background image

SonicWall

 

SuperMassive

 

9800

 

Getting

 

Started

 

Guide

69

• 架設位置需遠離陽光直射與熱源。建議周圍溫度最高溫不 要超

過 

104°F

 

(40°C)

• 如果是安裝於封閉式或多組機架配件,機架環境的周圍操作溫度

可能會高過室內周遭。因此,在與上述建議之最高周圍溫度相容
的環境中安裝設備時,應將此列入考量。

• 將 

SonicWall

裝置平坦地裝設在機架中,如此才能避免因不均勻

的機械負荷造成危險狀況。

• 必須使用四顆與機架設計相容的安裝螺釘,並用手鎖緊螺釘,確

定安裝牢固。選擇一個安裝位置,將四個裝載洞孔對齊 19 吋架
設機櫃的安裝桿。

• 應當提供一個合適額定值並且已被認可的分支電路斷路器作為安

裝該裝置的一部分。在購買材料或部件時,應遵循當地安全代
碼。

• 必須留心裝置與電源電路的連接問題,電路過載對過電流保護與

電路電線的影響需降至最低。解決這個問題時,需正確考慮裝置
銘牌額定值。不要過載電路。

• 必須維護可靠的機架裝載設備接地。必須特別留意電源供應器連

線,而不是直接連接到電源板之類的分支電路。

• 從工廠運出時,這個

SonicWall

產品包括為後備交流電源和增加

可靠性而附帶的兩個電源。 可用提供的地區電流轉換器轉換成直
流電源。

• 要斷開交流電源,兩條電源線都必須被拔除。

• 隨附的電源線僅限於特定的國家或地區使用。使用前,請確認電

源線的額定值且已被認可在你的地區上使用。

• 這個型號出貨時附帶的交流電源,是標準三芯器具耦合器的配

置。可用提供的地區電流轉換器轉換成直流電源。 

• 要斷開直流電源,必須有一個由建築物本身或機架安裝所提供的

外部適當的額定斷路裝置。

• 不要把交流配置的產品連接到直流電源,也不要把直流配置的產

品連接到交流電源。在直流轉換器套件中有詳細說明。產品必須
設定為全直流或全交流。

• 直流讀數包括公差。不要在產品標籤標示的範圍以外操作產品。

• 直流配置包括帶有保護接地導體的輸入電纜 (綠色和黃色電

線)。此導體必須連接到安全接地電路。

• 當安裝及後續接觸產品背面之後,必須用工具將指旋螺釘鎖緊。

 

• 更換風扇部件前,請仔細閱讀,並遵循所提供的指示。

鋰電池警告

使用者不得自行更換 

SonicWall

 網際網路安全性裝置中使用的鋰電池。必

須將 SonicWall 送回 

SonicWall

授權的服務中心,以更換相同的鋰電池或

製造商推薦的同類型鋰電池。若因任何原因必須丟棄電池或

 

SonicWall

 網

際網路安全性裝置,請嚴格遵守電池製造商的指示。

纜線連結

所有乙太網路與 RS232 ( 主控台 ) 線路都是為與其他裝置進行內建連接所
設計的。請不要將這些連接埠直接連接至通訊線路,或其他連出 

SonicWall

 裝置所在建築的線路。

WARNING:

 

風扇潛在危險警告

 

Summary of Contents for SuperMassive 9800

Page 1: ...SonicWall SuperMassive 9800 Getting Started Guide Regulatory Model Number 2RK04 0AD...

Page 2: ...FFILIATES BE LIABLE FOR ANY DIRECT INDIRECT CONSEQUENTIAL PUNITIVE SPECIAL OR INCIDENTAL DAMAGES INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS BUSINESS INTERRUPTION OR LOSS OF INFORMATION A...

Page 3: ...formance business firewall throughput 10 Gbps of malware protection and 24 Gbps of application inspection with intrusion prevention Gateway and client services including Capture Advanced Threat Protec...

Page 4: ...page 10 Back Panel on page 11 SuperMassive 9800 LED Usage on page 12 Port Type and LED Usage on page 13 Setup Process Overview on page 14 Chapter 3 Topics Setting Up the Appliance on page 15 Determin...

Page 5: ...ty Services on page 31 Activating and Managing Licenses using a Key on page 33 Upgrading Firmware on page 33 Chapter 5 Topics Deployment Scenarios on page 37 Deployment Scenarios on page 38 Configurin...

Page 6: ...pter 7 Topics Rack Mounting Instructions on page 59 Instructions for Rack Mounting Your Appliance on page 60 Chapter 8 Topics Product Safety and Regulatory Information on page 65 Safety and Regulatory...

Page 7: ...with the SonicWall SuperMassive 9800 appliance and provides front and rear illustrations of the SuperMassive 9800 SuperMassive 9800 Package Contents on page 8 Front Panel on page 10 Back Panel on pag...

Page 8: ...800 Getting Started Guide Missing items If any items are missing from your package contact SonicWall Support Web https support sonicwall com or https support sonicwall com contact support Email custom...

Page 9: ...g Started Guide 9 Package contents 1 4 5 6 3 2 SonicWall SuperMassive 9800 CONSOLE SDHC MGMT X23 X21 X20 X6 X4 1GE 10GE X2 X0 X1 X3 X5 X7 X22 B0 B1 ALARM TEST PWR 1 PWR 2 X14 X12 X18 X16 X10 X8 X9 X11...

Page 10: ...for Power Supplies Test Alarms and Blade modules For information describing LED colors and activity refer to the LED Activity table in this document Navigate the LCD screen for future use Display the...

Page 11: ...ns before use See Product Safety and Regulatory Information on page 65 Expansion Module Expansion Module Bay Fans 6 Power Supplies 2 For SonicWall approved expansion modules Auto throttling fans for s...

Page 12: ...ted in the chassis TEST Test boot status Off System is up and operational Solid Yellow System is starting up Blinking Yellow System is in SafeMode ALARM Alarm condition Off No alarms are present Blink...

Page 13: ...LED activity Port Type Port Name Interfaces LED Color Indicates Copper MGMT or X0 X7 Amber 1 Gbps Green 10 Gbps Blinking Yellow Data is transmitting and or receiving Off No link or 10 Mbps SFP X8 X19...

Page 14: ...of getting started with your new SonicWall SuperMassive 9800 appliance Setup process Verify Pre Configuration Requirements Start Up Management Computer Perform Initial Setup Register Appliance in Son...

Page 15: ...types a section to record configuration information and initial setup information and procedures Determining the WAN Type on page 16 System Requirements on page 16 Recording Configuration Information...

Page 16: ...server PPTP typically supports older Microsoft Windows implementations that require tunneling connectivity L2TP Layer 2 Tunneling Protocol L2TP is used to transmit Layer 2 data over IP or other Layer...

Page 17: ...us from the CLI or the bottom panel of your SuperMassive appliance LAN IP Address Select a static IP address for your SonicWall appliance that is within range of your local network default is 10 10 10...

Page 18: ...in Password Select an administrator password default is password If you are connecting with DHCP No information is usually required However some providers may require a host name Host Name If you are...

Page 19: ...ll SuperMassive 9800 appliance for initial setup Connecting your computer to the SuperMassive 9800 MGMT Management Computer SonicWall Appliance Ethernet 120V AC U S SonicWall SuperMassive 9800 CONSOLE...

Page 20: ...propriate power outlets For further information regarding power requirements refer to Product Safety and Regulatory Information on page 65 of this document SuperMassive LED Activity The Power LEDs on...

Page 21: ...192 168 168 168 The initial screen displays the options to launch the Setup Wizard or configure the appliance manually 2 Launch the SonicWall Setup Wizard by clicking the first here link This wizard h...

Page 22: ...ecting to the Internet on page 22 to connect to the appliance for Internet access and then refer to Registering Licensing and Upgrading on page 27 to begin the registration process Connecting to the I...

Page 23: ...your Internet connection If you have a router DSL modem or cable modem connect the Ethernet cable to a LAN port on the router or modem 2 Connect the other end of the Ethernet cable to the X1 WAN port...

Page 24: ...ly If you cannot view the SonicWall home page try one of these solutions Verify that the Local Area Connection settings on your computer are set to use either DHCP or a static IP on the LAN subnet Ren...

Page 25: ...ll SuperMassive 9800 appliance for Internet access Connecting your SuperMassive 9800 to the internet SonicWall Appliance SonicWall SuperMassive 9800 CONSOLE SDHC MGMT X23 X21 X20 X6 X4 1GE 10GE X2 X0...

Page 26: ...e properly seated in the port of the security appliance Troubleshooting Your LAN Connection If you do not see the SonicOS login prompt when you point your browser to the X0 LAN IP address consider the...

Page 27: ...stration is an important part of the setup process and is necessary to receive the benefits of SonicWall security services firmware updates and technical support Using MySonicWall on page 28 Creating...

Page 28: ...associate a secondary unit that can share security service licenses with your primary appliance Creating a MySonicWall Account A MySonicWall account is required to register the SonicWall SuperMassive...

Page 29: ...the System Status page 3 A message displays at the top of the screen that your SonicWall appliance is not registered Click the Register link 4 Enter your MySonicWall username your email address and pa...

Page 30: ...code can be found on the System Status page showstatus from the CLI or the bottom panel of your SuperMassive 9800 appliance 7 Click Register Synchronizing Licenses Manually To manually synchronize lic...

Page 31: ...scroll down to the Applicable Services section to select a free trial or purchase the service Free Trial of Service Click the Try icon in the Action column for the security service you wish to try for...

Page 32: ...Control Deep Packet Inspection for SSL DPI SSL Deep Packet Inspection for SSH DPI SSH Botnet Filter Content Filtering Premium Edition Stateful High Availability Active Active Clustering Service Deskt...

Page 33: ...the Applicable Services section and click the Key icon to activate the service 4 Type or paste your key into the Activation Key field and then click Submit 5 Click Synchronize After activating the se...

Page 34: ...Settings page click Create Backup SonicOS takes a snapshot of your current system state firmware and configuration preference and makes it the new System Backup firmware image Clicking Create Backup o...

Page 35: ...sing your existing configuration settings 6 In the confirmation dialog click OK The appliance restarts and then displays the login page 7 Enter your user name and password Your new SonicOS image versi...

Page 36: ...36 SonicWall SuperMassive 9800 Getting Started Guide...

Page 37: ...This section provides configuration overviews as well as deployment scenarios for your SonicWall SuperMassive 9800 Version Number Deployment Scenarios on page 38 Configuring NAT Mode Gateway on page 4...

Page 38: ...isting SonicWall gateway appliance SuperMassive appliance in addition to an existing SonicWall gateway appliance Scenario B Stateful HA Pair A SonicWall SuperMassive 9800 CONSOLE SDHC MGMT X23 X21 X20...

Page 39: ...ay device and the other SuperMassive 9800 is in Standby mode All network connection information is synchronized between the two devices so that the Standby appliance can seamlessly switch to Active mo...

Page 40: ...ed to the SonicWall ReAssembly Free RF DPI engine providing passive inspection classification and flow reporting Secure Mode Provides full Deep Packet Inspection RF DPI inspection and control of netwo...

Page 41: ...go through both an access rule and a NAT policy a fundamental part of the NAT Mode architecture The NAT policy is even used for traffic that needs no IP address translation such as traffic traveling b...

Page 42: ...imilar to Scenario A NAT Mode Gateway on page 39 with the added benefit of high availability Topics Initial High Availability Setup on page 43 Configuring High Availability Settings on page 43 Configu...

Page 43: ...security appliances LAN WAN and other interfaces are properly connected for failover Connect the HA Control and Data Links on the Primary and Secondary appliances with appropriate cables Turn on the...

Page 44: ...ndary appliance reboots Configuring HA Monitoring Settings After configuring the HA settings you need to configure the Monitoring settings for the LAN or WAN This includes configuring unique IP addres...

Page 45: ...rget host This option is not selected by default 8 Click OK You can repeat these steps to configure Monitoring on other interfaces Configuring Optional HA Settings These optional settings are can conf...

Page 46: ...of 5 and adjusting later if needed The minimum is 4 and the maximum is 99 Set the Probe Interval for the interval in seconds between communication with upstream or downstream systems The recommended...

Page 47: ...ng and Upgrading on page 27 License synchronization is used during HA so that the Secondary appliance can maintain the same level of network protection provided before the failover Completing HA Pair...

Page 48: ...o the Manage Security Services Online section 14 Click the Synchronize button This ensures that both the Primary and Secondary appliances successfully synchronize with the SonicWall license server and...

Page 49: ...ration Configuring Wire Mode This section provides an overview of the different types of Wire Mode supported on the SonicWall SuperMassive 9800 appliance and instructions for how to set up the applian...

Page 50: ...front of a server farm or at a transition point between data classification domains the firewall is inserted into the physical data path requiring a very short maintenance window One or more pairs of...

Page 51: ...Yes No No No Yes DHCP Server 1 No No No No Yes DPI Detection Yes Yes No Yes Yes DPI Prevention Yes No No No Yes DPI SSL 1 Yes No No No Yes High Availability Yes Yes Yes Yes Yes Link State Propagation...

Page 52: ...r based on the direction of traffic between the source zone and its paired interface zone For example if the source zone is WAN and the paired interface zone is LAN then WAN to LAN and LAN to WAN rule...

Page 53: ...r down With this option enabled the appliance forwards packets through the internal switch when SonicOS is restarting Disable Stateful Inspection Stateful Packet Inspection SPI is turned off when this...

Page 54: ...ce LAN WAN DMZ Custom Zone if available In the example of a WAN LAN interface pair in Wire Mode this field is your LAN zone 7 Click OK Here is an example of a Wire Mode WAN zone to LAN zone paired int...

Page 55: ...5 6 Support and Training Options This section provides overviews of customer support and training options for the SonicWall SuperMassive 9800 Customer Support on page 56 Knowledge Portal on page 56 Tr...

Page 56: ...resource that allows users to search for SonicWall documents based on the following types of search tools Browse Search for keywords Full text search For further information visit https www sonicwall...

Page 57: ...onicOS Administration Guide SonicOS Release Notes SonicOS Upgrade Guide SonicOS Log Events Reference Guide SonicOS Enterprise CLI Reference Guide Global VPN Client Administration Guide For further inf...

Page 58: ...58 SonicWall SuperMassive 9800 Getting Started Guide...

Page 59: ...ng Instructions This section provides illustrated rack mounting instructions for the SonicWall SuperMassive 9800 For more information on rack mounting requirements see Product Safety and Regulatory In...

Page 60: ...60 SonicWall SuperMassive 9800 Getting Started Guide Instructions for Rack Mounting Your Appliance Extend the slide rails Then remove the chassis member from the slide rails Assemble the Slide Rail...

Page 61: ...SonicWall SuperMassive 9800 Getting Started Guide 61 Mount Chassis Member Mount chassis with eight 8 M4 screws...

Page 62: ...62 SonicWall SuperMassive 9800 Getting Started Guide Attach Bracket to Rails Insert the barb on the bracket into the square hole Then allow the plastic inserts to fit into the square holes...

Page 63: ...SonicWall SuperMassive 9800 Getting Started Guide 63 Insert Chassis to Frame Press lever down to release the slide Install the chassis by sliding it into the frame...

Page 64: ...64 SonicWall SuperMassive 9800 Getting Started Guide...

Page 65: ...uct Safety and Regulatory Information This section provides safety and regulatory along with trademark and copyright information Safety and Regulatory Information on page 66 RoHS on page 70 Declaratio...

Page 66: ...ing bars of the 19 inch rack mount cabinet A suitably rated and approved branch circuit breaker shall be provided as part of the building installation Follow local code when purchasing materials or co...

Page 67: ...ses Produkt ist nicht daf r entwickelt um in Bereichen mit ffentlichem Zugang betrieben zu werden Wenn es in Schulen betrieben wird stellen Sie sicher dass das Ger t in einem abgeschlossenen Raum inst...

Page 68: ...hstrom akzeptiert Toleranzen Betreiben Sie das Ger t nicht au erhalb des Bereiches der auf dem Aufkleber des Ger tes angegeben ist Die Gleichstrom Konfiguration beinhaltet einen Anschlusskabel mit Erd...

Page 69: ...SonicWall SuperMassive 9800 Getting Started Guide 69 104 F 40 C SonicWall 19 SonicWall SonicWall SonicWall SonicWall SonicWall RS232 SonicWall WARNING...

Page 70: ...and their chemical symbols Lead Pb Mercury Hg Cadmium Cd Hexavalent Chromium Cr 6 Polybrominated Biphenyls PBB Polybrominated Diphenyl Ethers PBDE Chassis Bracket Mechanical parts fan heatsink etc PCB...

Page 71: ...om en us legal environmental regulatory affairs Warranty Information All SonicWall appliances come with a 1 year Limited Hardware Warranty which provides delivery of critical replacement parts for def...

Page 72: ...72 SonicWall SuperMassive 9800 Getting Started Guide...

Page 73: ...ys a year To access the Support Portal go to https support sonicwall com The Support Portal provides self help tools you can use to solve problems quickly and independently 24 hours a day 365 days a y...

Page 74: ...or training and certification To contact SonicWall Support refer to https support sonicwall com contact support To view the SonicWall End User Product Agreement EUPA see https www sonicwall com legal...

Page 75: ...SonicWall SuperMassive 9800 Getting Started Guide 75...

Page 76: ...SuperMassive 9800 Getting Started Guide Updated July 2017 232 003430 50 Rev A...

Reviews: