SonicWALL SM 9800 Quick start guide

  • Hello! I am an AI chatbot trained to assist you with the SonicWALL SM 9800 Quick start guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
SonicWall™SuperMassive9800
GettingStartedGuide
RegulatoryModelNumber:2RK040AD
Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksarepropert yoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressor
implied,byestoppelor
otherwise,toanyintellectualpropertyri ghtisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts .EXCEPTASSETFORTHINTHETERMS
ANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRO DUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOE V ERAND
DISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARR ANT YRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANT YOF
MERCHANTABILITY,FITNESSFORAPA RTI CUL ARPURPOSE,ORNON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANY
DIRECT,INDIREC T,CONSEQUENTIAL,PUNIT IVE,SPECIA LORINCIDENTALDAMAGES(INCLUDING,
WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,
BUSINESSINTERRUPTIONORLOSSOFINFO RM ATION)ARISINGOU TOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITS
AFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespectto
theaccuracyorcompletenessofth econtentsofthisdocumentandreservestherighttomakechangestosp e cificationsandproductdescriptionsatanytime
withoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdateth einformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SuperMassive
9800GettingStartedGuide
Updated‐July2017
SonicOS6.2.7.7
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.
SonicWallSuperMassive9800GettingStartedGuide
3
1
InThisGuide
ThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfiguration oftheSonicWall™SuperMassive9800
applianceinsingleunitorHighAvailabilitydeployments.
SonicWallSuperMassive9800appliancessupport:
40Gbpsofhighperformancebusinessfirewallthroughput
10Gbpsofmalwareprotectionand24Gbpsofapplicationinspectionwithintrusion
prevention
Gatewayandclientservices,includingCaptureAdvancedThreatProtection,applicationmonitoringandcontrol,deep
packetinspectionoverSSL,contentfiltering,antivirus,antispyware,intrusionprevention,SSLVPNandIPsecVPNaccess,
statefulhighavailabilityandhighavailabilityclustering
Formoreproductinformation,seehttps://www.sonicwall.com/products/sonicwallsupermassive9000.
4
SonicWallSuperMassive9800GettingStartedGuide
Contents
Chapter1Topics
InThisGuideonpage3 Contentsonpage4
Chapter2Topics
HardwareOverviewonpage7 SuperMassive9800PackageContentsonpage8
FrontPanelonpage10
BackPanelonpage11
SuperMassive9800LEDUsageonpage12
PortTypeandLEDUsageonpage13
Setup
ProcessOverviewonpage14
Chapter3Topics
SettingUptheApplianceonpage15 DeterminingtheWANTypeonpage16
SystemRequirementsonpage16
RecordingConfigurationInformationonpage17
Initialsetuponpage19
Connectingtothe Internetonpage22
TroubleshootingYourMGMTandLANConnectionsonpage
26
SonicWallSuperMassive9800GettingStartedGuide
5
Chapter4Topics
Registering,Licensing,andUpgradingonpage27 UsingMySonicWallonpage28
CreatingaMySonicWallAccountonpage28
RegistrationOverviewonpage29
RegisteringinSonicOSonpage29
LicensingSecurityServicesonpage31
ActivatingandManagingLicensesusingaKeyonpage33
UpgradingFirmwareon
page33
Chapter5Topics
DeploymentScenariosonpage37 DeploymentScenariosonpage38
ConfiguringNATModeGatewayonpage41
ConfiguringaStatefulHAPaironpage42
ConfiguringWireModeonpage49
Chapter6Topics
SupportandTrainingOptionsonpage55 CustomerSupportonpage56
KnowledgePortalonpage
56
Trainingonpage56
RelatedDocumentationonpage57
6
SonicWallSuperMassive9800GettingStartedGuide
Chapter7Topics
RackMountingInstructionsonpage59 InstructionsforRackMountingYourApplianceonpage60
Chapter8Topics
ProductSafetyandRegulatoryInformationonpage65 SafetyandRegulatoryInformationonpage66
WarrantyInformationonpage71
SonicWallSuperMassive9800GettingStartedGuide
7
2
HardwareOverview
ThissectiondescribestheitemsshippedwiththeSonicWall™SuperMassive9800applianceandprovidesfrontandrear
illustrationsoftheSuperMassive9800.
SuperMassive9800PackageContentsonpage8
FrontPanelonpage10
BackPanelonpage11
SuperMassive9800LEDUsageonpage12
PortTypeandLEDUsage
onpage13
SetupProcessOverviewonpage14
8
SonicWallSuperMassive9800GettingStartedGuide
SuperMassive9800PackageContents
Beforeyoubeginthesetupprocess,verifythatyourpackagecontainsthefollowingitems(theitemsaredepictedinPackage
contents):
1OneSonicWallSuperMassive9800appliance
2Onerackmountingkit
3OneserialCLIcable
4OneEthernetcable
5Twopowercords
6OneSonicWallSuperMassive9800GettingStartedGuide
Missingitems?Ifanyitemsare
missingfromyourpackage,contactSonicWallSupport:
Web:https://support.sonicwall.com/orhttps://support.sonicwall.com/contactsupport
Email:[email protected]
NOTE:Theincludedpowercord(s)areapprovedforuseonlyinspecificcountriesorregions.Beforeusingapowercord,verifythatitis
ratedandapprovedforuseinyourlocation.ThepowercordsareforACmainsinstallationonly.AfieldconversionDCpowercableis
different;formoreinformation,seeProductSafetyandRegulatoryInformationonpage65.
電気安全確保 弊社製品使用 電源 は必ず製品同梱の電源 使用 の電
は他の製品は使用 せん
SonicWallSuperMassive9800GettingStartedGuide
9
Packagecontents
1
4
5
6
3
2
SonicWall SuperMassive 9800
CONSOLE
SDHC
MGMT
X23 X21
X20
X6 X4
1GE
10GE
X2 X0
X1X3X5X7
X22
B0
B1
ALARM
TEST
PWR 1 PWR 2
X14 X12X18 X16 X10 X8
X9X11X13X15X17X19
80GB
SSD
80GB
SSD
10
SonicWallSuperMassive9800GettingStartedGuide
FrontPanel
SonicWall SuperMassive 9800
CONSOLE
SDHC
MGMT
X23 X21
X20
X6 X4
1GE
10GE
X2 X0
X1X3X5X7
X22
B1
B2
ALARM
TEST
PWR 1 PWR 2
X14 X12X18 X16 X10 X8
X9X11X13X15X17X19
80GB
SSD
80GB
SSD
LCD Screen
Control Buttons
Console Port
USB Ports (2)
LED Indicators
X0-X7 (1 GE)
Power Button
Access the SonicOS Command Line Interface (CLI) via
the serial CLI cable
USB 2.0 mass storage device support
High-speed copper Gigabit Ethernet ports
LED indicators provide status for Power Supplies, Test, Alarms, and Blade
modules. For information describing LED colors and activity, refer to the
LED Activity table in this document.
Navigate the LCD screen; for future use
Display the following when connected to
MGMT port: Chassis IP, Blade IP, Subnet
Mask, Gateway IP
1 Gigabit Ethernet Management Interface
SDHC Port
SSD Drives
Secure Digital High-Capacity (SDHC) port for future
use
Two Solid State Drives (SSD) with 80 GB of capacity
for storage (HD0 and HD1)
Press to turn the
appliance On or O
X8-X19 (1 GE SFP)
X20-X23 (XAUI SFP+)
1 Gigabit Ethernet hot-pluggable SFP interfaces for
high-speed ber or copper Ethernet communication
XAUI (10 Gigabit Attachment Unit Interface)
hot-pluggable ports
MGMT Port (1 GE)
SonicWallSuperMassive9800GettingStartedGuide
11
BackPanel
WARNING:Potentialhazardfromfan
Thismanualcontainsspecificwarningandcautionstatementswheretheyapply.PleasereadtheSafetyInstructions
beforeuse!SeeProductSafetyandRegulatoryInformationonpage65.
Expansion Module
Expansion Module Bay
Fans (6)
Power Supplies (2)
For SonicWall-approved expansion
modules
Auto-throttling fans for system temperature control
Dual power supplies for redundant AC power and added reliability
Field conversion is available to convert to DC mains
DC power supplies use dierent input connector and power cables
12
SonicWallSuperMassive9800GettingStartedGuide
SuperMassive9800LEDUsage
LED Usedfor Color Description
PWR1 PowerSupply1status SolidBlue SystemispoweredonandPowerSupply1isoperatingnormally
SolidYellow PowerSupply1isdownornotdetectedinthechassis
PWR2 PowerSupply2status SolidBlue SystemispoweredonandPowerSupply2isoperatingnormally
SolidYellow PowerSupply2isdownornotdetected
inthechassis
TEST Test/bootstatus Off Systemisupandoperational
SolidYellow Systemisstartingup
BlinkingYellow SystemisinSafeMode
ALARM Alarmcondition Off Noalarmsarepresent
BlinkingYellow Minorsystemalarm,suchaspolicyalert
BlinkingRed Majororcriticalsystemalarm,suchasathermalalertorfanalert
B1 Blade1status Off Bladeispowereddown
BlinkingGreen Blade
ispoweredon,butisnotactive
SolidGreen Bladeispoweredonandisoperational
B2 Blade2status Off Bladeispowereddown
BlinkingGreen Bladeispoweredon,butisnotactive
SolidGreen Bladeispoweredonandisoperational
SonicWallSuperMassive9800GettingStartedGuide
13
PortTypeandLEDUsage
ThissectiondescribestheportsonthefrontbezeloftheSuperM assive9800applianceandprovidesadescriptionofthe
associatedLEDactivity:
PortType PortName/Interfaces LEDColor Indicates
Copper MGMTorX0‐X7 Amber 1Gbps
Green 10Gbps
BlinkingYellow Dataistransmittingand/orreceiving
Off Nolinkor10Mbps
SFP X8‐X19 Amber 1Gbps
Green 100Mbps
BlinkingYellow Datais
transmittingand/orreceiving
Off Nolinkor10Mbps
SFP+ X20‐X23 Amber 1Gbps
Green 10Gbps
BlinkingAmber Dataistransmittingand/orreceiving
Off Nolink
14
SonicWallSuperMassive9800GettingStartedGuide
SetupProcessOverview
SetupprocessillustratesthenecessarystepsintheprocessofgettingstartedwithyournewSonicWallSuperMassive9800
appliance.
Setupprocess
Verify
Pre-Configuration
Requirements
Start Up
Management
Computer
Perform Initial
Setup
Register
Appliance in
SonicOS
Complete
Deployment
Configuration
Create a
MySonicWall
Account
Configuration Process
Registration, Licensing, and Deployment Process
SonicWallSuperMassive9800GettingStartedGuide
15
3
SettingUptheAppliance
ThissectionprovidesanoverviewofavailableWANtypes,asectiontorecordconfigurationinformation,andinitialsetup
informationandprocedures.
DeterminingtheWANTypeonpage16
SystemRequirementsonpage16
RecordingConfigurationInfo rmationonpage17
Initialsetuponpage19
ConnectingtotheInternetonpage22
TroubleshootingYourMGMTandLANConnectionsonpage26
16
SonicWallSuperMassive9800GettingStartedGuide
DeterminingtheWANType
BeforeconfiguringyourSonicWallSuperMassive9800
appliance,youwillneedtodeterminethetypeofWAN
connectionyoursetupwilluse.SonicWallsupportsthe
followingtypes:
•Static—Configurestheapplianceforanetworkthat
usesstaticIPaddresses.Recommended.
•DHCP—ConfigurestheappliancetorequestIPsettings
fromaDHCPserverinyour
networkorontheInternet.
Recommended.
•PPPoE—PointtoPointProtocoloverEthernet(PPPoE)
istypicallyusedwithaDSLmodem.IfyourInternet
ServiceProvider(ISP)requiresdesktopsoftwarewitha
usernameandpassword,selectNATwithPPPoEmode.
PPTP—PointtoPointTunnelingProtocol(PPTP)isused
toconnectto
aremoteserver.PPTPtypicallysupports
olderMicrosoftWindowsimplementationsthatrequire
tunnelingconnectivity.
•L2TP—Layer2TunnelingProtocol(L2TP)isusedto
transmitLayer2dataoverIPorotherLayer3routed
networks.InternetServiceProviders(ISPs)oftenuseit
toenablevirtualprivatenetworks(VPNs)forcustomers
over
theInternet.Itdoesnotencryptnetworktraffic
itself.IfL2TPisnotavailableintheSetupWizard,you
canconfigureitlaterintheSonicOSmanagement
interface.
SystemRequire ments
Beforebeginningthesetupprocess,verifythatyouhave:
AnInternetconnection
AWebbrowsersupportingJavaScriptandHTTP
uploads:
NOTE:Formoreinformationregardingothersupported
WANtypessuchasWireModeorTapMode,refertothe
SonicOSAdministrationGuide.
Acceptedbrowser Browserversion
InternetExplorer 9.0andhigher
Chrome 18.0andhigher
Firefox 16.0andhigher
Safari 5.0andhigher,runningon
nonWindowsmachines
SonicWallSuperMassive9800GettingStartedGuide
17
RecordingConfiguration
Information
Usethissectiontorecordyourconfigurationinformation.Be
suretokeepitforfuturereference.
ThedefaultMGMTinterfaceIPaddressis
192.168.168.168.
RegistrationInformation
NetworkingInformation
SerialNumber: Recordtheserialnumberfound
onthebottompanelofyour
SonicWallappliance.
AuthenticationCode: Recordtheauthenticationcode
foundontheSystem>Status
page,showstatusfromthe
CLI,orthebottompanelofyour
SuperMassiveappliance.
LANIPAddress: SelectastaticIPaddressforyour
SonicWallappliancethatiswithin
rangeofyourlocalnetwork.
(defaultis10.10.10.10for
X0/LAN)
SubnetMask: Recordthesubnetmaskforthe
localnetwork(defaultmaskis
255.255.255.0).Client
devicesconnectingthroughthe
applianceLANinte rfaceare
assignedIPaddressesin
this
network(defaultclientaddresses
assignedbytheSonicOSDHCP
serverareonthe
192.168.168.0/24subnet).
EthernetWANIPAddress: SelectastaticIPaddressforyour
EthernetWANinterface(X1).
NOTE:Thissettingonlyappliesif
youareusinganISPthatassignsa
staticIPaddress.
18
SonicWallSuperMassive9800GettingStartedGuide
AdministratorInformation
InternetServiceProvider(ISP)
Information
RecordthisinformationaboutyourcurrentInternetservice:
AdminName: Selectanadministratoraccount
name.(defaultisadmin)
AdminPassword: Selectanadministratorpassword.
(defaultispassword)
Ifyouare
connecting
withDHCP
Noinformationisusuallyrequired.However,
someprovidersmayrequireahostname.
HostName:
Ifyouare
connecting
withStaticIP
IPAddress:_____._____._____._____
SubnetMask:_____._____._____._____
DefaultGateway:_____._____._____.____
PrimaryDNS:_____._____._____._____
DNS2(optional):_____._____._____._____
DNS3(optional):_____._____._____._____
SonicWallSuperMassive9800GettingStartedGuide
19
Initialsetup
ConnectingyourcomputertotheSuperMassive9800illustrateshowtoconnectyourmanagementcomputertotheSonicWall
SuperMassive9800applianceforinitialsetup.
ConnectingyourcomputertotheSuperMassive9800
MGMT
Management Computer
SonicWall Appliance
120V AC
(U.S.)
SonicWall SuperMassive 9800
CONSOLE
SDHC
MGMT
X23 X21
X20
X6 X4
1GE
10GE
X2 X0
X1X3X5X7
X22
B0
B1
ALARM
TEST
PWR 1 PWR 2
X14 X12X18 X16 X10 X8
X9X11X13X15X17X19
80GB
SSD
80GB
SSD
MGMT
MGMT
X
X2
X2
X2
X2
2
20
SonicWallSuperMassive9800GettingStartedGuide
Thefollowingsectionsprovideinitialconfigurationinformation
andinstructionsforconnectingyourSonicWallSuperMassive
9800applianceforinitialsetup.
ConnectingtheMGMTPortonpage20
ApplyingPowertotheApplianceonpage20
UsingtheSetupWizardonpage21
ConnectingtheMGMTPort
TheMGMTportisadedicated1gigabitEthernetinterfacefor
appliancemanagementandSafeModeaccess.
1UsingtheprovidedEthernetcable,connectoneendof
thecabletothecomputeryouareusingtomanagethe
SuperMassive9800appliance.
2ConnecttheotherendoftheEthernetcabletothe
MGMTport
onyourSuperMassive9800appliance.
ThedefaultMGMTportIPaddressis:
http://192.168.168.168.
ApplyingPowertotheAppliance
ConnecttheACpowercordsfromtheSuperMassive9800
applianceintoappropriatepoweroutlets.
Forfurtherinformationregardingpowerrequirements,refer
toProductSafetyandRegulatoryInformationonpage65of
thisdocument.
SuperMassiveLEDActivity
ThePowerLEDsonthefrontpanelilluminatebluewhenthe
applianceispoweredon.
TheTestLEDorAlarmLEDmayilluminateandblinkwhilethe
applianceperformsaseriesofdiagnostictests.Whenthese
LEDsarenolongerilluminatedandthePowerLEDsremain
steadilylit,theSuperMassive9800
applianceisreadyfor
configuration.Thistypicallyoccurswithinafewminutesof
turningonthepower.
IftheTestorAlarmLEDsremainlitaftertheSuperMassive
9800hascompletedpoweringon,restarttheapplianceby
disconnectingthepower,waiting1minute,andthen
connectingthepoweragain.
Fora
connectedMGMTorX0‐X7port,theLinkLEDforthe
portilluminatesgreenoramberdependingonthelink
throughputspeed,indicatinganactiveconnection:
Amberindicates1Gbps
NOTE:SeealsoSuperMassive9800LEDUsageonpage
12andPortTypeandLEDUsageonpage13.
/