Dell SonicWALL SuperMassive Appliances NET WORK SECURIT Y SuperMassive 9200 Getting Started Guide For localized product information, see page 48. ᴹޣᵜൠॆӗ૱ؑˈ䈧৲➗ㅜ 亥DŽ 䝻䞊䜹䝷䜲䝈䛥䜜䛯〇ရ䛾ሗ䛻䛴䛔䛶䛿䚸㻠㻥㻌䝨䞊䝆䜢ཧ↷䛧䛶䛟䛰䛥䛔䚹 Ь˲߭ ࢿ૽ ࢽؿЕ ࢇएձ ॳˈଜ ࡁۿ Para informação localizada do produto, veja página 50.
Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your system. CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2014 Dell Inc. All rights reserved. Trademarks: Dell™, the DELL logo, SonicWALL™, and all other SonicWALL product and service names and slogans are trademarks of Dell, Inc.
In this Guide This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL SuperMassive 9200.
Chapter 3 Sections Include Registering, Licensing, and Upgrading, page 21 • • • • • • • • Using MySonicWALL, page 22 Creating a MySonicWALL Account, page 22 Registration Overview, page 23 Registering in SonicOS, page 23 Alternative Registration Options, page 24 Licensing Security Services, page 25 Activating & Managing Licenses Using MySonicWALL, page 26 Upgrading Firmware, page 27 Chapter 4 Sections Include Deployment Scenarios, page 31 • • • • Advanced Deployment Scenarios, page 32 Configuring NAT
4 | In this Guide
Introduction to the SuperMassive 9200 1 In this Section: This section describes the items shipped with the Dell SonicWALL SuperMassive 9200 appliance, provides front and rear illustrations of the SuperMassive 9200, and includes a flow diagram illustrating the steps for setting up the appliance.
SuperMassive 9200 Package Contents Before you begin the setup process, verify that your package contains the following items: 1. 2. 3. 4. 5. 6. One Dell SonicWALL SuperMassive 9200 appliance One Rack Mounting Kit One serial CLI cable One Ethernet cable Two power cords* One Dell SonicWALL SuperMassive 9200 Getting Started Guide *The included power cord(s) are approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location.
The Front Panel Console Port Access the SonicOS Command Line Interface (CLI) via the enclosed serial CLI cable SDHC Port Secure Digital High-Capacity (SDHC) port for future use Control Buttons Navigates the LCD screen; for future use Bypass Status Turns on when fail-to-wire bypass mode is active LCD Screen MGMT Port (1 GE) Display screen for future use 1 Gigabit Ethernet Management Interface X18 10GE X16 X14 X12 1GE X10 X8 X6 X4 1GE X2 X0 SDHC M0 BYPASS STATUS ALARM TEST SonicWALL Su
The Back Panel Fans (2) Dual auto-throttling fans for system temperature control Expansion Bay Power Supplies (2) For Dell SonicWALL-approved expansion modules Dual power supplies for redundant AC power and added reliability Field conversion is available to convert to DC mains DC power supplies use different input connector and power cables Warning: Potential Hazard from Fan This manual contains specific warning and caution statements where they apply.
Using this Getting Started Guide The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL SuperMassive 9200 appliance.
10 | Using this Getting Started Guide
Configuring the Appliance 2 In this Section: This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and procedures.
Determining the WAN Type Before configuring your Dell SonicWALL SuperMassive 9200 appliance, you will need to determine the type of WAN connection your setup will use. Dell SonicWALL supports the following types: • Static—Configures the appliance for a network that uses static IP addresses. • DHCP—Configures the appliance to request IP settings from a DHCP server on the Internet. • PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is typically used with a DSL modem.
Recording Configuration Information Ethernet WAN IP Address: Use this section to record your configuration information. Be sure to keep for future reference. _____._____._____._____ The default MGMT interface IP address is 192.168.1.254. Administrator Information Admin Name: Select an administrator account name. (default is admin) Admin Password: Select an administrator password.
Initial Setup The diagram below illustrates how to connect your management computer to the Dell SonicWALL SuperMassive 9200 appliance for initial setup. Dell SonicWALL Appliance X18 10GE X16 X14 X12 X17 X15 X13 1GE X10 X8 X6 X4 X11 X9 X7 X5 1GE X2 X0 X3 X1 SDHC M0 BYPASS STATUS ALARM TEST SonicWALL SuperMassive 9200 CONSOLE PWR 1 PWR 2 MGMT X19 19 9 120V AC (U.S.
The following sections provide initial configuration information and instructions for connecting your Dell SonicWALL SuperMassive 9200 appliance for initial setup. • Connecting the MGMT Port, page 15 • Applying Power to the SuperMassive 9200, page 15 • SuperMassive 9200 LED Activity, page 15 • To access the SonicOS management interface, follow the steps listed:, page 16 Connecting the MGMT Port 1. 2.
Using the Setup Wizard 2. When you are ready to begin initial setup, configure your management computer with a static IP address on the 192.168.1.0/24 subnet, such as 192.168.1.20. This allows your computer to connect to SonicOS via the MGMT interface. 3. 4. Note: Be sure to disable pop-up blocking software, or set your Web browser to allow pop-ups and cookies. 5. Launch the Dell SonicWALL Setup Wizard by clicking the first Here link.
Connecting to the Internet Testing Your Internet Connection Use the following steps to test your Internet connection: After initial setup is complete, connect the LAN and WAN interfaces for access to external networks or the Internet. You cannot reach the Internet or other WAN destinations while connected to the MGMT interface. For Internet access, connect to X0 or another configured LAN interface. Note: Internet connectivity is needed for the recommended product registration process.
Internet Access The diagram below illustrates how to connect your computer to the Dell SonicWALL SuperMassive 9200 appliance for Internet access. Dell SonicWALL Appliance X18 10GE X16 X14 X12 1GE X10 X8 X6 X4 1GE X2 120V AC (U.S.
Troubleshooting Your Connections Use the suggestions in this section to troubleshoot your MGMT and LAN connections.
20 | Troubleshooting Your Connections
Registering, Licensing, and Upgrading 3 In this Section: This section provides instructions for registering, licensing, and upgrading firmware on your Dell SonicWALL SuperMassive 9200 appliance.
Using MySonicWALL Creating a MySonicWALL Account Dell SonicWALL requires a MySonicWALL account prior to configuring your appliance. If you already have a MySonicWALL account, you can continue to Registration Overview, page 23. A MySonicWALL account is required in order to register the Dell SonicWALL SuperMassive appliance. Create a new MySonicWALL account from any computer by navigating to: .
Registration Overview Registering in SonicOS Although there are several ways to register your new Dell SonicWALL appliance, Dell SonicWALL recommends registering your appliance through the SonicOS Management Interface. After you have completed the Setup Wizard and can successfully connect to your Dell SonicWALL SuperMassive 9200 appliance, you are ready to register the security appliance.
Alternative Registration Options Synchronizing Licenses Manually To manually synchronize licenses with MySonicWALL from the SonicOS interface: If you have registered your Dell SonicWALL appliance through the SonicOS interface, you can continue to Licensing Security Services, page 25. Although Dell SonicWALL strongly recommends registering your appliance using the SonicOS interface, you can optionally use MySonicWALL to register your appliance. Registering on MySonicWALL 1. 2. 3. 4. 5. 6.
Licensing Security Services To license a security service, complete one of the following from the Service Management page: • Free Trial of Service—Click the Try icon in the Action column for the security service you wish to try for a 30-day free trial. The free trial immediately activates and notifies you of the trial expiration date. The Service Management page displays updated information about the free trial service. • Purchase a Service—Click the Cart icon to purchase a security service.
Activating & Managing Licenses Using MySonicWALL To activate your service licenses, log in to your MySonicWALL account and perform the following tasks: 1. If you registered your appliance through SonicOS, all licensed services are already activated. You can continue to Upgrading Firmware, page 27. If you purchased a service subscription or upgrade from a sales representative separately, you will have an Activation Key for the service.
Upgrading Firmware Dell SonicWALL recommends that you run the latest available firmware on your security appliance. You will need to upgrade the factory-installed firmware to the latest version available on MySonicWALL.
Obtaining the Latest Firmware Upgrading the Firmware To obtain a new SonicOS firmware image file for your Dell SonicWALL security appliance, perform the following steps: Perform the following steps to upload new firmware to your Dell SonicWALL appliance and use your current configuration settings upon startup. 1. 2. 3. 4. In a browser on your management computer, log into your MySonicWALL account at .
Using SafeMode to Upgrade Firmware If you are unable to connect to the SonicOS management interface, you can restart the security appliance in SafeMode. The SafeMode feature allows you to recover quickly from uncertain configuration states with a simplified management interface that includes the same settings available on the System > Settings page. Perform the following steps to use SafeMode to upgrade firmware on the Dell SonicWALL security appliance: 1. 2. 3. 4.
30 | Upgrading Firmware
Deployment Scenarios 4 In this Section: This section provides configuration overviews, as well as deployment scenarios for your Dell SonicWALL SuperMassive 9200.
Advanced Deployment Scenarios Select a deployment scenario that best fits your network scheme. Reference the table below and the diagrams on the following pages for help in choosing a scenario. Current Gateway Configuration New Gateway Configuration Use Scenario No gateway appliance Single SuperMassive appliance as a primary gateway. Scenario A: NAT Mode Gateway, page 33 Pair of SuperMassive appliances for high availability.
Scenario A: NAT Mode Gateway For new network installations or installations where the SuperMassive 9200 is replacing the existing network gateway. In this scenario, the SuperMassive 9200 is configured in NAT mode to operate as a single network gateway. Two Internet connections may be routed through the Dell SonicWALL appliance for load balancing and failover purposes.
Scenario B: Stateful HA Pair For network installations with two Dell SonicWALL SuperMassive 9200 appliances configured as a stateful synchronized pair for redundant High Availability (HA) networking.
Scenario C: L2 Bridge Mode For network installations where the Dell SonicWALL SuperMassive 9200 is running in tandem with an existing network gateway. In this scenario, the original gateway is maintained. The Dell SonicWALL SuperMassive 9200 is integrated seamlessly into the existing network, providing the benefits of deep packet inspection and comprehensive security services on all network traffic.
Configuring NAT Mode Gateway Dell SonicWALL SuperMassive 10GE X16 X14 X12 X17 X15 X13 1GE X10 X8 X6 X4 X11 X9 X7 X5 1GE X2 X0 X3 X1 SDHC M0 This section provides an overview of a Dell SonicWALL SuperMassive 9200 appliance operating as a single network gateway in NAT mode, which is the default mode for a newly configured SuperMassive 9200. This section is relevant to administrators following deployment Scenario A.
NAT policies allow the flexibility to control Network Address Translation based on matching combinations of Source IP address, Destination IP address, and Destination Services. Policy-based NAT allows you to deploy different types of NAT simultaneously. For configuration procedures and information regarding the different types of NAT policies, such as Many-to-One, One-toOne, or One-to-Many Load Balancing, refer to the SonicOS Administrator’s Guide.
Dell SonicWALL SuperMassive 2 Dell SonicWALL HA/Failover Pair 10GE X16 X14 X12 X17 X15 X13 1GE X10 X8 X6 X4 X11 X9 X7 X5 1GE X2 X0 X3 X1 SDHC M0 BYPASS STATUS ALARM TEST SonicWALL SuperMassive 9200 CONSOLE PWR 1 MGMT HA Control Link Dell SonicWALL SuperMassive 1 10GE X16 X14 X12 X17 X15 X13 1GE HA Data Link X10 X8 X6 X4 X11 X9 X7 X5 1GE X2 X0 X3 X1 SDHC M0 BYPASS STATUS ALARM TEST SonicWALL SuperMassive 9200 CONSOLE PWR 1 MGMT Internet • Ensure the Pr
Configuring HA Monitoring Settings 2. After configuring the HA settings, you need to configure the Monitoring settings for the LAN or WAN.This includes configuring unique IP addresses for each appliance in the Stateful HA pair. You will need to log into the appliances using these IP addresses in order to complete the registration process from within SonicOS, which will allow license sharing and synchronization. 3. Navigate to the High Availability > Monitoring page to configure the Monitoring settings.
Configuring Optional HA Settings The following settings are optional. You can configure these settings from the High Availability > Settings page. 1. 2. 3. To backup the firmware and settings when you upgrade the firmware version, select the Generate/Overwrite Backup Firmware and Settings When Upgrading Firmware checkbox. Select the Enable Virtual MAC checkbox to allow the Primary and Secondary appliances to share a single MAC address.
HA License Configuration Overview Completing HA Pair Association You can configure HA license synchronization by associating two Dell SonicWALL security appliances as HA Primary and HA Secondary on MySonicWALL. You will need to associate the two appliances on MySonicWALL. The second appliance will automatically share the Security Services licenses of the primary appliance. You must purchase a single set of security service licenses for the HA Primary appliance.
9. Log in to the SonicOS management interface of the Primary appliance using the unique IP address assigned on the High Availability > Monitoring page. 10. Navigate to the System > Status page and click the registration link. This allows the unit to synchronize with the Dell SonicWALL license server and share licenses with the associated appliance. 11. Then, log in to the SonicOS management interface of the Secondary appliance using its unique IP address. 12.
Configuring L2 Bridge Mode This section provides instructions to configure the Dell SonicWALL SuperMassive 9200 appliance in tandem with an existing Internet gateway device. This section is relevant to users following deployment Scenario C. Connection Overview Connect the X1 port on your Dell SonicWALL SuperMassive 9200 to the LAN port on your existing Internet gateway device. Then connect the X0 port on your Dell SonicWALL to your LAN resources.
Configuring the Secondary Bridge Interface 1. 2. Navigate to the Network > Interfaces page from the navigation panel. Click the Configure icon in the right column of the X0 (LAN) interface. 3. 4. 5. In the IP Assignment drop-down, select Layer 2 Bridged Mode. In the Bridged to drop-down, select the X1 interface. Configure management options (HTTP, HTTPS, Ping, SNMP, SSH, User log ins, or HTTP redirects).
Support and Training Options 5 In this Section: This section provides overviews of customer support and training options for the Dell SonicWALL SuperMassive 9200.
Customer Support Knowledge Portal Designed for customers with Dell SonicWALL SuperMassive solutions, Dell SonicWALL SuperMassive Support 24x7 delivers the enterprise-class support features and quality of service that enterprise companies require to keep their networks running smoothly and efficiently.
User Forums Training The Dell SonicWALL User Forums is a resource that provides users the ability to communicate and discuss a variety of security and appliance subject matters.
Related Documentation Additionally Supported Languages See the following related documents for more information: • Dell SonicWALL SonicOS Administrator’s Guide • Dell SonicWALL SonicOS Release Notes • Dell SonicWALL Feature Modules • Application Intelligence and Control • Application Bandwidth Management • IPFIX/Netflow Reporting • Deep Packet Inspection for SSL • Multiple Administrators • NAT Load Balancing • Packet Capture • RF Management • Single Sign On • SSL Control • Virtual Access Points • Dell Son
ロー カ ラ イ ズ版フ ァ ームウ ェ アおよび ド キ ュ メ ン ト について Dell SonicWALL 導入ガ イ ド 、 ク イ ッ ク ス タ ー ト ガ イ ド 、 ユー ザ ガ イ ド 、 装置用 フ ァ ームウ ェ ア、 および多彩なエ ン ド ユー ザ ク ラ イ ア ン ト が複数の言語で利用で き る よ う にな り ま し た。 利用可能な日本語 ド キ ュ メ ン ト は、 http://www.sonicwall.com/ japan/documents/support_document.html を ご覧下 さ い。 導入ガ イ ド またはク イ ッ ク ス タ ー ト ガ イ ド の手順に沿っ て、 MySonicWALL (http://www.mysonicwall.
Notificação de Firmware e Documentação Localizada As Guias de noções básicas, Guias de início rápido, Guias de Usuário, firmware de aplicações, e varios clientes de usuário final de Dell SonicWALL estão agora disponíveis em varias línguas. Pode encontrar a documentação disponível em Português em http://www.sonicwall.com/br/pt/. Siga as instruções da Guia de noções básicas ou Guia de início rápido para registrar seu produto em MySonicWALL no http://www.mysonicwall.com.
Rack Mounting Instructions 6 In this Section: This section provides illustrated rack mounting instructions for the Dell SonicWALL SuperMassive 9200. For more information on rack mounting requirements, see Product Safety and Regulatory Information, page 57.
Rack Mounting Instructions Assemble the Slide Rail Fasten 4 screws to the rail.
Assemble the Slide Rail Fasten two-sided screws to the rail.
Assemble Inner Rail to Chassis Fasten 6 screws to attach the inner channel onto the chassis.
Insert Chassis to Frame Slide inner channel into rails. Push hook down to separate.
56 | Rack Mounting Instructions
Product Safety and Regulatory Information 7 In this Section: This section provides regulatory along with trademark and copyright information.
Safety and Regulatory Information Regulatory Model/Type Product Name 1RK28-0A6 SuperMassive 9200 Safety Instructions The following conditions are required for proper installation: • The Dell SonicWALL appliance is designed to be mounted in a standard 19-inch rack mount cabinet. • Use the mounting hardware recommended by the rack manufacturer and ensure that the rack is adequate for the application. • Ensure that no water or excessive moisture can enter the unit.
Cable Connections All Ethernet and RS232 (Console) cables are designed for intra-building connection to other equipment. Do not connect these ports directly to communication wiring or other wiring that exits the building where the Dell SonicWALL is located. • Sicherheitsanweisungen • Für eine ordnungsgemäße Montage sollten die folgenden Hinweise beachtet werden: • Das Dell SonicWALL Modell ist für eine Montage in einem standardmäßigen 19Zoll-Rack konzipiert.
Hinweis zur Lithiumbatterie Die in der Internet Security Appliance von Dell SonicWALL verwendete Lithiumbatterie darf nicht vom Benutzer ausgetauscht werden. Zum Austauschen der Batterie muss die Dell SonicWALL in ein von Dell SonicWALL autorisiertes Service-Center gebracht werden. Dort wird die Batterie durch denselben oder entsprechenden, vom Hersteller empfohlenen Batterietyp ersetzt.
•當安裝及後續接觸產品背面之後,必須用工具將指旋螺釘鎖 緊。 風扇潛在危險警告 •更換風扇部件前,請仔細閱讀,並遵循所提供的指示。 鋰電池警告 使用者不得自行更換 戴爾 SonicWALL 網際網路安全性裝置中使 用的鋰電池。必須將 戴爾 SonicWALL 送回 戴爾 SonicWALL 授權 的服務中心,以更換相同的鋰電池或製造商推薦的同類型鋰電 池。若因任何原因必須丟棄電池或 戴爾 SonicWALL 網際網路安 全性裝置,請嚴格遵守電池製造商的指示。 纜線連結 所有乙太網路與 RS232 ( 主控台 ) 線路都是為與其他裝置進行內 建連接所設計的。請不要將這些連接埠直接連接至通訊線路,或 其他連出 戴爾 SonicWALL 所在建築的線路。 FCC Part 15 Class A Notice NOTE: This equipment was tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
VCCI Statement ANATEL Certification for Brazil この装置は、クラスA情報技術装置です。この装置を家庭環 境で使用すると電波妨害を引き起こすことがあります。この 場合には使用者が適切な対策を講ずるよう要求 されることがあります。 VCCI - A Canadian Radio Frequency Emissions Statement This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe A est conforme à toutes la norme NMB-003 du Canada.
Warranty Information Copyright Notice All Dell SonicWALL appliances come with a 1-year Limited Hardware Warranty which provides delivery of critical replacement parts for defective parts under warranty. In addition, for 90 days from the warranty start date, Dell SonicWALL appliances are entitled to a Limited Software Warranty, which provides bug fixes, updates, and any maintenance releases that occur during the coverage term.