SonicWALL NSA 2600, Upgrade Manual

Page: 8 / 15

SonicWall SonicOS 6.2
Upgrade Guide
8
12 For Chassis Management , clear the following checkboxes:
• HTTP
• Ping
• SSH
This disables the SafeMode feature and protects your appliance from unauthorized access.
13 Click OK .
About Upgrading and VPN Tunnels
Significant design changes for VPN tunnel interfaces are implemented in SonicOS 6.2.4, SonicOS 6.2.5, and again
in SonicOS 6.2.6.
• SonicOS 6.2.3 and earlier versions support Unnumbered Tunnel Interfaces for static and dynamic
(advanced) routing, while SonicOS 6.2.4 only supports Numbered Tunnel Interfaces including support for
advanced routing. Upgrading from or importing settings from an earlier release to SonicOS 6.2.4 might
require manual reconfiguration of tunnel interfaces.
• SonicOS 6.2.5 supports both Unnumbered Tunnel Interfaces and Numbered Tunnel Interfaces on all
platforms. Upgrading from all earlier releases is fully supported. An Unnumbered TI is configured by
creating a VPN policy of policy type Tunnel Interface and can only be used with static routing. A
Numbered TI is configured by adding a VPN Tunnel Interface on the Network > Interfaces page, and can
be used with static or dynamic routing.
• SonicOS 6.2.6 expands on the 6.2.5 capabilities by adding dynamic routing (RIP, OSPF) support on
Unnumbered Tunnel Interfaces. Dynamic routing is enabled with the Allow Advanced Routing option on
the Advanced tab when creating a VPN policy of policy type Tunnel Interface.
See the SonicOS 6.2 Administration Guide for more information.
For numbered tunnel interfaces, changes in SonicOS 6.2.4.2 and 6.2.5.1 can cause an OSPF MTU (maximum
transmission unit) mismatch in the following situations:
• A tunnel using non ‐ AES encryption is changed to AES after the firewall is upgraded from a previous
version to 6.2.5.1 or higher.
• A tunnel using AES encryption exists between two firewalls running a previous version, and only one
firewall is upgraded to 6.2.5.1 or higher.
Summary of tunnel interface support in SonicOS
Firmware version Tunnel interface support
SonicOS 5.8.1/5.8.4 Supports Unnumbered TI on all platforms.
SonicOS 5.9 Supports only Unnumbered TI on TZ 105/200/205/210 series and NSA 2400MX. The
TZ 100 series do not support any dynamic routing (no Advanced Routing) over
Unnumbered TI. Supports Numbered TI in addition to Unnumbered TI on all other
platforms (TZ 215 series, NSA, E ‐ Class NSA).
SonicOS 6.1 Supports Unnumbered TI on all platforms.
SonicOS 6.2 through
6.2.2.2 and 6.2.3.1
Supports Unnumbered TI on all platforms.
SonicOS 6.2.4 Supports Numbered TI on all platforms.
SonicOS 6.2.5 Supports Unnumbered TI and Numbered TI on all platforms. Only Numbered Tunnel
Interfaces support dynamic routing.
SonicOS 6.2.6 and higher Supports Unnumbered TI and Numbered TI on all platforms. Both Unnumbered TI
and Numbered TI support dynamic and static routing.