sonicwall™ sonicpoint n2 · sonicwall sonicpoint n2 getting started guide 3 1 introduction in...
TRANSCRIPT
-
SonicWallSonicPointN2GettingStartedGuide
RegulatoryModelNumber:APL260B3
-
Copyright2017SonicWallInc.Allrightsreserved.SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.AllothertrademarksandregisteredtrademarksarepropertyoftheirrespectiveownersTheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliatesproducts.Nolicense,expressorimplied,byestoppelorotherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERANDDISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANTYRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSE,ORNONINFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespecttotheaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytimewithoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SonicPointN2GettingStartedGuideUpdatedJanuary201723200341250RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.
https://www.sonicwall.com/legal/ -
1
Introduction
InthisguideThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWallSonicPointN2wirelessaccesspointinsingleunitormultiunitwirelessdeployments.
Chapter1 Topics
Introductiononpage3 Wirelessoverviewonpage5
SonicWallSonicPointN2GettingStartedGuide 3
-
Chapter2 Topics
InitialSetuponpage9 Checkpackagecontentsonpage9 Deploymentrequirementsonpage10 SonicPointN2availableports/statusLEDsonpage11 Installingantennasonpage13 ConnectingEthernetcablesonpage13 Wirelessaccesspointplacementconsiderationsonpage15 MountingtheSonicPointN2onpage17
Chapter3 Topics
ConfiguringSonicOSforwirelessaccessonpage21 ConfiguringSonicOSforSonicPointN2onpage21 VerifyingSonicPointoperationonpage25 Troubleshootingtipsonpage26
Chapter4 Topics
Supportandproductregistrationonpage27 Registrationandsupportonpage27 Onlinesupportandtrainingonpage28
4 SonicWallSonicPointN2GettingStartedGuide
-
WirelessoverviewTheSonicPointN2ispartofthenextevolutionarygenerationinwirelessaccesspointsaftertheSonicWallSonicPointNandNDR.
TheSonicPointN2providesphysicallayerenhancementsforhigherthroughputwithamaximumdatarateof450Mbps.Toachievethis,theSonicPointN2uses:
Moreantennasthreeantennasforthe5GHzradio,andthreemoreforthe2.4GHzradio
Widerchannels40MHzwidechannelsforthe802.11nradiomodule
Morespatialstreams3X3multipleinputandmultipleoutput,(MIMO)forthe802.11nradiomodule,wherethecapacityofaradiolinkismultipliedusingmultipathpropagation.
Chapter5 Topics
Productsafetyandregulatoryinformationonpage29 Mountingtheapplianceonpage30 VerwarnungWeiterehinweisezurmontageonpage31 EUandEFTAonpage32 Declarationofconformityonpage33
SonicWallSonicPointN2GettingStartedGuide 5
-
SonicWallwirelessfirewallingWhenawirelessdeviceusesaSonicWallSonicPointN2wirelessaccesspointtocommunicatewithawirelessdeviceonanothersubnetoronacompletelydifferentnetwork,trafficbetweenthedevicesisforcedtotraversetheSonicWallnetworksecurityappliance.ThistraversalenablessecurityservicestobeenforcedbySonicOS.
Standardpracticeforwirelessfirewalling(whereonewirelessclientiscommunicatingwithanother)bypassesmanyofthecriticalsecurityservices.Thefollowingillustrationshowsthestandardpracticeforwirelessfirewalling.
Standardwirelessfirewalling
Manysecurityproductsonthemarketsharethispotentialvulnerabilitywhentwousersconnectedbyacommonhuborwirelessaccesspointwishtoexchangedata.
SonicWalladdressesthissecurityshortcomingbymanagingtheSonicPointaccesspointsfromthenetworksecurityappliance.Thisallowscompletecontrolofthewirelessspace,includingzoneenforcementofsecurityservicesandcompletefirewallingcapabilities.
Securewirelessfirewalling
WLAN Zone Security Services
?
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
Other Security Appliance
WLAN Zone Security Services
SonicWallappliance
SonicWallSonicPoint
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
cWallPoint
6 SonicWallSonicPointN2GettingStartedGuide
-
FrequencybandsandchannelsTherearecurrentlyfivewidelyadoptedstandardsfor802.11wirelessnetworktypes:a,b,g,n,andac.802.11nand802.11acarethenewestandhighestcapacitystandards,butolderclientdevicesmaynotbeabletoutilizethenewerstandards.
Differentfrequencybandsprovidevaryingsignalstrengthandqualityoverdifferentdistanceranges.Signalsinthe2.4GHzrangetendtopassthroughphysicalbarriersbetterandcarryfartherthanthoseinthe5GHzrange,buttheydonotprovideashighadatarate.Signalsinthe5GHzrangeprovidefasterdataratesforbetterthroughput,butthesignalattenuatesfasterandisbestsuitedforopenspaces.
Wirelessstandards
802.11(x) Frequencystandard Maximumdatarate
802.11a 5GHz 54Mbps
802.11b 2.4GHz 11Mbps
802.11g 2.4GHz 54Mbps
802.11n 2.4GHzand5GHz 450Mbps
802.11ac 5GHz+multichannel+multipath 1.3Gbps
Strengthsandweaknessesof5GHzand2.4GHzsignals
5GHz 2.4GHz
Strength Higherspeed,morechannels LongerRange,strongersignalpenetration
Weakness Limitedpenetrationofwalls,clientcompatibility Moresourcesofinterference
SonicWallSonicPointN2GettingStartedGuide 7
-
RefertoRadiofrequencybarriersandRFinterferenceonpage16fordetailedinformationaboutRFbarriersandinterference.
Toallowmultipleseparatewirelessnetworksinasharedandconfinedspace,theRFmediumisdividedintochannels.Fordevicesinthe5GHzrange(802.11a/n/ac),thismeansthepossibilityofupto23discretechannels.
Fordevicesusingthe2.4GHzrange(802.11b/g/n),thewirelessspaceislimitedtoamaximumof14overlappingchannels.Asaresultoftheseoverlappingchannels,2.4GHztechnologyprovidesonlyatotalofthreediscretechannels.
802.11comparisonchart802.11signalcharacteristics
802.11a 802.11b 802.11g 802.11n 802.11ac
#ofChannelsinUSA 23 11 11 11 21
#ofChannelsinEU 23 13 13 13 16
#ofChannelsinJapan 15 14 14 14 19
FrequencyBand 5GHz 2.4GHz 2.4GHz 2.4/5GHz 5GHz
Max.DataRate 54Mbps 11Mbps 54Mbps 450Mbps(For3X3MIMO)
1.3Gbps(ForQAM64,MIMO3X3,and80MHzchannels)
Radius(Range) 90ft/25m 120ft/35m 120ft/35m 300ft/90m 120ft/35m
NOTE:Although802.11b/g/nstandardsprovidebetween11and14channels,onlythreeofthosechannelsarefullydiscrete(nonoverlapping)channels.
8 SonicWallSonicPointN2GettingStartedGuide
-
2
InitialSetup
Thissectionprovidesabasicchecklistofmaterials,hardwareinformation,anddescribeshowtoconnectandconfigurephysicalaspectsoftheSonicWallSonicPointN2includingantennas,cabling,andmounting.
Checkpackagecontentsonpage9
Deploymentrequirementsonpage10
SonicPointN2availableports/statusLEDsonpage11
Installingantennasonpage13
ConnectingEthernetcablesonpage13
Wirelessaccesspointplacementconsiderationsonpage15
MountingtheSonicPointN2onpage17
CheckpackagecontentsBeforecontinuing,ensurethatyourSonicPointN2packagecontainsthefollowingmaterials:
SonicWallSonicPointN2GettingStartedGuide 9
-
Anyitemsmissing?Ifanyoftheitemscorrespondingtoyourproductaremissingfromthepackage,contactTechnicalSupportat:https://support.sonicwall.com/contactsupport
Alistingofthemostcurrentsupportdocumentsareavailableonlineat:https://support.SonicWall.com/SonicWallSonicPointseries/ace/releasenotesguides
DeploymentrequirementsSonicOSfirmware
SonicWallSonicPointN2accesspointsarecentrallymanagedbySonicWallnetworksecurityappliancesrunningthefollowingversionsofSonicOS:
SonicOS5.9.1.6orahigher5.9release SonicOS6.2.5.1orhigher
PoweroverEthernet
An802.3atcompliantPoEinjectororPoEcapableswitchcapableofproviding25wattsofpowertoeachSonicPointN2isrequired.
Internetconnectivity
AnactiveInternetconnectionisrequiredforyourfirewalltodownloadthelatestSonicPointfirmware.
GigabitEthernetconnectivity
802.11nwirelesshardwarerequiresmorebandwidththanasingle(orevendual)10/100Ethernetconnectioncanhandle.GigabitEthernetconnectivitybetweentheWLANandtheLANisrequiredtotakefulladvantageof802.11nspeed.
SeeProductsafetyandregulatoryinformationonpage29.
SonicPointN2ApplianceChecklist
SonicWallSonicPointN2ApplianceAntennas(6)MountingKit(CeilingBrackets,AnchorandScrewKit)GettingStartedGuide
10 SonicWallSonicPointN2GettingStartedGuide
https://support.sonicwall.com/contact-supporthttps://support.sonicwall.com/contact-supporthttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guides -
SonicPointN2availableports/statusLEDsAvailableports
LAN1/PoEport.ProvidesEthernetandPoweroverEthernet(PoE)connections.
LAN2port.ProvidesanadditionalEthernetconnection.RefertotheSonicOSAdministrationGuideforusecases.
Consoleport.ProvidesamanagementconnectionusingCLI>DB9cable(forcommandlinemanagementonly).
SonicWallSonicPointN2GettingStartedGuide 11
-
StatusLEDs
LED(lan2)On(solidyelloworgreen,Ethernetlink)Blinkingyellow(1GEthernetactivity)Blinkinggreen(10/100MEthernet
LED(lan1)On(solidyelloworgreen,Ethernetlink)Blinkingyellow(1GEthernetactivity)Blinkinggreen(10/100MEthernetactivity)
LED(5G)On(solidgreen,5GHzradiolink)Blinkinggreen(5GHzradioactivity)
LED(2.4G)On(solidgreen,2.4GHzradiolink)Blinking(2.4GHzradioactivity)
LED(Tool)On(solidyellow,error)Blinking(safemode)
LED(Power)On(solidblue,power)Blinking(booting/FWupgrade)
12 SonicWallSonicPointN2GettingStartedGuide
-
Installingantennas
ToinstalltheantennasonyourSonicPointN2
1 Removeallsixantennasfromtheirbagsandplaceoneoneachconnector.Matchthefittingswiththeantennastyle.Therearethreeofeachtype.
2 Carefullyfingertightenthefittings.
3 Adjusttheantennasforoptimalreception.
Foroptimalwirelesscoverageinmostcases,theSonicPointN2antennasshouldbeorientedvertically.ThecirculardesignoftheSonicPointaidesincreatingastrongmultidirectionalwirelesssignalpattern.Inmostcases,leavingtheantennasstraightup(asshownintheillustration)providesthebestoverallcoverage.
ConnectingEthernetcablesTheSonicPointN2canbecabledwithCAT5,CAT5e,orCAT6Ethernetcabling.
TIP:TheremaybeadeadzonedirectlyunderneaththeSonicPointN2whenitismountedontheceilingwiththeantennasorientedvertically.Youcanmitigatethisbyslightlyanglingtheantennas.
CAUTION:TheSonicPointN2usesdipoleantennaswith5.5dBiat5GHzand3.5dBiat2.4GHz.OnlyantennasprovidedbySonicWallareauthorizedforusewiththeSonicPointN2.Beawareoftheregulationsinyourregionbeforeusingotherantennas.
SonicWallSonicPointN2GettingStartedGuide 13
-
TheSonicPointN2ispoweredusingPoweroverEthernet(PoE).ASonicWall802.3atcompliantPoElineinjector(soldseparately),oran802.3atcompliantswitchisrequiredtopowereachSonicPointN2.
ToconnectPoEtoyourSonicPointN2
1 UsinganEthernetcable,connecttheData inportontheSonicWallPoEInjectortoanexistingWLANzoneinterfaceortoanunusedinterfacetobeconfiguredlaterinSonicOS.
2 UsingasecondEthernetcable,connecttheDataandPoweroutportontheSonicWallPoEinjectortotheLAN1/PoEportonyourSonicPointN2.
3 PlugthepowercordoftheSonicWallPoEinjectorintoanappropriatepoweroutlet.
4 WaitfortheLAN1LEDontheSonicPointN2toilluminategreen.Thisindicatesanactiveconnection.
SeeProductsafetyandregulatoryinformationonpage29.CAUTION:An802.3atcompliantPoEinjectororPoEcapableswitchcapableofproviding25wattsofpowertoeachSonicPointN2isrequired.
Tomaintain25wattsofpowertotheSonicPointN2,themaximumlengthofCAT5ecablefromthe802.3atPoEinjectortotheSonicPointN2is30meters.
Local Network (LAN)
X1 WAN
X0 LAN
Internet
X2 WLAN
PoE Injectoror PoE Switch
Wireless Clients
14 SonicWallSonicPointN2GettingStartedGuide
-
WirelessaccesspointplacementconsiderationsPhysicalplacementoftheSonicPointN2wirelessaccesspointhasameasurableeffectonwhocanandcannotaccessyourwirelesssignal.
AccesspointsshouldbekeptclearofRadioFrequency(RF)interferencesources.RFbarrierscanbecircumventedbydeployingmultipleaccesspoints.
Asitesurveywillhelpfindtheoptimumwirelessaccesspointplacement,butyoucanfindusablelocationswithoutit.
Considerationsinclude:
NumberofaccesspointsversususerdensityIftoomanyusersareservicedbyasingleaccesspoint,maximumtransferratesarereachedandthataccesspointmaybecomeabottleneckforthewholesystem.
BandwidthHowmuchdataismovingupstreamanddownstreamforagiventypeofuser?
EthernetcablingWhereareyourunningthepoweredEthernet(PoE)cabletoandhowareyousecuringthatcable?IsyourPoEswitch802.3atcompliantandabletopowerallaccesspointswith25wattseach?
Tomaintain25wattsofpowertotheSonicPointN2,themaximumlengthofCAT5ecablefromthe802.3atPoEinjectortotheSonicPointN2is30meters.
Hubs/SwitchesYourwirelessdeploymenthastotiebackintoyournetworksecurityapplianceandLANresources.Considerwhereyourkeynetworkingdevicesaredeployedandhowtheywillconnectefficientlywithyourwirelessappliances.WhatspeedisneededforyourEthernetconnectiontoaccommodatethenumberofaccesspointsyouareinstalling?AGigabitEthernetinterfaceisrecommendedwhenconnectingaSonicPointN2toyourSonicWallnetworksecurityappliance.
LegacyclientsOlderlaptopsandmobiledevicesmaynotsupport802.11n.Althoughclientswith802.11a/g/bhardwarearesupportedbytheSonicWallSonicPointN2,thepresenceoftheselegacyclientswithinrangeofyourwirelessnetworkcouldaffecttheconnectionspeedofyour802.11nclients.
Forexample,an802.11bdeviceauthenticatedtotheSonicPointN2couldlimitallclientsconnectedtothatradioto802.11bdatarates.
SonicWallSonicPointN2GettingStartedGuide 15
-
RadiofrequencybarriersDetermininghowtocircumventRFbarrierscanbeachallengingpartoftheplacementprocess,butRFbarrierscanalsobeusedbeneficiallyinanattempttoblocksignalswhereyoudonotwantcoverage.The5GHzfrequencyismoresensitivetoRFbarriers.Awallthatallowsa2.4GHzwirelessnetworktooperatemayblocka5GHzone.
RFinterferenceRFinterferencefromhome,office,andmedicalequipmentisacommonchallengeinwirelessdeployments.
WhenconsideringRFinterferencesources,rememberthatmostcell/wirelessphonesandBluetoothdevicesonlyutilizethe2.4GHzfrequency.Assuch,theyshouldnotcausesignificantinterferencewithwirelessnetworksoperatinginthe5GHzfrequency.CommonRFbarriertypes
BarrierType RFSignalBlocking
Openair VeryLow
Glass,wood,drywall,cubepartitions Low
Floorsandouterwalls,aquariums(brick/marble/granite/water)
Medium
Concrete,securityglass,wiremesh,stackedbooks/paper
High
Metalpartitions,desks,reinforcedconcrete
VeryHigh
CommonsourcesofRFinterference
InterferenceSource PossibleRange BandsAffected
2.4GHzphones 100feet 2.4GHz(802.11b/g/n)
Bluetoothdevices 30feet 2.4GHz(802.11b/g/n)
Microwaveoven 1020feet 2.4and5GHz,dependingonshielding
Scientificandmedicalequipment
Shortdistance,varies
2.4and5GHz,dependingonshielding
16 SonicWallSonicPointN2GettingStartedGuide
-
MountingtheSonicPointN2YoucanmountyourSonicWallSonicPointN2toawallorceiling,oryoucansimplysetitonaflatsurface.
ForsafetytipswhenmountingtheSonicPointN2,seeProductsafetyandregulatoryinformationonpage29.
MountingusingceilingbracketsThemountingkitincludesalargebracket,twosmallbrackets,anchorscrews,andscrews.
Largeceilingbracket
Smallceilingbrackets
TheundersideoftheSonicPointN2hastwoinsertionpointsforthescrews.YoucanusetheseinsertionpointstoattacheitherthelargebracketorthetwosmallbracketstotheSonicPointN2.
Holesforscrews
SonicWallSonicPointN2GettingStartedGuide 17
-
TomounttheSonicPointN2toacrossbarbetweenceilingpanelsusingthelargebracket
1 UsetheincludedscrewstoattachthelargebrackettotheundersideoftheSonicPoint.
2 SupportingtheSonicPointinonehand,positiontheedgeclipsofthebracketovertheedgeoftheceilingcrossbarandrotatetheSonicPointcounterclockwise(totheleftwhenlookingupatit)untilthebracketissecurelyattachedtothecrossbar.
ToremovetheSonicPointN2fromtheceilingcrossbar,rotateitclockwise(totherightwhenlookingupatit)untilthebracketdetachesfromthecrossbar.
Fastenthelargeceilingbracketwithscrews.
18 SonicWallSonicPointN2GettingStartedGuide
-
TomounttheSonicPointN2toacrossbarbetweenceilingpanelsusingthesmallceilingbrackets:
1 UsetheincludedscrewstoattachthesmallbracketstotheundersideoftheSonicPoint,makingsurebothbracketsareparallel.
2 SupportingtheSonicPointinonehand,cliptheedgeofeachbracketovertheedgeoftheceilingcrossbarasshowninthefollowingimage.MakesuretheSonicPointissecurelyattachedtothecrossbarbeforereleasingthedevice.
Ceiling crossbar
Mounting brackets
SonicPoint unit
SonicWallSonicPointN2GettingStartedGuide 19
-
Mountingusinganchorscrews
TomounttheSonicPointN2usingtheanchorscrews
1 Onthemountingsurface,markthelocationtomaketwoscrewholes.Themarksshouldbehorizontallyparalleltoeachother.
2 Screwtheanchorscrewsintotheceilingtileordrywalltotheirfulldepth.
3 Insertthescrewsintotheanchors,andscrewthemindeepenoughtoleaveminimalspacebetweenthescrewheadsandthewallsurface.
4 SupportingtheSonicPointinyourhands,securelyfittheundersideslotsoftheSonicPointontothescrewheads.
20 SonicWallSonicPointN2GettingStartedGuide
-
3
ConfiguringSonicOSforwirelessaccess
ThissectionprovidesinstructionsforconfiguringSonicOSonyourSonicWallnetworksecurityappliancetoconnectyourSonicPointN2totheWLANzoneandmanageitasaLayer2device.Formoreadvancedconfigurations,includingLayer3managementofyourSonicPointN2onaLANzone,refertotheSonicOSAdministrationGuide.
ConfiguringSonicOSforSonicPointN2onpage21
VerifyingSonicPointoperationonpage25
Troubleshootingtipsonpage26
ConfiguringSonicOSforSonicPointN2YouonlyneedtocompletethreesimpleconfigurationtasksinSonicOStoprepareyourSonicPointN2toprovidesecurewirelessaccess.
1 ConfigurethenetworkinterfacetowhichtheSonicPointN2isconnected.
2 ConfiguretheWLANzonefortrustandsecurityservices.
3 ConfiguretheSonicPointN2entryforthedesiredradiofrequency,mode,andauthenticationtype.
SonicWallSonicPointN2GettingStartedGuide 21
-
ConfiguringthenetworkinterfaceEachSonicPointorgroupofSonicPointsmustbeconnectedtoaphysicalnetworkinterfacethatisconfiguredinawirelesszone.SonicOSprovidesastandardwirelesszone(WLAN)whichcanbeappliedtoanyavailableinterface.
ToconfigurethenetworkinterfaceinSonicOS
1 NavigatetotheNetwork>InterfacespageandclickConfigurefortheinterfacetowhichyourSonicPointisconnected.
2 SelectWLANzonefortheZonetype.
3 SelectStaticIPModefortheMode/IPAssignment.
4 IntheIPAddressfield,typeinanyprivateIPaddressthatdoesnotinterferewiththeIPaddressrangeofanyotherinterfacesontheappliance.
5 EnteraSubnetMask.Thedefaultis255.255.255.0.
6 UsethedefaultsettingsorselectappropriatesettingsfortheotherfieldsandthenclickOK.
SonicOS5.9interfacesettings
SonicOS6.2interfacesettings
CAUTION:AllowingManagementandUserLogintotheappliancefromawirelesszonecanposeasecuritythreat,especiallyifyouoryourusershavenotsetstrongpasswords.
22 SonicWallSonicPointN2GettingStartedGuide
-
ConfiguringtheWLANzone
ToconfiguretheWLANzoneinSonicOS
1 OntheNetwork>ZonespageintheWLANrow,clicktheiconintheConfigurecolumn.
2 OntheGeneraltab,selecttheAllowInterfaceTrustsettingtoautomatethecreationofAccessRulestoallowtraffictoflowbetweentheinterfaceswithinthezone,regardlessoftheinterfacestowhichthezoneisapplied.
Forexample,iftheWLANzonehasboththeX2andX3interfacesassignedtoit,selectingAllowInterfaceTrustcreatesthenecessaryaccessrulestoallowhostsontheseinterfacestocommunicatewitheachother.
3 Selectthecheckboxestoenablesecurityservicesonthiszone.Minimally,youwouldenableGatewayAntiVirus,IPS,andAntiSpyware.IfyourwirelessclientsareallrunningSonicWallClientAntiVirus,selectEnableClientAVEnforcementService.
4 OntheGuestServicestab,optionallyconfigureguestInternetaccess.ForinformationaboutGuestServices,seetheSonicOSAdministrationGuide.
5 OntheWirelesstab,selectOnlyallowtrafficgeneratedbyaSonicPoint/SonicPointNtoallowonlytrafficfromSonicPointstoentertheWLANzoneinterfaces,providingmaximumsecurity.
6 Whenfinished,clickOK.
SonicWallSonicPointN2GettingStartedGuide 23
-
ConfiguringtheSonicPointN2settingsWhenaSonicPointN2isinitiallyconnectedtoaninterface,thefirewallusesadefaultprovisioningprofiletocreateaSonicPointN2entry.Itcantakeupto5minutesfortheentrytobecreated.
YoucanmodifytheSonicPointN2entrytoconfiguretheaccesspointname,radiofrequencymode,authenticationtype,andothersettingsspecifictoyourSonicPointN2.
TomodifytheSonicPointN2entryinSonicOS
1 NavigatetotheSonicPoint>SonicPointspage.
2 IntheSonicPointNstable,clicktheconfigurebuttonintherowfortheSonicPointN2entryyouwishtomodify.
Generaltabsettings
3 OntheGeneraltab,selectEnableSonicPoint.
4 IntheNamefield,optionallytypeinanewnameforthisSonicPointN2.Theexistingnameisassignedbytheprovisioningprofilebasedonthenameprefixintheprofilewithauniquenumberappended.
Thisistheaccesspointnamethatappearsinclientslistsofavailablewirelessconnections.
5 VerifytheCountryCodefortheareaofoperation.
6 Configuretheremainingoptionsasneeded.Formoreinformation,seetheSonicOSAdministrationGuide.
Radio0/Radio1Basictabsettings
7 ClicktheRadio0Basictab,ortheRadio1Basictab.
TheconfigurationisverysimilarfortheRadio0andRadio1Basictabs.Themaindifferencesaretheradiofrequencies:
TIP:FordeploymentsofmultipleSonicPointsthatneedthesameprovisioningsettings,youcancreateacustomprovisioningprofileintheuppersectionoftheSonicPoint>SonicPointspage.IntheNetwork>Zonespage,youcanedittheWLANzoneandspecifythisprofileontheWirelesstab.AnySonicPointsconnectingtoaninterfaceintheWLANzonewillthenbeprovisionedwiththeassignedprofile.SeetheSonicOSAdministrationGuideformoreinformation.
Radio Frequency DefaultMode
Radio0 5GHz 5GHz802.11n/aMixed
Radio1 2.4GHz 2.4GHz802.11n/g/bMixed
24 SonicWallSonicPointN2GettingStartedGuide
-
8 SelectEnableRadio.
9 SelectaModeorusethedefault.
10 UnderWirelessSecurity,selecttheAuthenticationTypeforyourwirelessnetwork.SonicWallrecommendsusingWPA2astheauthenticationtypeifallclientdevicessupportit.
11 SelecttheCipherType.WhenusingWPAandWPA2,SonicWallrecommendsAESformaximumsecurity.
12 Fillinthefieldsspecifictotheauthenticationtypethatyouselected.Theremainingfieldschangedependingontheselectedauthenticationtype.
13 Optionally,underACLEnforcement,selectEnableMACFilterListtoenforceAccessControlbyallowingordenyingtrafficfromspecificdevices.SelectaMACaddressobjectgroupfromtheAllowListorDenyListtoautomaticallyallowordenytraffictoandfromalldeviceswithMACaddressesinthegroup.TheDenyListisenforcedbeforetheAllowList.
Radio0/Radio1Advancedtabsettings
14 ClicktheRadio0Advancedtab,ortheRadio1Advancedtab.
TheconfigurationisverysimilarfortheRadio0AdvancedandRadio1Advancedtabs.Formostadvancedoptions,thedefaultsettingsgiveoptimumperformance.Forafulldescriptionofthefieldsonthistab,seetheSonicOSAdministrationGuide.
15 OptionallyselecttheHideSSIDinBeaconcheckbox.
TheSSIDreferstotheaccesspointnamethatappearsinclientslistsofavailablewirelessconnections.
HidingtheSSIDprovidesadditionalsecuritybecauseitrequirestheusertoknowtheaccesspointnamebeforeconnecting.
16 Whenyouarefinishedconfiguringalltabs,clickOK.
VerifyingSonicPointoperationToverifythattheSonicPointisprovisionedandoperational,navigatetotheSonicPoint>SonicPointspageinSonicOS.IntheSonicPointNstable,theStatuscolumndisplaystheSonicPointN2status.ItshouldsayOperational.
TIP:PSKusesapersonalpassphraseforauthentication,EAPusesanEnterpriseRADIUSserver.
NOTE:OlderclientdevicesmightnotsupportAES.
SonicWallSonicPointN2GettingStartedGuide 25
-
ToverifyInternetconnectivityviatheSonicPointN2
1 ConnectaclientdevicetotheSonicPointN2byselectingtheappropriateaccesspointname(SSID).
2 Ensurethattheclientdeviceisnotconnectedtoanyothernetworkconnections(wiredLAN,3G/4GWWAN).
3 Inabrowser,enterhttp://SonicWall.comintheaddressbarandpressEnter.TheSonicWallwebsiteshoulddisplay.Ifyouareunabletobrowsetoawebsite,refertoTroubleshootingtips.
TroubleshootingtipsWhentheSonicPointN2iscorrectlyconnectedtoaSonicWallnetworksecurityappliance,thetwounitsperformanencryptedexchange,andanentryfortheSonicPointN2isautomaticallycreatedintheSonicPointNstableontheSonicPoint>SonicPointspageinSonicOS.
Iftheentrydoesnotappearinthetablewithin5minutesofconnectingtheSonicPointN2:
MakesuretheSonicPointN2isconnectedtoaninterfacethatisconfiguredaspartofawirelesszone.EitherthedefaultWLANzoneoracustomzonewithtypesettowirelessisrequired.
EnsurethattheSonicPointN2isproperlyconnectedbyEthernetcabletoan802.3atcompliantPoEdevice.APoEcapableswitchorPoEinjectorisrequired.
Ifan802.3atcompliantPoEinjectorisbeingused,verifythattheSonicPointN2isconnectedtothePoEportlabeledDataandPowerOut.
IftheSonicPointN2hasanentryinthetable,butrebootsfrequentlyorseemsnonfunctional:
VerifythatyourPoEswitch/injectoris802.3atcompliantandratedtodeliver25wattsofpowertoeachPoEport.802.3afcompliantPoEdevicesdonotprovidesufficientpowertoproperlyruncurrentgeneration802.11devices.An802.3atcompliantswitchorPoEinjectorisrequiredtopowertheSonicWallSonicPointN2.
ClickSynchronizeSonicPointsontheSonicPoint>SonicPointspagetoforceSonicOStodownloadanewSonicPointfirmwareimagefromtheSonicWallbackendserver.
26 SonicWallSonicPointN2GettingStartedGuide
-
4
Supportandproductregistration
ThissectionprovidesinformationaboutregisteringyourSonicWallSonicPointN2,requirementsforreceivingtechnicalsupport,andotheronlinesupportandtrainingoptions.
Registrationandsupportonpage27
Onlinesupportandtrainingonpage28
RegistrationandsupportAllSonicPointN2wirelessaccesspointsincludeaninitialsubscriptiontoSonicWall24x7Support.
SonicOSwillautomaticallyregisteryourSonicPointN2onMySonicWall,ifconnectedtotheInternet.Itmaytakeupto24hoursforyourSonicPointN2tobeautomaticallyregistered.
Optionally,youcanmanuallyregistertheSonicPointN2onMySonicWallbyloggingintoyouraccountat:http://www.MySonicWall.com.
TheSonicPointN2willalsobeassociatedinMySonicWallwiththeregisteredSonicWallnetworksecurityappliancetowhichitisconnected.SeetheAssociatedProductssectionatthebottomoftheapplianceServiceManagementpageinMySonicWall.
SonicWallSonicPointN2GettingStartedGuide 27
http://www mysonicwall.com -
Inordertoreceivetechnicalsupport,yourSonicPointN2musthaveanactiveSupportsubscription.
OnlinesupportandtrainingSonicWalloffersavarietyofonlinesupportandtrainingoptionsforyourconvenience.
Customersupport
SonicWallofferstelephone,emailandWebbasedsupporttocustomerswhohaveavalidWarrantyorwhopurchasedaSupportContract.ReviewourWarrantySupportPolicyforproductcoverage.SonicWallalsooffersafullrangeofconsultingservicestomeetyourneeds.
For more information, visit: https://support.SonicWall.com/
Knowledgebase
TheKnowledgeBaseallowsuserstosearchforSonicWalldocumentsbybrowsingtheknowledgebase,searchingforkeywords,orusingfulltextsearch.
Formoreinformation,visit:https://support.SonicWall.com/SonicWallsonicpointseries/kb
Userforums
TheSonicWallUserForumsarearesourcethatprovideuserstheabilitytocommunicateanddiscussavarietyofsecurityandappliancesubjectmatters.Theforumsareorganizedbycategories.
Formoreinformation,visit:https://forum.SonicWall.com/
Training
SonicWalloffersanextensivesalesandtechnicaltrainingcurriculum.SonicWallTrainingprovidestheETraining,instructorledtraining,customtraining,technicalcertification,andusesauthorizedtrainingpartners.
Formoreinformation,visit:https://support.SonicWall.com/SonicWallsonicpointseries/training
Relateddocumentation
SonicOSAdministrationGuide SonicOSReleaseNotes SonicOSConfigurationorDeploymentGuides
Formoreinformation,visithttps://support.SonicWall.com/SonicWallsonicpointseries/ace/releasenotesguides
28 SonicWallSonicPointN2GettingStartedGuide
https://support.sonicwall.com/sonicwall-sonicpoint-series/kbhttps://support.sonicwall.com/sonicwall-sonicpoint-series/kbhttps://support.sonicwall.com/sonicwall-sonicpoint-series/traininghttps://support.sonicwall.com/sonicwall-sonicpoint-series/traininghttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guideshttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guideshttps://forum.sonicwall.com/https://forum.sonicwall.com/https://support.sonicwall.com/https://support.sonicwall.com/ -
5
Productsafetyandregulatoryinformation
Thissectionprovidesproductsafetyandregulatoryinformation.
Mountingtheapplianceonpage30
VerwarnungWeiterehinweisezurmontageonpage31
EUandEFTAonpage32
Declarationofconformityonpage33
ProductswithUL2043printedontheirproductlabelsarewithinthelimitspecifiedintheUL2043StandardforFireTestforHeatandVisibleSmokeReleaseforDiscreteProductsInstalledinAirHandlingSpaces(Plenum).AppliesonlywhenpoweredthroughPoE.ThePoEpowersupplyisnotcoveredthebytheUL2043evaluationofthisAccessPoint.
SonicWallSonicPointN2complieswithFCCUNIINewRulesforDynamicFrequencySelection(DFS).
NOTE:Additionalregulatorynotificationsandinformationforthisproductcanbefoundonlineat:https://support.SonicWall.com/SonicWallSonicPointseries/ace.
RegulatoryModel/Type ProductName
APL260B3 SonicPointN2
SonicWallSonicPointN2GettingStartedGuide 29
https://support.software.dell.com/https://support.sonicwall.com/sonicwall-sonicpoint-series/ace -
MountingtheapplianceWARNING:
Mountinalocationawayfromdirectsunlightandsourcesofheat.Amaximumambienttemperatureof104F(40C)isrecommended.
Routecablesawayfrompowerlines,fluorescentlightingfixtures,andsourcesofnoisesuchasradios,transmitters,andbroadbandamplifiers
Ensurethatnowaterorexcessivemoisturecanentertheunit.
Allowunrestrictedairflowaroundtheunitandthroughtheventsonthesideoftheunit.Aminimumof1inch(25.44mm)clearanceisrecommended.
Considerationmustbegiventotheconnectionoftheequipmenttothesupplycircuitandthattheeffectofoverloadingthecircuitshasminimalimpactonovercurrentprotectionandsupplywiring.Appropriateconsiderationofequipmentnameplateratingsmustbeusedwhenaddressingthisconcern.
Thisdeviceisnotintendedforuseinthedirectfieldofviewatvisualdisplayworkplaces.Toavoidincommodingreflectionsatvisualdisplayworkplaces,
thisdevicemustnotbeplacedinthedirectfieldofview.
CableconnectionsWARNING:
AllEthernetandRS232(Console)cablesaredesignedforintrabuildingconnectiontootherequipment.Donotconnecttheseportsdirectlytocommunicationwiringorotherwiringthatexitsthebuildingwheretheapplianceislocated.
LithiumBatteryWARNING:
TheLithiumBatteryusedintheSonicWallappliancecannotbereplacedbytheuser.TheappliancemustbereturnedtoaSonicWallauthorizedservicecenterforreplacementwiththesameorequivalenttyperecommendedbythemanufacturer.If,foranyreason,thebatteryorSonicWallappliancemustbedisposedof,dosofollowingthebatterymanufacturer'sinstructions.
30 SonicWallSonicPointN2GettingStartedGuide
-
PowersupplyinformationforAPL260B3Thisproduct'spowerisprovidedbytheEthernetcablepluggedintotheLANport,thisiscalledPowerOverEthernetorPOE.ThePOEsourceshouldonlybeULlistedmarkedClass2orLPSwithanoutputrated48VDC,minimum0.6A,Tma:minimum40degreesC.
VerwarnungWeiterehinweisezurmontage
WhlenSiefrdieMontageeinenOrt,derkeinemdirektenSonnenlichtausgesetztistundsichnichtinderNhevonWrmequellenbefindet.DieUmgebungstemperaturdarfnichtmehrals40Cbetragen.
FhrenSiedieKabelnichtentlangvonStromleitungen,LeuchtstoffrhrenundStrquellenwieFunksendernoderBreitbandverstrkern.
StellenSiesicher,dassdasGertvorWasserundhoherLuftfeuchtigkeitgeschtztist.
StellenSiesicher,dassdieLuftumdasGertherumzirkulierenkannunddieLftungsschlitzeanderSeitedesGehusesfreisind.HieristeinBelftungsabstandvonmindestens26mmeinzuhalten.
PrfenSiedenAnschlussdesGertsandieStromversorgung,damitderberstromschutzsowiedieelektrischeLeitungnichtvoneinereventuellenberlastungderStromversorgungbeeinflusstwerden.PrfenSiedabeisorgfltigdieAngabenaufdemAufkleberdesGerts.berlastenSienichtdenStromkreis.
DasGertistnichtfrdieBenutzungimunmittelbarenGesichtsheldamBildschirmarbeitsplatzvorgesehen.UmstrendeReflexionenamBildshirmarbeitsplatzzuvermeiden,darfdiesesProduktnichtimunmittelbarenGesichtsfeldplatziertverden.
VerwarnungKabelverbindungenAlleEthernetundRS232CKabeleignensichfrdieVerbindungvonGerteninInnenrumen.SchlieenSieandieAnschlssederSonicWallkeineKabelan,dieausdemGebudeherausgefhrtwerden,indemsichdasGertbefindet.
SonicWallSonicPointN2GettingStartedGuide 31
-
VerwarnungHinweiszurLithiumbatterieDieinderInternetSecurityAppliancevonSonicWallverwendeteLithiumbatteriedarfnichtvomBenutzerausgetauschtwerden.ZumAustauschenderBatteriemussdieSonicWallineinvonSonicWallautorisiertesServiceCentergebrachtwerden.DortwirddieBatteriedurchdenselbenoderentsprechenden,vomHerstellerempfohlenenBatterietypersetzt.BeachtenSiebeieinerEntsorgungderBatterieoderderSonicWallInternetSecurityAppliancediediesbezglichenAnweisungendesHerstellers.
InformationenzurstromversorgungAPL260B3WenndieStromversorgungvonderSonicWallProduktpaketfehlt,wendenSonicWalldenTechnischenSupportunterhttps://support.SonicWall.com/.
DieStromversorgungdurchdasEthernetKabelindieLANAnschlussangeschlossenvorgesehenist,wirddiesalsPoweroverEthernetoderPoE.DiesesProduktdarfnurinVerbindungmiteinemfrdenEuropischenMarktgenehmigtenundmitdemLogoLPS.Ausgang:48VDC
Gleichsspannung,mind.0,6A,mindestTMAmindestens40GradC,betriebenwerden.
EUandEFTAThisdeviceisapprovedforuseinEUmemberstatesandEFTAcountriesasshownontheappliancelabel.
SonicPointN2(RM:APL260B3)RFTransmitterBandsandPower
FrequencyBand MaximumRadioFrequencyPowerTransmitted
MHz dBmEIRP
24122472 19.98
51805240 19.7
52605320 18.36
55005700 19.34
32 SonicWallSonicPointN2GettingStartedGuide
https://support.sonicwall.com/ -
DeclarationofconformityADeclarationofConformityinaccordancewiththedirectivesandstandardshasbeenmadeandisonfileat:SonicWallInternationalLimited,CityGatePark,Mahon,Cork,Ireland.
CEdeclarationscanbefoundonlineat:https://support.SonicWall.com/.
NOTE:Additionalregulatorynotificationsandinformationforthisproductcanbefoundonlineat:https://support.SonicWall.com/
SonicWallSonicPointN2GettingStartedGuide 33
https://support.software.dell.com/https://support.sonicwall.com/https://support.sonicwall.com/https://support.sonicwall.com/ -
( RoHS)/
(Pb)
(Hg)
(Cd)
(Cr+6)
(PBB)
(PBDE) / (Chassis/Bracket)
- O O O O O
( )(Mechanicalparts(fan,heatsinketc.)
- O O O O O
(PCBA)
- O O O O O
/ (Cable/connector)
- O O O O O
(powersupply)
- O O O O O
(Accessories) - O O O O O 1.O 2.
34 SonicWallSonicPointN2GettingStartedGuide
-
SonicWall Support
TechnicalsupportisavailabletocustomerswhohavepurchasedSonicWallproductswithavalidmaintenancecontractandtocustomerswhohavetrialversions.
TheSupportPortalprovidesselfhelptoolsyoucanusetosolveproblemsquicklyandindependently,24hoursaday,365daysayear.ToaccesstheSupportPortal,gotohttps://support.sonicwall.com/.
TheSupportPortalenablesyouto:
Viewknowledgebasearticlesandtechnicaldocumentation
Downloadsoftware
Viewvideotutorials
Collaboratewithpeersandexpertsinuserforums
Getlicensingassistance
AccessMySonicWall
LearnaboutSonicWallprofessionalservices
Registerfortrainingandcertification
TocontactSonicWallSupport,refertohttps://support.sonicwall.com/contactsupport.
SonicWallSonicPointN2GettingStartedGuide 35
https://support.sonicwall.com/https://support.sonicwall.com/contact-support -
36 SonicWallSonicPointN2GettingStartedGuide
-
SonicPoint N2 Getting Started GuideUpdated - January 2017232-003412-50 Rev A
IntroductionIn this guideWireless overviewSonicWall wireless firewallingFrequency bands and channels802.11 comparison chartInitial SetupCheck package contentsAny items missing?Deployment requirementsSonicPoint N2 available ports/status LEDsInstalling antennasConnecting Ethernet cablesWireless access point placement considerationsRadio frequency barriersRF interferenceMounting the SonicPoint N2Mounting using ceiling bracketsMounting using anchor screwsConfiguring SonicOS for wireless accessConfiguring SonicOS for SonicPoint N2Configuring the network interfaceConfiguring the WLAN zoneConfiguring the SonicPoint N2 settingsVerifying SonicPoint operationTroubleshooting tipsSupport and product registrationRegistration and supportOnline support and trainingProduct safety and regulatory informationMounting the applianceCable connectionsLithium BatteryPower supply information for APL26-0B3Verwarnung Weitere hinweise zur montageVerwarnung KabelverbindungenVerwarnung Hinweis zur LithiumbatterieInformationen zur stromversorgung APL26-0B3EU and EFTADeclaration of conformity