Dell SonicWALL NSA 6600 User manual

Getting Started Guide
Dell SonicWALL Network Security Appliances
NETWORK SECURITY NSA 6600
NSA_6600_GSG.book Page 1 Wednesday, April 3, 2013 4:52 PM

NSA_6600_GSG.book Page 2 Wednesday, April 3, 2013 4:52 PM

| 1
Notes, Cautions, and Warnings
© 2013 Dell Inc.
Trademarks: Dell™, the DELL logo, SonicWALL™, SonicWALL GMS™, SonicWALL Analyzer™, Aventail™, Reassembly-Free Deep
Packet Inspection™, Dynamic Security for the Global Network™, SonicWALL Dynamic Support 24x7™, SonicWALL Comprehensive
Gateway Security Suite™, SonicWALL McAfee Client/Server Anti-Virus Suite™, and all other SonicWALL product and service names
and slogans are trademarks of Dell Inc.
Microsoft Windows, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation.
Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
2013 – 04 P/N 232-002213-50 Rev. A
NOTE: A NOTE indicates important information that helps you make better use of your system.
CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
NSA_6600_GSG.book Page 1 Wednesday, April 3, 2013 4:52 PM

2| In this Guide
In this Guide
Welcome to the Dynamic Security for the Global Network™. The Dell SonicWALL NSA 6600 is designed to be the most scalable,
reliable, and best performing multifunction appliance in its class.
This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL NSA 6600.
Chapter 1 Sections Include
Introduction to the NSA 6600, page 5 •NSA 6600 Package Contents, page 6
•The Front Panel, page 7
•The Back Panel, page 8
•Using this Getting Started Guide, page 9
•Using MySonicWALL, page 10
•Creating a MySonicWALL Account, page 10
Chapter 2 Sections Include
Configuring the Appliance, page 11 •Determining the WAN Type, page 12
•System Requirements, page 12
•Recording Configuration Information, page 13
•Initial Setup, page 14
•Troubleshooting & Testing Your Connections, page 16
NSA_6600_GSG.book Page 2 Wednesday, April 3, 2013 4:52 PM

In this Guide | 3
Additional Information
The following sections provide addition information for the Dell SonicWALL NSA 6600 appliance.
•Support and Training Options, page 39
•Rack Mounting Instructions, page 43
•Product Safety and Regulatory Information, page 49
Chapter 3 Sections Include
Registering, Licensing, and Upgrading, page 17 •Registering Overview, page 18
•Registering in SonicOS, page 18
•Alternative Registration Options, page 19
•Licensing Security Services, page 20
•Activating & Managing Licenses Using MySonicWALL, page 21
•Upgrading Firmware, page 22
Chapter 4 Sections Include
Deployment Scenarios, page 25 •Advanced Deployment Scenarios, page 26
•Configuring NAT Mode Gateway, page 30
•Configuring a Stateful HA Pair, page 31
•Configuring L2 Bridge Mode, page 37
NSA_6600_GSG.book Page 3 Wednesday, April 3, 2013 4:52 PM

4| In this Guide
NSA_6600_GSG.book Page 4 Wednesday, April 3, 2013 4:52 PM

| 5
Introduction to the NSA 6600
In this Section:
This section describes the items shipped with the Dell SonicWALL NSA 6600 appliance, provides front and rear illustrations of the
NSA 6600, and explains how to create a MySonicWALL account.
•NSA 6600 Package Contents, page 6
•The Front Panel, page 7
•The Back Panel, page 8
•Using this Getting Started Guide, page 9
•Using MySonicWALL, page 10
•Creating a MySonicWALL Account, page 10
1
NSA_6600_GSG.book Page 5 Wednesday, April 3, 2013 4:52 PM

6| NSA 6600 Package Contents
NSA 6600 Package Contents
Before you begin the setup process, verify that your package contains the following items:
1. One Dell SonicWALL NSA 6600 appliance
2. One Rack Mounting Kit
3. One serial CLI cable
4. One Ethernet cable
5. One power cord*
6. One Dell SonicWALL NSA 6600 Getting Started Guide
*The included power cord(s) are approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location. The
power cords are for AC mains installation only. Field conversion DC power cable is different, see Safety and Regulatory Information for more information.
Missing Items? If any items are missing from your package, contact Dell SonicWALL Support:
Web: http://www.sonicwall.com/us/Support.html
Email: [email protected]
Getting Started Guide
Dell SonicWALL Network Security Appliance
NET WORK SECURITY NSA 6600
1
45
6
3
2
SonicWALL NSA 6600 CONSOLE
SDHC
MGMT X19 X17
X16 X14 X12 X10 X8 X6 X4
1GE1GE
10GE
BYPASS
STATUS
X2 X0
X1X3X5X7
X9X11X13X15
X18
M0
ALARM
TEST
PWR
NSA_6600_GSG.book Page 6 Wednesday, April 3, 2013 4:52 PM

The Front Panel | 7
The Front Panel
SonicWALL NSA 6600 CONSOLE
SDHC
MGMT X19 X17
X16 X14 X12 X10 X8 X6 X4
1GE1GE
10GE
BYPASS
STATUS
X2 X0
X1X3X5X7
X9X11X13X15
X18
M0
ALARM
TEST
PWR
Console Port
USB Ports (2)
Reset Button
LED Indicators
Management Port
X0-X7 (1 GE)
Bypass Status
Access the SonicOS Command Line Interface
(CLI) via the enclosed serial CLI cable
For 3G/4G/Analog modem adaptor support
Press and hold for several seconds to set the
appliance into Safe Mode.
High-speed copper
Gigabit Ethernet ports
Turns on when
fail-to-wire bypass
mode is active
Power: Blue: Indicates power supplies are operating correctly
Yellow: Indicates a disconnected power supply
Test: Quick Blinking Yellow: Initializing
Slow Blinking Yellow: SafeMode
Solid Yellow: Test mode
Alarm: Indicates alarm activity in Red LED
M0: Indicates Expansion Module 0 activity in Red LED
1 Gigabit Ethernet
Management Interface
SDHC Port
Secure Digital High-Capacity (SDHC) port
for future use
X8-X15 (1 GE SFP)
X16-X19 (10 GE SFP+)
1 Gigabit Ethernet hot-pluggable
SFP interfaces for high-speed fiber or
copper Ethernet communication
10 Gigabit Ethernet hot-pluggable ports
*X16, X18, and X19 are designated with a ‘dot’ to
signify ports with a direct uplink to the appliance
CPU for maximum throughput ; X17 shares the
CPU uplink with X0-X15.
NSA_6600_GSG.book Page 7 Wednesday, April 3, 2013 4:52 PM

8| The Back Panel
The Back Panel
Warning: Warning of Potential Hazard from Fan
This manual contains specific warning and caution statements where they apply. Please read the Safety Instructions before
use! See the Product Safety and Regulatory Information section, on page 49.
I
o
Expansion Bay
Fans (2)
Power Supply
For Dell SonicWALL-approved
expansion modules
Dual auto-throttling fans for system
temperature control
Provides power to the Dell SonicWALL appliance
by plugging in the AC adaptor and switching the
appliance on
NSA_6600_GSG.book Page 8 Wednesday, April 3, 2013 4:52 PM

Using this Getting Started Guide | 9
Using this Getting Started Guide
The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 6600
appliance.
NSA_6600_GSG.book Page 9 Wednesday, April 3, 2013 4:52 PM

10 | Using MySonicWALL
Using MySonicWALL
Dell SonicWALL requires a MySonicWALL account prior to
configuring your appliance. If you already have a
MySonicWALL account, you can continue to the Configuring
the Appliance section, on page 11.
MySonicWALL is used during registration of your
Dell SonicWALL appliance and to activate or purchase licenses
for security services, support, or software specific to your
Dell SonicWALL device.
For a High Availability configuration, MySonicWALL provides a
way to associate a backup unit that can share security service
licenses with your primary appliance.
Note: MySonicWALL registration information is not sold or
shared with any other company.
Creating a MySonicWALL Account
A MySonicWALL account is required in order to register the
NSA 6600 appliance. Create a new MySonicWALL account
from any computer by navigating to:
<http://www.mysonicwall.com>.
To create a MySonicWALL account:
1. In your Web browser, navigate to
<http://www.mysonicwall.com>.
2. In the login screen, click the Register Now link.
3. Complete the Registration form, and then click Register.
4. Verify that the information is correct, and then click
Submit.
5. To confirm your account was created, click Continue.
NSA_6600_GSG.book Page 10 Wednesday, April 3, 2013 4:52 PM

11
Configuring the Appliance
In this Section:
This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and
procedures.
•Determining the WAN Type, page 12
•System Requirements, page 12
•Recording Configuration Information, page 13
•Initial Setup, page 14
•Troubleshooting & Testing Your Connections, page 16
2
NSA_6600_GSG.book Page 11 Wednesday, April 3, 2013 4:52 PM

12 | Determining the WAN Type
Determining the WAN Type
Before configuring your Dell SonicWALL NSA 6600 appliance,
you will need to determine the type of WAN connection your
setup will use. Dell SonicWALL supports the following types:
•Static—Configures the appliance for a network that uses
static IP addresses.
•DHCP—Configures the appliance to request IP settings from
a DHCP server on the Internet.
•PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is
typically used with a DSL modem. If your ISP requires
desktop software, a username, and password, select NAT
with PPPoE mode.
•PPTP—Point-to-Point Tunneling Protocol (PPTP) is used to
connect to a remote server. PPTP typically supports older
Microsoft Windows implementations requiring tunneling
connectivity.
Note: For more information regarding other WAN types, such
as Layer 2 Tunneling Protocol (L2TP), Wire Mode, or
Tap Mode, please refer to the SonicOS Administrator’s
Guide.
System Requirements
Before beginning the setup process, verify that you have:
• An Internet connection
• A Web browser supporting Java Script and HTTP uploads.
Accepted Browser Browser Version Number
Internet Explorer 8.0 and higher
Chrome 18.0 and higher
Firefox 16.0 and higher
Safari 5.0 and higher
NSA_6600_GSG.book Page 12 Wednesday, April 3, 2013 4:52 PM

Recording Configuration Information | 13
Recording Configuration Information
Use this section to record your configuration information. Be
sure to keep for future reference.
Registration Information
Networking Information
Administrator Information
Internet Service Provider (ISP) Information
Record the following information about your current Internet
service:
Serial Number: Record the serial number found on
the bottom panel of your
Dell SonicWALL appliance.
Authentication Code: Record the authentication code found
on the bottom panel of your
Dell SonicWALL appliance.
LAN IP Address:
_____._____._____._____
Select a static IP address for your
Dell SonicWALL appliance that is
within the range of your local network.
Subnet Mask:
_____._____._____._____
Record the subnet mask for the local
subnet where you are installing your
Dell SonicWALL appliance.
Ethernet WAN IP Address:
_____._____._____._____
Select a static IP address for your
Ethernet WAN. This setting only
applies if you are already using an
ISP that assigns a static IP address.
Admin Name: Select an administrator account name.
(default is admin)
Admin Password: Select an administrator password.
(default is password)
If you are
connecting with
DHCP
No information is usually required. However,
some providers may require a Host Name:
_________________________________
If you are
connecting with
Static IP
IP Address: _____._____._____._____
Subnet Mask:_____._____._____._____
Default Gateway: _____._____._____._____
Primary DNS: _____._____._____._____
DNS 2 (optional): _____._____._____._____
DNS 3 (optional): _____._____._____._____
NSA_6600_GSG.book Page 13 Wednesday, April 3, 2013 4:52 PM

14 | Initial Setup
Initial Setup
This section provides initial configuration information and
instructions for connecting your Dell SonicWALL NSA 6600
appliance. See the following sections:
•Connecting the LAN Port, page 14
•Connecting the WAN Port, page 14
•Applying Power to the NSA 6600, page 14
•Accessing the Management Interface & Setup Wizard,
page 15
•Testing Your WAN Connection, page 16
Connecting the LAN Port
1. Using the provided Ethernet cable, connect one end of the
cable to the computer you are using to manage the Dell
SonicWALL NSA 6600 appliance.
2. Connect the other end of the Ethernet cable to the X0
(LAN) port on your Dell SonicWALL NSA 6600 appliance.
Connecting the WAN Port
1. Connect one end of an Ethernet cable to your Internet
connection.
2. Connect the other end of the Ethernet cable to the X1
(WAN) port on your Dell SonicWALL NSA 6600 appliance.
Applying Power to the NSA 6600
Connect the power cord from the Dell SonicWALL NSA 6600
appliance into appropriate power outlets.
For further information regarding power requirements, refer to
the Product Safety and Regulatory Information section, on
page 49 of this document.
NSA 6600 LED Activity
The Power LEDs on the front panel illuminate blue when the
appliance is powered on.
The Link LED above the X0 port illuminates green or amber
depending on the link throughput speed, indicating an active
connection:
• Amber indicates 1 Gbps
• Green indicates 100 Mbps
• An unlit left LED with the right LED lit indicates 10 Mbps
The Test LED or Alarm LED may illuminate and blink while the
appliance performs a series of diagnostic tests. When these
LEDs are no longer illuminated and the Power LEDs remain
steadily lit, the Dell SonicWALL NSA 6600 appliance is ready
for configuration. This typically occurs within a few minutes of
connecting the power.
If the Test or Alarm LEDs remain lit after the NSA 6600 has
completed powering on, restart the appliance by disconnecting
the power, waiting 1 minute, then connecting the power again.
NSA_6600_GSG.book Page 14 Wednesday, April 3, 2013 4:52 PM

Initial Setup | 15
Accessing the Management Interface &
Setup Wizard
Once the NSA 6600 appliance is ready to be configured, ensure
that the computer you will use to manage the appliance is set
up to accept a dynamic IP address, or that it has an unused IP
address on the 192.168.168.x/24 subnet, such as
192.168.168.20.
Note: Be sure to disable pop-up blocking software, or set your
Web browser to allow pop-ups and cookies.
To access the SonicOS management interface, follow the steps
listed:
1. Start your Web browser and navigate to the default LAN
management IP address: <http://192.168.168.168>.
2. Launch the Dell SonicWALL Setup Wizard by clicking the
first Here link.
This wizard helps you quickly configure the
Dell SonicWALL appliance to secure your Internet
connection.
3. Follow the on-screen prompts to complete the
Dell SonicWALL Setup Wizard.
4. A Setup Wizard Summary page displays at the end of the
wizard. Verify the information you’ve entered is correct,
then click Apply.
5. Once completed, a Setup Wizard Completion notice
displays.
Click the Here link to begin the registration process on the
SonicOS management interface.
NSA_6600_GSG.book Page 15 Wednesday, April 3, 2013 4:52 PM

16 | Troubleshooting & Testing Your Connections
Troubleshooting & Testing Your
Connections
The following sections can be used to troubleshoot and test
your LAN and WAN connections.
Troubleshooting Your LAN Connection
If you cannot connect to the Dell SonicWALL NSA 6600 or the
Setup Wizard does not display, consider the following:
• Did you correctly enter the Dell SonicWALL NSA 6600
management IP address in your Web browser?
• Did you try restarting your management station while it is
connected to the Dell SonicWALL appliance?
• Are the Local Area Connection settings on your computer set
to use DHCP or set to a static IP address on the
192.168.168.x/24 subnet?
• Do you have the Ethernet cable connected to your computer
and to the X0 (LAN) port on your appliance?
• Is the connector clip on your network cable properly seated in
the port of the security appliance?
Testing Your WAN Connection
Use the following steps to test your WAN connection:
1. After you exit the Setup Wizard, the login page reappears.
Log back into the Dell SonicWALL management interface
and verify your IP and WAN connection.
2. Open a command prompt window on your computer and
enter the command: ping sonicwall.com
3. Open another Web browser and navigate to:
<http://www.sonicwall.com>.
If you can view the Dell SonicWALL home page, you have
configured your Dell SonicWALL NSA 6600 correctly.
If you cannot view the Dell SonicWALL home page, renew your
management station DHCP address.
If you still cannot view a Web page, try one of these solutions:
• Restart your management station to accept new network
settings from the DHCP server in the Dell SonicWALL
appliance.
• Restart your Internet router to communicate with the DHCP
client in the Dell SonicWALL appliance.
Note: WAN connectivity issues are unrelated to completion of
the MySonicWALL Registration process.
NSA_6600_GSG.book Page 16 Wednesday, April 3, 2013 4:52 PM

17
Registering, Licensing, and Upgrading
In this Section:
This section provides instructions for registering, licensing, and upgrading firmware on your Dell SonicWALL NSA 6600 appliance.
•Registering Overview, page 18
•Registering in SonicOS, page 18
•Alternative Registration Options, page 19
•Licensing Security Services, page 20
•Activating & Managing Licenses Using MySonicWALL, page 21
•Upgrading Firmware, page 22
Note: Registration is an important part of the setup process and is necessary in order to receive the benefits of Dell SonicWALL
security services, firmware updates, and technical support.
3
NSA_6600_GSG.book Page 17 Wednesday, April 3, 2013 4:52 PM

18 | Registering Overview
Registering Overview
Although there are several ways to your new Dell SonicWALL
appliance, Dell SonicWALL recommends registering your
appliance through the SonicOS Management Interface.
This section describes how to register and license your
appliance through SonicOS, as well as the alternate options
available on MySonicWALL.
Registering in SonicOS
After you have completed the Setup Wizard and can
successfully connect to your Dell SonicWALL NSA 6600
appliance, you are ready to register the security appliance.
If your Dell SonicWALL NSA 6600 restarted, log into your
appliance again at <http://192.168.168.168>. Enter the default
username and password (admin / password). Then, click
Login.
1. Navigate to the System > Status page.
A message displays at the top of the screen that your
Dell SonicWALL appliance is not registered. Click the
Register link.
2. Enter your MySonicWALL username and password in the
appropriate fields. Then, click Submit.
If you haven’t created a MySonicWALL account, see the
Creating a MySonicWALL Account section, on page 10.
3. In the Licenses > License Management page, specify a
Friendly Name for the Dell SonicWALL appliance.
4. Complete the Product Survey. Then, click Submit.
Acknowledge the registration completion notification by
clicking Continue. The Licenses > License Management
page now lists all the Security Services associated to your
appliance.
NSA_6600_GSG.book Page 18 Wednesday, April 3, 2013 4:52 PM