background image

66

SonicWall

 

SuperMassive

 

9800

 

Getting

 

Started

 

Guide

Safety

 

and

 

Regulatory

 

Information

Safety

 

Instructions

The

 

following

 

conditions

 

are

 

required

 

for

 

proper

 

installation:

The

 

SonicWall

 

appliance

 

is

 

designed

 

to

 

be

 

mounted

 

in

 

a

 

standard

 

19

inch

 

rack

 

mount

 

cabinet.

 

Use

 

the

 

mounting

 

hardware

 

recommended

 

by

 

the

 

rack

 

manufacturer

 

and

 

ensure

 

that

 

the

 

rack

 

is

 

adequate

 

for

 

the

 

application.

Ensure

 

that

 

no

 

water

 

or

 

excessive

 

moisture

 

can

 

enter

 

the

 

unit.

Allow

 

unrestricted

 

airflow

 

around

 

the

 

unit

 

and

 

through

 

the

 

vents

 

on

 

the

 

side

 

of

 

the

 

unit.

 

A

 

minimum

 

of

 

1

 

inch

 

(25.44mm)

 

clearance

 

is

 

recommended.

 

Route

 

cables

 

away

 

from

 

power

 

lines,

 

fluorescent

 

lighting

 

fixtures,

 

and

 

sources

 

of

 

noise

 

such

 

as

 

radios,

 

transmitters,

 

and

 

broadband

 

amplifiers.

This

 

product

 

is

 

not

 

intended

 

to

 

be

 

installed

 

and

 

used

 

in

 

a

 

home

 

or

 

public

 

area

 

accessible

 

to

 

the

 

general

 

population.

 

When

 

installed

 

in

 

schools,

 

this

 

equipment

 

must

 

be

 

installed

 

in

 

a

 

secure

 

location

 

accessible

 

only

 

by

 

trained

 

personnel.

 

Mount

 

in

 

a

 

location

 

away

 

from

 

direct

 

sunlight

 

and

 

sources

 

of

 

heat.

 

A

 

maximum

 

ambient

 

temperature

 

of

 

104º

 

F

 

(40º

 

C)

 

is

 

recommended.

If

 

installed

 

in

 

a

 

closed

 

or

 

multi

rack

 

assembly,

 

the

 

operating

 

ambient

 

temperature

 

of

 

the

 

rack

 

environment

 

may

 

be

 

greater

 

than

 

the

 

room

 

ambient.

 

Therefore,

 

consideration

 

should

 

be

 

given

 

to

 

installing

 

the

 

equipment

 

in

 

an

 

environment

 

compatible

 

with

 

the

 

maximum

 

recommended

 

ambient

 

temperature.

Mount

 

the

 

SonicWall

 

appliances

 

evenly

 

in

 

the

 

rack

 

in

 

order

 

to

 

prevent

 

a

 

hazardous

 

condition

 

caused

 

by

 

uneven

 

mechanical

 

loading.

Four

 

mounting

 

screws,

 

compatible

 

with

 

the

 

rack

 

design,

 

must

 

be

 

used

 

and

 

hand

tightened

 

to

 

ensure

 

secure

 

installation.

 

Choose

 

a

 

mounting

 

location

 

where

 

all

 

four

 

mounting

 

holes

 

line

 

up

 

with

 

those

 

of

 

the

 

mounting

 

bars

 

of

 

the

 

19

inch

 

rack

 

mount

 

cabinet.

 

A

 

suitably

 

rated

 

and

 

approved

 

branch

 

circuit

 

breaker

 

shall

 

be

 

provided

 

as

 

part

 

of

 

the

 

building

 

installation.

 

Follow

 

local

 

code

 

when

 

purchasing

 

materials

 

or

 

components.

 

Consideration

 

must

 

be

 

given

 

to

 

the

 

connection

 

of

 

the

 

equipment

 

to

 

the

 

supply

 

circuit.

 

Appropriate

 

consideration

 

of

 

equipment

 

nameplate

 

ratings

 

must

 

be

 

used

 

when

 

addressing

 

this

 

concern.

 

Do

 

not

 

overload

 

the

 

circuit.

 

Reliable

 

grounding

 

of

 

rack

mounted

 

equipment

 

must

 

be

 

maintained.

 

Particular

 

attention

 

must

 

be

 

given

 

to

 

power

 

supply

 

connections

 

other

 

than

 

direct

 

connections

 

to

 

the

 

branch

 

circuits,

 

such

 

as

 

power

 

strips.

 

As

 

shipped

 

from

 

the

 

factory

 

this

 

SonicWall

 

product

 

includes

 

two

 

power

 

supplies

 

for

 

redundant

 

AC

 

power

 

and

 

added

 

reliability.

 

A

 

field

 

conversion

 

is

 

available

 

to

 

convert

 

to

 

DC

 

mains.

 

To

 

disconnect

 

AC

 

power,

 

both

 

power

 

cords

 

must

 

be

 

removed.

The

 

included

 

power

 

cord(s)

 

are

 

approved

 

for

 

use

 

only

 

in

 

specific

 

countries

 

or

 

regions.

 

Before

 

using

 

a

 

power

 

cord,

 

verify

 

that

 

it

 

is

 

rated

 

and

 

approved

 

for

 

use

 

in

 

your

 

location.

 

This

 

model

 

is

 

shipped

 

as

 

AC

 

mains

 

configuration

 

using

 

standard

 

3

 

conductor

 

appliance

 

couplers.

 

A

 

field

 

conversion

 

is

 

available

 

to

 

change

 

to

 

DC

 

mains.

 

The

 

DC

 

mains

 

connector

 

uses

 

terminal

 

posts

 

with

 

the

 

polarity

 

marked.

To

 

disconnect

 

DC

 

power,

 

an

 

external

 

properly

related

 

disconnect

 

device

 

must

 

be

 

provided

 

by

 

building

 

or

 

rack

 

installation.

Do

 

not

 

connect

 

AC

 

configured

 

products

 

to

 

DC

 

mains,

 

and

 

do

 

not

 

connect

 

DC

 

configured

 

products

 

to

 

AC.

 

Detailed

 

instructions

 

are

 

provided

 

with

 

the

 

DC

 

conversion

 

kit.

 

Product

 

must

 

be

 

configured

 

as

 

all

 

DC

 

or

 

all

 

AC.

 

DC

 

rating

 

includes

 

tolerances.

 

Do

 

not

 

operate

 

product

 

outside

 

of

 

range

 

shown

 

on

 

product

 

label.

 

DC

 

configuration

 

includes

 

input

 

cable

 

with

 

protective

 

earthing

 

conductor

 

(Green

 

and

 

Yellow

 

wire).

 

This

 

conductor

 

is

 

required

 

to

 

be

 

connected

 

to

 

safety

 

earth

 

ground

 

of

 

circuit.

 

Regulatory

 

Model/Type

Product

 

Name

2RK04

0AD

SuperMassive

 

9800

Содержание SuperMassive 9800

Страница 1: ...SonicWall SuperMassive 9800 Getting Started Guide Regulatory Model Number 2RK04 0AD...

Страница 2: ...FFILIATES BE LIABLE FOR ANY DIRECT INDIRECT CONSEQUENTIAL PUNITIVE SPECIAL OR INCIDENTAL DAMAGES INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS BUSINESS INTERRUPTION OR LOSS OF INFORMATION A...

Страница 3: ...formance business firewall throughput 10 Gbps of malware protection and 24 Gbps of application inspection with intrusion prevention Gateway and client services including Capture Advanced Threat Protec...

Страница 4: ...page 10 Back Panel on page 11 SuperMassive 9800 LED Usage on page 12 Port Type and LED Usage on page 13 Setup Process Overview on page 14 Chapter 3 Topics Setting Up the Appliance on page 15 Determin...

Страница 5: ...ty Services on page 31 Activating and Managing Licenses using a Key on page 33 Upgrading Firmware on page 33 Chapter 5 Topics Deployment Scenarios on page 37 Deployment Scenarios on page 38 Configurin...

Страница 6: ...pter 7 Topics Rack Mounting Instructions on page 59 Instructions for Rack Mounting Your Appliance on page 60 Chapter 8 Topics Product Safety and Regulatory Information on page 65 Safety and Regulatory...

Страница 7: ...with the SonicWall SuperMassive 9800 appliance and provides front and rear illustrations of the SuperMassive 9800 SuperMassive 9800 Package Contents on page 8 Front Panel on page 10 Back Panel on pag...

Страница 8: ...800 Getting Started Guide Missing items If any items are missing from your package contact SonicWall Support Web https support sonicwall com or https support sonicwall com contact support Email custom...

Страница 9: ...g Started Guide 9 Package contents 1 4 5 6 3 2 SonicWall SuperMassive 9800 CONSOLE SDHC MGMT X23 X21 X20 X6 X4 1GE 10GE X2 X0 X1 X3 X5 X7 X22 B0 B1 ALARM TEST PWR 1 PWR 2 X14 X12 X18 X16 X10 X8 X9 X11...

Страница 10: ...for Power Supplies Test Alarms and Blade modules For information describing LED colors and activity refer to the LED Activity table in this document Navigate the LCD screen for future use Display the...

Страница 11: ...ns before use See Product Safety and Regulatory Information on page 65 Expansion Module Expansion Module Bay Fans 6 Power Supplies 2 For SonicWall approved expansion modules Auto throttling fans for s...

Страница 12: ...ted in the chassis TEST Test boot status Off System is up and operational Solid Yellow System is starting up Blinking Yellow System is in SafeMode ALARM Alarm condition Off No alarms are present Blink...

Страница 13: ...LED activity Port Type Port Name Interfaces LED Color Indicates Copper MGMT or X0 X7 Amber 1 Gbps Green 10 Gbps Blinking Yellow Data is transmitting and or receiving Off No link or 10 Mbps SFP X8 X19...

Страница 14: ...of getting started with your new SonicWall SuperMassive 9800 appliance Setup process Verify Pre Configuration Requirements Start Up Management Computer Perform Initial Setup Register Appliance in Son...

Страница 15: ...types a section to record configuration information and initial setup information and procedures Determining the WAN Type on page 16 System Requirements on page 16 Recording Configuration Information...

Страница 16: ...server PPTP typically supports older Microsoft Windows implementations that require tunneling connectivity L2TP Layer 2 Tunneling Protocol L2TP is used to transmit Layer 2 data over IP or other Layer...

Страница 17: ...us from the CLI or the bottom panel of your SuperMassive appliance LAN IP Address Select a static IP address for your SonicWall appliance that is within range of your local network default is 10 10 10...

Страница 18: ...in Password Select an administrator password default is password If you are connecting with DHCP No information is usually required However some providers may require a host name Host Name If you are...

Страница 19: ...ll SuperMassive 9800 appliance for initial setup Connecting your computer to the SuperMassive 9800 MGMT Management Computer SonicWall Appliance Ethernet 120V AC U S SonicWall SuperMassive 9800 CONSOLE...

Страница 20: ...propriate power outlets For further information regarding power requirements refer to Product Safety and Regulatory Information on page 65 of this document SuperMassive LED Activity The Power LEDs on...

Страница 21: ...192 168 168 168 The initial screen displays the options to launch the Setup Wizard or configure the appliance manually 2 Launch the SonicWall Setup Wizard by clicking the first here link This wizard h...

Страница 22: ...ecting to the Internet on page 22 to connect to the appliance for Internet access and then refer to Registering Licensing and Upgrading on page 27 to begin the registration process Connecting to the I...

Страница 23: ...your Internet connection If you have a router DSL modem or cable modem connect the Ethernet cable to a LAN port on the router or modem 2 Connect the other end of the Ethernet cable to the X1 WAN port...

Страница 24: ...ly If you cannot view the SonicWall home page try one of these solutions Verify that the Local Area Connection settings on your computer are set to use either DHCP or a static IP on the LAN subnet Ren...

Страница 25: ...ll SuperMassive 9800 appliance for Internet access Connecting your SuperMassive 9800 to the internet SonicWall Appliance SonicWall SuperMassive 9800 CONSOLE SDHC MGMT X23 X21 X20 X6 X4 1GE 10GE X2 X0...

Страница 26: ...e properly seated in the port of the security appliance Troubleshooting Your LAN Connection If you do not see the SonicOS login prompt when you point your browser to the X0 LAN IP address consider the...

Страница 27: ...stration is an important part of the setup process and is necessary to receive the benefits of SonicWall security services firmware updates and technical support Using MySonicWall on page 28 Creating...

Страница 28: ...associate a secondary unit that can share security service licenses with your primary appliance Creating a MySonicWall Account A MySonicWall account is required to register the SonicWall SuperMassive...

Страница 29: ...the System Status page 3 A message displays at the top of the screen that your SonicWall appliance is not registered Click the Register link 4 Enter your MySonicWall username your email address and pa...

Страница 30: ...code can be found on the System Status page showstatus from the CLI or the bottom panel of your SuperMassive 9800 appliance 7 Click Register Synchronizing Licenses Manually To manually synchronize lic...

Страница 31: ...scroll down to the Applicable Services section to select a free trial or purchase the service Free Trial of Service Click the Try icon in the Action column for the security service you wish to try for...

Страница 32: ...Control Deep Packet Inspection for SSL DPI SSL Deep Packet Inspection for SSH DPI SSH Botnet Filter Content Filtering Premium Edition Stateful High Availability Active Active Clustering Service Deskt...

Страница 33: ...the Applicable Services section and click the Key icon to activate the service 4 Type or paste your key into the Activation Key field and then click Submit 5 Click Synchronize After activating the se...

Страница 34: ...Settings page click Create Backup SonicOS takes a snapshot of your current system state firmware and configuration preference and makes it the new System Backup firmware image Clicking Create Backup o...

Страница 35: ...sing your existing configuration settings 6 In the confirmation dialog click OK The appliance restarts and then displays the login page 7 Enter your user name and password Your new SonicOS image versi...

Страница 36: ...36 SonicWall SuperMassive 9800 Getting Started Guide...

Страница 37: ...This section provides configuration overviews as well as deployment scenarios for your SonicWall SuperMassive 9800 Version Number Deployment Scenarios on page 38 Configuring NAT Mode Gateway on page 4...

Страница 38: ...isting SonicWall gateway appliance SuperMassive appliance in addition to an existing SonicWall gateway appliance Scenario B Stateful HA Pair A SonicWall SuperMassive 9800 CONSOLE SDHC MGMT X23 X21 X20...

Страница 39: ...ay device and the other SuperMassive 9800 is in Standby mode All network connection information is synchronized between the two devices so that the Standby appliance can seamlessly switch to Active mo...

Страница 40: ...ed to the SonicWall ReAssembly Free RF DPI engine providing passive inspection classification and flow reporting Secure Mode Provides full Deep Packet Inspection RF DPI inspection and control of netwo...

Страница 41: ...go through both an access rule and a NAT policy a fundamental part of the NAT Mode architecture The NAT policy is even used for traffic that needs no IP address translation such as traffic traveling b...

Страница 42: ...imilar to Scenario A NAT Mode Gateway on page 39 with the added benefit of high availability Topics Initial High Availability Setup on page 43 Configuring High Availability Settings on page 43 Configu...

Страница 43: ...security appliances LAN WAN and other interfaces are properly connected for failover Connect the HA Control and Data Links on the Primary and Secondary appliances with appropriate cables Turn on the...

Страница 44: ...ndary appliance reboots Configuring HA Monitoring Settings After configuring the HA settings you need to configure the Monitoring settings for the LAN or WAN This includes configuring unique IP addres...

Страница 45: ...rget host This option is not selected by default 8 Click OK You can repeat these steps to configure Monitoring on other interfaces Configuring Optional HA Settings These optional settings are can conf...

Страница 46: ...of 5 and adjusting later if needed The minimum is 4 and the maximum is 99 Set the Probe Interval for the interval in seconds between communication with upstream or downstream systems The recommended...

Страница 47: ...ng and Upgrading on page 27 License synchronization is used during HA so that the Secondary appliance can maintain the same level of network protection provided before the failover Completing HA Pair...

Страница 48: ...o the Manage Security Services Online section 14 Click the Synchronize button This ensures that both the Primary and Secondary appliances successfully synchronize with the SonicWall license server and...

Страница 49: ...ration Configuring Wire Mode This section provides an overview of the different types of Wire Mode supported on the SonicWall SuperMassive 9800 appliance and instructions for how to set up the applian...

Страница 50: ...front of a server farm or at a transition point between data classification domains the firewall is inserted into the physical data path requiring a very short maintenance window One or more pairs of...

Страница 51: ...Yes No No No Yes DHCP Server 1 No No No No Yes DPI Detection Yes Yes No Yes Yes DPI Prevention Yes No No No Yes DPI SSL 1 Yes No No No Yes High Availability Yes Yes Yes Yes Yes Link State Propagation...

Страница 52: ...r based on the direction of traffic between the source zone and its paired interface zone For example if the source zone is WAN and the paired interface zone is LAN then WAN to LAN and LAN to WAN rule...

Страница 53: ...r down With this option enabled the appliance forwards packets through the internal switch when SonicOS is restarting Disable Stateful Inspection Stateful Packet Inspection SPI is turned off when this...

Страница 54: ...ce LAN WAN DMZ Custom Zone if available In the example of a WAN LAN interface pair in Wire Mode this field is your LAN zone 7 Click OK Here is an example of a Wire Mode WAN zone to LAN zone paired int...

Страница 55: ...5 6 Support and Training Options This section provides overviews of customer support and training options for the SonicWall SuperMassive 9800 Customer Support on page 56 Knowledge Portal on page 56 Tr...

Страница 56: ...resource that allows users to search for SonicWall documents based on the following types of search tools Browse Search for keywords Full text search For further information visit https www sonicwall...

Страница 57: ...onicOS Administration Guide SonicOS Release Notes SonicOS Upgrade Guide SonicOS Log Events Reference Guide SonicOS Enterprise CLI Reference Guide Global VPN Client Administration Guide For further inf...

Страница 58: ...58 SonicWall SuperMassive 9800 Getting Started Guide...

Страница 59: ...ng Instructions This section provides illustrated rack mounting instructions for the SonicWall SuperMassive 9800 For more information on rack mounting requirements see Product Safety and Regulatory In...

Страница 60: ...60 SonicWall SuperMassive 9800 Getting Started Guide Instructions for Rack Mounting Your Appliance Extend the slide rails Then remove the chassis member from the slide rails Assemble the Slide Rail...

Страница 61: ...SonicWall SuperMassive 9800 Getting Started Guide 61 Mount Chassis Member Mount chassis with eight 8 M4 screws...

Страница 62: ...62 SonicWall SuperMassive 9800 Getting Started Guide Attach Bracket to Rails Insert the barb on the bracket into the square hole Then allow the plastic inserts to fit into the square holes...

Страница 63: ...SonicWall SuperMassive 9800 Getting Started Guide 63 Insert Chassis to Frame Press lever down to release the slide Install the chassis by sliding it into the frame...

Страница 64: ...64 SonicWall SuperMassive 9800 Getting Started Guide...

Страница 65: ...uct Safety and Regulatory Information This section provides safety and regulatory along with trademark and copyright information Safety and Regulatory Information on page 66 RoHS on page 70 Declaratio...

Страница 66: ...ing bars of the 19 inch rack mount cabinet A suitably rated and approved branch circuit breaker shall be provided as part of the building installation Follow local code when purchasing materials or co...

Страница 67: ...ses Produkt ist nicht daf r entwickelt um in Bereichen mit ffentlichem Zugang betrieben zu werden Wenn es in Schulen betrieben wird stellen Sie sicher dass das Ger t in einem abgeschlossenen Raum inst...

Страница 68: ...hstrom akzeptiert Toleranzen Betreiben Sie das Ger t nicht au erhalb des Bereiches der auf dem Aufkleber des Ger tes angegeben ist Die Gleichstrom Konfiguration beinhaltet einen Anschlusskabel mit Erd...

Страница 69: ...SonicWall SuperMassive 9800 Getting Started Guide 69 104 F 40 C SonicWall 19 SonicWall SonicWall SonicWall SonicWall SonicWall RS232 SonicWall WARNING...

Страница 70: ...and their chemical symbols Lead Pb Mercury Hg Cadmium Cd Hexavalent Chromium Cr 6 Polybrominated Biphenyls PBB Polybrominated Diphenyl Ethers PBDE Chassis Bracket Mechanical parts fan heatsink etc PCB...

Страница 71: ...om en us legal environmental regulatory affairs Warranty Information All SonicWall appliances come with a 1 year Limited Hardware Warranty which provides delivery of critical replacement parts for def...

Страница 72: ...72 SonicWall SuperMassive 9800 Getting Started Guide...

Страница 73: ...ys a year To access the Support Portal go to https support sonicwall com The Support Portal provides self help tools you can use to solve problems quickly and independently 24 hours a day 365 days a y...

Страница 74: ...or training and certification To contact SonicWall Support refer to https support sonicwall com contact support To view the SonicWall End User Product Agreement EUPA see https www sonicwall com legal...

Страница 75: ...SonicWall SuperMassive 9800 Getting Started Guide 75...

Страница 76: ...SuperMassive 9800 Getting Started Guide Updated July 2017 232 003430 50 Rev A...

Отзывы: