SonicWALL 170 User Manual

COMPREHENSIVE INTERNET SECURIT Y
SonicWALL Security Ap p l i a n c e s
SonicWALL TZ 170 Wireless
Getting Started Guide
Getting Started Guide
The SonicWALL® TZ 170 Wireless security appliance is a total security platform for both your wired and wireless network, delivering enterprise-class layered security by integrating 802.11b/g wireless networking, gateway anti-virus, intrusion prevention and content filtering capabilities in an easy-to-use, low cost platform.
This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL and wireless network will have secure Internet access.
Note: For complete documentation, refer to the SonicOS Standard Administrator’s
Guide on the SonicWALL Resource CD or at: <http://www.sonicwall.com/support/documentation.html>.

SonicWALL TZ 170 Wireless Configuration Steps

1Before You Begin page 2
2Setting Up the SonicWALL TZ 170 Wireless page 6
3Connecting the SonicWALL TZ 170 Wireless page 8
4Accessing the Management Interface page 9
5Using the SonicWALL Setup Wizard page 11
6Testing Your Connection page 18
7Registering Your SonicWALL TZ 170 Wireless page 19
8Activating SonicWALL Security Services page 22
9Connecting Wireless Clients to the SonicWALL TZ 170 Wireless page 25
10Connecting Computers to Your SonicWALL TZ 170 Wireless page 28
TZ 170 Wireless. After you complete this guide, computers on your wired
SonicWALL TZ 170 Wireless Getting Started Guide Page 1
1

Before You Begin

Check Package Contents

1. One SonicWALL TZ 170 Wireless security appliance
2. One Getting Started Guide
3. One Release Note
4. One straight-through Ethernet cable
5. One RJ45 CLI cable*
6. One 5 Volt DC power supply
7. One power cord**
8. One mounting kit (not pictured)
9. One pair of antennae
10. One SonicWALL TZ 170 Wireless Resource CD
*The RJ45 CLI cable is only included with the purchase of a SonicWALL TZ 170 Wireless with SonicOS Enhanced.
**A power cord is included only with units shipped to North America. ** Das eingeschlossene Netzkabel ist für Gebrauch in Nordamerikas nur vorgehabt. Für Europaïsche Union (EU) Kunden, ist ein Netzkabel nicht eingeschlossen.

Any Items Missing?

If any items are missing from your package, contact:
SonicWALL Support
Web: <http://www.sonicwall.com/support/>
Page 2

SonicWALL TZ 170 Wireless Front and Back Panels Overview

Power Light
PoE Indicator
LAN 1-5
Link, Activity
Wireless
On/Activity
Console Port
Optional Zone
WiFiSec
Enforcement
WAN Po rt
Test Light
WAN:
Optional Port
LAN Ports 1-5
Power
SonicWALL TZ 170 Wireless Getting Started Guide Page 3
Front Panel Feature Description
Power Light Indicates the SonicWALL TZ 170 Series appliance is powered on.
PoE Indicator Indicates that Power over Ethernet is available.
LAN: Link, Activity Indicates a LAN link (green), or LAN activity (blinking) on the specified port.
Wireless
Indicates enabled wireless signal (green), or wireless activity (blinking).
On/Activity
WiFiSec
Indicates that WiFi Security is in place and being enforced.
Enforcement
Optional Zone Indicates a link (green), or LAN activity (blinking) on the opt port.
WAN Indicates a link (green), or LAN activity (blinking) on the WAN port.
Test Light Indicates the SonicWALL TZ 170 Series appliance is in test mode.
Rear Panel Feature
Console Port Provides access to command-line interface (only for use with
SonicOS Enhanced).
WAN Port Provides a primary (Ethernet) connection to the Internet (WAN).
Optional Port Provides and optional configurable port.
LAN Ports 1-5 Provide multiple connections to your LAN.
Power Provides power connection using the supplied power cord and
power supply.
Page 4

Collecting Internet Service Provider (ISP) Information

Collect the following information about your Internet service:
If you connect via You probably use Please record
Cable modem, DSL with a router
Home DSL PPPoE User Name:
T1,
Static broadband,
Cable or DSL with a static IP
Dial in to a server PPTP Server Address:
DHCP No Internet connection information usually required.*
*Some service providers require a host name. Check
with your ISP. Host Name:
Password: Note: Your ISP may require your user name in the
format: name@ISP.com
Static IP IP Address:
Subnet Mask: Default Gateway
(Router IP Address): Primary DNS: Secondary DNS (optional):
User Name: Password:
Note: If you are not using one of the network configurations above, refer to the
SonicOS Standard Administrator’s Guide.

Other Information

These are the default settings for accessing your SonicWALL TZ 170 Wireless Web­based management interface:
User Name: admin Password: (Default: password)

What You Need to Begin

A computer to use as a management station for initial configuration of the SonicWALL
TZ 170 Wireless
An Internet connection
A Web browser supporting Java and HTTP uploads. Internet Explorer 5.0 or higher, Netscape Navigator 4.7 or higher, Mozilla 1.7 or higher, or Mozilla Firefox are recommended
SonicWALL TZ 170 Wireless Getting Started Guide Page 5
2

Setting Up the SonicWALL TZ 170 Wireless

Physically setting up your SonicWALL security appliance involves:
Installing the Antennas
Adjusting the Antennas
Applying Power
Applying Power with the SonicWALL Power over Ethernet (PoE) Injector

Installing the Antennas

To use the wireless feature of the SonicWALL TZ 170 Wireless, you must install the antennas on the back of the appliance. Remove the antennas from the bag and place one on each connector. Finger tighten the fittings on the connectors.
Page 6

Adjusting the Antennas

You can adjust the antennas for best radio reception. In most cases, the antennas should be pointing straight up and perpendicular to the box. Start from that position, and move them until you notice better reception. Certain areas, such as the area directly below the SonicWALL
TZ 170 Wireless, have relatively poorer reception.

Applying Power

1. Plug the power supply into back of the SonicWALL security appliance and into an appropriate power outlet.
The Power LED on the front panel lights up green when you plug in the SonicWALL TZ 170 Wireless. The Test LED lights up and may blink while the
appliance performs a series of diagnostic tests. When the Test light is no longer lit, the SonicWALL security appliance is ready for configuration.
If the Test LED remains lit after the SonicWALL TZ 170 Wireless has booted, restart the SonicWALL security appliance.
For more troubleshooting information, refer to the SonicOS Standard Administrator’s Guide.

Applying Power with the SonicWALL Power over Ethernet (PoE) Injector

The SonicWALL TZ 170 Wireless can use a regular power supply, or it can get power through the LAN 1 Ethernet port using the an 802.3af standard PoE injector, like the SonicWALL PoE Injector.
To apply power with the SonicWALL PoE Injector:
1. Plug the power cord of the PoE injector into the power outlet.
2. Connect an Ethernet cable to the Data and Power out port on the PoE Injector and connect the other end of the cable to the LAN 1 port on the back of your SonicWALL TZ 170 Wireless.
Alert: The PoE Injector Ethernet cable must only be inserted into the LAN 1 port to
power the SonicWALL TZ 170 Wireless.
To power source
Ethernet cable
Data and Power out
SonicWALL PoE Injector
To LA N
Data in
LAN 1
SonicWALL TZ 170 Wireless Getting Started Guide Page 7
3

Connecting the SonicWALL TZ 170 Wireless

Connecting the WAN Cable to the Internet

Internet
DSL or Cable
Modem
1. Connect one end of an Ethernet cable to your Internet connection, such as a DSL modem or cable modem. This cable may already be connected between your computer and your modem. If so, disconnect it from your computer, and leave it connected to the Internet.
2. Connect the other end of the cable to the WAN port on the back of your SonicWALL
The WAN LED on the front panel lights up, indicating an active connection.
TZ 170 Wireless.
WAN

Connecting the LAN Cable to Your Management Station

Page 8
Management
LAN port #1
1. Connect one end of an Ethernet cable to the computer you are using to manage the SonicWALL
2. Connect the other end of the cable to port #1 (or ports #2 - #5 if you are using a PoE injector) on the back of your SonicWALL
The port LED on the front panel lights up, indicating an active connection.
TZ 170 Wireless.
TZ 170 Wireless.
Station
4

Accessing the Management Interface

The computer you use to manage the SonicWALL TZ 170 Wireless must be set up to accept a dynamic IP address, or have an unused IP address in the 192.168.168.x/24 subnet, such as 192.168.168.20. For instructions on configuring your IP address, see “Configuring Computers for Your Network with DHCP” on page 28.
To access the Web-based management interface of the SonicWALL TZ 170 Wireless:
1. On the management station you have connected to your SonicWALL TZ 170 Wireless, start your Web browser.
Alert: Disable pop-up blocking software or add the management IP address of your
SonicWALL (192.168.168.168 by default) to your pop-up blocker's allow list before accessing the SonicWALL management interface.
Your Web browser must support Java and HTTP uploads. Current versions of Internet Explorer, Netscape Navigator, Mozilla, and Firefox are recommended.
2. Enter 192.168.168.168 (the default LAN management IP address) in the Location or Address field.
3. The SonicWALL Setup Wizard launches and guides you through the configuration and setup of your SonicWALL
TZ 170 Wireless.
SonicWALL TZ 170 Wireless Getting Started Guide Page 9

If the SonicWALL Setup Wizard Does Not Appear

If you cannot connect to the SonicWALL TZ 170 Wireless appliance or the Setup Wizard does not display, verify the following configurations:
Did you correctly enter the SonicWALL TZ 170 Wireless management IP address, 192.168.168.168, in your Web browser?
Is your computer running pop-up blocking software?
Are the Local Area Connection settings on your computer set to obtain an IP address dynamically (DHCP) or set to a static IP of 192.168.168.20? See “Configuring Computers for Your Network with DHCP” on page 28 for instructions on changing your Local Area Connection settings.
Do you have the Ethernet cable connected to your computer and to one of the LAN ports (1 through 5) on your SonicWALL TZ 170 Wireless?
Some browsers may not launch the Setup Wizard automatically. In this case, log into SonicWALL “password” as the password. After you log in, click the Wizards button on the System > Status page. Select Setup to begin configuring your SonicWALL
TZ 170 Wireless.
Some pop-up blockers may prevent the launch of the setup wizard. You can temporarily disable your popup blocker, or add the management IP address of your SonicWALL (192.168.168.168 by default) to your popup blocker's allow list.
TZ 170 Wireless using “admin” as the user name and
Page 10
5

Using the SonicWALL Setup Wizard

The SonicWALL Setup Wizard provides user-guided instructions for configuring your SonicWALL
TZ 170 Wireless.
Note: It is important that you have collected any required ISP information before using
the Setup Wizard. See the list in Procedure 1, “Collecting Internet Service Provider (ISP) Information” on page 5.
Tip: If you do not know what type of Internet connection you have, contact your ISP. In
addition, the SonicWALL Setup Wizard will attempt to detect your connection settings.

Configuring the SonicWALL TZ 170 Wireless

Welcome - Click Next to begin.
1. Deployment Scenario - Select the wireless deployment scenario that best matches your deployment requirements. Clicking on the deployment scenario link displays a diagram of the deployment to show how the scenario is best used.
This Getting Started Guide follows the procedure for setting up an Office Gateway deployment, which is a commonly used wireless deployment for LAN and WLAN to Internet connectivity. For instructions on setting up other wireless network deployments, refer to the
Select Office Gateway and click Next.
SonicOS Standard Administrator’s Guide.
SonicWALL TZ 170 Wireless Getting Started Guide Page 11
2. Change Password - Change the administrative password. This is the password for the admin account.
Old Password Should be populated with the default password, password.
New Password Enter your new password.
Confirm Re-enter your new password.
Note: Keep your new password in a safe place. If you lose your password, you will
have to reset the SonicWALL security appliance to factory settings and lose your configuration. For instructions on resetting your SonicWALL security appliance, refer to the SonicOS Standard Administrator’s Guide.
Click Next.
3. Change Time Zone - Change the Time Zone setting to your local time zone.
Time Zone Select the time zone for your location from the list.
Automatically adjust clock for daylight saving time
Check this setting if you live in an area that observes Daylight Saving Time.
Note: It is important that you set the time zone correctly before you register your
SonicWALL TZ 170 Wireless.
Click Next.
4. WAN Network Mode - The Setup Wizard automatically detects most networking modes. If it does not detect a networking mode, you may have a static IP address. See Procedure 1, “Collecting Internet Service Provider (ISP) Information” on page 5.
Confirm the selection or select the correct type of network connection for your network.
Static IP Select Static IP if you want to give the SonicWALL TZ 170 Wire-
less a specific, unchanging IP address.
DHCP Select DHCP if your ISP assigns your computer a dynamic IP
address. DHCP is commonly used with cable modems.
PPPoE Select PPPoE if your ISP requires a username and password to
establish a connection and assign a dynamic address. PPPoE is commonly used with DSL modems.
Page 12
PPTP Select PPTP if you dial into a specific server and log into a VPN
to establish a connection. With PPTP, you can have either a static or dynamic IP Address.
Click on the yellow link for a networking type to see a definition. Click Next.
5. WAN Network Mode - The second WAN network mode screen configures your WAN settings for the selection you made in the previous screen.
Static IP
The Setup Wizard screen should display: WAN Network Mode: NAT Enabled (Static IP)
SonicWALL WAN IP Address
WAN Subnet Mask Enter the subnet mask for your network, provided by your ISP.
Gateway (Router) Address
DNS Server Address Enter the IP address of the DNS server for your network,
DNS Server Address #2 (optional)
Enter a single, static IP address. This must be in the address range assigned to you by your ISP.
For example, 255.255.255.0.
Enter the IP address of your Internet gateway, provided by your ISP.
provided by your ISP.
You can enter a secondary, back-up DNS server to use if the first one fails.
Click Next.
DHCP
The Setup Wizard screen should display: WAN Network Mode: NAT with DHCP Client
If you selected DHCP, you do not need to enter any WAN networking settings. The network settings are provisioned automatically from a DHCP server.
Click Next.
SonicWALL TZ 170 Wireless Getting Started Guide Page 13
PPPoE
The Setup Wizard screen should display: WAN Network Mode - NAT with PPPoE Client
Obtain an IP Address Automatically
Use the following IP Address
PPPoE User Name Enter the user name for your Internet account. Your ISP may
PPPoE Password Enter the password for your Internet account.
Inactivity Disconnect (minutes)
Select this if your ISP assigns you a dynamic IP address.
Select this if your ISP has assigned you a static IP address, and enter the address.
require you to enter your username in e-mail address format, including “@” and the domain name, for example,
joe.user@sonicwall.com.
Check this box if you want the SonicWALL TZ 170 Wireless to disconnect from the Internet if there is no traffic for the number of minutes you enter.
Click Next.
PPTP
The Setup Wizard screen should display: WAN Network Mode - NAT with PPTP Client
PPTP Server IP Address
PPTP User Name Enter your network user name.
Enter the address of the PPTP server.
Page 14
PPTP Password Enter your network password.
Obtain an IP Address Automatically
Use the following IP Address
SonicWALL WAN IP Address
WAN Subnet Mask Enter the subnet mask for your connection.
Gateway (Router) Address
Select this if the server assigns you a dynamic IP address.
Check this if you have been given a static IP address, and fill in the following three fields.
Enter the static IP address for your connection.
Enter the address of your Internet Gateway.
Click Next.
Loading...
+ 35 hidden pages