Getting Started Guide

Dell SonicWALL Network Security Appliances
NET WORK SECURIT Y
NSA 6600
Getting Started Guide
Notes, Cautions, and Warnings
NOTE: A NOTE indicates important information that helps you make better use of your system.
CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
© 2013 Dell, Inc.
Trademarks: Dell™, the DELL logo, SonicWALL™, SonicWALL GMS™, SonicWALL Analyzer™, Reassembly-Free Deep Packet
Inspection™, Dynamic Security for the Global Network™, SonicWALL Dynamic Support 24x7™, SonicWALL Comprehensive Gateway
Security Suite™, SonicWALL McAfee Client/Server Anti-Virus Suite™, and all other SonicWALL product and service names and slogans
are trademarks of Dell, Inc.
Microsoft Windows, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation.
Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
2013 – 04
P/N 232-002213-50
Rev. A
| 1
In this Guide
The Dell SonicWALL NSA 6600 is designed to be the most scalable, reliable, and best performing multifunction appliance in its class.
This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL NSA 6600.
Chapter 1
Sections Include
Introduction to the NSA 6600, page 5
•
•
•
•
•
•
Chapter 2
Sections Include
Configuring the Appliance, page 11
•
•
•
•
•
2 | In this Guide
NSA 6600 Package Contents, page 6
The Front Panel, page 7
The Back Panel, page 8
Using this Getting Started Guide, page 9
Using MySonicWALL, page 10
Creating a MySonicWALL Account, page 10
Determining the WAN Type, page 12
System Requirements, page 12
Recording Configuration Information, page 13
Initial Setup, page 14
Troubleshooting & Testing Your Connections, page 16
Chapter 3
Sections Include
Registering, Licensing, and Upgrading, page 17 •
•
•
•
•
•
Registering Overview, page 18
Registering in SonicOS, page 18
Alternative Registration Options, page 19
Security Services and Software, page 20
Activating & Managing Licenses Using MySonicWALL, page 21
Upgrading Firmware, page 22
Chapter 4
Sections Include
Deployment Scenarios, page 25
•
•
•
•
Advanced Deployment Scenarios, page 26
Configuring NAT Mode Gateway, page 30
Configuring a Stateful HA Pair, page 31
Configuring L2 Bridge Mode, page 37
Additional Information
The following sections provide addition information for the Dell SonicWALL NSA 6600 appliance.
• Support and Training Options, page 39
• Rack Mounting Instructions, page 43
• Product Safety and Regulatory Information, page 49
In this Guide | 3
4 | In this Guide
Introduction to the NSA 6600
1
In this Section:
This section describes the items shipped with the Dell SonicWALL NSA 6600 appliance, provides front and rear illustrations of the
NSA 6600, and explains how to create a MySonicWALL account.
• NSA 6600 Package Contents, page 6
• The Front Panel, page 7
• The Back Panel, page 8
• Using this Getting Started Guide, page 9
• Using MySonicWALL, page 10
• Creating a MySonicWALL Account, page 10
| 5
NSA 6600 Package Contents
Before you begin the setup process, verify that your package contains the following items:
1.
2.
3.
4.
5.
6.
One Dell SonicWALL NSA 6600 appliance
One Rack Mounting Kit
One serial CLI cable
One Ethernet cable
One power cord*
One Dell SonicWALL NSA 6600 Getting Started Guide
*The included power cord is approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location. The
power cord is for AC mains installation only. See Safety and Regulatory Information for more information.
1
X18
10GE
X16
X14
X12
1GE
X10
X8
X6
X4
1GE
X2
2
X0
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
MGMT
CONSOLE
X19
X17
X15
X13
X11
X9
X7
X5
X3
X1
6
3
4
5
Dell SonicWALL Network Security Appliance
NET WORK SECURIT Y
NSA 6600
Getting Started Guide
Missing Items? If any items are missing from your package, contact Dell SonicWALL Support:
Web: http://www.sonicwall.com/us/Support.html
Email: customer_service@sonicwall.com
6 | NSA 6600 Package Contents
The Front Panel
SDHC Port
Secure Digital High-Capacity (SDHC) port
for future use
Bypass Status
Turns on when
fail-to-wire bypass
mode is active
Console Port
Access the SonicOS Command Line Interface
(CLI) via the enclosed serial CLI cable
Management Port
1 Gigabit Ethernet
Management Interface
X18
10GE
X16
X14
X12
1GE
X10
X8
X6
X4
1GE
X2
X0
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
CONSOLE
MGMT
X19
X17
X15
X13
X11
X9
X7
X5
X3
X1
USB Ports (2)
For 3G/4G/Analog modem adaptor support
X0-X7 (1 GE)
Reset Button
Press and hold for several seconds to set the
appliance into Safe Mode.
LED Indicators
Power: Blue: Indicates power supplies are operating correctly
Yellow: Indicates a disconnected power supply
Test: Quick Blinking Yellow: Initializing
Slow Blinking Yellow: SafeMode
Solid Yellow: Test mode
Alarm: Indicates alarm activity in Red LED
M0: Indicates Expansion Module 0 activity in Red LED
High-speed copper
Gigabit Ethernet ports
X8-X15 (1 GE SFP)
1 Gigabit Ethernet hot-pluggable
SFP interfaces for high-speed fiber or
copper Ethernet communication
X16-X19 (10 GE SFP+)
10 Gigabit Ethernet hot-pluggable ports
*X16, X18, and X19 are designated with a ‘dot’ to
signify ports with a direct uplink to the appliance
CPU for maximum throughput ; X17 shares the
CPU uplink with X0-X15.
The Front Panel | 7
The Back Panel
Fans (2)
Dual auto-throttling fans for system
temperature control
I
o
Power Supply
Expansion Bay
For Dell SonicWALL-approved
expansion modules
Provides power to the Dell SonicWALL appliance
by plugging in the AC adaptor and switching the
appliance on
Warning: Potential Hazard from Fan
This manual contains specific warning and caution statements where they apply. Please read the Safety Instructions before
use! See the Product Safety and Regulatory Information section, on page 49.
8 | The Back Panel
Using this Getting Started Guide
The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 6600
appliance.
Using this Getting Started Guide | 9
Using MySonicWALL
Creating a MySonicWALL Account
Dell SonicWALL requires a MySonicWALL account prior to
configuring your appliance. If you already have a
MySonicWALL account, you can continue to the Configuring
the Appliance section, on page 11.
A MySonicWALL account is required in order to register the
NSA 6600 appliance. Create a new MySonicWALL account
from any computer by navigating to:
<http://www.mysonicwall.com>.
MySonicWALL is used during registration of your
Dell SonicWALL appliance and to activate or purchase licenses
for security services, support, or software specific to your
Dell SonicWALL device.
To create a MySonicWALL account:
1.
2.
In your Web browser, navigate to
<http://www.mysonicwall.com>.
In the login screen, click the Register Now link.
For a High Availability configuration, MySonicWALL provides a
way to associate a backup unit that can share security service
licenses with your primary appliance.
Note: MySonicWALL registration information is not sold or
shared with any other company.
3.
4.
5.
10 | Using MySonicWALL
Complete the Registration form, and then click Register.
Verify that the information is correct, and then click
Submit.
To confirm your account was created, click Continue.
Configuring the Appliance
2
In this Section:
This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and
procedures.
• Determining the WAN Type, page 12
• System Requirements, page 12
• Recording Configuration Information, page 13
• Initial Setup, page 14
• Troubleshooting & Testing Your Connections, page 16
11
Determining the WAN Type
System Requirements
Before configuring your Dell SonicWALL NSA 6600 appliance,
you will need to determine the type of WAN connection your
setup will use. Dell SonicWALL supports the following types:
• Static—Configures the appliance for a network that uses
static IP addresses.
• DHCP—Configures the appliance to request IP settings from
a DHCP server on the Internet.
• PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is
typically used with a DSL modem. If your ISP requires
desktop software, a username, and password, select NAT
with PPPoE mode.
• PPTP—Point-to-Point Tunneling Protocol (PPTP) is used to
connect to a remote server. PPTP typically supports older
Microsoft Windows implementations requiring tunneling
connectivity.
Before beginning the setup process, verify that you have:
• An Internet connection
Note: For more information regarding other WAN types, such
as Layer 2 Tunneling Protocol (L2TP), Wire Mode, or
Tap Mode, please refer to the SonicOS Administrator’s
Guide.
12 | Determining the WAN Type
• A Web browser supporting Java Script and HTTP uploads.
Accepted Browser
Browser Version Number
Internet Explorer
8.0 and higher
Chrome
18.0 and higher
Firefox
16.0 and higher
Safari
5.0 and higher
Recording Configuration Information
Use this section to record your configuration information. Be
sure to keep for future reference.
Administrator Information
Admin Name:
Select an administrator account name.
(default is admin)
Admin Password:
Select an administrator password.
(default is password)
Registration Information
Serial Number:
Record the serial number found on
the bottom panel of your
Dell SonicWALL appliance.
Authentication Code:
Record the authentication code found
on the bottom panel of your
Dell SonicWALL appliance.
Networking Information
LAN IP Address:
_____._____._____._____
Subnet Mask:
_____._____._____._____
Ethernet WAN IP Address:
_____._____._____._____
Internet Service Provider (ISP) Information
Record the following information about your current Internet
service:
If you are
connecting with
DHCP
No information is usually required. However,
some providers may require a Host Name:
_________________________________
Select a static IP address for your
Dell SonicWALL appliance that is
within the range of your local network.
If you are
connecting with
Static IP
IP Address: _____._____._____._____
Subnet Mask:_____._____._____._____
Record the subnet mask for the local
subnet where you are installing your
Dell SonicWALL appliance.
Default Gateway: _____._____._____._____
Select a static IP address for your
Ethernet WAN. This setting only
applies if you are already using an
ISP that assigns a static IP address.
DNS 2 (optional): _____._____._____._____
Primary DNS: _____._____._____._____
DNS 3 (optional): _____._____._____._____
Recording Configuration Information | 13
Initial Setup
This section provides initial configuration information and
instructions for connecting your Dell SonicWALL NSA 6600
appliance. See the following sections:
• Connecting the LAN Port, page 14
• Connecting the WAN Port, page 14
• Applying Power to the NSA 6600, page 14
• Accessing the Management Interface & Setup Wizard,
page 15
• Testing Your WAN Connection, page 16
Connecting the LAN Port
1.
2.
Using the provided Ethernet cable, connect one end of the
cable to the computer you are using to manage the Dell
SonicWALL NSA 6600 appliance.
Connect the other end of the Ethernet cable to the X0
(LAN) port on your Dell SonicWALL NSA 6600 appliance.
Connecting the WAN Port
1.
2.
Connect one end of an Ethernet cable to your Internet
connection.
Connect the other end of the Ethernet cable to the X1
(WAN) port on your Dell SonicWALL NSA 6600 appliance.
14 | Initial Setup
Applying Power to the NSA 6600
Connect the power cord from the Dell SonicWALL NSA 6600
appliance into appropriate power outlets.
For further information regarding power requirements, refer to
the Product Safety and Regulatory Information section, on
page 49 of this document.
NSA 6600 LED Activity
The Power LEDs on the front panel illuminate blue when the
appliance is powered on.
The Link LED above the X0 port illuminates green or amber
depending on the link throughput speed, indicating an active
connection:
• Amber indicates 1 Gbps
• Green indicates 100 Mbps
• An unlit left LED with the right LED lit indicates 10 Mbps
The Test LED or Alarm LED may illuminate and blink while the
appliance performs a series of diagnostic tests. When these
LEDs are no longer illuminated and the Power LEDs remain
steadily lit, the Dell SonicWALL NSA 6600 appliance is ready
for configuration. This typically occurs within a few minutes of
connecting the power.
If the Test or Alarm LEDs remain lit after the NSA 6600 has
completed powering on, restart the appliance by disconnecting
the power, waiting 1 minute, then connecting the power again.
Accessing the Management Interface &
Setup Wizard
2.
Once the NSA 6600 appliance is ready to be configured, ensure
that the computer you will use to manage the appliance is set
up to accept a dynamic IP address, or that it has an unused IP
address on the 192.168.168.x/24 subnet, such as
192.168.168.20.
3.
Note: Be sure to disable pop-up blocking software, or set your
Web browser to allow pop-ups and cookies.
5.
4.
Launch the Dell SonicWALL Setup Wizard by clicking the
first Here link.
This wizard helps you quickly configure the
Dell SonicWALL appliance to secure your Internet
connection.
Follow the on-screen prompts to complete the
Dell SonicWALL Setup Wizard.
A Setup Wizard Summary page displays at the end of the
wizard. Verify the information you’ve entered is correct,
then click Apply.
Once completed, a Setup Wizard Completion notice
displays.
To access the SonicOS management interface, follow the steps
listed:
1.
Start your Web browser and navigate to the default LAN
management IP address: <http://192.168.168.168>.
Click the Here link to begin the registration process on the
SonicOS management interface.
Initial Setup | 15
Troubleshooting & Testing Your
Connections
Testing Your WAN Connection
Use the following steps to test your WAN connection:
1.
The following sections can be used to troubleshoot and test
your LAN and WAN connections.
2.
Troubleshooting Your LAN Connection
3.
If you cannot connect to the Dell SonicWALL NSA 6600 or the
Setup Wizard does not display, consider the following:
• Did you correctly enter the Dell SonicWALL NSA 6600
management IP address in your Web browser?
• Did you try restarting your management station while it is
connected to the Dell SonicWALL appliance?
• Are the Local Area Connection settings on your computer set
to use DHCP or set to a static IP address on the
192.168.168.x/24 subnet?
• Do you have the Ethernet cable connected to your computer
and to the X0 (LAN) port on your appliance?
• Is the connector clip on your network cable properly seated in
the port of the security appliance?
After you exit the Setup Wizard, the login page reappears.
Log back into the SonicOS management interface and
verify your IP and WAN connection.
Open a command prompt window on your computer and
enter the command: ping sonicwall.com
Open another Web browser and navigate to:
<http://www.sonicwall.com>.
If you can view the Dell SonicWALL home page, you have
configured your Dell SonicWALL NSA 6600 correctly.
If you cannot view the Dell SonicWALL home page, renew your
management station DHCP address.
If you still cannot view a Web page, try one of these solutions:
• Restart your management station to accept new network
settings from the DHCP server in the Dell SonicWALL
appliance.
• Restart your Internet router to communicate with the DHCP
client in the Dell SonicWALL appliance.
Note: WAN connectivity issues are unrelated to completion of
the MySonicWALL Registration process.
16 | Troubleshooting & Testing Your Connections
Registering, Licensing, and Upgrading
3
In this Section:
This section provides instructions for registering, licensing, and upgrading firmware on your Dell SonicWALL NSA 6600 appliance.
• Registering Overview, page 18
• Registering in SonicOS, page 18
• Alternative Registration Options, page 19
• Security Services and Software, page 20
• Activating & Managing Licenses Using MySonicWALL, page 21
• Upgrading Firmware, page 22
Note: Registration is an important part of the setup process and is necessary in order to receive the benefits of Dell SonicWALL
security services, firmware updates, and technical support.
17
Registering Overview
Registering in SonicOS
Although there are several ways to register your new
Dell SonicWALL appliance, Dell SonicWALL recommends
registering your appliance through the SonicOS management
interface.
After you have completed the Setup Wizard and can
successfully connect to your Dell SonicWALL NSA 6600
appliance, you are ready to register the security appliance.
This section describes how to register and license your
appliance through SonicOS, as well as the alternate options
available on MySonicWALL.
If your Dell SonicWALL NSA 6600 restarted, log into your
appliance again at <http://192.168.168.168>. Enter the default
username and password (admin / password). If you changed
these fields, use the new values. Then, click Login.
1.
2.
3.
4.
18 | Registering Overview
Navigate to the System > Status page.
A message displays at the top of the screen that your
Dell SonicWALL appliance is not registered. Click the
Register link.
Enter your MySonicWALL username and password in the
appropriate fields. Then, click Submit.
If you haven’t created a MySonicWALL account, see the
Creating a MySonicWALL Account section, on page 10.
In the Licenses > License Management page, specify a
Friendly Name for the Dell SonicWALL appliance.
Complete the Product Survey. Then, click Submit.
Acknowledge the registration completion notification by
clicking Continue. The Licenses > License Management
page now lists all the Security Services associated to your
appliance.
Alternative Registration Options
If you have registered your Dell SonicWALL appliance through
the SonicOS interface, you can continue to the Security
Services and Software section, on page 20.
Although Dell SonicWALL strongly recommends registering
your appliance using the SonicOS interface, you can optionally
use MySonicWALL to register your appliance.
Registering on MySonicWALL
1.
2.
3.
4.
5.
6.
Login to your MySonicWALL account. If you do not have an
account, create one at:
<http://www.mysonicwall.com>.
Type the Dell SonicWALL appliance serial number in the
Register a Product field. Then, click Next.
Type a Friendly Name for the appliance.
Select the Product Group from the dropdown list, if
available.
Enter the Authentication Code, and then click Submit.
The Authentication Code is located on the bottom panel of
your appliance.
Enter the requested information on the Product Survey
page, then click Submit.
Synchronizing Licenses Manually
To manually synchronize licenses with MySonicWALL from the
SonicOS interface:
1.
2.
3.
Login to your appliance and navigate to the System >
Licenses page.
Scroll to the Manage Security Services Online section.
Click the Synchronize button to synchronize licenses with
MySonicWALL.
Using the License Keyset
MySonicWALL provides an encrypted license keyset for each
registered appliance. You can use the license keyset to
manually apply all active licenses to your Dell SonicWALL
appliance.
1.
2.
3.
4.
5.
6.
Login to your MySonicWALL account and click the link for
your appliance.
On the Services Management page, click the View
License Keyset link.
Click the encrypted text, then click Ctrl+A to select the
entire keyset, then copy it to your clipboard.
Login to your appliance and navigate to the System >
Licenses page.
Scroll down to the Manual Upgrade section and enter the
keyset in the appropriate field.
When finished entering the keyset, click Submit.
Alternative Registration Options | 19
Security Services and Software
The My Products > Product Management page in
MySonicWALL lists security services, support options, and
software that you can purchase or try with a free trial. For
details, click the Name of the product. The Service
Management page displays with the most recent details.
Licensing Security Services
To license a security service, complete one of the following
from the MySonicWALL Service Management page:
• Free Trial of Service—Click the Try icon in the Action
column for the security service you wish to try for a 30-day
free trial. The free trial immediately activates and notifies you
of the trial expiration date. The Service Management page
displays updated information about the free trial service.
• Purchase a Service—Click the Cart icon to purchase a
security service. In the Buy Service page, specify the quantity
of licenses wanted, then click Add to Cart. Once the item(s)
have been added, click the Checkout button. Follow the
instructions to complete your purchase.
The Applicable Services section lists the services available for
your product. The Status of a service indicates whether the
service is Licensed, Not Licensed, or Expired. The Action
column lets you purchase or activate additional services.
20 | Security Services and Software
The following products and services are available for the Dell
SonicWALL NSA 6600:
• Service Bundles:
• Comprehensive Gateway Security Suite
• McAfee: Client/Server Anti-Virus Suite
• Gateway Services:
• Gateway AV / Anti-Spyware/Intrusion Prevention Service
• Content Filtering: Premium Edition
• Stateful High Availability
• Comprehensive Anti-Spam Service (CASS)
• Deep Packet Inspection for SSL (DPI-SSL)
• Active/Active High Availability
• Desktop & Server Software:
• McAfee Enforced Client Anti-Virus and Anti-Spyware
• Global VPN Client Enterprise
• WAN Acceleration Software
• WAN Acceleration Client
• Virtual Assist
• Analyzer
• SSL VPN Client License
• Scrutinizer
• Support Services:
• Dynamic Support 24x7
• Software and Firmware Updates
• Hardware Warranty
Activating & Managing Licenses Using
MySonicWALL
To manage your licenses, login to your MySonicWALL account
and perform the following tasks:
1.
If you registered your appliance through SonicOS, all licensed
services are already activated. You can continue to the
Upgrading Firmware section, on page 22.
If you purchased a service subscription or upgrade from a sales
representative separately, you will have an Activation Key for
the service. This key is emailed to you after online purchases,
or is on the front of the certificate that was included with your
purchase.
2.
3.
In the MySonicWALL My Products page, click the
appliance Name. The Applicable Services table displays
a list of services that are already licensed on your
Dell SonicWALL appliance.
Note that your initial purchase may have included security
services or other software bundled with the appliance.
These licenses are enabled on MySonicWALL when the
appliance is delivered to you.
Locate the service in the Applicable Services section and
click the key icon to activate the service.
Type or paste your key into the Activation Key field, and
then click Submit.
After activating the service, you will see a Status and
Expiration date in the respective columns when you return
to the Service Management page.
Activating & Managing Licenses Using MySonicWALL | 21
Upgrading Firmware
Dell SonicWALL recommends that you run the latest available
firmware on your security appliance. You will need to upgrade
the factory-installed firmware to the latest version available on
MySonicWALL.
The following procedures are for upgrading an existing
SonicOS firmware image to a newer version:
•
•
•
•
Saving a Backup Copy of Your Preferences, page 22
Obtaining the Latest Firmware, page 23
Upgrading the Firmware, page 23
Using SafeMode to Upgrade Firmware, page 24
Saving a Backup Copy of Your Preferences
Before beginning the update process, make a system backup
on your Dell SonicWALL appliance. The backup feature saves
a copy of the current system state, firmware, and configuration
settings on your Dell SonicWALL security appliance, protecting
all your existing settings in the event that it becomes necessary
to return to a previous configuration state.
In addition to creating a system backup, you can export the
configuration preferences file to your local management station.
This file serves as an external backup of the configuration
preferences, and can be imported back into the
Dell SonicWALL security appliance if it is necessary to reboot
the firmware with factory default settings.
Perform the following procedures to save a system backup on
your appliance and export configuration settings to a file on
your local management station:
1.
2.
22 | Upgrading Firmware
On the System > Settings page, click Create Backup.
SonicOS takes a “snapshot” of your current system state,
firmware, and configuration preference, and makes it the
new System Backup firmware image. Clicking Create
Backup overwrites the existing System Backup image, if
any. The System Backup entry displays in the Firmware
Management table.
To export your settings to a local file, click Export
Settings. A popup window displays the name of the saved
file.
Obtaining the Latest Firmware
Upgrading the Firmware
To obtain a new SonicOS firmware image file for your
Dell SonicWALL security appliance, perform the following
steps:
Perform the following steps to upload new firmware to your
Dell SonicWALL appliance and use your current configuration
settings upon startup.
1.
2.
3.
4.
In a browser on your management computer, log into your
MySonicWALL account at <http://www.mysonicwall.com>.
In MySonicWALL, click Downloads in the left navigation
pane to display the Download Center screen.
Select NSA 6600 Firmware in the Software Type
dropdown list to display available firmware versions.
Locate the firmware version you want, and click the link to
download it to a convenient location on your computer. You
can download the Release Notes and other associated files
in the same way.
Tip: The appliance must be properly registered before it can
be upgraded. Refer to the Registering in SonicOS
section, on page 18 for more information.
1.
2.
3.
4.
5.
6.
Download the SonicOS firmware image file from
MySonicWALL and save it to a convenient location on your
local computer.
On the System > Settings page in SonicOS, click Upload
New Firmware.
Browse to the location where you saved the SonicOS
firmware image file, select the file and click the Upload
button.
After the firmware finishes uploading, it will display in the
Firmware Management table.
Click the Boot icon in the row for Uploaded Firmware New! to restart the appliance with the new firmware using
your existing configuration settings.
In the confirmation dialog box, click OK. The appliance
restarts and then displays the login page.
Enter your user name and password. Your new SonicOS
image version information is listed on the System > Status
page.
Upgrading Firmware | 23
Using SafeMode to Upgrade Firmware
5.
If you are unable to connect to the SonicOS management
interface, you can restart the security appliance in SafeMode.
The SafeMode feature allows you to recover quickly from
uncertain configuration states with a simplified management
interface that includes the same settings available on the
System > Settings page.
Perform the following steps to use SafeMode to upgrade
firmware on the Dell SonicWALL security appliance:
1.
2.
3.
4.
Connect your computer to the MGMT port on the appliance
and configure your IP address with an address on the
192.168.1.0/24 subnet, such as 192.168.1.20.
To force the appliance into SafeMode, use a narrow,
straight object, like a straightened paper clip or a toothpick,
to press and hold the Reset button on the front of the
Dell SonicWALL appliance for at least twenty seconds,
until the Test light begins blinking. See The Front Panel
section, on page 7 to locate the Reset button.
The Test light begins to blink when the Dell SonicWALL
security appliance has rebooted into SafeMode.
Enter 192.168.1.254 into your computer’s Web browser to
access the SafeMode management interface.
Click Upload New Firmware, and then browse to the
location where you saved the SonicOS firmware image,
select the file and click the Upload button.
24 | Upgrading Firmware
6.
7.
8.
9.
Select the boot icon in the row for one of the following:
• Uploaded Firmware - New!
Use this option to restart the appliance with your current
configuration settings.
• Uploaded Firmware with Factory Default SettingsNew!
Use this option to restart the appliance with default
configuration settings.
In the confirmation dialog box, click OK to proceed.
Disconnect your computer from the MGMT port, and
reconfigure it to automatically obtain an IP address and
DNS server address, or reset it to its normal static values.
Connect the computer back to your network and point your
browser to the LAN or WAN IP address of the
Dell SonicWALL appliance.
After successfully booting the firmware, the login screen
displays. If you restarted with factory default settings, enter
the default user name and password (admin / password) to
access the SonicOS management interface.
Deployment Scenarios
4
In this Section:
This section provides configuration overviews, as well as deployment scenarios for your Dell SonicWALL NSA 6600.
• Advanced Deployment Scenarios, page 26
• Configuring NAT Mode Gateway, page 30
• Configuring a Stateful HA Pair, page 31
• Configuring L2 Bridge Mode, page 37
25
Advanced Deployment Scenarios
Select a deployment scenario that best fits your network scheme. Reference the table below and the diagrams on the following pages for
help in choosing a scenario.
Current Gateway Configuration
New Gateway Configuration
Use Scenario
No gateway appliance
Single SuperMassive appliance as a primary
gateway.
Scenario A: NAT Mode Gateway, page 27
Pair of SuperMassive appliances for high
availability.
Scenario B: Stateful HA Pair, page 28
SuperMassive as replacement for an existing
gateway appliance.
Scenario A: NAT Mode Gateway, page 27
SuperMassive in addition to an existing gateway
appliance.
Scenario C: L2 Bridge Mode, page 29
SuperMassive appliance in addition to an
existing Dell SonicWALL gateway appliance.
Scenario B: Stateful HA Pair, page 28
Existing Internet gateway appliance
Existing SonicWALL gateway appliance
A
C
B
X18
10GE
X16
X14
X12
1GE
X10
X8
X6
X4
1GE
X2
X0
X18
SDHC
BYPASS
STATUS
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
Internet or
LAN Segment 2
BYPASS
STATUS
TEST
PWR
PWR
CONSOLE
X16
M0
ALARM
TEST
SonicWALL NSA 6600
10GE
SDHC
M0
ALARM
MGMT
X19
X17
X15
X13
X11
X9
X7
X5
X3
X1
SonicWALL NSA 6600
ISP 1
CONSOLE
MGMT
X19
Internet
X18
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
SonicPoint
X18
10GE
X16
X14
X12
1GE
X10
X8
X6
X4
1GE
X2
MGMT
CONSOLE
X19
X0
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
CONSOLE
MGMT
X19
X17
X15
X13
X11
X9
X7
X5
X3
Internet
X1
SonicPoint
DMZ Zone
WLAN Zone
LAN Zone
Local Network
26 | Advanced Deployment Scenarios
WLAN Zone
LAN Zone
Scenario A: NAT Mode Gateway
For new network installations or installations where the
NSA 6600 is replacing the existing network gateway.
In this scenario, the NSA 6600 is configured in NAT mode to
operate as a single network gateway. Two Internet connections
may be routed through the Dell SonicWALL appliance for load
balancing and failover purposes. Because only a single
Dell SonicWALL appliance is deployed, the added benefits of
high availability with a stateful synchronized pair are not
available.
A
Dell SonicWALL NSA Appliance
X18
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
CONSOLE
MGMT
X19
ISP 1
Internet
SonicPoint
DMZ Zone
WLAN Zone
LAN Zone
To set up this scenario, follow the steps covered in:
• Configuring NAT Mode Gateway, page 30
Advanced Deployment Scenarios | 27
Scenario B: Stateful HA Pair
For network installations with two Dell SonicWALL NSA 6600
appliances configured as a stateful synchronized pair for
redundant High Availability (HA) networking.
B
Dell SonicWALL NSA Appliance 2
Dell SonicWALL
HA/Failover Pair
X18
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
In this scenario, one NSA 6600 operates as the Primary
gateway device and the other NSA 6600 is in Idle mode. All
network connection information is synchronized between the
two devices so that the Secondary appliance can seamlessly
switch to Active mode without dropping connections if the
Primary device loses connectivity.
To set up this scenario, follow the steps covered in:
• Configuring a Stateful HA Pair, page 31
28 | Advanced Deployment Scenarios
CONSOLE
MGMT
X19
HA Control Link
HA Data Link
X18
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
CONSOLE
MGMT
X19
Dell SonicWALL NSA Appliance 1
Local Network
Internet
Scenario C: L2 Bridge Mode
For network installations where the Dell SonicWALL NSA 6600
is running in tandem with an existing network gateway.
In this scenario, the original gateway is maintained. The Dell
SonicWALL NSA 6600 is integrated seamlessly into the existing
network, providing the benefits of deep packet inspection and
comprehensive security services on all network traffic.
L2 Bridge Mode employs a secure learning bridge architecture,
enabling it to pass and inspect traffic types that cannot be
handled by many other methods of transparent security
appliance integration. Using L2 Bridge Mode, a Dell SonicWALL
security appliance can be non-disruptively added to any
Ethernet network to provide in-line deep-packet inspection for
network traffic.
C
Third Party Gateway
Internet or
LAN Segment 2
L2 Bridge Link
Dell SonicWALL NSA Appliance
X18
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
MGMT
CONSOLE
X19
SonicPoint
WLAN Zone
LAN Zone
To set up this scenario, follow the steps covered in:
• Configuring L2 Bridge Mode, page 37
Advanced Deployment Scenarios | 29
Configuring NAT Mode Gateway
Dell SonicWALL NSA Appliance
X18
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
SDHC
This section provides an overview of a Dell SonicWALL NSA
6600 appliance operating as a single network gateway in NAT
mode, which is the default mode for a newly configured
NSA 6600. This section is relevant to administrators following
deployment Scenario A.
Note: No additional configuration is necessary to deploy your
appliance as a single network gateway in Many-to-One
NAT mode.
Overview of NAT Mode
Network Address Translation (NAT) allows private IP addresses
on internal networks to be mapped to at least one public IP
address on the WAN interface of the Dell SonicWALL security
appliance. Outbound traffic from the internal network uses
many-to-one NAT address mappings for their LANs, WLANs,
and other internal networks.
All traffic in SonicOS must go through both an access rule and a
NAT policy, a fundamental part of the NAT Mode architecture.
The NAT policy is even used for traffic that needs no IP address
translation, such as traffic traveling between two different LAN
interfaces, traffic on the simplest types of VPNs, or through
Layer 2 Bridge Mode / Transparent Mode configurations.
30 | Configuring NAT Mode Gateway
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
CONSOLE
MGMT
X19
Internet
X1
X16
X8
X0
SonicPoint
DMZ Zone
WLAN Zone
LAN Zone
The Dell SonicWALL NSA 6600 ships with the internal DHCP
server active on the LAN port. However, if a DHCP server is
already active on your LAN, the Dell SonicWALL appliance will
disable its own DHCP server to prevent conflicts.
As shown in the illustration, ports X1 and X0 are preconfigured
as WAN and LAN, respectively. The remaining ports (X2-X17)
can be configured to meet the needs of your network. In the
example diagram, certain interfaces are configured for specific
zones:
• X1—WAN
• X0—LAN
• X12—Wireless LAN
• X16—DMZ
NAT policies allow the flexibility to control Network Address
Translation based on matching combinations of Source IP
address, Destination IP address, and Destination Services.
Policy-based NAT allows you to deploy different types of NAT
simultaneously.
For configuration procedures and information regarding the
different types of NAT policies, such as Many-to-One, One-toOne, or One-to-Many Load Balancing, refer to the SonicOS
Administrator’s Guide.
Configuring a Stateful HA Pair
This section provides instructions for configuring a pair of Dell
SonicWALL NSA 6600 appliances for Stateful High Availability
(HA). This section is relevant to administrators following
deployment Scenario B.
A Stateful HA pair operates in NAT mode by default, similar to
Scenario A, with the added benefit of high availability.
See the following sections:
• Initial High Availability Setup, page 32
• Configuring High Availability Settings, page 32
• Configuring HA Monitoring Settings, page 33
• Configuring Optional HA Settings, page 34
• Configuring HA Advanced Settings, page 34
• HA License Configuration Overview, page 35
• Completing HA Pair Association, page 35
• Verifying High Availability Setup, page 36
Configuring a Stateful HA Pair | 31
Dell SonicWALL NSA Appliance 2
Dell SonicWALL
HA/Failover Pair
X18
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
1GE
X2
X0
X3
X1
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
10GE
X16
X14
X12
X17
X15
X13
1GE
X10
X8
X6
X4
X11
X9
X7
X5
MGMT
X19
HA Control Link
HA Data Link
Dell SonicWALL NSA Appliance 1
X18
CONSOLE
1GE
X2
X0
X3
X1
SDHC
M0
BYPASS
STATUS
ALARM
TEST
Internet
• Ensure the Primary and Secondary security appliances’ LAN,
WAN, and other interfaces are properly connected for failover.
• Connect the HA Control and Data Links on the Primary and
Secondary appliances with appropriate cables.
• Turn on the Primary Dell SonicWALL security appliance first.
Then, turn on the Secondary Dell SonicWALL security
appliance.
PWR
SonicWALL NSA 6600
CONSOLE
MGMT
X19
Configuring High Availability Settings
Local Network
Initial High Availability Setup
Before you begin the configuration of HA on the Primary
Dell SonicWALL security appliance, perform the following
tasks:
• Determine which interfaces should be used as the HA Control
Link and the HA Data Link. Remember, they must be the
same ports on each appliance.
• On the bottom panel of the appliance that will run as the
Secondary device, locate the serial number and write the
number down. You need to enter this number in the High
Availability > Settings > HA Devices page.
• Verify that the Primary and Secondary appliances are
registered on MySonicWALL, running the same SonicOS
versions.
32 | Configuring a Stateful HA Pair
The first task in setting up HA after completing the Initial Setup
section, on page 14 is configuring the High Availability >
Settings page on the Primary Dell SonicWALL security
appliance. Once you configure HA on the Primary appliance, it
communicates the settings to the Secondary appliance.
To configure HA on the Primary Dell SonicWALL, log in to your
Primary appliance and perform the following steps:
1.
2.
3.
4.
5.
6.
Navigate to the High Availability > Settings page.
On the General tab, select Active / Idle from the Mode
dropdown menu.
Select the Enable Stateful Synchronization checkbox.
Next, navigate to the HA Devices tab and type in the serial
number for the Secondary appliance.
Navigate to the HA Interfaces tab and specify an HA
Control Interface and an HA Data Interface.
Click Apply to save these settings. All settings will be
synchronized to the Secondary appliance, and the
Secondary appliance will reboot.
Configuring HA Monitoring Settings
2.
After configuring the HA settings, you need to configure the
Monitoring settings for the LAN or WAN.This includes
configuring unique IP addresses for each appliance in the
Stateful HA pair. You will need to log into the appliances using
these IP addresses in order to complete the registration process
from within SonicOS, which will allow license sharing and
synchronization.
3.
Navigate to the High Availability > Monitoring page to
configure the Monitoring settings.
1.
Click the Configure icon of the Interface for which you
want to edit settings. The Edit HA Monitoring dialog box
displays.
4.
5.
6.
7.
In the Primary IP Address field, enter the unique LAN or
WAN management IP address of the Primary appliance.
In the Secondary IP Address field, enter the unique LAN
or WAN management IP address of the Secondary
appliance.
Select the Allow Management on Primary/Secondary IP
Address checkbox.
Optionally Enable Physical / Link Monitoring by selecting
the checkbox.
Optionally enable Logical / Probe IP Address by selecting
the checkbox and providing the IP Address of the target
host.
Click OK.
You can repeat these steps to configure Monitoring on other
interfaces.
For more information regarding the optional settings, see the
SonicOS Administrator’s Guide.
Configuring a Stateful HA Pair | 33
Configuring Optional HA Settings
3.
The following settings are optional. You can configure these
settings from the High Availability > Settings page.
1.
2.
3.
To backup the firmware and settings when you upgrade
the firmware version, select the Generate/Overwrite
Backup Firmware and Settings When Upgrading
Firmware checkbox.
Select the Enable Virtual MAC checkbox to allow the
Primary and Secondary appliances to share a single MAC
address. This greatly simplifies the process of updating
network ARP tables and caches when a failover occurs.
Only the WAN switch that the two appliances are
connected to needs to be notified. All outside devices will
continue to route to the single shared MAC address.
Click Apply to save any of the settings on this page.
Configuring HA Advanced Settings
The following settings are optional. You can configure the
following settings from the High Availability > Advanced
page.
1.
2.
Adjust the Heartbeat Interval to control how often the two
units communicate. The default and recommended
minimum is 1000 milliseconds.
The Failover Trigger Level sets the number of heartbeats
that can be missed before failing over. Dell SonicWALL
recommends leaving this field at its default setting. This
field can be tuned later as necessary for your specific
network environment.
34 | Configuring a Stateful HA Pair
4.
5.
6.
7.
8.
9.
Set the Probe Interval for the interval in seconds between
communication with upstream or downstream systems.
Dell SonicWALL recommends that you set the interval for
at least 5 seconds. You can set the Probe IP Address(es)
on the High Availability > Monitoring screen.
Set the Probe Count, which is the number of consecutive
probes before the appliance considers the network path
unreachable or broken. The default count is 3.
The Election Delay Time is the number of seconds
allowed for internal processing between the two units in the
HA pair before one of them takes the primary role.
Dell SonicWALL recommends leaving this field at its
default setting. This field can be tuned later as necessary
for your specific network environment.
Enable the Active / Idle Failover only when ALL
aggregate links are down checkbox to treat the
aggregated link as down (causing a failover) only if all
member links are down.
Select the Include Certificates/Keys checkbox to have
the appliances synchronize all certificates and keys.
Click Synchronize Settings to synchronize the settings
between the Primary and Secondary appliances.
Click Synchronize Firmware if you previously uploaded
new firmware to your Primary appliance while the
Secondary appliance was offline, and it is now online and
ready to upgrade to the new firmware.
Synchronize Firmware is typically used after taking your
Secondary appliance offline while you test a new firmware
version on the Primary appliance before upgrading both
appliances to it.
10. Click Force Active / Idle Failover to force a failover
between your Primary and Secondary appliances.
11. Click Accept to retain the settings on this screen.
HA License Configuration Overview
You can configure HA license synchronization by associating
two Dell SonicWALL security appliances as HA Primary and HA
Secondary on MySonicWALL.
You must purchase a single set of security service licenses for
the HA Primary appliance. To use Stateful HA, you must first
activate the Stateful High Availability Upgrade license for the
primary unit in SonicOS. This is automatic if your appliance is
connected to the Internet. See the Registering, Licensing, and
Upgrading section, on page 17.
License synchronization is used during HA so that the
Secondary appliance can maintain the same level of network
protection provided before the failover.
Completing HA Pair Association
You will need to associate the two appliances on
MySonicWALL. The second appliance will automatically share
the Security Services licenses of the primary appliance.
If the second appliance has not yet been registered, follow the
steps listed in the Registering on MySonicWALL section, on
page 19 to register it.This is necessary to make it available for
HA association with the Primary.
Once both appliances are registered, you can then follow the
steps below to associate the two Dell SonicWALL appliances.
1.
2.
3.
4.
5.
6.
7.
8.
Login to your MySonicWALL account.
Click My Products from the left navigation bar.
On the My Products page, scroll down to find the appliance
that you want to use as the parent, or Primary, appliance.
Click the product Name or Serial Number.
On the Service Management page, scroll down to the
Associated Products section.
Under Associated Products, click HA Secondary.
On the My Product page, in the text boxes under Associate
New Products, type the Serial Number and the Friendly
Name of the appliance that you want to associate as the
child, or Secondary, appliance.
Select the group from the Product Group dropdown list.
The product group setting specifies the MySonicWALL
users who can upgrade or modify the appliance.
Click Associate.
Configuring a Stateful HA Pair | 35
9.
Login to the SonicOS management interface of the Primary
appliance using the unique IP address assigned on the
High Availability > Monitoring page.
10. Navigate to the System > Status page and click the
registration link. This allows the unit to synchronize with the
Dell SonicWALL license server and share licenses with the
associated appliance.
11. Then, login to the SonicOS management interface of the
Secondary appliance using its unique IP address.
12. Navigate to the System > Licenses page and click the
Synchronize Licenses button. This ensures that both the
Primary and Secondary appliances successfully
synchronize with the Dell SonicWALL license server and
share licenses.
This completes the HA association on MySonicWALL and
ensures that both appliances can share licenses.
Verifying High Availability Setup
Once you have configured the HA settings on the Primary
Dell SonicWALL appliance, login to the Primary appliance’s
unique LAN/WAN IP address. Note that the management
interface displays Logged Into: Primary Dell SonicWALL
Status: Active in the upper right-hand corner.
To verify that the Primary and Secondary Dell SonicWALL
security appliances are functioning correctly, wait a few
minutes, then turn off the Primary device. The Secondary
security appliance should quickly take over.
36 | Configuring a Stateful HA Pair
From your management workstation, test connectivity through
the Secondary appliance by accessing a site on the public
Internet – note that the Secondary appliance, when active,
assumes the complete identity of the Primary, including its IP
addresses and Ethernet MAC addresses.
Log into the Secondary Dell SonicWALL appliance’s unique
LAN/WAN IP address. The management interface should now
display Logged Into: Secondary Dell SonicWALL Status:
Active in the upper right-hand corner.
Now, turn the Primary appliance back on, wait a few minutes,
then log back into the management interface. If stateful
synchronization is enabled (automatically disabling preempt
mode), the management GUI should still display Logged Into:
Backup Dell SonicWALL Status: Active in the upper-righthand corner.
If you are using the Physical/Logical Monitoring feature,
experiment with disconnecting each monitored link to ensure
correct configuration.
Configuring L2 Bridge Mode
This section provides instructions to configure the Dell
SonicWALL NSA 6600 appliance in tandem with an existing
Internet gateway device. This section is relevant to users
following deployment Scenario C.
Connection Overview
Connect the X1 port on your Dell SonicWALL NSA 6600 to the
LAN port on your existing Internet gateway device. Then
connect the X0 port on your Dell SonicWALL to your LAN
resources.
Network Gateway
See the following sections:
LAN
Dell SonicWAL L NSA Appliance
Internet or
LAN Segment 2
• Connection Overview, page 37
• Configuring the Primary Bridge Interface, page 37
• Configuring the Secondary Bridge Interface, page 38
X18
10GE
X16
X14
X12
1GE
X10
X8
X6
X4
1GE
X2
X0
SDHC
M0
BYPASS
STATUS
ALARM
TEST
PWR
SonicWALL NSA 6600
CONSOLE
MGMT
X19
X17
X15
X13
X11
X9
X7
X0
X5
X3
L2 Bridge Link
X1
X1
Network Resources
Configuring the Primary Bridge Interface
The primary bridge interface is connected to your existing
Internet gateway device. The only step involved in setting up
your primary bridge interface is to ensure that the WAN
interface is configured for a static IP address. You will need this
static IP address when configuring the secondary bridge.
Note that the primary bridge interface must have a static IP
assignment.
Configuring L2 Bridge Mode | 37
Configuring the Secondary Bridge Interface
1.
2.
3.
4.
Navigate to the Network > Interfaces page from the
navigation panel.
Click the Configure icon in the right column of the X0 (LAN)
interface.
In the IP Assignment drop-down, select Layer 2 Bridged
Mode.
In the Bridged to drop-down, select the X1 interface.
38 | Configuring L2 Bridge Mode
5.
Configure management options (HTTP, HTTPS, Ping,
SNMP, SSH, User logins, or HTTP redirects).
Note: Do not enable Never route traffic on this bridge-pair
unless your network topology requires that all packets
entering the L2 Bridge remain on the L2 Bridge
segments. You may optionally enable the Block all
non-IPv4 traffic setting to prevent the L2 bridge from
passing non-IPv4 traffic.
Support and Training Options
5
In this Section:
This section provides overviews of customer support and training options for the Dell SonicWALL NSA 6600.
• Customer Support, page 40
• Knowledge Portal, page 40
• User Forums, page 41
• Training, page 41
• Related Documentation, page 42
39
Customer Support
Knowledge Portal
Designed for customers with Dell SonicWALL NSA solutions,
Dell SonicWALL NSA Support 24x7 delivers the enterpriseclass support features and quality of service that enterprise
companies require to keep their networks running smoothly and
efficiently. Dell SonicWALL Support 24x7 is an around-theclock support service that includes phone, email and Webbased technical support, software and firmware updates and
upgrades and Advance Exchange hardware replacement.
Please Note: Continuous support is required on all NSA
products.
The Knowledge Portal is a resource which allows users to
search for Dell SonicWALL documents based on the following
types of search tools:
For further information, visit:
<http://www.sonicwall.com/us/support.html>
40 | Customer Support
• Browse
• Search for keywords
• Full-text search
For further information, visit:
<http://www.sonicwall.com/us/support/kb.asp>
User Forums
Training
The Dell SonicWALL User Forums is a resource that provides
users the ability to communicate and discuss a variety of
security and appliance subject matters. In this forum, the
following categories are available for users:
Dell SonicWALL offers an extensive sales and technical training
curriculum for Network Administrators, Security Experts and
Dell SonicWALL Medallion Partners who need to enhance their
knowledge and maximize their investment in Dell SonicWALL
Products and Security Applications. Dell SonicWALL Training
provides the following resources for its customers:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Firewall
Networking
Installation / Upgrading
VPN and VPN Client
SonicPoint and Wireless
3G/4G WAN
Security Services
GMS and Analyzer
Secure Remote Access (E-Class / SMB)
Mobile Connect
Email Security
Continuous Data Protection
Scrutinizer
WAN Acceleration (WXA)
•
•
•
•
•
E-Training
Instructor-Led Training
Custom Training
Technical Certification
Authorized Training Partners
For further information, visit:
<http://training.sonicwall.com/>
For further information, visit:
<https://forum.sonicwall.com/>
User Forums | 41
Related Documentation
See the following related documents for more information:
• Dell SonicWALL SonicOS Administrator’s Guide
• Dell SonicWALL SonicOS Release Notes
• Dell SonicWALL Feature Modules
• Application Intelligence and Control
• Application Bandwidth Management
• IPFIX/Netflow Reporting
• Deep Packet Inspection for SSL
• Multiple Administrators
• NAT Load Balancing
• Packet Capture
• RF Management
• Single Sign On
• SSL Control
• Virtual Access Points
• Dell SonicWALL Global VPN Client Administrator’s Guide
• Dell SonicWALL GAV Administrator’s Guide
• Dell SonicWALL IPS Administrator’s Guide
• Dell SonicWALL Anti-Spyware Administrator’s Guide
For further information, visit:
<http://www.sonicwall.com/us/support.html>
42 | Related Documentation
Rack Mounting Instructions
6
In this Section:
This section provides illustrated rack mounting instructions for the Dell SonicWALL NSA 6600. For more information on rack mounting
requirements, see the Product Safety and Regulatory Information section, on page 49.
| 43
Rack Mounting Instructions
Assemble the Slide Rail
Fasten 4 screws to the rail.
A
B
A
B
WASHERS*8
M4 SCREW*8
44 | Rack Mounting Instructions
Assemble the Slide Rail
Fasten two-sided screws to the rail.
C
C
M5 SCREW*8
M5 Nut*8
Rack Mounting Instructions | 45
Assemble Inner Rail to Chassis
Fasten 6 screws to attach the inner channel onto the chassis.
D
D
M4 SCREW*6
46 | Rack Mounting Instructions
Insert Chassis to Frame
Slide inner channel into rails.
Push hook down to separate.
Rack Mounting Instructions | 47
48 | Rack Mounting Instructions
Product Safety and Regulatory Information
7
In this Section:
This section provides regulatory along with trademark and copyright information.
• Safety and Regulatory Information, page 50
• Warranty Information, page 54
• Copyright Notice, page 54
49
Safety and Regulatory Information
Regulatory Model/Type
1RK27-0A5
Product Name
NSA 6600
• Reliable grounding of rack-mounted equipment must be maintained. Particular
attention must be given to power supply connections other than direct
connections to the branch circuits, such as power strips.
• The included power cord is approved for use only in specific countries or
regions. Before using a power cord, verify that it is rated and approved for use in
your location.
• Never remove or install a power supply with the AC power cord attached to the
power supply being removed or installed.
• Thumbscrews should be tightened with a tool after both installation and
subsequent access to the rear of the product.
Safety Instructions
The following conditions are required for proper installation:
• The Dell SonicWALL appliance is designed to be mounted in a standard 19-inch
rack mount cabinet.
• Use the mounting hardware recommended by the rack manufacturer and ensure
that the rack is adequate for the application.
• Ensure that no water or excessive moisture can enter the unit.
• Allow unrestricted airflow around the unit and through the vents on the side of
the unit. A minimum of 1 inch (25.44mm) clearance is recommended.
• Route cables away from power lines, fluorescent lighting fixtures, and sources
of noise such as radios, transmitters, and broadband amplifiers.
• This product is not intended to be installed and used in a home or public area
accessible to the general population. When installed in schools, this equipment
must be installed in a secure location accessible only by trained personnel.
• Mount in a location away from direct sunlight and sources of heat. A maximum
ambient temperature of 104º F (40º C) is recommended.
• If installed in a closed or multi-rack assembly, the operating ambient temperature
of the rack environment may be greater than the room ambient. Therefore,
consideration should be given to installing the equipment in an environment
compatible with the maximum recommended ambient temperature.
• Mount the Dell SonicWALL appliances evenly in the rack in order to prevent a
hazardous condition caused by uneven mechanical loading.
• Four mounting screws, compatible with the rack design, must be used and handtightened to ensure secure installation. Choose a mounting location where all
four mounting holes line up with those of the mounting bars of the 19-inch rack
mount cabinet.
• A suitably rated and approved branch circuit breaker shall be provided as part of
the building installation. Follow local code when purchasing materials or
components.
• Consideration must be given to the connection of the equipment to the supply
circuit. Appropriate consideration of equipment nameplate ratings must be used
when addressing this concern. Do not overload the circuit.
50 | Safety and Regulatory Information
Warning of Potential Hazard from Fan
• Before replacing the fan unit, carefully read and follow the instructions provided
with the unit.
Lithium Battery Warning
The Lithium Battery used in the Dell SonicWALL Internet security appliance may
not be replaced by the user. The appliance must be returned to a Dell SonicWALL
authorized service center for replacement with the same or equivalent type
recommended by the manufacturer. If, for any reason, the battery or
Dell SonicWALL Internet security appliance must be disposed of, do so following
the battery manufacturer's instructions.
Cable Connections
All Ethernet and RS232 (Console) cables are designed for intra-building
connection to other equipment. Do not connect these ports directly to
communication wiring or other wiring that exits the building where the
Dell SonicWALL is located.
Sicherheitsanweisungen
Für eine ordnungsgemäße Montage sollten die folgenden Hinweise beachtet
werden:
• Das Dell SonicWALL Modell ist für eine Montage in einem standardmäßigen 19Zoll-Rack konzipiert.
• Vergewissern Sie sich, dass das Rack für dieses Gerät geeignet ist und
verwenden Sie das vom Rack-Hersteller empfohlene Montagezubehör.
• Stellen Sie sicher, dass das Gerät vor Wasser und hoher Luftfeuchtigkeit
geschützt ist.
• Stellen Sie sicher, dass die Luft um das Gerät herum zirkulieren kann und die
Lüftungsschlitze an der Seite des Gehäuses frei sind. Hier ist ein
Belüftungsabstand von mindestens 26 mm einzuhalten.
• Achten Sie darauf, das sich die Netzwerkkabel nicht in der unmittelbaren Nähe
von Stromleitungen, Leuchtstoffröhren und Störquellen wie Funksendern oder
Breitbandverstärkern befinden
• Dieses Produkt ist nicht dafür entwickelt, um in Bereichen mit öffentlichem
Zugang betrieben zu werden. Wenn es in Schulen betrieben wird, stellen Sie
sicher, dass das Gerät in einem abgeschlossenen Raum installiert wird, der nur
von speziell ausgebildetem Personal betreten werden kann.
• Wählen Sie für die Montage einen Ort, der keinem direkten Sonnenlicht
ausgesetzt ist und sich nicht in der Nähe von Wärmequellen befindet. Die
Umgebungstemperatur darf nicht mehr als 40 °C betragen.
• Wenn das Gerät in einem geschlossenen 19"-Gehäuse oder mit mehreren
anderen Geräten eingesetzt ist, wird die Temperatur in der Gehäuse höher sein
als die Umgebungstemperatur. Achten Sie darauf, daß die
Umgebungstemperatur nicht mehr als 40° C beträgt.
• Bringen Sie die Dell SonicWALL waagerecht im Rack an, um mögliche Gefahren
durch ungleiche mechanische Belastung zu vermeiden.
• Verwenden Sie für eine sichere Montage vier passende Befestigungsschrauben,
und ziehen Sie diese mit der Hand an. Wählen Sie einen Ort im 19-Zoll-Rack, wo
alle vier Befestigungen der Montageschien verwendet werden.
• Ein angemessen dimensionierter und geprüfte Sicherung, sollte Bestandteil der
Haus-Installation sein. Bitte folgen die den lokalen Richtlinien beim Einkauf von
Material oder Komponenten.
• Prüfen Sie den Anschluss des Geräts an die Stromversorgung, damit der
Überstromschutz sowie die elektrische Leitung nicht von einer eventuellen
Überlastung der Stromversorgung beeinflusst werden. Prüfen Sie dabei
sorgfältig die Angaben auf dem Aufkleber des Geräts. Überlasten Sie nicht den
Stromkreis.
• Eine sichere Erdung der Geräte im Rack muss gewährleistet sein. Insbesondere
muss auf nicht direkte Anschlüsse an Stromquellen geachtet werden wie z. B.
bei Verwendung von Mehrfachsteckdosen.
• Das im Lieferumfang enthaltene bzw. die im Lieferumfang enthaltenen
Netzkabel sind nur für die Verwendung in bestimmten Ländern und Regionen
zugelassen. Überprüfen Sie bitte vor der Verwendung eines Netzkabels, ob es
für die Verwendung in Ihrem Land oder Ihrer Region zugelassen ist und den
geforderten Normen entspricht.
• Wenn Sie das Netzteil wechseln, entfernen Sie unbedingt die Stromversorgung
von dem zu wechselnden Netzteil.
• Vergewissern Sie sich, dass die Schrauben nach dem Austausch mit
entsprechendem Werkzeug fest angezogen werden.
Achtung—Lüfter Potentielle Gefahrenquelle
• Lesen Sie vor dem Austausch der Lüftereinheit die Anleitung, die mit dem Gerät
geliefert wurde und befolgen Sie die Anweisungen.
Hinweis zur Lithiumbatterie
Die in der Internet Security Appliance von Dell SonicWALL verwendete
Lithiumbatterie darf nicht vom Benutzer ausgetauscht werden. Zum Austauschen
der Batterie muss die Dell SonicWALL in ein von Dell SonicWALL autorisiertes
Service-Center gebracht werden. Dort wird die Batterie durch denselben oder
entsprechenden, vom Hersteller empfohlenen Batterietyp ersetzt. Beachten Sie
bei einer Entsorgung der Batterie oder der Dell SonicWALL Internet Security
Appliance die diesbezüglichen Anweisungen des Herstellers.
Kabelverbindungen
Alle Ethernet- und RS232-C-Kabel eignen sich für die Verbindung von Geräten in
Innenräumen. Schließen Sie an die Anschlüsse der Dell SonicWALL keine Kabel
an, die aus dem Gebäude in dem sich das Gerät befindet herausgeführt werden.
Safety and Regulatory Information | 51
⬱ℐ婒㖶
暨天㺧嵛ẍᶳ㡅ẞẍ忚埴㬋䡢⬱墅烉
ɀ㇜䇦 ŔŰůŪŤŘłōōġ姕⁁塓姕妰ㆸ⬱墅⛐ᶨᾳ㧁㸾䘬 IJĺ ⎳㨇㝞⬱
墅㩫ˤ暨天㺧嵛ẍᶳ㡅ẞẍ忚埴㬋䡢⬱墅烉
ɀἧ䓐㨇㝞墥忈⓮㍐啎䘬墅庱䠔橼炻䡢娵㨇㝞嵛⣈墅伖㇨暨
ɀ婳䡢娵墅伖ℏᶵ㚫㺚ℍ㯜↮ㆾ忶⣂䘬㽽㯋ˤ
ɀ墅伖忙怲婳ᾅ㊩忂桐炻䈡⇍㗗墅伖忂桐⎋“ˤ⺢嬘墅伖冯䇮
⡩攻军⮹天㚱ġIJġ劙⎳ġĩijĶįĵĵġ℔慸 Īġ䘬㶐䨢ˤ
ɀ乄䶂䘬嶗⼹ㅱ怈暊暣㸸䶂ˣ㖍⃱䅰炻ẍ⍲㚫䓊䓇暄妲䘬Ἦ㸸炻
⤪䃉䶂暣ˣ䘤復☐冯⮔柣㓦⣏☐ˤ
ɀ㛔䓊⑩䘬姕妰䚖䘬ᶵ㗗⬱墅᷎ἧ䓐㕤ỷ⭞ㆾᶨ凔⣏䛦⎗㍍妠
⇘䘬℔ℙ⋨➇ˤ⤪㝄㗗⬱墅⛐⬠㟉炻㛔姕⁁⎒傥⬱墅⛐⍿妻Ṣ
⒉傥㍍妠⇘䘬⬱ℐỵ伖ˤ
ɀ㝞姕ỵ伖暨怈暊春⃱䚜⮬冯䅙㸸ˤ⺢嬘␐⚵㹓⹎㚨檀㹓ᶵġ天
崭忶ġIJıĵƱŇġĩĵıƱńĪˤ
ɀ⤪㝄㗗⬱墅㕤⮩攱⺷ㆾ⣂䳬㨇㝞惵ẞ炻㨇㝞䑘⠫䘬␐⚵㑵ἄ
㹓⹎⎗傥㚫檀忶⭌ℏ␐怕ˤ⚈㬌炻⛐冯ᶲ徘⺢嬘ᷳ㚨檀␐⚵㹓
⹎䚠⭡䘬䑘⠫ᷕ⬱墅姕⁁㗪炻ㅱ⮯㬌↿ℍ侫慷ˤ
ɀ⮯ġ㇜䇦 ŔŰůŪŤŘłōō 墅伖⸛✎⛘墅姕⛐㨇㝞ᷕ炻⤪㬌ㇵ傥性⃵
⚈ᶵ⛯⊣䘬㨇㡘屈匟忈ㆸ⌙晒䉨㱩ˤ
ɀ⽭枰ἧ䓐⚃柮冯㨇㝞姕妰䚠⭡䘬⬱墅坢憀炻᷎䓐ㇳ挾䵲坢憀炻
䡢⭂⬱墅䈊⚢ˤ怠㑯ᶨᾳ⬱墅ỵ伖炻⮯⚃ᾳ墅庱㳆⫼⮵滲ġIJĺ
⎳㝞姕㨇㩫䘬⬱墅㠧ˤ
ɀㅱ䔞㍸ὃᶨᾳ⎰怑柵⭂ῤ᷎ᶼ⶚塓娵⎗䘬↮㓗暣嶗㕟嶗☐ἄ
䁢⬱墅娚墅伖䘬ᶨ悐↮ˤ⛐岤屟㛸㕁ㆾ悐ẞ㗪炻ㅱ思⽒䔞⛘⬱
ℐẋ䡤ˤ
52 | Safety and Regulatory Information
ɀ⽭枰䔁⽫墅伖冯暣㸸暣嶗䘬忋㍍⓷柴炻暣嶗忶庱⮵忶暣㳩ᾅ
嬟冯暣嶗暣䶂䘬⼙枧暨旵军㚨Ỷˤ妋㰢忁ᾳ⓷柴㗪炻暨㬋䡢侫
ㄖ墅伖所䇴柵⭂ῤˤᶵ天忶庱暣嶗ˤ
ɀ⽭枰䵕嬟⎗月䘬㨇㝞墅庱姕⁁㍍⛘ˤ⽭枰䈡⇍䔁シ暣㸸ὃㅱ
☐忋䶂炻侴ᶵ㗗䚜㍍忋㍍⇘暣㸸㜧ᷳ栆䘬↮㓗暣嶗ˤ
ɀ晐旬䘬暣㸸䶂旸㕤䈡⭂䘬⚳⭞ㆾ⛘⋨ἧ䓐ˤἧ䓐⇵炻婳䡢
娵暣㸸䶂䘬柵⭂ῤᶼ⶚塓娵⎗⛐Ἀ䘬⛘⋨ᶲἧ䓐ˤ
ɀ↯⊧⛐Ṍ㳩暣㸸䶂怬忋㍍叿暣㸸㗪䦣昌ㆾ⬱墅暣㸸ˤ
ɀ䔞⬱墅⍲⼴临㍍妠䓊⑩側朊ᷳ⼴炻⽭枰䓐ⶍ℟⮯㊯㕳坢憀挾
䵲ˤ
桐㇯㼃⛐⌙晒嬎⏲
ɀ㚜㎃桐㇯悐ẞ⇵炻婳Ṽ䳘教嬨炻᷎思⽒㇨㍸ὃ䘬㊯䣢ˤ
折暣㰈嬎⏲
ἧ䓐侭ᶵ⼿冒埴㚜㎃ ㇜䇦 ŔŰůŪŤŘłōōġ䵚晃䵚嶗⬱ℐ⿏墅伖ᷕἧ
䓐䘬折暣㰈ˤ⽭枰⮯ ㇜䇦 ŔŰůŪŤŘłōōġ復⚆ ㇜䇦 ŔŰůŪŤŘłōō ㌰㪲
䘬㚵⊁ᷕ⽫炻ẍ㚜㎃䚠⎴䘬折暣㰈ㆾ墥忈⓮㍐啎䘬⎴栆✳折暣
㰈ˤ劍⚈ảỽ⍇⚈⽭枰᷇㡬暣㰈ㆾ ㇜䇦 ŔŰůŪŤŘłōōġ䵚晃䵚嶗⬱
ℐ⿏墅伖炻婳♜㟤思⬰暣㰈墥忈⓮䘬㊯䣢ˤ
乄䶂忋䳸
㇨㚱ḁ⣒䵚嶗冯ġœŔijĴijġĩ ᷣ㍏⎘ Īġ䶂嶗悥㗗䁢冯℞Ṿ墅伖忚埴ℏ
⺢忋㍍㇨姕妰䘬ˤ婳ᶵ天⮯忁ṃ忋㍍➈䚜㍍忋㍍军忂妲䶂嶗炻
ㆾ℞Ṿ忋↢ ㇜䇦 ŔŰůŪŤŘłōōġ㇨⛐⺢䭱䘬䶂嶗ˤ
FCC Part 15 Class A Notice
Canadian Radio Frequency Emissions Statement
NOTE: This equipment was tested and found to comply with the limits for a Class A
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference when the equipment is
operated in a commercial environment. This equipment generates, uses, and can
radiate radio frequency energy. And if not installed and used in accordance with the
instruction manual, the device may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause
harmful interference in which case the user is required to correct the interference at
his own expense.
This Class A digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe A est conforme à toutes la norme NMB-003 du
Canada.
Caution: Modifying this equipment or using this equipment for purposes not shown
in this manual without the written consent of Dell, Inc. could void the user’s
authority to operate this equipment.
Complies with EN 55022 Class A and CISPR22
Class A
Warning: This is a class A product. In a domestic environment, this product may
cause radio interference in which case the user may be required to take adequate
measures.
Declaration of Conformity
BMSI Statement
A “Declaration of Conformity” in accordance with the directives and standards has
been made and is on file at Dell Inc. Products Europe BV, Limerick, Ireland.
嬎⏲ἧ䓐侭烉
Regulatory Information for Korea
㬌䁢䓚栆屯妲㈨埻姕⁁炻㕤⯭ỷ䑘⠫ᷕἧ䓐㗪炻⎗傥㚫忈ㆸ⮬
柣㒦≽炻⛐㬌䧖ね㱩ᶳ炻ἧ䓐侭㚫塓天㯪㍉⍾㝸ṃ怑䔞䘬⮵䫾ˤ
Ministry of Information and Telecommunication
Certification Number KCC-REM-SWL-0A5
VCCI Statement
̯̔塭伖̰ˣͧΡͱ烐ね⟙㈨埻塭伖̨̚ˤ̯̔塭伖͓⭞⹕䑘⠫
̨ἧ䓐̩͌̚暣㲊⥐⭛͓⺽̎崟̩̔̔̍̃͋̿̚̚ˤ̯̔⟜⎰
̬̰ἧ䓐侭̍怑↯̫⮦䫾͓嫃̛͉͌̇天㯪
̖͍̩͌̔̍̃͋̿̚ˤˢˢˢˢˢˢ
VCCI - A
All products with country code “A” and “J” are made in the U.S.A.
All products with country code “C” or “D” are made in Taiwan R.O.C.
All certificates held by Secuwide, Corps.
A 급 기기 ( 업무용 정보통신기기 )
이 기기는 업무용으로 전자파적합등록을 한 기기이오니 판매자
또는 사용자는 이 점을 주의하시기 바라며 , 만약 잘못 판매 또는
구입하였을 때에는 가정용으로 교환하시기 바랍니다 .
Safety and Regulatory Information | 53
Warranty Information
Copyright Notice
All Dell SonicWALL appliances come with a 1-year Limited Hardware Warranty
which provides delivery of critical replacement parts for defective parts under
warranty. Visit the Warranty Information page details on your product’s warranty:
http://www.sonicwall.com/us/en/support/Services.html#tab=warranty
© 2013 Dell, Inc.
All rights reserved.
Under the copyright laws, this manual or the software described within, cannot be
copied, in whole or part, without the written consent of the manufacturer, except in
the normal use of the software to make a backup copy. The same proprietary and
copyright notices must be affixed to any permitted copies as were affixed to the
original. This exception does not allow copies to be made for others, whether or not
sold, but all of the material purchased (with all backup copies) can be sold, given,
or loaned to another person. Under the law, copying includes translating into
another language or format.
Specifications and descriptions subject to change without notice.
54 | Warranty Information
Notes
55
56 | Notes
Open as PDF
Similar pages