SonicWALL SuperMassive 9800 User manual

SonicWall™SuperMassive9800
GettingStartedGuide
RegulatoryModelNumber:2RK04‐0AD

Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksarepropertyoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressorimplied,byestoppelor
otherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMS
ANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERAND
DISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANT YRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANT YOF
MERCHANTABILITY,FITNESSFORAPA RT ICU L AR PURPOSE,ORNON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANY
DIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,
BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITS
AFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytime
withoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SuperMassive9800GettingStartedGuide
Updated‐July2017
SonicOS6.2.7.7
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

SonicWallSuperMassive9800GettingStartedGuide 3
1
InThisGuide
ThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWall™SuperMassive9800
applianceinsingle‐unitorHighAvailabilitydeployments.
SonicWallSuperMassive9800appliancessupport:
•40Gbpsofhigh‐performancebusinessfirewallthroughput
•10Gbpsofmalwareprotectionand24Gbpsofapplicationinspectionwithintrusionprevention
•Gatewayandclientservices,includingCaptureAdvancedThreatProtection,applicationmonitoringandcontrol,deep
packetinspectionoverSSL,contentfiltering,anti‐virus,anti‐spyware,intrusionprevention,SSLVPNandIPsecVPNaccess,
statefulhighavailabilityandhighavailabilityclustering
Formoreproductinformation,seehttps://www.sonicwall.com/products/sonicwall‐supermassive‐9000.

4SonicWallSuperMassive9800GettingStartedGuide
Contents
Chapter1Topics
InThisGuideonpage3•Contentsonpage4
Chapter2Topics
HardwareOverviewonpage7•SuperMassive9800PackageContentsonpage8
•FrontPanelonpage10
•BackPanelonpage11
•SuperMassive9800LEDUsageonpage12
•PortTypeandLEDUsageonpage13
•SetupProcessOverviewonpage14
Chapter3Topics
SettingUptheApplianceonpage15 •DeterminingtheWANTypeonpage16
•SystemRequirementsonpage16
•RecordingConfigurationInformationonpage17
•Initialsetuponpage19
•ConnectingtotheInternetonpage22
•TroubleshootingYourMGMTandLANConnectionsonpage26

SonicWallSuperMassive9800GettingStartedGuide 5
Chapter4Topics
Registering,Licensing,andUpgradingonpage27 •UsingMySonicWallonpage28
•CreatingaMySonicWallAccountonpage28
•RegistrationOverviewonpage29
•RegisteringinSonicOSonpage29
•LicensingSecurityServicesonpage31
•ActivatingandManagingLicensesusingaKeyonpage33
•UpgradingFirmwareonpage33
Chapter5Topics
DeploymentScenariosonpage37 •DeploymentScenariosonpage38
•ConfiguringNATModeGatewayonpage41
•ConfiguringaStatefulHAPaironpage42
•ConfiguringWireModeonpage49
Chapter6Topics
SupportandTrainingOptionsonpage55 •CustomerSupportonpage56
•KnowledgePortalonpage56
•Trainingonpage56
•RelatedDocumentationonpage57

6SonicWallSuperMassive9800GettingStartedGuide
Chapter7Topics
RackMountingInstructionsonpage59 •InstructionsforRackMountingYourApplianceonpage60
Chapter8Topics
ProductSafetyandRegulatoryInformationonpage65 •SafetyandRegulatoryInformationonpage66
•WarrantyInformationonpage71

SonicWallSuperMassive9800GettingStartedGuide 7
2
HardwareOverview
ThissectiondescribestheitemsshippedwiththeSonicWall™SuperMassive9800applianceandprovidesfrontandrear
illustrationsoftheSuperMassive9800.
•SuperMassive9800PackageContentsonpage8
•FrontPanelonpage10
•BackPanelonpage11
•SuperMassive9800LEDUsageonpage12
•PortTypeandLEDUsageonpage13
•SetupProcessOverviewonpage14

8SonicWallSuperMassive9800GettingStartedGuide
SuperMassive9800PackageContents
Beforeyoubeginthesetupprocess,verifythatyourpackagecontainsthefollowingitems(theitemsaredepictedinPackage
contents):
1OneSonicWallSuperMassive9800appliance
2Onerackmountingkit
3OneserialCLIcable
4OneEthernetcable
5Twopowercords
6OneSonicWallSuperMassive9800GettingStartedGuide
Missingitems?Ifanyitemsaremissingfromyourpackage,contactSonicWallSupport:
Web:https://support.sonicwall.com/orhttps://support.sonicwall.com/contact‐support
Email:[email protected]
NOTE:Theincludedpowercord(s)areapprovedforuseonlyinspecificcountriesorregions.Beforeusingapowercord,verifythatitis
ratedandapprovedforuseinyourlocation.ThepowercordsareforACmainsinstallationonly.AfieldconversionDCpowercableis
different;formoreinformation,seeProductSafetyandRegulatoryInformationonpage65.
電気安全を確保するために、 弊社製品にご使用いただ く 電源コ ー ド は必ず製品同梱の電源コ ー ド をご使用 く だ さ い。 この電
源 コ ー ド は他の製品では使用で き ません。

SonicWallSuperMassive9800GettingStartedGuide 9
Packagecontents

1
45
6
3
2
SonicWall SuperMassive 9800
CONSOLE
SDHC
MGMT X23 X21
X20 X6 X4
1GE
10GE X2 X0
X1X3X5X7
X22
B0
B1
ALARM
TEST
PWR 1 PWR2
X14 X12X18 X16 X10 X8
X9X11X13X15X17X19
80GB
SSD
80GB
SSD

10 SonicWallSuperMassive9800GettingStartedGuide
FrontPanel
SonicWall SuperMassive 9800 CONSOLE
SDHC
MGMT X23 X21
X20 X6 X4
1GE
10GE X2 X0
X1X3X5X7
X22
B1
B2
ALARM
TEST
PWR 1 PWR 2
X14 X12X18 X16 X10 X8
X9X11X13X15X17X19
80GB
SSD
80GB
SSD
LCD Screen
Control Buttons
Console Port
USB Ports (2)
LED Indicators
X0-X7 (1 GE)
Power Button
Access the SonicOS Command Line Interface (CLI) via
the serial CLI cable
USB 2.0 mass storage device support
High-speed copper Gigabit Ethernet ports
LED indicators provide status for Power Supplies, Test, Alarms, and Blade
modules. For information describing LED colors and activity, refer to the
LED Activity table in this document.
Navigate the LCD screen; for future use
Display the following when connected to
MGMT port: Chassis IP, Blade IP, Subnet
Mask, Gateway IP
1 Gigabit Ethernet Management Interface
SDHC Port
SSD Drives
Secure Digital High-Capacity (SDHC) port for future
use
Two Solid State Drives (SSD) with 80 GB of capacity
for storage (HD0 and HD1)
Press to turn the
appliance On or O
X8-X19 (1 GE SFP)
X20-X23 (XAUI SFP+)
1 Gigabit Ethernet hot-pluggable SFP interfaces for
high-speed ber or copper Ethernet communication
XAUI (10 Gigabit Attachment Unit Interface)
hot-pluggable ports
MGMT Port (1 GE)

SonicWallSuperMassive9800GettingStartedGuide 11
BackPanel
WARNING:Potentialhazardfromfan
Thismanualcontainsspecificwarningandcautionstatementswheretheyapply.PleasereadtheSafetyInstructions
beforeuse!SeeProductSafetyandRegulatoryInformationonpage65.
Expansion Module
Expansion Module Bay
Fans (6)
Power Supplies (2)
For SonicWall-approved expansion
modules
Auto-throttling fans for system temperature control
Dual power supplies for redundant AC power and added reliability
Field conversion is available to convert to DC mains
DC power supplies use dierent input connector and power cables

12 SonicWallSuperMassive9800GettingStartedGuide
SuperMassive9800LEDUsage
LED Usedfor Color Description
PWR1 PowerSupply1status SolidBlue SystemispoweredonandPowerSupply1isoperatingnormally
SolidYellow PowerSupply1isdownornotdetectedinthechassis
PWR2 PowerSupply2status SolidBlue SystemispoweredonandPowerSupply2isoperatingnormally
SolidYellow PowerSupply2isdownornotdetectedinthechassis
TEST Test/bootstatus Off Systemisupandoperational
SolidYellow Systemisstartingup
BlinkingYellow SystemisinSafeMode
ALARM Alarmcondition Off Noalarmsarepresent
BlinkingYellow Minorsystemalarm,suchaspolicyalert
BlinkingRed Majororcriticalsystemalarm,suchasathermalalertorfanalert
B1 Blade1status Off Bladeispowereddown
BlinkingGreen Bladeispoweredon,butisnotactive
SolidGreen Bladeispoweredonandisoperational
B2 Blade2status Off Bladeispowereddown
BlinkingGreen Bladeispoweredon,butisnotactive
SolidGreen Bladeispoweredonandisoperational

SonicWallSuperMassive9800GettingStartedGuide 13
PortTypeandLEDUsage
ThissectiondescribestheportsonthefrontbezeloftheSuperMassive9800applianceandprovidesadescriptionofthe
associatedLEDactivity:
PortType PortName/Interfaces LEDColor Indicates
Copper MGMTorX0‐X7 Amber 1Gbps
Green 10Gbps
BlinkingYellow Dataistransmittingand/orreceiving
Off Nolinkor10Mbps
SFP X8‐X19 Amber 1Gbps
Green 100Mbps
BlinkingYellow Dataistransmittingand/orreceiving
Off Nolinkor10Mbps
SFP+ X20‐X23 Amber 1Gbps
Green 10Gbps
BlinkingAmber Dataistransmittingand/orreceiving
Off Nolink

14 SonicWallSuperMassive9800GettingStartedGuide
SetupProcessOverview
SetupprocessillustratesthenecessarystepsintheprocessofgettingstartedwithyournewSonicWallSuperMassive9800
appliance.
Setupprocess
Verify
Pre-Configuration
Requirements
Start Up
Management
Computer
Perform Initial
Setup
Register
Appliance in
SonicOS
Complete
Deployment
Configuration
Create a
MySonicWall
Account
Configuration Process
Registration, Licensing, and Deployment Process

SonicWallSuperMassive9800GettingStartedGuide 15
3
SettingUptheAppliance
ThissectionprovidesanoverviewofavailableWANtypes,asectiontorecordconfigurationinformation,andinitialsetup
informationandprocedures.
•DeterminingtheWANTypeonpage16
•SystemRequirementsonpage16
•RecordingConfigurationInformationonpage17
•Initialsetuponpage19
•ConnectingtotheInternetonpage22
•TroubleshootingYourMGMTandLANConnectionsonpage26

16 SonicWallSuperMassive9800GettingStartedGuide
DeterminingtheWANType
BeforeconfiguringyourSonicWallSuperMassive9800
appliance,youwillneedtodeterminethetypeofWAN
connectionyoursetupwilluse.SonicWallsupportsthe
followingtypes:
•Static—Configurestheapplianceforanetworkthat
usesstaticIPaddresses.Recommended.
•DHCP—ConfigurestheappliancetorequestIPsettings
fromaDHCPserverinyournetworkorontheInternet.
Recommended.
•PPPoE—Point‐to‐PointProtocoloverEthernet(PPPoE)
istypicallyusedwithaDSLmodem.IfyourInternet
ServiceProvider(ISP)requiresdesktopsoftwarewitha
usernameandpassword,selectNATwithPPPoEmode.
• PPTP—Point‐to‐PointTunnelingProtocol(PPTP)isused
toconnecttoaremoteserver.PPTPtypicallysupports
olderMicrosoftWindowsimplementationsthatrequire
tunnelingconnectivity.
•L2TP—Layer2TunnelingProtocol(L2TP)isusedto
transmitLayer2dataoverIPorotherLayer3routed
networks.InternetServiceProviders(ISPs)oftenuseit
toenablevirtualprivatenetworks(VPNs)forcustomers
overtheInternet.Itdoesnotencryptnetworktraffic
itself.IfL2TPisnotavailableintheSetupWizard,you
canconfigureitlaterintheSonicOSmanagement
interface.
SystemRequirements
Beforebeginningthesetupprocess,verifythatyouhave:
•AnInternetconnection
•AWebbrowsersupportingJavaScriptandHTTP
uploads:
NOTE:Formoreinformationregardingothersupported
WANtypessuchasWireModeorTapMode,refertothe
SonicOSAdministrationGuide.
Acceptedbrowser Browserversion
InternetExplorer 9.0andhigher
Chrome 18.0andhigher
Firefox 16.0andhigher
Safari 5.0andhigher,runningon
non‐Windowsmachines

SonicWallSuperMassive9800GettingStartedGuide 17
RecordingConfiguration
Information
Usethissectiontorecordyourconfigurationinformation.Be
suretokeepitforfuturereference.
ThedefaultMGMTinterfaceIPaddressis
192.168.168.168.
RegistrationInformation
NetworkingInformation
SerialNumber: Recordtheserialnumberfound
onthebottompanelofyour
SonicWallappliance.
AuthenticationCode: Recordtheauthenticationcode
foundontheSystem>Status
page,showstatusfromthe
CLI,orthebottompanelofyour
SuperMassiveappliance.
LANIPAddress:SelectastaticIPaddressforyour
SonicWallappliancethatiswithin
rangeofyourlocalnetwork.
(defaultis10.10.10.10for
X0/LAN)
SubnetMask: Recordthesubnetmaskforthe
localnetwork(defaultmaskis
255.255.255.0).Client
devicesconnectingthroughthe
applianceLANinterfaceare
assignedIPaddressesinthis
network(defaultclientaddresses
assignedbytheSonicOSDHCP
serverareonthe
192.168.168.0/24subnet).
EthernetWANIPAddress: SelectastaticIPaddressforyour
EthernetWANinterface(X1).
NOTE:Thissettingonlyappliesif
youareusinganISPthatassignsa
staticIPaddress.

18 SonicWallSuperMassive9800GettingStartedGuide
AdministratorInformation
InternetServiceProvider(ISP)
Information
RecordthisinformationaboutyourcurrentInternetservice:
AdminName: Selectanadministratoraccount
name.(defaultisadmin)
AdminPassword: Selectanadministratorpassword.
(defaultispassword)
Ifyouare
connecting
withDHCP
Noinformationisusuallyrequired.However,
someprovidersmayrequireahostname.
HostName:
Ifyouare
connecting
withStaticIP
IPAddress:_____._____._____._____
SubnetMask:_____._____._____._____
DefaultGateway:_____._____._____.____
PrimaryDNS:_____._____._____._____
DNS2(optional):_____._____._____._____
DNS3(optional):_____._____._____._____

SonicWallSuperMassive9800GettingStartedGuide 19
Initialsetup
ConnectingyourcomputertotheSuperMassive9800illustrateshowtoconnectyourmanagementcomputertotheSonicWall
SuperMassive9800applianceforinitialsetup.
ConnectingyourcomputertotheSuperMassive9800
MGMT
Management Computer
SonicWall Appliance
Ethernet
120V AC
(U.S.)
SonicWall SuperMassive 9800 CONSOLE
SDHC
MGMT X23 X21
X20 X6 X4
1GE
10GE X2 X0
X1X3X5X7
X22
B0
B1
ALARM
TEST
PWR1 PWR2
X14 X12X18 X16 X10 X8
X9X11X13X15X17X19
80GB
SSD
80GB
SSD
MGMT
MGMT
X
X2
X2
2
X2
2
X2
2

20 SonicWallSuperMassive9800GettingStartedGuide
Thefollowingsectionsprovideinitialconfigurationinformation
andinstructionsforconnectingyourSonicWallSuperMassive
9800applianceforinitialsetup.
•ConnectingtheMGMTPortonpage20
•ApplyingPowertotheApplianceonpage20
•UsingtheSetupWizardonpage21
ConnectingtheMGMTPort
TheMGMTportisadedicated1gigabitEthernetinterfacefor
appliancemanagementandSafeModeaccess.
1UsingtheprovidedEthernetcable,connectoneendof
thecabletothecomputeryouareusingtomanagethe
SuperMassive9800appliance.
2ConnecttheotherendoftheEthernetcabletothe
MGMTportonyourSuperMassive9800appliance.
ThedefaultMGMTportIPaddressis:
http://192.168.168.168.
ApplyingPowertotheAppliance
ConnecttheACpowercordsfromtheSuperMassive9800
applianceintoappropriatepoweroutlets.
Forfurtherinformationregardingpowerrequirements,refer
toProductSafetyandRegulatoryInformationonpage65of
thisdocument.
SuperMassiveLEDActivity
ThePowerLEDsonthefrontpanelilluminatebluewhenthe
applianceispoweredon.
TheTestLEDorAlarmLEDmayilluminateandblinkwhilethe
applianceperformsaseriesofdiagnostictests.Whenthese
LEDsarenolongerilluminatedandthePowerLEDsremain
steadilylit,theSuperMassive9800applianceisreadyfor
configuration.Thistypicallyoccurswithinafewminutesof
turningonthepower.
IftheTestorAlarmLEDsremainlitaftertheSuperMassive
9800hascompletedpoweringon,restarttheapplianceby
disconnectingthepower,waiting1minute,andthen
connectingthepoweragain.
ForaconnectedMGMTorX0‐X7port,theLinkLEDforthe
portilluminatesgreenoramberdependingonthelink
throughputspeed,indicatinganactiveconnection:
•Amberindicates1Gbps
NOTE:SeealsoSuperMassive9800LEDUsageonpage
12andPortTypeandLEDUsageonpage13.