SonicWALL SonicWave 432e User manual

SonicWall™SonicWave432eandSonicWave432i
GettingStartedGuide
RegulatoryModelNumbers:
APL43‐0C2(SonicWave432e)
APL43‐0C3(SonicWave432i)

Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksarepropertyoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressorimplied,byestoppelor
otherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMS
ANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERAND
DISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANT YRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTYOF
MERCHANTABILITY,FITNESSFORAPARTICUL ARPURPOSE,ORNON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANY
DIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,
BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITS
AFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytime
withoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SonicWave432eandSonicWave432iGettingStartedGuide
Updated‐September2017
232‐004036‐51RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 3
1
Introduction
InthisGuide
ThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWall™SonicWave432eand
SonicWave432iwirelessaccesspointsinsingle‐unitormulti‐unitwirelessdeployments.
Forthelatestproductdocumentation,visithttps://www.sonicwall.com/en‐us/support/technical‐documentation.
Chapter1Topics
Introductiononpage3•SonicWave432eWirelessOverviewonpage6
•SonicWave432iWirelessOverviewonpage6

4SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
Chapter2Topics
InitialSetuponpage11 •CheckPackageContentsonpage12
•DeploymentRequirementsonpage12
•SonicWave432eandSonicWave432iAvailablePorts/Status
LEDsonpage13
•InstallingSonicWave432eAntennasonpage15
•ConnectingEthernetCablesonpage15
•WirelessAccessPointPlacementConsiderationsonpage17
•MountingtheSonicWave432eandSonicWave432ion
page19
Chapter3Topics
ConfiguringSonicOSforWirelessAccessonpage23 •ConfiguringSonicOSforSonicWave432eorSonicWave432i
onpage23
•VerifyingSonicWaveOperationonpage28
•TroubleshootingTipsonpage29
Chapter4Topics
SupportandProductRegistrationonpage31 •RegistrationandSupportonpage31
•OnlineSupportandTrainingonpage32

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 5
Forgeneralsupportinformation,seeSonicWallSupportonpage41.
Chapter5Topics
ProductSafetyandRegulatoryInformationonpage33 •SafetyInstructionsfortheSonicWave432eandSonicWave
432iAppliancesonpage34
•Sicherheitsanweisungenonpage35
•EUandEFTAonpage36
•SimplifiedEU/CEDeclarationofConformityonpage38

6SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
SonicWave432eWireless
Overview
TheSonicWave432eispartofthenextevolutionary
generationinwirelessaccesspointsaftertheSonicWall
SonicPointACe.
TheSonicWave432eprovidesphysicallayerenhancementsfor
higherthroughputwithamaximumdatarateof1730Mbpsfor
5GHzand800Mbpsfor2.4GHz.Toachievethis,theSonicWave
432euses:
•Moreantennas—fourantennasforthe5GHzradio,and
fourmoreforthe2.4GHzradio
•Widerchannels—80MHz‐widechannelsforthe
802.11acradiomodule,whilecontinuingtosupport20/
40MHzchannels.Thisallowsfordynamicperpacket
negotiationofchannelwidthssothatwhenthereis
interference,theSonicWavecantemporarilyfallback
to40or20MHzchannels.
•Morespatialstreams—4X4multiple‐inputand
multiple‐output,(MU‐MIMO)forthe802.11acradio
module,wherethecapacityofaradiolinkismultiplied
usingmultipathpropagation.
SonicWave432iWireless
Overview
TheSonicWave432iispartofthenextevolutionarygeneration
inwirelessaccesspointsaftertheSonicWallSonicPointACi.
TheSonicWave432iprovidesphysicallayerenhancementsfor
higherthroughputwithamaximumdatarateof1730Mbpsfor
5GHzand800Mbpsfor2.4GHz.Toachievethis,theSonicWave
432iuses:
•Widerchannels—80MHz‐widechannelsforthe
802.11acradiomodule,whilecontinuingtosupport20/
40MHzchannels.Thisallowsfordynamicperpacket
negotiationofchannelwidthssothatwhenthereis
interference,theSonicWavecantemporarilyfallback
to40or20MHzchannels.
•Morespatialstreams—4X4multiple‐inputand
multiple‐output,(MU‐MIMO)forthe802.11acradio
module,wherethecapacityofaradiolinkismultiplied
usingmultipathpropagation.
SonicWallWirelessFirewalling
WhenawirelessdeviceusesaSonicWallSonicWave432eor
SonicWave432iwirelessaccesspointtocommunicatewitha

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 7
wirelessdeviceonanothersubnetoronacompletelydifferent
network,trafficbetweenthedevicesisforcedtotraversethe
SonicWallnetworksecurityappliance.Thistraversalenables
securityservicestobeenforcedbySonicOS.
Standardpracticeforwirelessfirewalling(whereonewireless
clientiscommunicatingwithanother)bypassesmanyofthe
criticalsecurityservices.Thefollowingillustrationshowsthe
standardpracticeforwirelessfirewalling.
StandardWirelessFirewalling
Manysecurityproductsonthemarketsharethispotential
vulnerabilitywhentwousersconnectedbyacommonhubor
wirelessaccesspointwishtoexchangedata.
SonicWalladdressesthissecurityshortcomingbymanaging
theSonicWaveaccesspointsfromthenetworksecurity
appliance.Thisallowscompletecontrolofthewirelessspace,
includingzoneenforcementofsecurityservicesandcomplete
firewallingcapabilities.
SecureWirelessFirewalling
WLAN Zone Security Services
?
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
Other Security Appliance
WLAN Zone Security Services
SonicWall SonicWave
SonicWall Appliance
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
a
v
e
SonicWa
ll
Ap
pl
iance
C
ontent Fi
l
tering Servic
e

8SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
FrequencyBandsandChannels
Currentlyfivestandardsfor802.11wirelessnetworktypeshavebeenwidelyadopted:a,b,g,n,andac.802.11nand802.11acare
thenewestandhighestcapacitystandards,butolderclientdevicesmightnotbeabletoutilizethenewerstandards.
Differentfrequencybandsprovidevaryingsignalstrengthandqualityoverdifferentdistanceranges.Signalsinthe2.4GHzrange
tendtopassthroughphysicalbarriersbetterandcarryfartherthanthoseinthe5GHzrange,buttheydonotprovideashigha
datarate.Signalsinthe5GHzrangeprovidefasterdataratesforbetterthroughput,butthesignalattenuatesfasterandisbest
suitedforopenspaces.
RefertoRadioFrequencyBarriersandRFInterferenceonpage18fordetailedinformationaboutRFbarriersandinterference.
WirelessStandards
802.11(x) FrequencyStandard MaximumDataRate
802.11a 5GHz 54Mbps
802.11b 2.4GHz 11Mbps
802.11g 2.4GHz 54Mbps
802.11n 2.4GHzand5GHz 450Mbps
802.11ac 5GHz+MU‐MIMO 2.34‐3.47Gbps
StrengthsandWeaknessesof5GHzand2.4GHzSignals
5GHz 2.4GHz
Strength Higherspeed,morechannels Longerrange,strongersignalpenetration
Weakness Limitedpenetrationofwalls,clientcompatibility Moresourcesofinterference

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 9
Toallowmultipleseparatewirelessnetworksinasharedandconfinedspace,theRFmediumisdividedintochannels.Fordevices
inthe5GHzrange(802.11a/n/ac),thismeansthepossibilityofupto23discretechannels.
Fordevicesusingthe2.4GHzrange(802.11b/g/n),thewirelessspaceislimitedtoamaximumof14overlappingchannels.Asa
resultoftheseoverlappingchannels,2.4GHztechnologyprovidesonlyatotalofthreediscretechannels.
802.11SignalComparisonChart
802.11SignalCharacteristics
802.11a 802.11b 802.11g 802.11n 802.11ac
#ofChannelsinUSA2311111121
#ofChannelsinEU 23 13 13 13 16
#ofChannelsinJapan1514141419
FrequencyBand 5GHz 2.4GHz 2.4GHz 2.4/5GHz 5GHz
Max.DataRate 54Mbps 11Mbps 54Mbps 800Mbps(For
4X4MU‐MIMO)
1.7Gbps(ForQAM‐
64,MU‐MIMO4X4,
and80MHzchannels)
Radius(Range) 90ft/25m 120ft/35m 120ft/35m 300ft/90m 120ft/35m
NOTE:Although802.11b/g/nstandardsprovidebetween11and14channels,onlythreeofthosechannelsarefullydiscrete
(non‐overlapping)channels.

10 SonicWallSonicWave432eandSonicWave432iGettingStartedGuide

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 11
2
InitialSetup
Thissectionprovidesabasicchecklistofmaterials,hardwareinformation,anddescribeshowtoconnectandconfigurephysical
aspectsoftheSonicWallSonicWave432eandSonicWave432iincludingLEDs,antennas,cabling,placement,andmounting.
•CheckPackageContentsonpage12
•DeploymentRequirementsonpage12
•SonicWave432eandSonicWave432iAvailablePorts/StatusLEDsonpage13
•InstallingSonicWave432eAntennasonpage15
•ConnectingEthernetCablesonpage15
•WirelessAccessPointPlacementConsiderationsonpage17
•MountingtheSonicWave432eandSonicWave432ionpage19

12 SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
CheckPackageContents
Beforecontinuing,ensurethatyourSonicWave432eor
SonicWave432ipackagecontainsthefollowingmaterials:
AnyItemsMissing?
Ifanyoftheitemscorrespondingtoyourproductaremissing
fromthepackage,contactTechnicalSupportat:https://
www.sonicwall.com/support/contact‐support.Alistingofthe
mostcurrentsupportdocumentsareavailableonlineat:
https://www.sonicwall.com/support/technical‐documentation
DeploymentRequirements
SonicOSFirmware
•SonicWallSonicWave432eandSonicWave432iaccess
pointsarecentrallymanagedbySonicWallnetwork
securityappliancesrunningthefollowingversionsof
SonicOS:
•SonicOS6.5orhigher
PowerSource
•Useamulti‐gigabit802.3atcompliantPoEinjectorora
PoEswitchtoprovidepowertoeachSonicWave432e
orSonicWave432i.
InternetConnectivity
•AnactiveInternetconnectionisrequiredforyour
firewalltodownloadthelatestSonicWavefirmware.
GigabitEthernetConnectivity
•TheSonicWave432eorSonicWave432ihardwarerequires
morebandwidththana1GigabitEthernetconnectioncan
handle.SonicWallrecommendsconnectingyour
SonicWave(throughaPoEdevice)toa2.5Gbinterfaceto
takefulladvantageoftheSonicWave432eorSonicWave
432idatathroughputcapability.
SeeProductSafetyandRegulatoryInformationonpage33.
SonicWave432eorSonicWave432iApplianceChecklist
SonicWave432e(externalantennas)ortheSonicWave
432i(internalantennas)appliance
Antennas:SonicWave432e(8),orSonicWave432i(0)
Mountinghardware
CAT5ecable
SERIGuide
GettingStartedGuide
NOTE:TheSonicWave432iisdesignedwithinternal
antennas.

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 13
SonicWave432eandSonicWave432iAvailablePorts/StatusLEDs
AvailablePorts
LAN1/PoEport.
ProvidesEthernetandPowerover
Ethernet(PoE)connections.
LAN2port.
ProvidesanadditionalEthernetconnection.Refertothe
SonicOSConnectivityAdministrationdocumentationfor
usecases.
Consoleport.
ProvidesamanagementconnectionusingRJ45
toDB9cable(forcommandlinemanagement
only).

14 SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
StatusLEDs
LED(lan2)
‐On(solidyelloworgreen,Ethernetlink)
‐Blinkingyellow(1GEthernetactivity)
‐Blinkinggreen(10/100MEthernetactivity)
LED(lan1)
‐On(solidyelloworgreen,Ethernetlink)
‐Blinkingyellow(2.5GEthernetactivity)
‐Blinkinggreen(1G/100MEthernetactivity)
LED(5G)
‐On(solidgreen,5GHzradiolink)
‐Blinkinggreen(5GHzradioactivity)
LED(2.4G)
‐On(solidgreen,2.4GHzradiolink)
‐Blinking(2.4GHzradioactivity)
LED(Tool)
‐On(solidyellow,error)
‐Blinking(safemode)
LED(Power)
‐On(solidblue,power)
‐Blinking(booting/FWupgrade)

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 15
InstallingSonicWave432e
Antennas
ToinstalltheantennasonyourSonicWave432e:
1 Removealleightantennasfromtheirbagsandplace
oneoneachconnector.
2Carefullyfinger‐tightenthefittings.
3Adjusttheantennasuprightforoptimalreception.
Foroptimalwirelesscoverage,theSonicWave432eantennas
shouldbeorientedvertically.Thecirculardesignofthe
SonicWaveaidesincreatingastrongmulti‐directionalwireless
signalpattern.Inmostcases,leavingtheantennasstraightup
(asshownintheillustration)providesthebestoverall
coverage.
ConnectingEthernetCables
TheSonicWave432eorSonicWave432iarepoweredthrough
PoweroverEthernet(PoE),andshouldbecabledwithCAT5e
Ethernetcabling.
TIP:Theremightbea“dead”zonedirectlyunderneath
theSonicWave432ewhenitismountedonaceiling
withtheantennasorientedvertically.Youcanmitigate
thisbyslightlyanglingtheantennas.
CAUTION:OnlyantennasprovidedbySonicWallare
authorizedforusewiththeSonicWave432e.Beaware
oftheregulationsinyourregionbeforeusingother
antennas.

16 SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
WhenusingPoE,aSonicWall802.3atcompliantmidspanPoE
lineinjector(soldseparately),oran802.3atcompliantswitchis
requiredtopowereachSonicWave432eorSonicWave432i.
ToconnectPoEtoaSonicWave432eorSonicWave432i
1UsinganEthernetcable,connecttheData inporton
theSonicWallPoEInjectortoanexistingWLANzone
interfaceonthefirewallortoanunusedinterfacetobe
configuredlaterinSonicOS.
2UsingasecondEthernetcable,connecttheDataand
PoweroutportontheSonicWallPoEinjectortothe
LAN1/PoEportonyourSonicWave432eorSonicWave
432i.
3PlugthepowercordoftheSonicWallPoEinjectorinto
anappropriatepoweroutlet.
4WaitfortheLAN1LEDontheSonicWave432eor
SonicWave432itoilluminate.Thisindicatesanactive
connection.
SeeProductSafetyandRegulatoryInformationonpage33.
IMPORTANT:Besurecablesareconnected
correctly.
CAUTION:Amulti‐gigabit802.3atcompliantPoE
injectororPoE‐capableswitchisrequiredtoprovide
powertoeachSonicWave432eorSonicWave432i.
TomaintainpowertotheSonicWave432eor
SonicWave432i,themaximumlengthofCAT5ecable
fromthe802.3atPoEinjectortotheSonicWave432eor
SonicWave432iis100meters(333feet).
Local Network (LAN)
X1 WAN
X0 LAN
Internet
X2 WLAN
PoE Injector
or PoE Switch
Wireless Clients

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 17
WirelessAccessPoint
PlacementConsiderations
PhysicalplacementoftheSonicWave432eorSonicWave432i
wirelessaccesspointhasameasurableeffectonwhocanand
cannotaccessyourwirelesssignal.
AccesspointsshouldbekeptclearofRadioFrequency(RF)
interferencesources.RFbarrierscanbecircumventedby
deployingmultipleaccesspoints.
Asitesurveycanhelpfindtheoptimumwirelessaccesspoint
placement,butyoucanfindusablelocationswithoutit.
Considerationsinclude:
•NumberofAccessPointsVersusUserDensity–Iftoo
manyusersareservicedbyasingleaccesspoint,
maximumtransferratesarereachedandthataccess
pointmaybecomeabottleneckforthewholesystem.
• Bandwidth–Howmuchdataismovingupstreamand
downstreamforagiventypeofuser?
•EthernetCabling–Whereareyourunningthepowered
Ethernet(PoE)cabletoandhowareyousecuringthat
cable?Areyouusingamulti‐gigabit802.3atcompliant
PoEinjectororswitchtopowerallaccesspoints?
TomaintainpowertotheSonicWave432eor
SonicWave432i,therecommendedmaximumlengthof
CAT5ecablefromthe802.3atPoEinjectortothe
SonicWave432eorSonicWave432iis100meters(333
feet).
•Hubs/Switches–Yourwirelessdeploymenthastotie
backintoyournetworksecurityapplianceandLAN
resources.Considerwhereyourkeynetworkingdevices
aredeployedandhowtheywillconnectefficientlywith
yourwirelessappliances.Whatspeedisneededfor
yourEthernetconnectiontoaccommodatethenumber
ofaccesspointsyouareinstalling?AGigabitEthernet
interfaceisrecommendedwhenconnectinga
SonicWave432eorSonicWave432itoyourSonicWall
networksecurityappliance.
•LegacyClients‐Olderlaptopsandmobiledevicesmay
notsupport802.11ac.Althoughclientswith802.11a/g/
bhardwarearesupportedbytheSonicWallSonicWave
432eandSonicWave432i,thepresenceoftheselegacy
clientswithinrangeofyourwirelessnetworkcould
affecttheconnectionspeedofyour802.11acclients.
Forexample,an802.11bdeviceauthenticatedtothe
SonicWave432eorSonicWave432icouldlimitall
clientsconnectedtothatradioto802.11bdatarates.

18 SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
RadioFrequencyBarriers
DetermininghowtocircumventRFbarrierscanbea
challengingpartoftheplacementprocess,butRFbarrierscan
alsobeusedbeneficiallyinanattempttoblocksignalswhere
youdonotwantcoverage.The5GHzfrequencyismore
sensitivetoRFbarriers.Awallthatallowsa2.4GHzwireless
networktooperatecanblocka5GHzone.
RFInterference
RFinterferencefromhome,office,andmedicalequipmentisa
commonchallengeinwirelessdeployments.
WhenconsideringRFinterferencesources,rememberthat
mostcell/wirelessphonesandBluetoothdevicesonlyutilize
the2.4GHzfrequency.Assuch,theyshouldnotcause
significantinterferencewithwirelessnetworksoperatingin
the5GHzfrequency.
CommonRFBarrierTypes
BarrierType RFSignalBlocking
Openair VeryLow
Glass,wood,drywall,cubepartitions Low
Floorsandouterwalls,aquariums
(brick/marble/granite/water)
Medium
Concrete,securityglass,wiremesh,
stackedbooks/paper
High
Metalpartitions,desks,reinforced
concrete
VeryHigh
CommonSourcesofRFInterference
Interference
Source PossibleRange BandsAffected
2.4GHzphones 100feet 2.4GHz
(802.11b/g/n)
Bluetoothdevices 30feet 2.4GHz
(802.11b/g/n)
Microwaveoven 10‐20feet 2.4and5GHz,
dependingon
shielding
Scientificand
medical
equipment
Shortdistance,
varies
2.4and5GHz,
dependingon
shielding

SonicWallSonicWave432eandSonicWave432iGettingStartedGuide 19
MountingtheSonicWave432e
andSonicWave432i
YoucanmountyourSonicWave432eandSonicWave432itoa
wallorceiling,oryoucansimplysetitonaflatsurface.
ForsafetytipswhenmountingtheSonicWave432eand
SonicWave432i,seeProductSafetyandRegulatory
Informationonpage33.
MountingusingCeilingBrackets
Themountingkitincludesalargeceilingbracket.
LargeCeilingBracket
TheundersideoftheSonicWave432eandSonicWave432ihas
twoinsertionpointswhereyoucaninserttheprovidedscrews
tohelpsecurethebracket.Youcanusetheseinsertionpoints
toattachthelargebrackettotheSonicWave432eand
SonicWave432i.
NOTE:Productsmaydifferfromillustrations.
Holesforscrews

20 SonicWallSonicWave432eandSonicWave432iGettingStartedGuide
TomounttheSonicWave432eorSonicWave432itoacrossbar
betweenceilingpanelsusingthelargebracket:
1Usethetwoprovidedscrewstoattachthelargebracket
totheundersideoftheSonicWave.
2 SupportingtheSonicWaveinonehand,positionthe
edgeclipsofthebracketovertheedgeoftheceiling
crossbarandrotatetheSonicWavecounterclockwise(to
theleftwhenlookingupatit)untilthebracketis
securelyattachedtothecrossbar.
ToremovetheSonicWave432eorSonicWave432ifrom
theceilingcrossbar,rotateitclockwise(totheright
whenlookingupatit)untilthebracketdetachesfrom
thecrossbar.
NOTE:Productsmaydifferfromillustrations.
Fastenthelargeceiling
bracketwithscrews.