SonicWALL SonicPoint ACe User manual

SonicWall™SonicPointACe
GettingStartedGuide
RegulatoryModelNumber:APL26‐0AE

Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksarepropertyoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressorimplied,byestoppelorotherwise,toanyintellectual
propertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSE
AGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERANDDISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANTY
RELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPAR TI CUL AR PURPOSE,ORNON‐INFRINGEMENT.INNO
EVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUT
LIMITATION,DAMAGESFORLOSSOFPROFITS,BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIF
SONICWALLAND/ORITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespect
totheaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytimewithoutnotice.SonicWall
Inc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SonicPointACeGettingStartedGuide
Updated‐January2017
232‐003411‐50RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

SonicWallSonicPointACeGettingStartedGuide 3
1
Introduction
Inthisguide
ThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWall™SonicPointACewireless
accesspointinsingle‐unitormulti‐unitwirelessdeployments.
Chapter1Topics
Introductiononpage3•Wirelessoverviewonpage5

4SonicWallSonicPointACeGettingStartedGuide
Chapter2Topics
InitialSetuponpage9•Checkpackagecontentsonpage9
•Deploymentrequirementsonpage10
•SonicPointACeavailableports/statusLEDsonpage11
•Installingantennasonpage13
•ConnectingEthernetcablesonpage14
•Wirelessaccesspointplacementconsiderationsonpage15
•MountingtheSonicPointACeonpage17
Chapter3Topics
ConfiguringSonicOSforwirelessaccessonpage21 •ConfiguringSonicOSforSonicPointACeonpage21
•VerifyingSonicPointoperationonpage25
•Troubleshootingtipsonpage26
Chapter4Topics
Supportandproductregistrationonpage27 •Registrationandsupportonpage27
•Onlinesupportandtrainingonpage28

SonicWallSonicPointACeGettingStartedGuide 5
Wirelessoverview
TheSonicPointACeispartofthenextevolutionarygenerationinwirelessaccesspointsaftertheSonicWallSonicPointNandNDR.
TheSonicPointACeprovidesphysicallayerenhancementsforhigherthroughputwithamaximumdatarateof1.3Gbps.Toachieve
this,theSonicPointACeuses:
•Moreantennas—threeantennasforthe5GHzradio,andthreemoreforthe2.4GHzradio
•Widerchannels—80MHz‐widechannelsforthe802.11acradiomodule,whilecontinuingtosupport20/40MHzchannels.
Thisallowsfordynamicperpacketnegotiationofchannelwidthssothatwhenthereisinterference,theSonicPointcan
temporarilyfallbackto40or20MHzchannels.
•Morespatialstreams—3X3multiple‐inputandmultiple‐output,(MIMO)forthe802.11acradiomodule,wherethecapacity
ofaradiolinkismultipliedusingmultipathpropagation.
Chapter5Topics
Productsafetyandregulatoryinformationonpage29 •Mountingtheapplianceonpage30
•VerwarnungWeiterehinweisezurmontageonpage31
•EUandEFTAonpage33
•Declarationofconformityonpage33

6SonicWallSonicPointACeGettingStartedGuide
SonicWallwirelessfirewalling
WhenawirelessdeviceusesaSonicWallSonicPointACe
wirelessaccesspointtocommunicatewithawirelessdevice
onanothersubnetoronacompletelydifferentnetwork,traffic
betweenthedevicesisforcedtotraversetheSonicWall
networksecurityappliance.Thistraversalenablessecurity
servicestobeenforcedbySonicOS.
Standardpracticeforwirelessfirewalling(whereonewireless
clientiscommunicatingwithanother)bypassesmanyofthe
criticalsecurityservices.Thefollowingillustrationshowsthe
standardpracticeforwirelessfirewalling.
Standardwirelessfirewalling
Manysecurityproductsonthemarketsharethispotential
vulnerabilitywhentwousersconnectedbyacommonhubor
wirelessaccesspointwishtoexchangedata.
SonicWalladdressesthissecurityshortcomingbymanaging
theSonicPointaccesspointsfromthenetworksecurity
appliance.Thisallowscompletecontrolofthewirelessspace,
includingzoneenforcementofsecurityservicesandcomplete
firewallingcapabilities.
Securewirelessfirewalling
WLAN Zone Security Services
?
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
Other Security Appliance
WLAN Zone Security Services
SonicWall
appliance
SonicWall
SonicPoint
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
cW
al
l
P
oi
nt

SonicWallSonicPointACeGettingStartedGuide 7
Frequencybandsandchannels
Therearecurrentlyfivewidelyadoptedstandardsfor802.11wirelessnetworktypes:a,b,g,n,andac.802.11nand802.11acare
thenewestandhighestcapacitystandards,butolderclientdevicesmaynotbeabletoutilizethenewerstandards.
Differentfrequencybandsprovidevaryingsignalstrengthandqualityoverdifferentdistanceranges.Signalsinthe2.4GHzrange
tendtopassthroughphysicalbarriersbetterandcarryfartherthanthoseinthe5GHzrange,buttheydonotprovideashigha
datarate.Signalsinthe5GHzrangeprovidefasterdataratesforbetterthroughput,butthesignalattenuatesfasterandisbest
suitedforopenspaces.
Wirelessstandards
802.11(x) Frequencystandard Maximumdatarate
802.11a 5GHz 54Mbps
802.11b 2.4GHz 11Mbps
802.11g 2.4GHz 54Mbps
802.11n 2.4GHzand5GHz 450Mbps
802.11ac 5GHz+multichannel+multipath 1.3Gbps
Strengthsandweaknessesof5GHzand2.4GHzsignals
5GHz 2.4GHz
Strength Higherspeed,morechannels LongerRange,strongersignalpenetration
Weakness Limitedpenetrationofwalls,clientcompatibility Moresourcesofinterference

8SonicWallSonicPointACeGettingStartedGuide
RefertoRadiofrequencybarriersandRFinterferenceonpage16fordetailedinformationaboutRFbarriersandinterference.
Toallowmultipleseparatewirelessnetworksinasharedandconfinedspace,theRFmediumisdividedintochannels.Fordevices
inthe5GHzrange(802.11a/n/ac),thismeansthepossibilityofupto23discretechannels.
Fordevicesusingthe2.4GHzrange(802.11b/g/n),thewirelessspaceislimitedtoamaximumof14overlappingchannels.Asa
resultoftheseoverlappingchannels,2.4GHztechnologyprovidesonlyatotalofthreediscretechannels.
802.11comparisonchart
802.11signalcharacteristics
802.11a 802.11b 802.11g 802.11n 802.11ac
#ofChannelsinUSA2311111121
#ofChannelsinEU 23 13 13 13 16
#ofChannelsinJapan1514141419
FrequencyBand 5GHz 2.4GHz 2.4GHz 2.4/5GHz 5GHz
Max.DataRate 54Mbps 11Mbps 54Mbps 450Mbps(For
3X3MIMO)
1.3Gbps(ForQAM‐
64,MIMO3X3,and80
MHzchannels)
Radius(Range) 90ft/25m 120ft/35m 120ft/35m 300ft/90m 120ft/35m
NOTE:Although802.11b/g/nstandardsprovidebetween11and14channels,onlythreeofthosechannelsarefullydiscrete
(non‐overlapping)channels.

SonicWallSonicPointACeGettingStartedGuide 9
2
InitialSetup
Thissectionprovidesabasicchecklistofmaterials,hardwareinformation,anddescribeshowtoconnectandconfigurephysical
aspectsoftheSonicWallSonicPointACeincludingantennas,cabling,andmounting.
•Checkpackagecontentsonpage9
•Deploymentrequirementsonpage10
•SonicPointACeavailableports/statusLEDsonpage11
•Installingantennasonpage13
•ConnectingEthernetcablesonpage14
•Wirelessaccesspointplacementconsiderationsonpage15
•MountingtheSonicPointACeonpage17
Checkpackagecontents
Beforecontinuing,ensurethatyourSonicPointACepackagecontainsthefollowingmaterials:

10 SonicWallSonicPointACeGettingStartedGuide
*Theincludedpowercordisapprovedforuseonlyinspecific
countriesorregions.Beforeusingapowercord,verifythatitis
ratedandapprovedforuseinyourlocation.
Anyitemsmissing?
Ifanyoftheitemscorrespondingtoyourproductaremissing
fromthepackage,contactTechnicalSupportat:https://
support.sonicwall.com/contact‐support
Alistingofthemostcurrentsupportdocumentsareavailable
onlineat:https://support.SonicWall.com/SonicWall‐
SonicPoint‐series/ace/release‐notes‐guides
Deploymentrequirements
SonicOSfirmware
•SonicWallSonicPointACeaccesspointsarecentrally
managedbySonicWallnetworksecurityappliances
runningthefollowingversionsofSonicOS:
•SonicOS5.9.1.6orahigher5.9release
•SonicOS6.2.5.1orhigher
Powersource
•Usethesuppliedpoweradaptororan802.3at
compliantPoEinjectororaPoEswitchcapableof
providing25wattsofpowertoeachSonicPointACe.
Internetconnectivity
•AnactiveInternetconnectionisrequiredforyour
firewalltodownloadthelatestSonicPointfirmware.
GigabitEthernetconnectivity
•802.11acwirelesshardwarerequiresmorebandwidth
thanasingle(orevendual)10/100Ethernetconnection
canhandle.GigabitEthernetconnectivitybetweenthe
WLANandtheLANisrequiredtotakefulladvantageof
802.11acspeed.
SeeProductsafetyandregulatoryinformationonpage29.
SonicPointACeApplianceChecklist
SonicWallSonicPointACeAppliance
Antennas(6)
MountingKit(CeilingBrackets,AnchorandScrewKit)
GettingStartedGuide
PowerAdaptor*