refer to
the Product Safety and Regulatory Information section, on
page 49 of this document.

NSA 6600 LED Activity

The Power LEDs on the front panel illuminate blue when the
appliance is powered on.

The Link LED above the X0 port illuminates green or amber
depending on the link throughput speed, indicating an active
connection:

• Amber indicates 1 Gbps

• Green indicates 100 Mbps

• An unlit left LED with the right LED lit indicates 10 Mbps

The Test LED or Alarm LED may illuminate and blink while the
appliance performs a series of diagnostic tests. When these
LEDs are no longer illuminated and the Power LEDs remain
steadily lit, the Dell SonicWALL NSA 6600 appliance is ready
for configuration. This typically occurs within a few minutes of
connecting the power.

If the Test or Alarm LEDs remain lit after the NSA 6600 has
completed powering on, restart the appliance by disconnecting
the power, waiting 1 minute, then connecting the power again.

NSA_6600_GSG.book Page 14 Wednesday, April 3, 2013 4:52 PM

Initial Setup | 15

Accessing the Management Interface &
Setup Wizard

Once the NSA 6600 appliance is ready to be configured, ensure
that the computer you will use to manage the appliance is set
up to accept a dynamic IP address, or that it has an unused IP
address on the 192.168.168.x/24 subnet, such as

192.168.168.20.

Note: Be sure to disable pop-up blocking software, or set your

Web browser to allow pop-ups and cookies.

To access the SonicOS management interface, follow the steps
listed:

1. Start your Web browser and navigate to the default LAN
management IP address: <http://192.168.168.168>.

2. Launch the Dell SonicWALL Setup Wizard by clicking the
first Here link.
This wizard helps you quickly configure the
Dell SonicWALL appliance to secure your Internet
connection.

3. Follow the on-screen prompts to complete the
Dell SonicWALL Setup Wizard.

4. A Setup Wizard Summary page displays at the end of the
wizard. Verify the information you’ve entered is correct,
then click Apply.

5. Once completed, a Setup Wizard Completion notice
displays.

Click the Here link to begin the registration process on the
SonicOS management interface.

NSA_6600_GSG.book Page 15 Wednesday, April 3, 2013 4:52 PM

16 | Troubleshooting & Testing Your Connections

Troubleshooting & Testing Your
Connections

The following sections can be used to troubleshoot and test
your LAN and WAN connections.

Troubleshooting Your LAN Connection

If you cannot connect to the Dell SonicWALL NSA 6600 or the
Setup Wizard does not display, consider the following:

• Did you correctly enter the Dell SonicWALL NSA 6600
management IP address in your Web browser?

• Did you try restarting your management station while it is
connected to the Dell SonicWALL appliance?

• Are the Local Area Connection settings on your computer set
to use DHCP or set to a static IP address on the

192.168.168.x/24 subnet?

• Do you have the Ethernet cable connected to your computer
and to the X0 (LAN) port on your appliance?

• Is the connector clip on your network cable properly seated in
the port of the security appliance?

Testing Your WAN Connection

Use the following steps to test your WAN connection:

1. After you exit the Setup Wizard, the login page reappears.
Log back into the Dell SonicWALL management interface
and verify your IP and WAN connection.

2. Open a command prompt window on your computer and
enter the command: ping sonicwall.com

3. Open another Web browser and navigate to:

<http://www.sonicwall.com>.

If you can view the Dell SonicWALL home page, you have
configured your Dell SonicWALL NSA 6600 correctly.

If you cannot view the Dell SonicWALL home page, renew your
management station DHCP address.

If you still cannot view a Web page, try one of these solutions:

• Restart your management station to accept new network

settings from the DHCP server in the Dell SonicWALL
appliance.

• Restart your Internet router to communicate with the DHCP

client in the Dell SonicWALL appliance.

Note: WAN connectivity issues are unrelated to completion of

the MySonicWALL Registration process.

NSA_6600_GSG.book Page 16 Wednesday, April 3, 2013 4:52 PM