SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 1 Friday, June 4, 2010 3:08 PM SonicWALL SonicPoint-Ne / SonicPoint-Ni Getting Started Guide This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL SonicPoint-Ne / SonicPoint-Ni wireless appliances in single-unit or distributed wireless deployments. Setup Step 1 2 3 4 5 Procedure Est.
SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 3 Friday, June 4, 2010 3:08 PM 1 Before You Begin In this Section: This section provides a basic checklist of materials and information you will need before you begin.
SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 5 Friday, June 4, 2010 3:08 PM What You Need to Begin The SonicWALL SonicPoint-Ne/Ni security appliances are centrally managed by SonicWALL NSA E-Class appliances. For more information on deploying this SonicPoint with SonicWALL NSA series and TZ series platforms, contact your local SonicWALL sales representative for the supported SonicOS releases. SonicPoints receive auto-firmware updates from the central gateway SonicWALL, this device supports SonicOS 5.6.0.
SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 7 Friday, June 4, 2010 3:08 PM 2 Introduction to Secure Wireless In this Section: This section contains excerpts from the SonicWALL Secure Wireless Network Integrated Solutions Guide. The content is meant to provide a brief introduction to Radio Frequency (RF) technology as it pertains to different deployment scenarios.
SonicPoint_N_GSG.book Page 8 Friday, June 4, 2010 3:08 PM Wireless RF Introduction 802.11 Comparison Chart There are currently four widely adopted standards for 802.11 wireless network types: a, b, g, and n. Although 802.11n is the newest and highest capacity standard, each of the four standards has its own strengths and weaknesses. This section provides overviews of these standards. The following table compares signal characteristics as they apply to the current 802.
SonicPoint_N_GSG.book Page 9 Friday, June 4, 2010 3:08 PM Radio Frequency Barriers RF Interference Determining the location of RF barriers can be a painful part of the placement process, but keep in mind that they can be used beneficially in an attempt to block signals where you do not want coverage. RF interference from home, office, and medical equipment is a common source of frustration in wireless deployments from the smallest home office to the largest multi-building campus.
SonicPoint_N_GSG.book Page 10 Friday, June 4, 2010 3:08 PM Placing Access Points Physical placement of an access point has a measurable effect on who can and cannot access your wireless signal.
SonicPoint_N_GSG.book Page 11 Friday, June 4, 2010 3:08 PM Solutions to RF Interference and Barriers These days, finding an environment with no RF interference or noise is nearly impossible. Only if you are setting up an office in a secluded redwood grove can you count on RF interference to be a non-issue. Even then, the redwood trees might just be among those fitted with high-gain cellular antennas, an all-toocommon occurrence today.
SonicPoint_N_GSG.book Page 12 Friday, June 4, 2010 3:08 PM SonicWALL Wireless Firewalling When a wireless device uses an access point to communicate with a device on another subnet or on a completely different network, traffic between the devices is forced to traverse the network gateway. This traversal enables Unified Threat Management (UTM) services to be enforced at the gateway.
SonicPoint_N_GSG.book Page 13 Friday, June 4, 2010 3:08 PM 3 Registering Your Appliance In this Section: This section provides instructions for registering your SonicWALL SonicPoint appliance.
SonicPoint_N_GSG.book Page 14 Friday, June 4, 2010 3:08 PM Creating a MySonicWALL Account A MySonicWALL account is required for product registration. If you already have an account, continue to the Registering and Licensing Your Appliance on MySonicWALL section. Registering and Licensing Your Appliance on MySonicWALL You must register your SonicWALL security appliance on MySonicWALL to enable full functionality.
SonicPoint_N_GSG.book Page 15 Friday, June 4, 2010 3:08 PM Using SonicWALL UTM Security Services for Wireless Clients Any security services you purchased for your SonicWALL UTM appliance can also be applied to wireless clients. Simply enable the security services on the WLAN zone or on a custom wireless zone, and your wireless traffic will be protected along with your wired traffic.
SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 17 Friday, June 4, 2010 3:08 PM 4 Configuring Your UTM Appliance for Wireless In this Section: 4 This section provides instructions for configuring the SonicWALL UTM appliance to connect with your SonicWALL SonicPoint.
SonicPoint_N_GSG.book Page 18 Friday, June 4, 2010 3:08 PM An Introduction to Zones and Interfaces Zones split a network infrastructure into logical areas, each with its own set of usage rules, security services, and policies. Most networks include multiple definitions for zones, including those for trusted, untrusted, public, encrypted, and wireless traffic. Some basic (default) zone types include: The X1 and X0 interfaces are preconfigured as WAN and LAN respectively.
SonicPoint_N_GSG.book Page 19 Friday, June 4, 2010 3:08 PM Configuring Provisioning Profiles 802.11n Radio Tab SonicPoint Profile defines settings that can be configured on a SonicPoint, such as radio SSIDs, and channels of operation. 1. 2. These profiles make it easy to apply basic settings to a wireless zone, especially when that zone contains multiple SonicPoints. When a SonicPoint is connected to a zone, it is automatically provisioned with the profile assigned to that zone.
SonicPoint_N_GSG.book Page 20 Friday, June 4, 2010 3:08 PM 8. Optionally, under ACL Enforcement, select Enable MAC Filter List to enforce Access Control by allowing or denying traffic from specific devices. Select a MAC address object group from the Allow List or Deny List to automatically allow or deny traffic to and from all devices with MAC addresses in the group. The Deny List is enforced before the Allow List. Advanced Tab Configure the advanced radio settings for the 802.11n radio. For most 802.
SonicPoint_N_GSG.book Page 21 Friday, June 4, 2010 3:08 PM Configuring a Wireless Zone 4. You can configure a wireless zone on the Network > Zones page. Typically, you will configure the WLAN zone for use with SonicPoints. To configure a standard WLAN zone: 1. 2. 3. On the Network > Zones page in the WLAN row, click the icon in the Configure column. Click on the General tab.
SonicPoint_N_GSG.book Page 22 Friday, June 4, 2010 3:08 PM Configuring the Network Interface Each SonicPoint or group of SonicPoints must be connected to a physical network interface that is configured for Wireless. SonicOS by default provides a standard wireless zone (WLAN), which can be applied to any available interface. To configure a network interface using the standard wireless (WLAN) zone: 1.
SonicPoint_N_GSG.book Page 23 Friday, June 4, 2010 3:08 PM 5 Setting Up Your SonicPoint In this Section: 5 This section describes how to connect and configure physical aspects of the SonicPoint including cabling and mounting.
SonicPoint_N_GSG.book Page 24 Friday, June 4, 2010 3:08 PM Installing Antennas (SonicPoint-Ne Only) To install the SonicPoint-Ne included antennas: 1. 2. 3. Remove the antennas from the bag and place one on each connector. Carefully finger-tighten the fittings. Adjust the antennas for optimal reception. Note: For optimal wireless coverage in most cases, the SonicPoint-Ne antennas should be oriented vertically. Note: The SonicPoint-Ne is authorized to use a dipole antenna with 4dBi or less.
SonicPoint_N_GSG.book Page 25 Friday, June 4, 2010 3:08 PM Connecting the PoE Cable If your deployment uses a SonicWALL PoE injector, read and comply with instructions provided with the PoE first, then complete the following steps: 1. 2. 3. 4. Plug the power cord of the SonicWALL PoE injector into the power outlet. Using Ethernet cable (not included), connect the Data in port on the SonicWALL PoE Injector to the WLAN zone interface that you created earlier.
SonicPoint_N_GSG.book Page 26 Friday, June 4, 2010 3:08 PM Mounting Using Ceiling Brackets To mount the SonicPoint to a crossbar between ceiling panels using included brackets: 1. 2. 3. Using the 3/8” screws, screw in the brackets to the underside of the SonicPoint, making sure both brackets are parallel. (Optional) Attach the front LED/logo cover plate to the top of the SonicPoint and if necessary, rotate it to the desired position (See Mounting Using Anchor Screws section, on page 27 for illustration).
SonicPoint_N_GSG.book Page 27 Friday, June 4, 2010 3:08 PM Mounting Using Anchor Screws To mount the SonicPoint using included anchor screws: lan link act 6. act 5. wlan 2. 3. 4. On the mounting surface, mark the location to make two screw holes. The marks should be horizontally parallel to each other. Drill the holes to accommodate the metal anchor screws. Screw the anchor screws into the holes to their full depth.
SonicPoint_N_GSG.book Page 28 Friday, June 4, 2010 3:08 PM Verifying Operation Verifying WAN (Internet) Connectivity To verify that the SonicPoint is provisioned and operational, navigate to the SonicPoint > SonicPoints page in the SonicOS management interface. The SonicPoint displays an “operational” status in the SonicPoint table: Complete the following steps to confirm your Internet connectivity: 1. 2. 3. 4.
SonicPoint_N_GSG.book Page 29 Friday, June 4, 2010 3:08 PM Troubleshooting Tips Onboard Help System If the SonicPoint locates a peer SonicOS device, the two units perform an encrypted exchange and the profile assigned to the relevant wireless zone is used to automatically configure (provision) the newly added SonicPoint unit. All SonicWALL network security appliances include an onboard help system with help topics that are relevant to each area of the management interface.
SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 31 Friday, June 4, 2010 3:08 PM 6 Support and Training Options In this Section: This section provides overviews of customer support and training options for SonicWALL appliances.
SonicPoint_N_GSG.book Page 32 Friday, June 4, 2010 3:08 PM Customer Support Knowledge Base SonicWALL offers telephone, email and Web-based support to customers who have a valid Warranty or who purchased a Support Contract. Please review our Warranty Support Policy for product coverage. SonicWALL also offers a full range of consulting services to meet your needs, from our innovative implementation services to traditional statement of work-based services.
SonicPoint_N_GSG.book Page 33 Friday, June 4, 2010 3:08 PM User Forums The SonicWALL User Forums are a resource that provide users the ability to communicate and discuss a variety of security and appliance subject matters.
SonicPoint_N_GSG.book Page 34 Friday, June 4, 2010 3:08 PM Training SonicWALL offers an extensive sales and technical training curriculum for Network Administrators, Security Experts, and SonicWALL Medallion Partners who need to enhance their knowledge and maximize their investment in SonicWALL Products and Security Applications.
SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 36 Friday, June 4, 2010 3:08 PM SonicWALL Secure Wireless Network Integrated Solutions Guide Looking to go wireless? Have questions about what it takes to build a truly “secure” wireless network? Check out the SonicWALL Secure Wireless Network Integrated Solutions Guide. This book is the official guide to SonicWALL’s marketleading wireless networking and security devices.
7 SonicPoint_N_GSG.book Page 37 Friday, June 4, 2010 3:08 PM Product Safety and Regulatory Information In this Section: This section provides regulatory, trademark, and copyright information.
SonicPoint_N_GSG.book Page 38 Friday, June 4, 2010 3:08 PM Safety and Regulatory Information for the SonicWALL SonicPoint Wireless Appliance Regulatory Model/Type APL21-06E APL21-083 Product Names SonicPoint-Ne SonicPoint-Ni Mounting the SonicWALL • • • • • • Mount in a location away from direct sunlight and sources of heat. A maximum ambient temperature of 104º F (40º C) is recommended.
SonicPoint_N_GSG.book Page 39 Friday, June 4, 2010 3:08 PM SonicWALL SonicPoint Wireless Appliance Sicherheit und gesetzliche Vorschriften Kabelverbindungen Alle Ethernet- und RS232-C-Kabel eignen sich für die Verbindung von Geräten in Innenräumen. Schließen Sie an die Anschlüsse der SonicWALL keine Kabel an, die aus dem Gebäude herausgeführt werden, in dem sich das Gerät befindet.
SonicPoint_N_GSG.book Page 40 Friday, June 4, 2010 3:08 PM FCC Part 15 Class B Notice for the SonicWALL SonicPoint Wireless Appliance NOTE: This equipment was tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy.
SonicPoint_N_GSG.book Page 41 Friday, June 4, 2010 3:08 PM This device is a 2.4 GHz wideband transmission system (transceiver), intended for use in all EU member states and EFTA countries, except in France and Italy where restrictive use applies. In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and/or for supplying public access to telecommunications and/or network services.
SonicPoint_N_GSG.book Page 42 Friday, June 4, 2010 3:08 PM SonicWALL tímto prohlašuje, že tento APL21-083 / APL21-06E je ve shodě se základními požadavky a dalšími příslušnými ustanoveními směrnice 1999/5/ES. Hierbij verklaart SonicWALL dat het toestel APL21-083 / APL21-06E in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG.
SonicPoint_N_GSG.book Page 43 Friday, June 4, 2010 3:08 PM Copyright Notice © 2010 SonicWALL, Inc. All rights reserved. Under the copyright laws, this manual or the software described within, cannot be copied, in whole or part, without the written consent of the manufacturer, except in the normal use of the software to make a backup copy. The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original.
SonicPoint_N_GSG.
SonicPoint_N_GSG.book Page 45 Friday, June 4, 2010 3:08 PM SonicWALL, Inc. 2001 Logic Drive T +1 408.745.9600 San Jose CA 95124-3452 F +1 408.745.9300 www.sonicwall.com P/N 232-001795-50 Rev A 06/10 ©2010 SonicWALL, Inc. is a registered trademark of SonicWALL, Inc. Other product names mentioned herein may be trademarks and/or registered trademarks of their respective companies. Specifications and descriptions subject to change without notice.
