SonicWALL SonicPoint ACi Quick start guide

  • Hello! I am an AI chatbot trained to assist you with the SonicWALL SonicPoint ACi Quick start guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
SonicWall™SonicPointACi
GettingStartedGuide
RegulatoryModelNumber:APL270B1
Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrad em arkof SonicWall Inc.and /oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksareprope rtyoftheirrespectiveowners
Theinformationinthisdocumentisprovidedinconne ctionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressorimplied,byestoppelorotherwise,toanyintellectual
propertyrightisgrantedbythisdo cumentorinconnectionwiththesaleofSonicWallproducts .EXCEPTASSETFORTHINTHETERMS
ANDCONDITIONSASSPECIFIEDINTHELICENS E
AGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERANDDISCLAIMSANYEXPRESS,IMPLIEDORSTATU TORYWARRANT Y
RELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPAR T I CUL ARPURPOSE,ORNONINFRINGEMEN T.IN
NO
EVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIREC T,INDIRECT,CONSEQUENTIA L,PUNITIVE ,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUT
LIMITATI O N,DAMAGESFORLOSSOFPROFITS,BUSINESSINTERRUPTIO NORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIF
SONICWALLAND/ORITSAFFILIATESHAVE
BEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffili atesmakenorepresentationsorwarrantieswithrespect
totheaccuracyorcompletenessofthecontentsofthisdo cumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytimewith outnotice.Sonic Wall
Inc.and/or
itsaffiliatesdonotmakeanycommitmenttoup datetheinformationcontainedinth is do cument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SonicPointACiGettingStartedGuide
Updated‐January2017
23200341050RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDE O:Aninformationiconindicatessupportinginformation.
SonicWallSonicPointACiGettingStarted Guide
3
1
Introduction
Inthisguide
ThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWall™SonicPointACiwireless
accesspointinsingleunitormultiunitwirelessdeployments.
Chapter1Topics
Introductiononpage3 Wirelessoverviewonpage5
Chapter2Topics
InitialSetuponpage9 Checkpackagecont entsonpage9
Deploymentrequirements
onpage10
SonicPointACiavailableports/statusLEDsonpage11
ConnectingEthernetcablesonpage13
Wirelessaccesspointplacementconsiderationsonpage14
MountingtheSonicPointACionpage16
4
SonicWallSonicPointACiGettingStartedGuide
Chapter3Topics
ConfiguringSonicOSforwirelessaccessonpage21 ConfiguringSonicOSforSonicPointACionpage21
VerifyingSonicPointoperationonpage25
Troubleshootingtipsonpage26
Chapter4Topics
Supportandproductregistrationonpage27 Registrationandsupportonpage27
Onlinesupportandtrainingonpage28
Chapter5Topics
Productsafetyandregulatoryinformationonpage29 Mountingtheapplianceonpage30
VerwarnungWeiterehinweisezurmontageonpage31
EUandEFTAonpage32
Declarationofconformityonpage33
SonicWallSonicPointACiGettingStarted Guide
5
Wirelessoverview
TheSonicPointACiispartofthenextevolutionarygenerationinwirelessaccesspointsaftertheSonicWallSonicPointNandNDR.
TheSonicPointACiprovidesphysicallayerenhancementsforhigherthroughputwithamaximumdatarateof1.3Gbps.Toachieve
this,theSonicPointACiuses:
Widerchannels—80MHzwide
channelsforthe802.11acradiomodule,whi lecontinuingtosupport20/40MHzchannels.
Thisallowsfordynamicperpacketnegotiationofchannelwidthssothatwhenthereisinterference,theSonicPointcan
temporarilyfallbackto40or20MHzchannels.
Morespatialstreams—3X3m ultipleinputandmultipleoutput,(MIMO)forthe
802.11acradiomodule,wherethecapacity
ofaradiolinkismultipliedusingmultipathpropagation.
6
SonicWallSonicPointACiGettingStartedGuide
SonicWallwirelessfirewalling
Whenawireless deviceusesaSonicWallSonicPointACi
wirelessaccesspointtocommunicatewithawirelessdevice
onanothersubnetoronacompletelydifferentnetwork,traffic
betweenthedevicesisforcedtotraversetheSonicWall
networksecurityappliance.Thistraversalenablessecurity
servicestobeenforcedbySonicOS.
Standard
practiceforwirelessfirewalling(whereonewireless
clientiscommunicatingwithanother)bypassesmanyofthe
criticalsecurityservices.Thefollowingillustrationshowsthe
standardpracticeforwirelessfirewalling.
Standard wirelessfirewalling
Manysecurityproductsonthemarketsharethispotential
vulnerabilitywhentwousersconnectedbyacommonhubor
wireless
accesspointwishtoexchangedata.
SonicWalladdressesthissecurityshortcomingbymanaging
theSonicPointaccesspointsfromthenetworksecurity
appliance.Thisallowscompletecontrolofthewirelessspace,
includingzoneenforcementofsecurityservicesandcomplete
firewallingcapabilities.
Securewirelessfirewalling
WLAN Zone
Security Services
?
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
Other Security Appliance
WLAN Zone
Security Services
SonicWall
appliance
SonicWall
SonicPoint
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
l
l
nt
SonicWallSonicPointACiGettingStarted Guide
7
Frequencybandsandchannels
Therearecurrentlyfivewidelyadoptedstandardsfor802.11wirelessnetworktypes:a,b,g,n,andac.802.11nand802.11acare
thenewestandhighestcapacitystandards,butolderclientdevicesmaynotbeabletoutilizethenewerstandards.
Differentfrequencybandsprovidevaryingsignalstrengthandqualityover
differentdistanceranges.Signalsinthe2.4GHzrange
tendtopassthroughphysicalbarriersbetterandcarryfartherthanthoseinthe5GHzrange,buttheydonotprovideashigha
datarate.Signalsinthe5GHzrangeprovidefasterdataratesforbetterthroughput,but
thesignalattenuatesfasterandisbest
suitedforopenspaces.
Wirelessstandards
802.11(x) Frequencystandard Maximumdatarate
802.11a 5GHz 54Mbps
802.11b 2.4GHz 11Mbps
802.11g 2.4GHz 54Mbps
802.11n 2.4GHzand5GHz 450Mbps
802.11ac 5GHz+multichannel+multipath 1.3Gbps
Strengthsandweaknessesof5GHzand2.4GHzsignals
5GHz 2.4GHz
Strength Higherspeed,
morechannels LongerRange,strongersignalpenetration
Weakness Limitedpenetrationofwalls,clientcompatibility Moresourcesofinterference
8
SonicWallSonicPointACiGettingStartedGuide
RefertoRadiofrequencybarriersandRFinterferenceonpage15 fordetailedinformationaboutRFbarriersandinterference.
Toallowmultipleseparatewirelessnetworksinasharedandconfinedspace,theRFmediumisdividedintochannels.Fordevices
inthe5GHzrange(802.11a/n/ac),thismeansthepossibilityof
upto23discretechannels.
Fordevicesusingthe2.4GHzrange(802.11b/g/n),thewirelessspaceislimitedtoamaximumof14ov erlappingchannels.Asa
resultoftheseoverlappingchannels,2.4GHztechnologyprovidesonlyatotalofthreediscretechannels.
802.11comparisonchart
802.11sign alcharacteristics
802.11a 802.11b 802.11g 802.11n 802.11ac
#ofChannelsinUSA2311111121
#ofChannelsinEU 23 13 13 13 16
#ofChannelsinJapan1514141419
FrequencyBand 5GHz 2.4GHz 2.4GHz 2.4/5GHz 5GHz
Max.DataRate 54Mbps 11Mbps 54Mbps 450Mbps(For
3X3MIMO)
1.3Gbps(ForQAM
64,MIMO3X3,and
80MHzchannels)
Radius(Range) 90ft/25m 120ft/35m 120ft/35m 300ft/90m 120ft/35m
NOTE:Although802.11b/g/nstandardsprovidebetween11and14channels,onlythreeofthosechannelsarefullydiscrete
(nonoverlapping)channels.
SonicWallSonicPointACiGettingStarted Guide
9
2
InitialSetup
Thissectionprovidesabasicchecklistofmaterials,hardwareinformation,anddescribeshowtoconnectandconfigurephysical
aspectsoftheSonicWallSonicPointACiincludingcablingandmounting.
Checkpackagecontentsonpage9
Deploymentrequirementsonpage10
SonicPointACiavailableports/statusLEDsonpage11
ConnectingEthernetcableson
page13
Wirelessaccesspointplacementconsiderationsonpage14
MountingtheSonicPointACionpage16
Checkpackagecontents
Beforecontinuing,ensurethatyourSonicPointACipackagecontainsthefollowingmaterials:
10
SonicWallSonicPointACiGettingStartedGuide
Anyitemsmissing?
Ifanyoftheitemscorrespondingtoyourproductaremissing
fromthepackage,contactTechnicalSupport at:https://
support.sonicwall.com/contactsupport
Alistingofthemostcurrentsupportdocumentsareavailable
onlineat:
https://support.SonicWall.com/SonicWal lSonicPointseries/
ace/releasenotesguides
Deploymentrequirements
SonicOSfirmware
SonicWallSonicPointACiaccesspointsarecentrally
managedbySonicWallnetworksecurityappliances
runningthefollowingversionsofSonicOS:
SonicOS5.9.1.6orahigher5.9release
SonicOS6.2.5.1orhigher
PoweroverEthernet
An802.3atcompliantPoEinjectororPoEcapable
switchcapableofproviding25wattsofpower
toeach
SonicPointACiisrequired.
Internetconnectivity
AnactiveInternetconnectionisrequiredforyour
firewalltodownloadthelatestSon icPointfirmware.
GigabitEthernetconnectivity
802.11acwirelesshardwarerequiresmorebandwidth
thanasingle(orevendual)10/100Ethernetconnection
canhandle.Gigabit Ethernetconnectivitybetweenthe
WLANandthe
LANisrequiredtotakefulladvantageof
802.11acspeed.
SeeProductsafetyandregulatoryinformationonpage29.
SonicPointACiApplianceChecklist
SonicWallSonicPointACiAppliance
MountingKit(CeilingBrackets,AnchorandScrewKit)
GettingStartedGuide
SonicWallSonicPointACiGettingStarted Guide
11
SonicPointACiavailableports/statusLEDs
Availableports
LAN1/PoEport.
ProvidesEthernetand
PoweroverEthernet(PoE)
connections.
LAN2port.
ProvidesanadditionalEthernetconnection.Ref erto
theSonicOSAdministrationGuideforusecases.
Consoleport.
Providesamanagementconnection
usingCLI>DB9cable(forcommand
linemanagementonly).
12
SonicWallSonicPointACiGettingStartedGuide
StatusLEDs
LED(lan2)
‐On(solidyelloworgreen,Ethernetlink)
‐Blinkingyellow(1GEthernetactivity)
‐Blinkinggreen(10/100MEthernet
LED(lan1)
‐On(solidyelloworgreen,Ethernetlink)
‐Blinkingyellow(1GEthernetactivity)
‐Blinkinggreen(10/100MEthernetactivity)
LED(5G)
‐On(solidgreen,5GHzradiolink)
‐Blinkinggreen(5GHzradio
activity)
LED(2.4G)
‐On(solidgreen,2.4GHzradiolink)
‐Blinking(2.4GHzradioactivity)
LED(Tool)
‐On(solidyellow,error)
‐Blinking(safemode)
LED(Power)
‐On(solidblue,power)
‐Blinking(booting/FWupgrade)
SonicWallSonicPointACiGettingStartedGuide
13
ConnectingEthernetcables
TheSonicPointACicanbecabledwithCAT5,CAT5e,orCAT6
Ethernetcabling.
TheSonicPointACiispoweredusingPoweroverEthernet
(PoE).ASonicWall802.3atcompliantPoElineinjector(sold
separately),oran802.3atcompliantswitchisrequiredto
powereachSonicPoint ACi.
ToconnectPoEtoyourSonicPointACi
1UsinganEthernetcable,connecttheData inporton
theSonicWallPoEInjectortoanexistingWLANzone
interfaceortoanunusedinterfacetobeconfigured
laterinSonicOS.
2UsingasecondEthernetcable,connecttheDataand
PoweroutportontheSonicWallPoEinjector tothe
LAN1/PoEport
onyourSonicPointACi.
3PlugthepowercordoftheSonicWallPoEinjectorinto
anappropriatepoweroutlet.
4WaitfortheLAN 1LEDontheSonicPointACito
illuminategreen.Thisindicatesanactiveconnection.
SeeProductsafetyandregulatoryinformationonpage29.
CAUTION:An802.3atcompliantPoEinjectororPoE
capableswitchcapableofproviding25wattsofpower
toeachSonicPointACiisrequired.
Tomaintain25wa t tsofpowertotheSonicPointACi,
themaximu mlengthofCAT5ecablefromthe802.3at
PoEinjectortotheSonicPointACiis30meters.
Local Network (LAN)
X1 WAN
X0 LAN
Internet
X2 WLAN
PoE Injector
or PoE Switch
Wireless Clients
14
SonicWallSonicPointACiGettingStartedGuide
Wirelessaccess point
placementconsiderations
PhysicalplacementoftheSonicPointACiwirelessaccesspoint
hasameasurableeff ectonwhocanandcannotaccessyour
wirelesssignal.
AccesspointsshouldbekeptclearofRadioFrequency(RF)
interferencesources.RFbarrierscanbecircumventedby
deployingmultipleaccesspoints.
Asitesurveywillhelpfindthe
optimumwirelessaccesspoint
placement,butyoucanfindusablelocationswithoutit.
Considerationsinclude:
•NumberofaccesspointsversususerdensityIftoo
manyusersareservicedbyasingleaccesspoint,
maximumtransferratesarereachedandthataccess
pointmaybecomeabottleneckforthewholesystem.
Bandwidth
Howmuchdataismovingupstreamand
downstreamforagiventypeofuser?
•EthernetcablingWhereareyourunningthepowered
Ethernet(PoE)cabletoand howareyousecuringthat
cable?IsyourPoEswitch802.3atcompliantandableto
powerallaccesspointswith25watts
each?
Tomaintain25wattsofpowertotheSonicPointACi,
themaximumlengthofCAT5ecablefromthe802.3at
PoEinjectortotheSonicPointACiis30meters.
•Hubs/SwitchesYourwirelessdeploymenthastotie
backintoyournetworksecurityapplianceandLAN
resources.Considerwhereyour
keynetworkingdevices
aredeployedandhowtheywillconnectefficientlywith
yourwirelessappliances.Whatspeedisneededfor
yourEthernetconnectiontoaccommodatethenumber
ofaccesspointsyouareinstalling? AGigabitEthernet
interfaceisrecommendedwhenconnectinga
SonicPointACitoyourSonicWallnetworksecurity
appliance.
•Legacyclients‐Olderlaptopsandmobiledevicesmay
notsupport802.11ac.Althoughclientswith802.1 1a/g/
bhardwarearesupportedbytheSonicWallSonicPoint
ACi,thepresenceoftheselegacyclientswithinrangeof
yourwirelessnetworkcouldaffecttheconnection
speedofyour802.11acclients.
Forexample,an802.11bdevice authenticatedto
the
SonicPointACicouldlimitallclientsconnectedtothat
radioto802.11bdatarates.
SonicWallSonicPointACiGettingStartedGuide
15
Radiofrequencybarriers
DetermininghowtocircumventRFbarrierscanbea
challengingpartoftheplacementprocess,butRFbarrierscan
alsobeusedbeneficiallyinanattempttoblocksignalswhere
youdonotwantcoverage.The5GHzfrequencyismore
sensitivetoRFbarriers.Awallthatallowsa2.4
GHzwireless
networktooperatecould blocka5GHzone.
RFinterference
RFinterferencefromhome,office,andmedicalequipmentisa
commonchallengeinwirelessdeployments.
WhenconsideringRFinterferencesources,rememberthat
mostcell/wirelessphonesandBluetoothdevicesonlyutilize
the2.4GHzfrequency.Assuch,theyshouldnotcause
significantinterferencewithwirelessnetworksoperatingin
the5GHzfrequency.
CommonRFbarriertypes
BarrierType RFSignalBlocking
Openair VeryLow
Glass,wood,drywall,cubepartitions Low
Floorsandouterwalls,aquariums
(brick/marble/granite/water)
Medium
Concrete,securityglass,wiremesh,
stack e dbooks/paper
High
Metalpartitions,desks,reinforced
concrete
VeryHigh
CommonsourcesofRFinterference
Interference
Source
PossibleRange BandsAffected
2.4GHzphones 100feet 2.4GHz
(802.11b/g/n)
Bluetoothdevices 30feet 2.4GHz
(802.11b/g/n)
Microwaveoven 1020feet 2.4and5GHz,
dependingon
shielding
Scientificand
medical
equipment
Shortdistance,
varies
2.4and5GHz,
dependingon
shielding
16
SonicWallSonicPointACiGettingStartedGuide
MountingtheSonicPointACi
YoucanmountyourSonicWallSonicPointACitoawallor
ceiling,oryoucansimplysetitonaflatsurface.
ForsafetytipswhenmountingtheSonicPointACi,seeProduct
safetyandregulatoryinformationonpage29.
Mountingusingceilingbrackets
Themountingkitincludesalargebracket,twosmallbrackets,
anchorscrews,andscrews.
Largeceilingbracket
Smallceilingbrackets
TheundersideoftheSonicPointACihastwoinsertionpoints
forthescrews.Youcanusetheseinsertionpointstoattach
eitherthelargebracketorthetwosmallbracketstothe
SonicPointACi.
Holesforscrews
SonicWallSonicPointACiGettingStartedGuide
17
TomounttheSonicPointACitoacrossbarbetween
ceilingpanelsusingthelargebracket
1Usetheincludedscrewstoattachthelargebracketto
theundersideoftheSonicPoint.
2 SupportingtheSonicPointinonehand,positionthe
edgeclipsofthebracketovertheedgeoftheceiling
crossbarandrotatetheSonicPointcounterclockwise(to
theleftwhenlookingupatit)untilthebracket
is
securelyattachedtothecrossbar.
ToremovetheSonicPointACifromtheceilingcrossbar,
rotateitclockwise(t otherightwhenlookingupatit)
untilthebracketdetachesfromthecrossbar.
Fastenthelargeceiling
bracket
18
SonicWallSonicPointACiGettingStartedGuide
TomounttheSonicPointACitoacrossbarbetween
ceilingpanelsusingthesmallceilingbrackets:
1Usetheincludedscrewstoattachthesmallbracketsto
theundersideoftheSonicPoint,makingsureboth
bracketsareparallel.
2 SupportingtheSonicPointinonehand,cliptheedgeof
eachbracketovertheedgeoftheceilingcrossbaras
showninthefollowingimage.MakesuretheSonicPoint
is
securelyattachedtothecrossbarbeforereleasingthe
device.
Ceiling crossbar
Mounting brackets
SonicPoint unit
SonicWallSonicPointACiGettingStartedGuide
19
Mountingusinganchorscrews
TomounttheSonicPointACiusingtheanchorscrews
1Onthemountingsurface,markthelocationtomake
twoscrewholes.Themarksshouldbehorizontally
paralleltoeachother.
2Screwtheanchorscrewsintotheceilingtileordrywall
totheirfulldepth.
3Insertthescrewsintotheanchors,andscrewthemin
deepenoughtoleaveminimalspacebetween
the
screwheadsandthewallsurface.
4 SupportingtheSonicPointinyourhands,securelyfit
theundersideslotsoftheSonicPointontothescrew
heads.
20
SonicWallSonicPointACiGettingStartedGuide
/