Dell Sonicwall Sonicpoint Ace Getting Started Manual

Dell SonicWALL SonicPoint-ACe
Getting Started Guide
Draft Document
©
ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’ s personal use without the written permission of Dell Inc.
The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHA TSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact: Dell Inc.
Attn: LEGAL Dept 5 Polaris Way Aliso Viejo, CA 92656
Refer to our web site (software.dell.com) for regional and international office information.
Trademarks
Dell™, the DELL logo, SonicWALL™, and all other SonicW ALL product and service names and slogans are t rademarks of Dell, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies and are the sole property of their respective manufacturers.
SonicPoint-ACe Getting Started Guide Updated - 12 – 2014 Software Version - Rev. 00 P/N 232-00XXXX-XX
Legend
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.
WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.
IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.
Draft Document
| 1
In this guide
This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL SonicPoint-ACe wireless appliances in single-unit or distributed wireless deployments.
Chapter 1 Sections Include
Before you begin, page 3 Check package contents, page 4
What you need to begin, page 5
SonicPoint top panel/status LEDs, page 6
Chapter 2 Sections Include
Introduction to secure wireless, page 7 Wireless RF introduction, page 8
Placing access points, page10
Dell SonicWALL wireless firewalling, page 13
Chapter 3 Sections Include
Registering your appliance, page 15 Creating a MySonicWALL account, page 16
Registering and licensing your appliance on MySonicWALL,
page 16
Using Dell SonicWALL security services for wireless clients,
page 17
SonicPoint_ACe_GSG.book Page 1 Monday, September 29, 2014 5:23 PM
Draft Document
2 |
Additional information
The following sections provide additional information for the SonicP oint-ACe.
Support and training options, page 35 Product safety and regulatory information, page 41
Chapter 4 Sections Include
Configuring your appliance for wireless, page 19 An introduction to zones and interfaces, page 20
Configuring wireless access, page 20
Chapter 5 Sections Include
Setting up your SonicPoint, page 27 Installing antennas, page 28
Connecting Ethernet cable, page 28
Mounting using ceiling brackets, page 30
Mounting using anchor screws, page 31
Verifying operation, page 32
Verifying WAN (Internet) connectivity, page 33
Troubleshooting tips, page 33
SonicPoint_ACe_GSG.book Page 2 Monday, September 29, 2014 5:23 PM
Draft Document
| 3
Before you begin
In this section:
This section provides a basic checklist of materials and information needed before you begin.
"Check package contents" on page 4
"What you need to begin" on page 5
"SonicPoint top panel/status LEDs" on page 6
SonicPoint_ACe_GSG.book Page 3 Monday, September 29, 2014 5:23 PM
Draft Document
4 |
Check package contents
Before continuing, ensure that your SonicPoint package contains the following materials:
*The included power cord is approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location.
Any items missing?
If any of the items corresponding to your product are missing from the package, contact Dell SonicWALL Technical Support at
https://support.software.dell.com/manage-service-request
A listing of the most current support documents are available online at:
https://support.software.dell.com/
SonicPoint-ACe Appliance Checklist
Getting Started Guide SonicPoint-ACe Appliance Mounting Kit (Ceiling Braces, Anchor and Screw Kit) Front LED/Logo Cover Plate Antennas (6) Power Adaptor*
SonicPoint_ACe_GSG.book Page 4 Monday, September 29, 2014 5:23 PM
Draft Document
| 5
What you need to
begin
This page provides basic network hardware and software prerequisites as a baseline for SonicPoint-ACe deployments.
Hardware/firmware requirements
The Dell SonicWALL SonicPoint-ACe access points are centrally managed by any of the following Dell SonicWALL appliances running SonicOS 5.6 or higher:
SuperMassive 9000 Series
NSA Series (including NSA 2400MX)
TZ 215/205/105 Series
TZ 210/200/100 Series
Network deployment requirements
In addition to the aforementioned SonicOS firmware and hardware requirements, ensure that your network deployment includes:
An 802.3af compliant PoE injector or PoE-capable switch
An active Internet connection
A configured interface on the Dell SonicWALL security
appliance set to a zone type of “wireless”
A location selected for placement of your SonicPoint such as a wall or ceiling
Clients capable of 802.11n wireless communications. Note that although clients with 802.11 a/b/g hardware are supported, the presence of these legacy clients within range of your network may affect the connection speed of your 802.11n clients.
SonicPoint_ACe_GSG.book Page 5 Monday, September 29, 2014 5:23 PM
Draft Document
6 |
SonicPoint top panel/status LEDs
link
wlan
lan
act
link
act
A
n
t
e
n
n
a
C
o
n
n
e
c
t
i
o
n
s
(
S
o
n
i
c
P
o
i
n
t
-
N
e
O
n
l
y
)
link
wlan
lan
act
link
act
Status LEDs
Power
Test SafeMode
Wireless Link
Wireless Activity
1000mbps 100mbps 10Mbps
Ethernet Activity
link
wlan
lan
act
link
act
c
o
n
s
o
l
e
l
a
n
Power Port
(SonicPoint-Ne only)
Provides 12VDC power connection
LAN/PoE Port
Provides Power over Ethernet (PoE)
and Ethernet connection
Console Port
Provides management connection using CLI->DB9 cable (for command line management only)
Reset Button
Press and hold to manually reset
SonicPoint_ACe_GSG.book Page 6 Monday, September 29, 2014 5:23 PM
Draft Document
| 7
Introduction to secure wireless
In this section:
This section contains excerpts from the Dell SonicWALL Secure Wireless Network Integrated Solutions Guide. The content is meant to provide a brief introduction to Radio Frequency (RF) technology as it pertains to different deployment scenarios.
"Wireless RF introduction" on page 8
"Placing access points" on page 10
"Dell SonicWALL wireless firewalling" on page 13
SonicPoint_ACe_GSG.book Page 7 Monday, September 29, 2014 5:23 PM
Draft Document
8 |
Wireless RF
introduction
There are currently four widely adopted standards for 802.11 wireless network types: a, b, g, and n. Although 802.11n is the newest and highest capacity standard, each of the four standards has its own strengths and weaknesses. This section provides overviews of these standards.
The following section provides a brief overview of RF technologies:
"Frequency Bands and Channels" on page 8
"802.11 comparison chart" on page 9
"Radio frequency barriers" on page 9
"RF interference" on page 10
Frequency Bands and Channels
To allow multiple separate wireless networks in a shared and confined space, the RF medium is divided into channels. For devices in the 5GHz range (802.11a), this means the possibility of up to 23 discrete channels. For devices using the 2.4GHz range (802.11b, 802.11g), the wireless space is limited to a maximum of 14 overlapping channels. As a result of these overlapping channels, 2.4GHz technology provides only a total of three discrete channels.
The newer 802.11n technology does not fit into either of these categories, as it is capable of using both 2.4GHz and 5GHz, but is limited to 14 overlapping channels for backward compatibility.
SonicPoint_ACe_GSG.book Page 8 Monday, September 29, 2014 5:23 PM
Draft Document
| 9
802.11 comparison chart
The following table compares signal characteristics as they apply to the current 802.11 standards:
NOTE: Although 802.11b/g/n standards provide between 11
and 14 channels, only three of those channels are fully discrete (non-overlapping ) ch an n els.
For more information on this topic, refer to the Dell SonicWALL Secure Wireless Networking Integrated Solutions Guide.
Radio frequency barriers
Determining the location of RF barriers can be a painful part of the placement process, but keep in mind that they can be used beneficially in an attempt to block signals where you do not want coverage.
The following table lists some common RF barrier types:
802.11a 802.11b 802.11g 802.11n # of Channels in USA2311 1111 # of Channels in EU 23 13 13 13 # of Channels in
Japan
15 14 14 14
Frequency Band 5GHz 2.4GHz 2.4GHz 2.4/
5GHz
Max. Data Rate 54Mbps 11Mbps 54Mbps 150Mbps
300Mbps
Radius (Range) 90ft/
25m
120ft/ 35m
120ft/ 35m
300ft/ 90m
Barrier Type RF Signal Blocking
Open air Very Low Glass, drywall, cube partitions Low Stone floors and walls (brick/marble/
granite)
Medium
Concrete, security glass, stacked books/ paper
High
Metal, metal mesh (chicken wire), re­enforced concrete, water
Very High
Faraday cage Extremely High
SonicPoint_ACe_GSG.book Page 9 Monday, September 29, 2014 5:23 PM
Draft Document
10 |
RF interference
RF interference from home, office, and medical equipment is a common source of frustration in wireless deployments from the smallest home office to the largest multi-building campus.
The following table lists several common sources of RF interference:
NOTE: Most newer model microwave ovens have sufficient
shielding to negate possible RF interference.
Placing access points
Physical placement of an access point has a measurable effect on who can and cannot access your wireless signal. The following sections provide an overview of wireless access point placement, signal strength, and signal direction in common wireless deployment situations:
"Making hardware decisions" on page 10
"Solutions to RF interference and barriers" on page 11
TIP: For the latest SonicPoint wireless deployment
information from switching recommendations to site survey, see the Dell SonicWALLSonicPoint Deployment
Best Practices Guide at: https://support.software.dell.com/
Making hardware decisions
The first decision in hardware is the access point. While access point technology (802.11a/b/g/n) is one factor in determining your placement, based on distance served and
Interference Source
Possible RF Interference
Band(s) Affected
2.4GHz phones Entire range (hundreds of feet)
802.11b/g/n
Bluetooth devices Within 30 feet 802.11b/g/n Microwave oven Within 10-20 feet 802.11b/g/n Scientific and medical
equipment
Short distance, varies 802.11b/g/n
Off-network access points
Entire range All
RF reflective objects Long-range wireless
bridging
All
SonicPoint_ACe_GSG.book Page 10 Monday, September 29, 2014 5:23 PM
Draft Document
| 11
bandwidth needed, taking note of other hardware-based factors is just as important.
Some of the more important hardware decisions include:
• Number of access points versus user density – If too many users are serviced by a single access point, maximum transfer rates are reached and that point may become a bottleneck for the whole system.
•Bandwidth – How much data is moving upstream and downstream for a given type of user?
• Ethernet cabling – Where are you running the powered Ethernet (PoE) cable to and how are you securing that cable. Is your PoE switch able to power all access points?
•Hubs / Switches – Your wireless de ployment has to tie back into your network security appliance and LAN resources at some point. What speed is needed for your Ethernet connection to accommodate the number of access points you are installing? Also consider where your key networking devices are deployed and how they will connect efficiently with your wireless appliances.
• Upgrade your Ethernet connections for 802.11n – In most cases, 802.11n wireless hardware requires more bandwidth than a single (or even dual) 10/100 Ethernet connection can handle. Gigabit Ethernet connectivity
between the WLAN and the LAN is required to take full advantage of 802.11n speed.
• Power up that PoE for 802.11n – Part of your wireless network planning should include verifying that your P oE equipment is 802.3af compliant, and that a full 15 watts of power can be supplied to each SonicPoint.
Solutions to RF interference and barriers
These days, finding an environment with no RF interference or noise is nearly impossible. Only if you are setting up an office in a secluded redwood grove can you count on RF interference to be a non-issue. Even then, the redwood trees might just be among those fitted with high-gain cellular antennas, an all­too-common occurrence today. Regardless, you should expect
SonicPoint_ACe_GSG.book Page 11 Monday, September 29, 2014 5:23 PM
Draft Document
12 |
to deal with some level of signal interference in your deployment.
Location A – rogue access points or wireless test lab
•Problem – Wireless product test labs and other (non-
malicious) rogue access points are problems in many Wi-Fi deployments.
•Solution Either eliminate all rogue access points, or force their owners to use a set channel that does not overlap with your distributed wireless solution.
Location B – spectrum noise for 2.4GHz and 5GHz
•Problem – Your phone system is partially wireless and
uses the 2.4GHz spectrum.
•Solution Give VoIP a try. VoIP will work in tandem with your wireless network, instead of against it. For more on Dell SonicWALL VoIP implementation and
A
C
B
SonicPoint_ACe_GSG.book Page 12 Monday, September 29, 2014 5:23 PM
Draft Document
| 13
capabilities, refer to the Configuring VoIP SonicOS feature module available at: https://
support.software.dell.com/
Location C – off-network access points
•Problem – Your neighbors need wireless, too!
Unfortunately, only a few sheets of drywall separate you. Solution – Overpowering your neighbors with high­gain antennas is an option, but not a particularly neighborly one. Instead, you could simply use a different channel for wireless access points bordering this wall and ensure that your neighbors do the same. Performance in some dual-channel wireless devices may take a hit, but it is better than dropped connections—or unhappy neighbors.
Dell SonicWALL
wireless firewalling
When a wireless device uses an access point to communicate with a device on another subnet or on a completely different network, traffic between the devices is forced to traverse the network gateway. This traversal enables security services to be enforced at the gateway.
Standard practice for wireless firewalling (where one wireless client is communicating with another) bypasses many of the critical security services. The following illustration shows the standard practice for wireless firewalling.
SonicPoint_ACe_GSG.book Page 13 Monday, September 29, 2014 5:23 PM
Draft Document
14 |
Many security products on the market share this potential vulnerability when two users connected by a common hub or wireless access point wish to exchange data.
Dell SonicWALL addresses this security shortcoming by managing the SonicPoint access points from the network security appliance. This allows complete control of the wireless space, including zone enforcement of security services and complete firewalling capabilities, as shown in the following illustration.
WLAN Zone
Security Services
?
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
Other Security Appliance
WLAN Zone
Security Services
SonicWALL
appliance
SonicWALL
SonicPoint
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
link
wlan
lan
act
link
act
SonicPoint_ACe_GSG.book Page 14 Monday, September 29, 2014 5:23 PM
Draft Document
Loading...
+ 37 hidden pages