SonicWALL TELE3 TZ User manual

SONICWALL
The Telecommuter's Getting Started Guide
SonicWALL, Inc.
1160 Bordeaux Drive
Sunnyvale, CA 94089-1209
Tel: [phone]
Fax: [phone]
E-mail: [e-mail]
Web: www.sonicwall.com
Part# 232-000091-01
Rev. B 10/00

SonicWALL Telecommuter’s Getting Started Guide Page 1
Contents
1 Introduction ................................................................................... 3
Inspecting the Package ........................................................................4
Internet Service Provider (ISP) Information ...........................................5
ISP Contact Information ......................................................................5
SonicWALL Configuration Overview .......................................................6
Management Station Configuration .......................................................6
SonicWALL Configuration .....................................................................6
Computer Configuration on the WorkPort ..............................................6
VPN Security Association Configuration .................................................7
Computer Configuration on the HomePort .............................................7
2 Quick Start Installation ................................................................. 9
Check Package Contents ....................................................................10
Installing the SonicWALL ....................................................................11
Check Link LEDs ................................................................................12
Network Addressing Information ........................................................12
Setting Up Your Management Station ..................................................13
Logging into the SonicWALL ...............................................................15
The Installation Wizard ......................................................................16
Configuring Computers on the WorkPort .............................................17
3 Configuring the SonicWALL HomePort ........................................ 19
HomePort in NAT Mode .....................................................................19
HomePort in Standard Mode ..............................................................20
Configuring Printers on the HomePort .................................................20
Configuring Your Computer on the HomePort ......................................21
Configuring TCP/IP Settings ...............................................................21
Windows 95 or 98 computer ..............................................................21
Windows 2000 ..................................................................................21
Macintosh computer ..........................................................................21
4 VPN Security Association Configuration ...................................... 23
Connection Information from Your Network Administrator ....................23
Configuring a VPN SA Using IKE and Preshared Secret .........................25
Add/Modify IPSec Security Associations ...............................................25
Security Policy ...................................................................................25
Destination Networks .........................................................................25
Testing Your VPN Tunnel ...................................................................25
Configuring a VPN SA Using IKE and Manual Key .................................26
Add/Modify IPSec Security Associations ...............................................26

Page 2
Security policy ...................................................................................26
Destination Networks .........................................................................26
Advanced Settings .............................................................................26
Testing Your VPN Tunnel ...................................................................26
DHCP Over VPN ................................................................................27
WorkPort IP Addresses ......................................................................27
WorkPort Device Configuration ...........................................................28
DHCP Status .....................................................................................28

SonicWALL Telecommuter’s Getting Started Guide Page 3
1 Introduction
The TELE3 TZ and TELE3 TZX Getting Started Guide covers initial installation instructions for
the TELE3 TZ and TELE3 TZX. The following is an overview of the network layout of your TELE3
TZ and TELE3 TZX, your work computer, and your home computer.
The TELE3 TZ and TELE3 TZX Getting Started Guide assumes that you have a working
knowledge of the Internet and networks. If you are unfamiliar with networking and networking
terminology, read Basic Network Terminology and Configuration in the Installation
Guide, as a starting point for your installation.

Page 4 Introduction
Inspecting the Package
The following items should be included in the package:
• One SonicWALL Internet Security Appliance
• One power supply
• Two Category 5 Ethernet crossover cables (labeled "Crossover")
• Two Category 5 Ethernet standard cables
• One SonicWALL TELE3 TZ and TELE3 TZX Installation Guide
• One SonicWALL TELE3 TZ and TELE3 TZX Administrator’s Guide
• One SonicWALL Telecommuter’s Getting Started Guide
• One Companion CD
If an item is missing from the package, you can contact SonicWALL, Inc. by phone at
[phone] or submit a Web Support Form at <http://techsupport.sonicwall.com/
swtech.html>.
Here are a few helpful guidelines for installing the SonicWALL appliance.
•TheWAN Ethernet port should be connected to the Internet router or modem.
•TheWorkPort Ethernet port should be connected directly to your PC used to access the
corporate network.
•TheHomePort Ethernet port should be connected to your home computer or a network
hub. The TELE3 TZX can connect up to 4 computers to the HomePort.
• A crossover cable should be used when connecting the SonicWALL directly to another
computer or router.
• A standard Ethernet cable should be used when connecting the SonicWALL to a
network hub, switch, or modem.
Note : In some cases, you may need to switch the crossover cable with the standard cable.
Switching cables will not damage your system.

SonicWALL Telecommuter’s Getting Started Guide Page 5
Internet Service Provider (ISP) Information
To install your SonicWALL Internet Security appliance and connect to the Internet, you need
the following IP addressing information from your ISP. You can also enter this information in
the section “Network Addressing Information” on page 12.
ISP Contact Information
•Telephone Number, if contact by phone:__________________ or e-mail address if you contact
your ISP via e-mail:_________________________.
•Service Representative’s name:__________________________
Your ISP uses one of the following IP addressing methods below. Select a method and fill in the pertinent
information.
__Static/Permanent IP Addressing
First IP Address:_________________________
Last IP Address:___________________________
Gateway IP Address:____________________
Subnet Mask:____________________________
DNS IP Address:_____________________________
__DHCP
Authentication Method
__Host Name:_______________________________________
__MAC Address (SonicWALL serial Number):________________
__PPPoE
Username:__________________________________________
Password:___________________________________________
__L2TP
Addressing Method
___DHCP
___Static:
IP Address:_________________________
Gateway IP Address:_________________
Subnet Mask:________________________
DNS IP Address:_________________________
L2TP Settings
Host Name:___________________________
Server IP:____________________________
Username:____________________________
Password:____________________________
Note: Items in bold are required information.
Note: Be sure to store this information in a safe place after establishing your Internet connectivity
.

Page 6 Introduction
SonicWALL Configuration Overview
There are five major sections to the configuration of the SonicWALL:
•Management Station Configuration - In this step, configuring your computer to act as
the management station that establishes connectivity with the SonicWALL.
•SonicWALL Configuration - Configuring the SonicWALL to connect to the Internet using
the information from your ISP. If you are assigned a single IP address from your ISP, enter
it as the SonicWALL WAN IP address during the configuration.
•Computer Configuration on the WorkPort - You must configure the computers on
your WorkPort to be on the same network as the SonicWALL after setting up your
SonicWALL.
•VPN Tunnel Configuration - If your secure connection to your corporate network has
not been configured, you must configure a VPN SA to connect securely to the corporate
network.
•Computers on the HomePort - You must configure your home computer(s) to be on the
same subnet as the HomePort. By doing this, you establish connectivity from your home
computer to the Internet through the TELE3 TZ or TELE3 TZX.
Management Station Configuration
Note: This is a brief overview of the configuration steps. Refer to page 9 for step by step
instructions.
1. Change the TCP/IP settings of your PC to be in the same subnet as the default IP address
of the SonicWALL. Typically, set your IP address to 192.168.168.200, subnet mask
255.255.255.0, and default gateway of 192.168.168.1.
2. Open your Web browser and enter the IP address, 192.168.168.168, into the Address field.
This is the default IP address of the SonicWALL.
SonicWALL Configuration
3. Use the Wizard to configure the SonicWALL with the information from your ISP. If you have
a single IP address assigned to you, enter it into the SonicWALL WAN IP Address field.
Finish the steps as outlined by the Wizard.
4. Or, if you prefer not to use the Wizard, the user name of “admin” and the password
“password” can be used to access the Management interface.
5. Restart the SonicWALL.
Computer Configuration on the WorkPort
6. Change your TCP/IP settings of your computer to be in the same subnet as the SonicWALL.
For example, if you have used the default address of the SonicWALL, 192.168.168.1,
configure the IP settings of your computer to be 192.168.168.X where X is any number 2
through 254.
Important: Do not set the computer IP address to be the same as the SonicWALL WorkPort
IP Address.

SonicWALL Telecommuter’s Getting Started Guide Page 7
7. Open your Web browser and attempt to access a Web site on the Internet. If you can
access a Web site, you’ve successfully completed the configuration of your work computer
and the TELE3 TZ or TELE3 SP. If you cannot access the Internet, recheck the IP settings
of your computer and your SonicWALL.
VPN Security Association Configuration
8. Log into the SonicWALL TELE3 TZ or TELE3 TZX and click VPN, then Configure. Use the
network information from your network administrator, and follow the step by step
instructions to connect to the corporate network.
Computer Configuration on the HomePort
9. Change your TCP/IP settings of your computer to be in the same subnet as the SonicWALL.
For example, if you have used the default address of the SonicWALL, 172.16.0.1, configure
the IP settings of your computer to be 172.16.0.X where X is any number 2 through 254.
Important: Do not set the computer IP address to be the same as the SonicWALL HomePort
IP Address.
10. Open your Web browser and attempt to access a Web site on the Internet. If you can
access a Web site, you’ve successfully completed the configuration of your home computer
and the TELE3 TZ. If you cannot access the Internet, recheck the IP settings of your
computer and your SonicWALL.

Page 8 Introduction

SonicWALL Telecommuter’s Getting Started Guide Page 9
2 Quick Start Installation
Thank you for purchasing a SonicWALL Internet security appliance. The SonicWALL acts as a secure
barrier between your private WorkPort and HomePort and the public Internet (WAN) to protect your
home and work networks from security threats on the Internet. It also provides a secure means of
connecting to your corporate office using the same Internet connection.
If you are currently familiar with firewalls or networking equipment, the QuickStart Installation
provides instructions to establish connectivity between your WorkPort and the Internet with the
SonicWALL. If you are new to networks and the Internet, use the specific step by step installation
instructions found in your SonicWALL TELE3 TZ and TELE3 TZX Installation Guide.
The TELE3 TZ has a WorkPort, a HomePort, and a WAN port. This section gets you connected to
the Internet using the HomePort and the WAN port. The VPN Security Association
configuration section connects your SonicWALL TELE3 TZ to the corporate network.
Note: The SonicWALL TELE3 TZX is identical to the TZ with the exception of the HomePort. The
HomePort on the TELE3 TZX has four ports that allows you to connect up to four computers to it.
WorkPort WAN
Port 5VDC Power
Input
HomePort
TELE3 TZ
CLI
Port

Page 10
Check Package Contents
• One SonicWALL Internet security appliance
• One SonicWALL TELE3 TZ Installation Guide
• One SonicWALL TELE3 TZ Administrator’s Guide
• One SonicWALL Telecommuter’s Getting Started Guide
• One SonicWALL CD
• Two Ethernet cables
• Two Crossover cables (labeled “Crossover”)
• One 5 Volt DC power supply (not pictured)
•OnePowercord
If any items are missing from your package, contact SonicWALL, Inc.
Web: <http://www.sonicwall.com/support/>
Phone: [phone]
SonicWALL TELE3 TZ and TELE3 TZX Guides
CD
Ethernet Cable (gray) Crossover Cable (red)

SonicWALL Telecommuter’s Getting Started Guide Page 11
Installing the SonicWALL
Reminder: Before you begin your SonicWALL installation, contact your ISP and obtain your Internet
connection information. Enter this information into Section 4. Next, place your SonicWALL on a
hard, flat surface near your cable modem, DSL modem, or Internet router.
Power
WorkPort WANHomePort
1Apply Power to the TELE3 TZ
Attach the power supply to the power cord. Plug the power input into the SonicWALL and
the other end into a power outlet.
2Connect the SonicWALL to the Internet
Connect the SonicWALL WAN port to your cable modem, DSL modem, or Internet
router using the grey Ethernet cable. The Link LED should light up indicating a
connection. If it does not light, use the red crossover cable to establish a connection.
The two cables can be interchanged without damage to the SonicWALL or your
computer.
Connect the SonicWALL to Your WorkPort
Connect the red crossover cable to the SonicWALL WorkPort. Connect the other end
to your work computer at the network port. The WorkPort link LED should light up
indicating a connection. If the Link LED does not light, try the grey Ethernet cable.
Connect Your Computer to the HomePort
Connect your home PC to the HomePort using either the red crossover cable or the
grey Ethernet cable. If the Link LED does not light, try the grey Ethernet cable.

Page 12
Check Link LEDs
If a Link LED does not light after connecting a cable, try connecting the ports using the
other cable in the box. For instance, if you used the grey Ethernet cable to connect the
WAN port to the cable modem, DSL modem, or your Internet router and the Link LED does
not light, try connecting the red Crossover cable to the ports.
The SonicWALL Test LED stays lit when the SonicWALL is powered on initially. It stays lit
while the SonicWALL performs a series of diagnostic tests. After verifying the Link LEDs,
power off the TELE3 TZ or TELE3 TZX for a few seconds, then power it up again to cycle the
TELE3 TZ or TELE3 TZX.
Network Addressing Information
In order to continue the installation of your SonicWALL, you need to obtain IP addressing
information from your Internet Service Provider (ISP). The information is required to connect
to the Internet.
ISP Contact Information
Telephone Number, if contact by phone__________________ or e-mail address if you
contact your ISP via e-mail_________________________.
You will use one of the following connection types to connect to the Internet:
Static IP Address NAT with PPPoE
IP Address________________ User Name:_______________
Subnet Mask______________ Password:_________________
Default Gateway:__________
DNS Address:______________
3
Test Light
WAN Link LED HomePort
Link LED WorkPort Link LED
4
NAT with DHCP
Host Name:___________________
MAC Address (SonicWALL Serial
Number):_____________________
Domain Suffix:_________________

SonicWALL Telecommuter’s Getting Started Guide Page 13
SonicWALL Network Diagram
SonicWALL WorkPort IP Address
192.168.168.168
Cable, DSL, ISDN
Frame Relay or T1
SonicWALL Management Station
192.168.168.200
SonicWALL WAN IP Address
(from your ISP)
Home Computer IP Address
172.16.0.10
SonicWALL HomePort IP Address
172.16.0.1
S
e
tti
ng
U
p
Y
our
M
anagemen
t
St
a
ti
on
You can manage your SonicWALL from any computer connected to your
WorkPort. This computer is called the Management Station and is the computer
used to access the SonicWALL Management interface.
Contacting the SonicWALL from your WorkPort PC
The SonicWALL is preconfigured with the IP address 192.168.168.168. To access
the Management interface for the first time, you have to change the IP address of
your WorkPort computer to 192.168.168.200.
5

Page 14
A TCP/IP Properties window appears.
6Configure TCP/IP Settings on Your WorkPort Computer
Configure your WorkPort computer IP address, subnet mask, and gateway IP address. If
the Management station is running Windows 2000, do the following:
Note: Consult your operating system manuals for specific instructions on configuring
network settings.
1. From the Start menu, select Settings,
and then Network and Dial up
Connections.
2. Right click on the Local Area
Connection icon, and select
Properties.
3. Select Internet Protocol (TCP/IP).
4. Click Properties.
5. Select Specify an IP address.
6. Enter 192.168.168.200 in the IP
address field.
7. Enter 255.255.255.0 in the Subnet
mask field.
8. Enter 192.168.168.1 in the Gateway
field.
9. If there are no server IP addresses listed
in the DNS settings, use the DNS IP
addresses from your ISP.
10. Click OK, then OK again to close the
Local Area Connection Properties
window.
Restart your computer if you are running Windows 95, 98, or NT. Windows 2000 does
not require restarting the computer for network settings to take effect.
7
Set Up Continues →

SonicWALL Telecommuter’s Getting Started Guide Page 15
Logging into the SonicWALL
Now that you have changed the IP address of your computer, you must log into the
SonicWALL to begin the configuration.
Enter 192.168.168.168 into the Location or Address field at the top of your
browser and press Enter on your keyboard.
Your Web browser must support JAVA and HTTP uploads in order to fully manage the
SonicWALL. Internet Explorer 5.0 or higher, as well as Netscape Navigator 4.0 or
higher, are recommended.
!
8Configure the SonicWALL
Launch your Web browser. Because you are not connected to the Internet, you may
get an error page displayed with a message stating that you cannot access the
Internet.
Set Up Continues →

Page 16
Note: Once you have completed the Installation Wizard and restarted your SonicWALL, you can
manage the SonicWALL by entering the WorkPort IP address of the SonicWALL into a Web browser.
You must log into the SonicWALL with the User Name “admin” and the Password that you defined
in the Installation Wizard.
9
Please note that you need your IP
addressing details from your Internet
Service Provider (ISP) to complete the
configuration of your SonicWALL
.
!
Be sure to register your SonicWALL at
<http://www.mysonicwall.com> to take
advantage of a free 30-day trial
subscription to the Content Filter List.
Also, by registering your SonicWALL,
you have access to technical support
services
.
!
The Installation Wizard
The first time you access the SonicWALL, the Installation Wizard automatically
launches. The Installation Wizard guides you through the initial setup. Follow the steps
in the Wizard to install your TELE3 TZ.
Note: Certain browser configurations may not launch the wizard. In this case, you can
log into the SonicWALL using “Admin” as the User Name and “password” as the
Password. After you log into the SonicWALL, click Tools, then Preferences. Click
Set Up Continues →

SonicWALL Telecommuter’s Getting Started Guide Page 17
Configuring Computers on the WorkPort
While the SonicWALL is restarting, two windows appear: one with the administrator login
prompt, and the second with instructions for configuring your computers on your network
(WorkPort). Minimize the login window to view and print the Installation Wizard instructions.
Complete either Aor Bdepending on the configuration selected during installation.
DHCP Server Enabled
If you enabled the SonicWALL DHCP server, a screen is displayed with instructions to
configure computers on your network.
After the SonicWALL has restarted, change the network settings on the computers on the WorkPort.
Each computer must be configured to get its IP address dynamically.
You may need to restart the computers on your WorkPort to update the network settings. The
SonicWALL is now functioning and protecting your WorkPort from Internet-based attacks and
break-ins.
10
A
P rint this screen. You need it to
properly configure the computers
on your network.
!
On a Windows 2000 computer, do the following:
1. From the Start menu, select Settings.
2. Then select Network and Dial-up
Connections.
3. Right click on the Local Area Connection
icon, and then select Properties.
4. Click Internet Protocol (TCP/IP) and then
Properties.
5. Click Obtain IP address automatically.
6. You can select Obtain DNS server address
automatically or enter IP addresses of the
DNS servers.
7. Click OK, then OK again to close the
Properties window.

Page 18
DHCP Server Disabled
If you did not enable the SonicWALL DHCP server, a window with configuration instructions
is displayed:
After the SonicWALL has restarted, change the network settings on the computers located on the
WorkPort. Configure each computer with a static IP address from the range displayed in your
configuration instructions.
You may need to restart the computers on your network to update the network settings.
The SonicWALL is now functioning and protecting your network from Internet-based attacks and
break-ins.
B
Print this screen. You
need the information to
configure computers on
your WorkPort.
!
On a Windows 2000 computer, do the following:
1. From the Start menu, select Settings.
2. Then select Network and Dial-up
Connections.
3. Right click on the Local Area Connection
icon, and then select Properties.
4. Click Internet Protocol (TCP/IP) and then
Properties.
5. Select Use the following IP address and
enter an IP address from the range indicated in
your Wizard restart screen.
6. Enter the subnet mask indicated in your Wizard
restart screen in the Subnet Mask field.
7. Enter the Default Gateway IP address in the
Gateway field.
8. Enter IP addresses of the DNS servers provided
by your ISP.
9. Click OK, then OK again to close the
Properties window.

SonicWALL Telecommuter’s Guide to Getting Connected Page 19
3 Configuring the SonicWALL HomePort
After configuring your work computer on the WorkPort, you must configure your home
computer to be on the same subnet as the HomePort. Once you configure your home computer
on the HomePort, you can access the Internet through the TELE3 TZ or TELE3 TZX.
HomePort in NAT Mode
Using HomePort in NAT mode allows you to use a single, public IP address for all traffic on
the network. It is used to hide your IP address from users on the Internet. Configure the
HomePort in NAT mode using the following instructions:
1. Log into the Management interface from the WorkPort PC using a Web browser and the
WorkPort IP address configured for the TELE3 TZ or TELE3 TZX.
2. Click Advanced, and then HomePort.
3. Select HomePort in NAT Mode, and click Update for the configuration to take effect on
the TELE TZ.
The HomePort Private Address must be used when you configure your home PC IP address.
It should be used as the Default Gateway address in your TCP/IP settings.