SonicWALL PRO 200 User manual

SONICWALL
Installation Guide
SonicWALL, Inc.
1160 Bordeaux Drive
Sunnyvale, CA 94089-1209
Tel: [phone]
Fax: [phone]
E-mail: [email protected]
Web: www.sonicwall.com
Part# 232-000219-00
Rev. A 10/01

SonicWALL Installation Guide Page 1
Contents
About This Guide .................................................................................3
Copyright Notice ..................................................................................3
Quick Start Installation Guide .......................................................... 5
Check Package Contents ......................................................................6
Installing the SonicWALL ......................................................................7
Check Link LEDs ..................................................................................8
Network Addressing Information ..........................................................8
Setting Up Your Management Station ....................................................9
Logging into the SonicWALL ...............................................................11
Configuring Computers on the LAN .....................................................13
1 Introduction ................................................................................. 15
Inspecting the Package ......................................................................15
Internet Service Provider (ISP) Information .........................................16
SonicWALL Configuration Overview .....................................................17
2 Performing the Initial Configuration ........................................... 19
Installing the SonicWALL ....................................................................19
Setting Up a Management Station .......................................................20
Setting up your Management Station ..................................................21
Connecting the SonicWALL to the Network ..........................................23
Configuring your SonicWALL to Access the Internet .............................23
Configuring the SonicWALL in NAT (Network Address Translation) Enabled
Mode ................................................................................................24
Configuring NAT Enabled with PPPoE ..................................................31
Configuring NAT with DHCP Client Mode .............................................36
Log into the SonicWALL Management Interface ...................................42
Basic Network Terminology and Configurations ....................................44
Network Hardware Components .........................................................45
Network Types ..................................................................................45
Firewalls ...........................................................................................45
Gateways ..........................................................................................45
Network Protocols .............................................................................45
IP Addressing ....................................................................................46
3 Registering at mySonicWALL.com ............................................... 51
Creating a New User Account .............................................................52
Problems Creating a MysonicWALL.com user Account? .........................56
Registering Your SonicWALL Internet Security Appliance ......................57
Managing Your SonicWALL .................................................................60

Page 2 Running H/F 2
Applicable Services for SonicWALL Internet Security Appliances ............63
Activating Services Using mySonicWALL.com .......................................66
4 Hardware Description .................................................................. 67
SonicWALL PRO 200 and PRO 300 Front Panel ....................................67
SonicWALL PRO 200 and PRO 300 Back Panel .....................................68
SonicWALL PRO 100 Front Panel ........................................................69
SonicWALL PRO 100 Back Panel .........................................................70
SonicWALL SOHO3 and TELE3 Front Panel ..........................................71
SonicWALL SOHO3 and TELE3 Back Panel ...........................................72
SonicWALL GX 250 and GX 650 Front Panel ........................................73
5 Troubleshooting Guide ................................................................. 77
Tips for Cable/DSL Modem Users ........................................................77
Erasing the Firmware .........................................................................78
6 SonicWALL Support Solutions ...................................................... 80
Support Offers ..................................................................................80
SonicWALL Support 24X7 ...................................................................82
Deliverables ......................................................................................82
SonicWALL Support 8X5 .....................................................................83
Deliverables ......................................................................................83
Warranty Support - North America ......................................................84
Deliverables ......................................................................................84
Warranty Support - International ........................................................85
Deliverables ......................................................................................85

SonicWALL Installtion Guide Page 3
About This Guide
This guide provides information on registering and installing your SonicWALL Internet Security
appliance. Three common network configurations, Network Address Translation (NAT), NAT
with PPPoE, and NAT with DHCP Client, and are described as part of the installation process.
For more detailed information on other network settings, consult your SonicWALL Product
Family manual for complete details.
The chapters in this guide are summarized as follows:
Quick Start Guide, if you have previous network experience and are familiar with getting
connected to the Internet, then the Quick Start Guide provides abbreviated instructions on
configuring your SonicWALL to access the Internet. If, at any time during the installation, you
require assistance, refer to the following chapters for more information.
Chapter 1, Introduction, describes the contents of the package and has an overview of the
configuration process.
Chapter 2, Performing the Initial Configuration, describes the three most common ways
of configuring your SonicWALL for use as a firewall on your network
Chapter 3, Registering Your SonicWALL, describes the process of registering your
SonicWALL appliance on the MysonicWALL.com web site. You should register your SonicWALL,
any services, and upgrades before installing it to access technical support, if necessary, during
installation.
Chapter 4,Hardware Description, has descriptions of all SonicWALL products. There are
both front and back descriptions of the hardware.
Chapter 5, Troubleshooting, provides solutions to problems you may encounter while
configuring your SonicWALL.
Chapter 6, Support, outlines the support packages available from SonicWALL.
Copyright Notice
©2002 SonicWALL, Inc. All rights reserved.
Under the copyright laws, this manual or the software described within, can not be copied, in
whole or part, without the written consent of the manufacturer, except in the normal use of the
software to make a backup copy. The same proprietary and copyright notices must be affixed
to any permitted copies as were affixed to the original. This exception does not allow copies to
be made for others, whether or not sold, but all of the material purchased (with all backup
copies) can be sold, given, or loaned to another person. Under the law, copying includes
translating into another language or format.
SonicWALL is a registered trademark of SonicWALL, Inc.
Other product and company names mentioned herein can be trademarks and/or registered
trademarks of their respective companies.
Specifications and descriptions subject to change without notice.

Page 4
LIMITED WARRANTY
SonicWALL, Inc. warrants the SonicWALL Internet Security Appliance (the Product) for one (1)
year from the date of purchase against defects in materials and workmanship. If there is a
defect in the hardware, SonicWALL will replace the product at no charge, provided that it is
returned to SonicWALL with transportation charges prepaid. A Return Materials Authorization
(RMA) number must be displayed on the outside of the package for the product being returned
for replacement or the product will be refused. The RMA number can be obtained by calling
SonicWALL Customer Service between the hours of 8:30 AM and 5:30 PM Pacific Standard
Time, Monday through Friday.
Phone:[phone]
Fax:[phone]
Web: <http://www.sonicwall.com/support>
This warranty does not apply if the Product has been damaged by accident, abuse, misuse, or
misapplication or has been modified without the written permission of SonicWALL.
In no event shall SonicWALL, Inc. or its suppliers be liable for any damages whatsoever
(including, without limitation, damages for loss of profits, business interruption, loss of
information, or other pecuniary loss) arising out of the use of or inability to use the Product.
Some states do not allow the exclusion or limitation of implied warranties or liability for
incidental or consequential damages, so the above limitation or exclusion can not apply to you.
Where liability can not be limited under applicable law, the SonicWALL liability shall be limited
to the amount you paid for the Product. This warranty gives you specific legal rights, and you
can have other rights which vary from state to state.
By using this Product, you agree to these limitations of liability.
THIS WARRANTY AND THE REMEDIES SET FORTH ABOVE ARE EXCLUSIVE AND IN
LIEU OF ALL OTHER WARRANTIES, ORAL OR WRITTEN, EXPRESS OR IMPLIED.
No dealer, agent, or employee of SonicWALL is authorized to make any extension or addition
to this warranty.

SonicWALL Installation Guide Page 5
Quick Start Installation Guide
Thank you for purchasing a SonicWALL Internet security appliance. The SonicWALL acts as a
secure barrier between your private LAN and the public Internet (WAN) to protect your network
from security threats on the Internet.
If you are currently familiar with firewalls or networking equipment, the QuickStart Guide
provides instructions to establish connectivity between your network and the Internet using the
SonicWALL. If you are new to networks and the Internet, begin the installation process on page
17.
Note: This guide covers initial installation instructions for all SonicWALL Internet security
appliances. The instructions are the same for all hardware models.
Below are rear panel descriptions for each SonicWALL hardware platform. The SonicWALL TELE3
and SOHO3 models have a LAN port and WAN port. The PRO 100, PRO 200, and the PRO 300
have a LAN port, a WAN port, and a DMZ port. The QuickStart Guide covers only the LAN port
and the WAN port. For information on the DMZ port, please refer to your SonicWALL manual.
SonicWALL Tele3 and SOHO3
WAN
Port
LAN
Port
5VDC
Power
Input
LAN
Port WAN Port
5VDC
Power
Input
DMZ
Port
LAN
Port WAN Port 110/220V Power Input
DMZ
Port
SonicWALL PRO 100
SonicWALL PRO 200
and 300
CLI
Port
CLI
Port
CLI
Port

Page 6
Check Package Contents
• One SonicWALL Internet security appliance
• One SonicWALL Installation Guide
• One SonicWALL Manual
• One SonicWALL CD
• One Ethernet cable
• One Crossover cable (labeled “Crossover”)
• One 5 Volt DC power supply (SonicWALL TELE3, SOHO3, and PRO 100 models)
-or-
• One power cable (SonicWALL PRO 200 and PRO 300;
US only )
If any items are missing from your package, contact SonicWALL, Inc. immediately.
Web: <http://www.sonicwall.com/support/>
Phone: [phone]
SonicWALL Manual CD Ethernet Cable (gray)
Crossover Cable (red) Power Supply* OR Power Cable*
*Note: Your actual power supply may vary from the pictures above. This does not affect functionality of the part .

SonicWALL Installation Guide Page 7
Installing the SonicWALL
Before you begin your SonicWALL installation, contact your ISP and obtain your Internet
connection information. Enter this information into Section 4. Next, place your SonicWALL on a
hard, flat surface near your cable modem, DSL modem, or Internet router.
Note: SonicWALL PRO 100, PRO 200, and PRO 300 front and rear panel views are different from
the SOHO3 pictured below. The same installation instructions, however, apply to all models.
LAN WAN
Power
1Apply Power to the SonicWALL
If you are installing a TELE3, SOHO3, or PRO 100, attach the power supply to the power
cord. Plug the power input into the SonicWALL and the other end into a power outlet.
If you are installing a PRO 200 or PRO 300, attach the power cable to the power input of
the SonicWALL, and plug the other end into an AC power outlet. Use the power switch to
turn on the SonicWALL.
2Connect the SonicWALL to the Internet
Connect the SonicWALL WAN port to your cable modem, DSL modem, or Internet
router using the red crossover cable. The Link LED should light up indicating a
connection. If it does not light, use the grey Ethernet cable to establish a connection.
The two cables can be interchanged without damage to the SonicWALL or your
computer.
Connect the SonicWALL to Your Network
Connect the grey Ethernet cable to the SonicWALL LAN port. Connect the other end
to your computer at the network port. The LAN link LED should light up indicating a
connection. If the Link LED does not light, try the red crossover cable.

Page 8
Check Link LEDs
If a Link LED does not light after connecting a cable, try connecting the ports using the
other cable in the box. For instance, if you used the red Crossover cable to connect the
WAN port to the cable modem, DSL modem, or your Internet router and the Link LED
does not light, try connecting the grey Ethernet cable to the ports.
The SonicWALL Test LED stays lit when the SonicWALL is powered on initially. It stays lit
while the SonicWALL performs a series of diagnostic tests.
Network Addressing Information
In order to continue the installation of your SonicWALL, you need to obtain IP
addressing information from your Internet Service Provider (ISP). The information is
required to connect to the Internet.
ISP Contact Information
Telephone Number, if contact by phone__________________ or e-mail address if you
contact your ISP via e-mail_________________________.
You will use one of the following connection types to connect to the Internet:
Static IP Address NAT with PPPoE
IP Address________________ User Name:_______________
Subnet Mask______________ Password:_________________
Default Gateway:___________
DNS Address:______________
3
4
WAN Link LED LAN Link LED Test LED
NAT with DHCP
Host Name:___________________
MAC Address (SonicWALL Serial
Number):_______________________
Domain Suffix:_________________

SonicWALL Installation Guide Page 9
SonicWALL Network Diagram
SonicWALL LAN IP Address
192.168.168.168
Cable, DSL, ISDN
Frame Relay or T1
SonicWALL Management Station
192.168.168.200
SonicWALL WAN IP Address
(from your ISP)
4
5Setting Up Your Management Station
You can manage your SonicWALL from any computer on your LAN. This computer
is called the Management Station.
Contacting the SonicWALL from your PC
The SonicWALL is preconfigured with the IP address 192.168.168.168. To access
the Management interface for the first time, you have to change the IP address of
your computer to 192.168.168.200.

Page 10
A TCP/IP Properties window appears.
6Configure TCP/IP Settings
Configure your computer IP address, subnet mask, and gateway IP address. If the Man-
agement station is running Windows 2000, do the following:
Note: Consult your operating system manuals for specific instructions on configuring
network settings.
1. From the Start menu, select Settings,
and then Network and Dial up
Connections.
2. Right click on the Local Area
Connection icon, and select
Properties.
3. Select Internet Protocol (TCP/IP).
4. Click Properties.
5. Select Specify an IP address.
6. Enter 192.168.168.200 in the IP
address field.
7. Enter 255.255.255.0 in the Subnet
mask field.
8. Enter 192.168.168.1 in the Gateway
field.
9. If there are no server IP addresses listed
in the DNS settings, use the DNS IP
addresses from your ISP.
10. Click OK, then OK again to close the
Local Area Connection Properties
window.
Set Up Continues →
Restart your computer if you are running Windows 95, 98, or NT. Windows 2000 does
not require restarting the computer for network settings to take effect. 7

SonicWALL Installation Guide Page 11
Logging into the SonicWALL
Now that you have changed the IP address of your computer, you need to log into the
SonicWALL to begin the configuration.
Type 192.168.168.168 into the Location or Address field at
the top of your browser and press Enter on your keyboard.
8Configure the SonicWALL
Launch your Web browser. Because you are not connected to the Internet, you may
get an error page displayed with a message stating that you cannot access the
Internet.
!
Your Web browser must support JAVA and HTTP uploads in order to fully manage the
SonicWALL. Internet Explorer 5.0 or higher, as well as Netscape Navigator 4.0 or
higher, are recommended.
Set Up Continues →

Page 12
Note: Once you have completed the Installation Wizard and restarted your SonicWALL, you can
manage the SonicWALL by typing the LAN IP address of the SonicWALL into a Web browser. You
must log into the SonicWALL with the User Name “admin”and the Password that you defined
in the Installation Wizard.
9
Please note that you need your IP
addressing details from your Internet
Service Provider (ISP) to complete the
configuration of your SonicWALL
.
!
Be sure to register your SonicWALL at
<http://www.mysonicwall.com> to take
advantage of a free 30 day trial
subscription to the Content Filter List.
Also, by registering your SonicWALL,
you have access to technical support
services.
!
The Installation Wizard
The first time you access the SonicWALL, the Installation Wizard automatically
launches. The Installation Wizard guides you through the initial setup.
Note: Certain browser configurations may not launch the wizard. In this case, you can
log into the SonicWALL using “Admin” as the User Name and “password” as the
Password. After you log into the SonicWALL, click Tools, then Preferences. Click
Launch Wizard to begin configuring the SonicWALL.
Set Up Continues →

SonicWALL Installation Guide Page 13
Configuring Computers on the LAN
While the SonicWALL is restarting, two windows appear: one with the administrator
login prompt, and the second with instructions for configuring your computers on your
network (LAN). Minimize the login window to view and print the Installation Wizard
instructions. Complete either Aor Bdepending on the configuration selected during
installation.
DHCP Server Enabled
If you enabled the SonicWALL DHCP server, a screen is displayed with instructions to
configure computers on your LAN.
After the SonicWALL has restarted, change the network settings on the computers on the LAN.
Each computer must be configured to get its IP address dynamically.
You may need to restart the computers on your LAN to update the network settings. The
SonicWALL is now functioning and protecting your LAN from Internet-based attacks and
break-ins.
10
A
P rint this screen. You need it to
properly configure the computers
on your LAN.
!
On a Windows 2000 computer, do the following:
1. From the Start menu, select Settings.
2. Then select Network and Dial-up
Connections.
3. Right click on the Local Area Connection
icon, and then select Properties.
4. Click Internet Protocol (TCP/IP) and then
Properties.
5. Click Obtain IP address automatically.
6. You can select Obtain DNS server address
automatically or enter IP addresses of the
DNS servers.
7. Click OK, then OK again to close the
Properties window.

Page 14
DHCP Server Disabled
If you did not enable the SonicWALL DHCP server, a window with configuration
instructions is displayed:
After the SonicWALL has restarted, change the network settings on the computers located on the
LAN. Configure each computer with a static IP address from the range displayed in your
configuration instructions.
You may need to restart the computers on your LAN to update the network settings.
The SonicWALL is now functioning and protecting your LAN from Internet-based attacks and
break-ins.
B
Print this screen. You
need the information to
configure computers on
your LAN.
!
On a Windows 2000 computer, do the following:
1. From the Start menu, select Settings.
2. Then select Network and Dial-up
Connections.
3. Right click on the Local Area Connection
icon, and then select Properties.
4. Click Internet Protocol (TCP/IP) and then
Properties.
5. Select Use the following IP address and
enter an IP address from the range indicated in
your Wizard restart screen.
6. Enter the subnet mask indicated in your Wizard
restart screen in the Subnet Mask field.
7. Enter the Default Gateway IP address in the
Gateway field.
8. Enter IP addresses of the DNS servers provided
by your ISP.
9. Click OK, then OK again to close the
Properties window.

SonicWALL Installation Guide Page 15
1 Introduction
This Installation Guide covers initial installation instructions for all SonicWALL Internet Security
appliances. The instructions are the same for all SonicWALL models.
The Installation Guide assumes that you have a working knowledge of the Internet and
networks. If you are unfamiliar with networking and networking terminology, read Basic
Network Terminology and Configuration, see ”Basic Networking Terminology” on
page 44, as a starting point for your installation.
Inspecting the Package
The following items should be included in the package:
• One SonicWALL Internet Security Appliance
• One power supply (not included with International SonicWALL PRO 200 or PRO 300)
• One Category 5 Ethernet crossover cable (labeled "Crossover")
• One Category 5 Ethernet standard cable
• One SonicWALL Installation Guide
• One Companion CD
• One SonicWALL Internet Security Appliance User's Guide
If an item is missing from the package, you can contact SonicWALL, Inc. by phone at
[phone] or submit a Web Support Form at <http://techsupport.sonicwall.com/
swtech.html>.
Here are a few helpful guidelines for installing the SonicWALL appliance.
•TheWAN Ethernet port should be connected to the Internet router or modem.
•TheLAN Ethernet port should be connected directly to your PC, or a network hub, or a
switch on the internal, protected network.
•TheDMZ Ethernet port, included with the SonicWALL PRO 100, the SonicWALL PRO 200
and the SonicWALL PRO 300, should be connected to publicly accessible servers, such as
Web and Mail servers.
• A crossover cable should be used when connecting the SonicWALL directly to another
computer or router.
• A standard Ethernet cable should be used when connecting the SonicWALL to a
network hub, switch, or modem.
Note : In some cases, you may need to switch the crossover cable with the standard cable.
Switching cables will not damage your system.

Page 16
Internet Service Provider (ISP) Information
To install your SonicWALL Internet Security appliance and connect to the Internet, you need
the following IP addressing information from your ISP.
ISP Contact Information
•Telephone Number, if contact by phone__________________ or e-mail address if you
contact your ISP via e-mail_________________________.
•Service Representative’s name:__________________________
Your ISP uses one of the following IP addressing methods below. Select a method and fill in
the pertinent information.
Static/Permanent IP Addressing
First IP Address:_________________________
Last IP Address:___________________________
Gateway IP Address:____________________
Subnet Mask:____________________________
DNS IP Address:_______________________ _____
__DHCP
Authentication Method
__Host Name:_______________________________________
__MAC Address: (SonicWALL serial Number)________________
__N/A
Domain Suffix:_______________________________________
__PPPoE
Username:__________________________________________
Password:___________________________________________
__L2TP
Addressing Method
___DHCP
___Static:
IP Address:_________________________
Gateway IP Address:_________________
Subnet Mask:________________________
DNS IP Address:_________________________

SonicWALL Installation Guide Page 17
L2TP Settings
Host Name:___________________________
Server IP:_____________________________
Username:____________________________
Password:____________________________
Note: Items in bold are required information.
Note: Be sure to store this information in a safe place after establishing your Internet
connectivity
.
SonicWALL Configuration Overview
There are three major sections to the configuration of the SonicWALL:
•Management Station Configuration - In this step, configuring your computer to act as
the management station that establishes connectivity with the SonicWALL.
•SonicWALL Configuration - Configuring the SonicWALL to connect to the Internet using
the information from your ISP. If you are assigned a single IP address from your ISP, enter
it as the SonicWALL WAN IP address during the configuration.
•Computer Configuration on the LAN - You must configure the computers on your LAN
to be on the same network as the SonicWALL after setting up your SonicWALL.
Note: For specific, step by step instructions on installing and configuring your SonicWALL,
consult the instructions beginning on page 9 of this manual.
Management Station Configuration
1. Change the TCP/IP settings of your PC to be in the same subnet as the default IP address
of the SonicWALL. Typically, set your IP address to 192.168.168.200, subnet mask
255.255.255.0, and default gateway of 192.168.168.1.
2. Open your Web browser and enter the IP address, 192.168.168.168, into the Address field.
This is the default IP address of the SonicWALL.
SonicWALL Configuration
3. Use the Wizard to configure the SonicWALL with the information from your ISP. If you have
a single IP address assigned to you, enter it into the SonicWALL WAN IP Address field.
Finish the steps as outlined by the Wizard.
4. Or, if you prefer not to use the Wizard, the user name of “admin” and the password
“password” can be used to access the Management interface.
5. Restart the SonicWALL.
Computer Configuration on the LAN
6. Change your TCP/IP settings of your computer to be in the same subnet as the SonicWALL.
For example, if you have used the default address of the SonicWALL, 192.168.168.1,
configure the IP settings of your computer to be 192.168.168.X.

Page 18
Important: Do not set the computer IP address to be the same as the SonicWALL LAN IP
Address.
7. Open your Web browser and see if you can access a Web site on the Internet. If so, you’ve
successfully completed the configuration of your SonicWALL. If you cannot access the
Internet, recheck the IP settings of your computer and your SonicWALL. Also refer to
Chapter 5 for more troubleshooting information.

SonicWALL Installation Guide Page 19
2 Performing the Initial Configuration
Installing the SonicWALL
Start by placing the SonicWALL on a hard, flat surface near your cable modem, DSL modem,
or Internet router.
N
ote: The hardware photos are used for descriptive purposes only. Refer to your model for
specific locations.
Connecting to Your Network
1. Apply Power to the SonicWALL - If you are installing the SonicWALL TELE3, SOHO3,
or PRO 100, attach the power supply to the power input on the SonicWALL and plug the
other end into a power outlet.
If you are installing a SonicWALL PRO 200 or a PRO 300, attach the power cable to the
power input on the SonicWALL and the other end into an AC power outlet. Use the power
switch to turn on the SonicWALL.
The Test LED stays on while the SonicWALL performs a series of diagnostic tests.
2. Connect the SonicWALL to your Network - Connect the SonicWALL LAN port to your
LAN network card or hub using the grey Ethernet cable provided in the box. If the Link LED
does not light, try the red Crossover cable.
3. Connecting to the Internet - Connect the SonicWALL WAN port to your cable modem,
DSL modem, or Internet router using the red crossover cable provided in the box. If the
Link LED does not light, try the grey Ethernet cable.
WAN
LAN Power
CLI
Port