SonicWALL NSA 6600, Руководство по началу работы

Страница: 20 / 63

20 SonicWall NSA 2600/3600/4600/5600/6600 Getting Started Guide
Determining the WAN Type
Before configuring your SonicWall NSA appliance, you need to
determine the type of WAN connection that your setup will
use. SonicWall supports the following types:
• Static —Configures the appliance for a network that uses
static IP addresses.
• DHCP —Configures the appliance to request IP settings
from a DHCP server on the Internet.
• PPPoE —Point ‐ to ‐ Point Protocol over Ethernet (PPPoE) is
typically used with a DSL modem. If your ISP requires
desktop software with a username and password, select
NAT with PPPoE mode.
• PPTP —Point ‐ to ‐ Point Tunneling Protocol (PPTP) is used to
connect to a remote server. PPTP typically supports older
Microsoft Windows implementations that require
tunneling connectivity.
• L2TP —Layer 2 Tunneling Protocol (L2TP) is used to transmit
Layer 2 data over IP or other Layer 3 routed networks.
Internet Service Providers (ISPs) often use it to enable
virtual private networks (VPNs) for customers over the
Internet. It does not encrypt network traffic itself. If L2TP is
not available in the Setup Wizard, you can configure it later
in the SonicOS management interface.
• Wire Mode (2 ‐ Port Wire) —Inserts the appliance into the
network using two paired interfaces. Available Wire Mode
types include Bypass , Inspect , and Secure . Bypass mode
allows for quick and non ‐ disruptive insertion into the data
path. Inspect mode extends Bypass mode with traffic
inspection for classification and flow reporting. Secure
mode provides full SonicWall ReAssembly ‐ Free Deep
Packet Inspection™ (RF ‐ DPI) and control of network traffic.
Secure Mode affords the same level of visibility and
enforcement as conventional NAT or L2 Bridged Mode
deployments, but without any L3/L4 transformations, and
with no alterations of ARP or routing behavior. If Wire
Mode is not available in the Setup Wizard, you can
configure it later in the SonicOS management interface.
• Tap Mode (1 ‐ Port Tap) —Using a single interface, the
firewall connects to and receives mirrored packets from an
adjacent switch SPAN port. Similar to Inspect mode in Wire
Mode, but with a single port and not in the physical path of
traffic.
NOTE: When operating in Wire Mode, the firewall’s
MGMT interface is used for local management. To
enable remote management and dynamic security
services and application intelligence updates, a WAN
interface (separate from the Wire Mode interfaces)
must be configured for Internet connectivity.