SonicWALL SuperMassive 9200 User manual

SonicWall™SuperMassive™9200/9400/9600
GettingStartedGuide
RegulatoryModelNumbers:
1RK28‐0A6–SuperMassive9200
1RK28‐0A7–SuperMassive9400
1RK28‐0A8–SuperMassive9600

Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksarepropertyoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressorimplied,byestoppelor
otherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMS
ANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERAND
DISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANTYRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARR ANTYOF
MERCHANTABILITY,FITNESSFORAPA RT I C U L A R PURPOSE,ORNON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANY
DIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,
BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITS
AFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytime
withoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SuperMassiveGettingStartedGuide
Updated‐February2017
232‐000344‐50RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 3
1
InthisGuide
ThisSonicWall™SuperMassive™9200/9400/9600GettingStartedGuideprovidesinstructionsforbasicinstallationand
configurationofSonicWallSuperMassiveappliancesinsingle‐unitorHighAvailabilitydeployments.
•Contentsonpage4
•UsingthisGettingStartedGuideonpage7
TheseSonicWallSuperMassiveappliancessupport:
•Upto20Gbpsofhigh‐performancebusinessfirewallthroughput
•Upto5Gbpsofmalwareprotectionandupto11.5Gbpsofapplicationinspectionwithintrusionprevention
•Gatewayandclientservices,includingCaptureAdvancedThreatProtection,applicationmonitoring&control,deeppacket
inspectionoverSSL,contentfiltering,anti‐virus,anti‐spyware,intrusionprevention,SSLVPNandIPsecVPNaccess,stateful
highavailabilityandhighavailabilityclustering
Formoreproductinformation,seehttps://www.sonicwall.com/products/sonicwall‐supermassive‐9000.

4SonicWallSuperMassive9200/9400/9600GettingStartedGuide
Contents
Chapter1Sectionsincluded:
InthisGuideonpage3•Contentsonpage4
•UsingthisGettingStartedGuideonpage7
Chapter2Sectionsincluded:
HardwareOverviewonpage9•SuperMassivePackageContentsonpage9
•SuperMassiveFrontPanelonpage11
•SuperMassiveBackPanelonpage12
Chapter3Sectionsincluded:
InitialSetuponpage13 •DeterminingtheWANTypeonpage14
•SystemRequirementsonpage14
•RecordingConfigurationInformationonpage15
•InitialConfigurationonpage17
•ConnectingtotheInternetonpage20
•TroubleshootingConnectionsonpage23

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 5
Chapter4Sectionsincluded:
Registering,Licensing,andUpgradingon
page25
•UsingMySonicWallonpage26
•CreatingaMySonicWallAccountonpage26
•RegistrationOverviewonpage27
•RegisteringinSonicOSonpage27
•AlternativeRegistrationOptionsonpage27
•LicensingSecurityServicesonpage29
•ActivatingLicensesUsingaKeyonpage31
•UpgradingFirmwareonpage31
Chapter5Sectionsincluded:
DeploymentScenariosonpage35 •AdvancedDeploymentScenariosonpage36
•ConfiguringNATModeGatewayonpage40
•ConfiguringaStatefulHAPaironpage41
•ConfiguringL2BridgedModeonpage47

6SonicWallSuperMassive9200/9400/9600GettingStartedGuide
Chapter6Sectionsincluded:
SupportandTrainingOptionsonpage51 •CustomerSupportonpage52
•KnowledgeBaseonpage52
•UserForumsonpage52
•Trainingonpage53
•RelatedDocumentationonpage53
•AdditionallySupportedLanguagesonpage53
Chapter7Sectionincluded:
RackMountingInstructionsonpage55 •RailAssemblyandRackMountingonpage56
Chapter8Sectionsincluded:
ProductSafetyandRegulatory
Informationonpage61
•SafetyInstructionsonpage62
•Sicherheitsanweisungenonpage64
•安全說明onpage67
•DeclarationofConformityonpage69
•WarrantyInformationonpage69
•(台灣 RoHS)/ 限用物質含有情況標示資訊onpage70

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 7
UsingthisGettingStartedGuide
ThefollowingflowchartillustratesthenecessarystepsintheprocessofgettingstartedwithyournewSonicWallSuperMassive
appliance.
Verify
Pre-Configuration
Requirements
Start Up
Management
Computer
Perform Initial
Setup
Register
Appliance in
SonicOS
Complete
Deployment
Configuration
Create a
MySonicWall
Account
Configuration Process
Registration, Licensing, and Deployment Process

8SonicWallSuperMassive9200/9400/9600GettingStartedGuide

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 9
2
HardwareOverview
ThissectiondescribestheitemsshippedwiththeSonicWallSuperMassive9200/9400/9600applianceandprovidesfrontandrear
illustrationsoftheSuperMassive.
•SuperMassivePackageContentsonpage9
•SuperMassiveFrontPanelonpage11
•SuperMassiveBackPanelonpage12
SuperMassivePackageContents
Beforeyoubeginthesetupprocess,verifythatyourpackagecontainsthefollowingitems:
1OneSuperMassiveappliance
2Onerackmountingkit
3OneserialCLIcable
4OneEthernetcable

10 SonicWallSuperMassive9200/9400/9600GettingStartedGuide
5Twopowercords*
6OneSafety,Environmental,andRegulatoryInformationdocument
7OneSonicWallSuperMassive9200/9400/9600GettingStartedGuide
*Theincludedpowercordsareapprovedforuseonlyinspecificcountriesorregions.Beforeusingapowercord,verifythatitis
ratedandapprovedforuseinyourlocation.ThepowercordsareforACmainsinstallationonly.FieldconversionDCpowercableis
different,seeInstallationRequirementsonpage62formoreinformation.
SuperMassivePackageContents
MissingItems?Ifanyitemsaremissingfromyourpackage,contactSonicWallSupportat:
https://support.sonicwall.com/contact‐support
1
45
7
3
2
SonicWall SuperMassive 9600 CONSOLE
SDHC
MGMT X19 X17
X16 X14 X12 X10 X8 X6 X4
1GE1GE
10GE
BYPASS
STATUS
X2 X0
X1X3X5X7
X9X11X13X15
X18
M0
ALARM
TEST
PWR 1 PWR 2
6
SonicWall™ SuperMassive™ 9200/9400/9600
Geƫng Started Guide
Regulatory Model Numbers:
1RK28-0A6 – SuperMassive 9200
1RK28-0A7 – SuperMassive 9400
1RK28-0A8 – SuperMassive 9600
SonicWall™ Products
Safety, Environmental, and Regulatory
InformaƟŽŶ
January 2017
Thefollowing informaƟon compri ses the safety,environmental, and regulatory message
applicableto SonicWall products. These messages ensure proper handling and disposal of
theequipment.
Thevarious messages are grouped by language. In general, the languages of the European
Union appea r Įrstand are grouped alphabeƟcally. Non European Union languages are
groupedtogether towards the back, aŌer the double line.
sonicwall.com | support.sonicwall.com
232 001007 50 Rev A
Copyright© 2017 SonicWall Inc. All rights reserved.
SonicWallis a trademark or registered trademark of SonicWall Inc. and/or its Ăĸliates in the U.S.A.
and/orother countries. All other trademarks are property of their respecƟve owners.
Theinforma Ɵonin this document is provided in connecƟon with SonicWall Inc. and/or its aĸliates'
products.No license, express or implied, by estoppel or otherwise, to any intellectual property right is
grantedby this document. SonicWall Inc. and/or its aĸliates do not make any commitment to update
theinformaƟon contained in this document. For more informaƟon, visit hƩps://www.sonicwall.com/
legal/.

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 11
SuperMassiveFrontPanel
SonicWall SuperMassive 9600 CONSOLE
SDHC
MGMT X19 X17
X16 X14 X12 X10 X8 X6 X4
1GE1GE
10GE
BYPASS
STATUS
X2 X0
X1X3X5X7
X9X11X13X15
X18
M0
ALARM
TEST
PWR 1 PWR 2
LCD Screen
Control Buttons
Console Port
USB Ports (2)
SafeMode Button
LED Indicators
X0-X7 (1 GE)
Bypass Status
Access the SonicOS Command Line Interface
(CLI) using the serial CLI cable
For 3G/4G/Analog modem adaptor support
Press and hold until Test LED starts blinking to set the
appliance into SafeMode.
High-speed copper Gigabit
Ethernet ports
Turns on when fail-to-wire
bypass mode is active
Power: Blue: Indicates power supplies are operating correctly
Yellow: Indicates a disconnected power supply
Test: Quick Blinking Yellow: Initializing
Slow Blinking Yellow: SafeMode
Solid Yellow: Test mode
Alarm: Indicates alarm activity in Red LED
M0: Indicates Expansion Module 0 activity in Red LED
Navigates the LCD screen; for
future use
Display screen
1 Gigabit Ethernet Management Interface
SDHC Port
Secure Digital High-Capacity (SDHC) port for
future use
X8-X15 (1 GE SFP)
X16-X19 (10 GE SFP+)
1 Gigabit Ethernet hot-pluggable SFP
interfaces for high-speed ber or copper
Ethernet communication
10 Gigabit Ethernet hot-pluggable ports
*X16, X18, and X19 are designated with a‘dot’ to signify ports
with a direct uplink to the appliance CPU for maximum
throughput; X17 shares the CPU uplink with X0-X15.
MGMT Port (1 GE)

12 SonicWallSuperMassive9200/9400/9600GettingStartedGuide
SuperMassiveBackPanel
WARNING:PotentialHazardfromFan
Thismanualcontainsspecificwarningandcautionstatementswheretheyapply.PleasereadtheSafetyInstructions
beforeuse!SeeProductSafetyandRegulatoryInformationonpage61.
Expansion Bay
Fans (2)
Power Supplies (2)
For SonicWall-approved
expansion modules
Dual auto-throttling fans for system
temperature control
Dual power supplies for redundant AC power and added reliability
Field conversion is available to convert to DC mains
DC power supplies use dierent input connector and power cables

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 13
3
InitialSetup
ThissectionprovidesanoverviewofavailableWANtypes,asectiontorecordconfigurationinformation,andinitialsetup
informationandprocedures.
•DeterminingtheWANTypeonpage14
•SystemRequirementsonpage14
•RecordingConfigurationInformationonpage15
•InitialConfigurationonpage17
•ConnectingtotheInternetonpage20
•TroubleshootingConnectionsonpage23

14 SonicWallSuperMassive9200/9400/9600GettingStartedGuide
DeterminingtheWANType
BeforeconfiguringyourSonicWallSuperMassiveappliance,
youneedtodeterminethetypeofWANconnectionthatyour
setupwilluse.SonicWallsupportsthefollowingtypes:
•Static—Configurestheapplianceforanetworkthatuses
staticIPaddresses.
•DHCP—ConfigurestheappliancetorequestIPsettings
fromaDHCPserverontheInternet.
•PPPoE
—Point‐to‐PointProtocoloverEthernet(PPPoE)is
typicallyusedwithaDSLmodem.IfyourISPrequires
desktopsoftwarewithausernameandpassword,select
NATwithPPPoEmode.
•PPTP—Point‐to‐PointTunnelingProtocol(PPTP)isusedto
connecttoaremoteserver.PPTPtypicallysupportsolder
MicrosoftWindowsimplementationsthatrequire
tunnelingconnectivity.
•L2TP—Layer2TunnelingProtocol(L2TP)isusedtotransmit
Layer2dataoverIPorotherLayer3routednetworks.
InternetServiceProviders(ISPs)oftenuseittoenable
virtualprivatenetworks(VPNs)forcustomersoverthe
Internet.Itdoesnotencryptnetworktrafficitself.IfL2TPis
notavailableintheSetupWizard,youcanconfigureitlater
intheSonicOSmanagementinterface.
SystemRequirements
Beforebeginningthesetupprocess,verifythatyouhave:
•AnInternetconnection
•AWebbrowsersupportingJavaScriptandHTTPuploads
NOTE:Formoreinformationregardingothersupported
WANtypessuchasWireModeorTapMode,refertothe
SonicOSAdministrationGuide.
SupportedBrowsers
AcceptedBrowser BrowserVersionNumber
InternetExplorer 9.0andhigher
Chrome 18.0andhigher
Firefox 16.0andhigher
Safari 5.0andhigher,runningon
non‐Windowsmachines

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 15
RecordingConfiguration
Information
Usethissectiontorecordyourconfigurationinformation.Be
suretokeepitforfuturereference.
RegistrationInformation
NetworkingInformation
NOTE:ThedefaultMGMTinterfaceIPaddressis
192.168.1.254.
SerialNumber:Recordtheserialnumberfound
onthebottompanelofyour
SuperMassiveappliance.
AuthenticationCode:Recordtheauthenticationcode
foundonthebottompanelof
yourSuperMassiveappliance.
LANIPAddress:SelectastaticIPaddressforyour
SuperMassiveappliancethatis
withintherangeofyourlocal
network.(defaultforX0is
192.168.168.168)
SubnetMask:Recordthesubnetmaskforthe
localnetwork(defaultmaskis
255.255.255.0).Clientdevices
connectingthroughtheappliance
LANinterfaceareassignedIP
addressesinthisnetwork(default
clientaddressesassignedbythe
SonicOSDHCPserverareonthe
192.168.168.0/24subnet).
WANIPAddress: SelectastaticIPaddressforyour
EthernetWANinterface(X1).This
settingonlyappliesifyouare
usinganInternetServiceProvider
(ISP)thatassignsastaticIP
address.

16 SonicWallSuperMassive9200/9400/9600GettingStartedGuide
AdministratorInformation InternetServiceProvider(ISP)
Information
RecordthefollowinginformationaboutyourcurrentInternet
service:
AdminName: Selectanadministratoraccount
name.(defaultisadmin)
AdminPassword: Selectanadministratorpassword.
(defaultispassword)Ifyouare
connecting
withDHCP
Noinformationisusuallyrequired.However,
someprovidersmayrequireahostname.
HostName:
Ifyouare
connecting
withaStatic
IPaddress
IPAddress:_____._____._____._____
SubnetMask:_____._____._____._____
DefaultGateway:_____._____._____._____
PrimaryDNS:_____._____._____._____
DNS2(optional):_____._____._____._____
DNS3(optional):_____._____._____._____

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 17
InitialConfiguration
ThediagrambelowillustrateshowtoconnectyourmanagementcomputertotheSuperMassiveapplianceforinitialsetup.
MGMT
SonicWall Appliance
Management Computer
Ethernet
120V AC
(U.S.)
SonicWall SuperMassive 9600 CONSOLE
SDHC
MGMT X19 X17
X16 X14 X12 X10 X8 X6 X4
1GE1GE
10GE
BYPASS
STATUS
X2 X0
X1X3X5X7
X9X11X13X15
X18
M0
ALARM
TEST
PWR1 PWR2
M
G
M
T
X19
9
19
19

18 SonicWallSuperMassive9200/9400/9600GettingStartedGuide
Thefollowingsectionsprovideinitialconfigurationinformation
andinstructionsforconnectingyourSonicWallSuperMassive
applianceforinitialsetup:
•ConnectingtotheMGMTPortonpage18
•ApplyingPowertotheSuperMassiveonpage18
•SuperMassiveLEDActivityonpage18
•UsingtheSetupWizardonpage19
ConnectingtotheMGMTPort
TheMGMTportisadedicated1gigabitEthernetinterfacefor
appliancemanagementandSafeModeaccess.
1UsingtheprovidedEthernetcable,connectoneendof
thecabletothecomputeryouareusingtomanagethe
SuperMassiveappliance.
2ConnecttheotherendoftheEthernetcabletothe
MGMTportonyourSuperMassiveappliance.
ApplyingPowertotheSuperMassive
ConnecttheACpowercordsfromtheSonicWallSuperMassive
applianceintoappropriatepoweroutlets.
Forfurtherinformationregardingpowerrequirements,refer
toProductSafetyandRegulatoryInformationonpage61of
thisdocument.
SuperMassiveLEDActivity
ThePowerLEDsonthefrontpanelilluminatebluewhenthe
applianceispoweredon.
TheTestLEDorAlarmLEDmayilluminateandblinkwhilethe
applianceperformsaseriesofdiagnostictests.Whenthese
LEDsarenolongerilluminatedandthePowerLEDsremain
steadilylit,theSonicWallSuperMassiveapplianceisreadyfor
configuration.Thistypicallyoccurswithinafewminutesof
turningonthepower.
IftheTestorAlarmLEDsremainlitaftertheSuperMassivehas
completedpoweringon,restarttheapplianceby
disconnectingthepower,waiting1minute,andthen
connectingthepoweragain.
ForaconnectedMGMTorX0‐X7port,theLinkLEDforthe
portilluminatesgreenoramberdependingonthelink
throughputspeed,indicatinganactiveconnection:
•Amberindicates1Gbps
•Greenindicates100Mbps
•AnunlitleftLEDwiththerightLEDlitindicates10Mbps

SonicWallSuperMassive9200/9400/9600GettingStartedGuide 19
UsingtheSetupWizard
Whenyouarereadytobegininitialsetup,configureyour
managementcomputerwithastaticIPaddressonthe
192.168.1.0/24subnet,suchas192.168.1.20.Thisallowsyour
computertoconnecttoSonicOSviatheMGMTinterface.
ToconfigureinitialsettingsusingtheSetupWizard:
1WithyourcomputerconnectedtotheapplianceMGMT
port,startyourwebbrowserandnavigatetothe
defaultMGMTinterfaceIPaddress:
http://192.168.1.254
Theinitialscreendisplaystheoptionstolaunchthe
SetupWizardorconfiguretheappliancemanually.
2LaunchtheSonicOSSetupWizardbyclickingthefirst
herelink.Thiswizardhelpsyouquicklyconfigurethe
SonicWallappliancetosecureyourInternet
connection.
3Followtheon‐screenpromptstoconfiguretheadmin
passwordandnetworksettings.
IfaDHCPserverisavailableonthenetwork,thewizard
requestsIPsettingsfromit.YoucanclickNexttoaccept
theseorclickManualConfigtoenterastaticIPaddress
andothernetworksettings.
IntheManualConfigurationscreen,clickRetryto
reverttoDHCP,orenteryourownsettingsandthen
clickNext.
NOTE:Besuretodisablepop‐upblockingsoftware,or
setyourwebbrowsertoallowpop‐upsandcookies.

20 SonicWallSuperMassive9200/9400/9600GettingStartedGuide
4Oncecompleted,clickDoneintheSetupComplete
screen.
5ContinuetoConnectingtotheInternetonpage20to
connecttheapplianceforInternetaccess.
Then,refertoRegistering,Licensing,andUpgradingon
page25tobegintheregistrationprocess.
ConnectingtotheInternet
Afterinitialsetupiscomplete,physicallyconnectthe
SuperMassiveLANandWANinterfacestotheappropriate
networkdevicesinyourenvironmenttoprovideaccessto
externalnetworksortheInternet.
ConnectingtheLANPort
1 ConnectoneendofanEthernetcabletoyourlocal
networkswitchorothernetworkingdevice,ortoyour
computer.
2 ConnecttheotherendoftheEthernetcabletotheX0
(LAN)portonyourSonicWallSuperMassiveappliance.
ConnectingtheWANPort
1 ConnectoneendofanEthernetcabletoyourInternet
connection.
Ifyouhavearouter,DSLmodem,orcablemodem,
connecttheEthernetcabletoaLANportontherouter
ormodem.
NOTE:Internetconnectivityisneededforthe
recommendedproductregistrationprocess.Forinitial
Internetaccess,connectyourcomputertotheLAN
subnet.
YoucannotreachtheInternetorotherexternal
destinationswhileconnectedtotheMGMTinterface
withoutfirstconfiguringadefaultgatewayinits
interfacesettings.