37
SonicWall™ SonicPoint N2 Getting Started Guide Regulatory Model Number: APL260B3

SonicWall™ SonicPoint N2 · SonicWall SonicPoint N2 Getting Started Guide 3 1 Introduction In this guide This Getting Started Guide provides instructions for basic installation

  • Upload
    voduong

  • View
    223

  • Download
    0

Embed Size (px)

Citation preview

  • SonicWallSonicPointN2GettingStartedGuide

    RegulatoryModelNumber:APL260B3

  • Copyright2017SonicWallInc.Allrightsreserved.SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.AllothertrademarksandregisteredtrademarksarepropertyoftheirrespectiveownersTheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliatesproducts.Nolicense,expressorimplied,byestoppelorotherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERANDDISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANTYRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSE,ORNONINFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespecttotheaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytimewithoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.

    Formoreinformation,visithttps://www.sonicwall.com/legal/.

    SonicPointN2GettingStartedGuideUpdatedJanuary201723200341250RevA

    Legend

    WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.

    CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.

    IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

    https://www.sonicwall.com/legal/
  • 1

    Introduction

    InthisguideThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWallSonicPointN2wirelessaccesspointinsingleunitormultiunitwirelessdeployments.

    Chapter1 Topics

    Introductiononpage3 Wirelessoverviewonpage5

    SonicWallSonicPointN2GettingStartedGuide 3

  • Chapter2 Topics

    InitialSetuponpage9 Checkpackagecontentsonpage9 Deploymentrequirementsonpage10 SonicPointN2availableports/statusLEDsonpage11 Installingantennasonpage13 ConnectingEthernetcablesonpage13 Wirelessaccesspointplacementconsiderationsonpage15 MountingtheSonicPointN2onpage17

    Chapter3 Topics

    ConfiguringSonicOSforwirelessaccessonpage21 ConfiguringSonicOSforSonicPointN2onpage21 VerifyingSonicPointoperationonpage25 Troubleshootingtipsonpage26

    Chapter4 Topics

    Supportandproductregistrationonpage27 Registrationandsupportonpage27 Onlinesupportandtrainingonpage28

    4 SonicWallSonicPointN2GettingStartedGuide

  • WirelessoverviewTheSonicPointN2ispartofthenextevolutionarygenerationinwirelessaccesspointsaftertheSonicWallSonicPointNandNDR.

    TheSonicPointN2providesphysicallayerenhancementsforhigherthroughputwithamaximumdatarateof450Mbps.Toachievethis,theSonicPointN2uses:

    Moreantennasthreeantennasforthe5GHzradio,andthreemoreforthe2.4GHzradio

    Widerchannels40MHzwidechannelsforthe802.11nradiomodule

    Morespatialstreams3X3multipleinputandmultipleoutput,(MIMO)forthe802.11nradiomodule,wherethecapacityofaradiolinkismultipliedusingmultipathpropagation.

    Chapter5 Topics

    Productsafetyandregulatoryinformationonpage29 Mountingtheapplianceonpage30 VerwarnungWeiterehinweisezurmontageonpage31 EUandEFTAonpage32 Declarationofconformityonpage33

    SonicWallSonicPointN2GettingStartedGuide 5

  • SonicWallwirelessfirewallingWhenawirelessdeviceusesaSonicWallSonicPointN2wirelessaccesspointtocommunicatewithawirelessdeviceonanothersubnetoronacompletelydifferentnetwork,trafficbetweenthedevicesisforcedtotraversetheSonicWallnetworksecurityappliance.ThistraversalenablessecurityservicestobeenforcedbySonicOS.

    Standardpracticeforwirelessfirewalling(whereonewirelessclientiscommunicatingwithanother)bypassesmanyofthecriticalsecurityservices.Thefollowingillustrationshowsthestandardpracticeforwirelessfirewalling.

    Standardwirelessfirewalling

    Manysecurityproductsonthemarketsharethispotentialvulnerabilitywhentwousersconnectedbyacommonhuborwirelessaccesspointwishtoexchangedata.

    SonicWalladdressesthissecurityshortcomingbymanagingtheSonicPointaccesspointsfromthenetworksecurityappliance.Thisallowscompletecontrolofthewirelessspace,includingzoneenforcementofsecurityservicesandcompletefirewallingcapabilities.

    Securewirelessfirewalling

    WLAN Zone Security Services

    ?

    Content Filtering Service

    Client Anti-Virus Enforcement

    Gateway Anti-Virus

    Gateway Anti-Spyware

    Intrusion Prevention Service

    Other Security Appliance

    WLAN Zone Security Services

    SonicWallappliance

    SonicWallSonicPoint

    Content Filtering Service

    Client Anti-Virus Enforcement

    Gateway Anti-Virus

    Gateway Anti-Spyware

    Intrusion Prevention Service

    cWallPoint

    6 SonicWallSonicPointN2GettingStartedGuide

  • FrequencybandsandchannelsTherearecurrentlyfivewidelyadoptedstandardsfor802.11wirelessnetworktypes:a,b,g,n,andac.802.11nand802.11acarethenewestandhighestcapacitystandards,butolderclientdevicesmaynotbeabletoutilizethenewerstandards.

    Differentfrequencybandsprovidevaryingsignalstrengthandqualityoverdifferentdistanceranges.Signalsinthe2.4GHzrangetendtopassthroughphysicalbarriersbetterandcarryfartherthanthoseinthe5GHzrange,buttheydonotprovideashighadatarate.Signalsinthe5GHzrangeprovidefasterdataratesforbetterthroughput,butthesignalattenuatesfasterandisbestsuitedforopenspaces.

    Wirelessstandards

    802.11(x) Frequencystandard Maximumdatarate

    802.11a 5GHz 54Mbps

    802.11b 2.4GHz 11Mbps

    802.11g 2.4GHz 54Mbps

    802.11n 2.4GHzand5GHz 450Mbps

    802.11ac 5GHz+multichannel+multipath 1.3Gbps

    Strengthsandweaknessesof5GHzand2.4GHzsignals

    5GHz 2.4GHz

    Strength Higherspeed,morechannels LongerRange,strongersignalpenetration

    Weakness Limitedpenetrationofwalls,clientcompatibility Moresourcesofinterference

    SonicWallSonicPointN2GettingStartedGuide 7

  • RefertoRadiofrequencybarriersandRFinterferenceonpage16fordetailedinformationaboutRFbarriersandinterference.

    Toallowmultipleseparatewirelessnetworksinasharedandconfinedspace,theRFmediumisdividedintochannels.Fordevicesinthe5GHzrange(802.11a/n/ac),thismeansthepossibilityofupto23discretechannels.

    Fordevicesusingthe2.4GHzrange(802.11b/g/n),thewirelessspaceislimitedtoamaximumof14overlappingchannels.Asaresultoftheseoverlappingchannels,2.4GHztechnologyprovidesonlyatotalofthreediscretechannels.

    802.11comparisonchart802.11signalcharacteristics

    802.11a 802.11b 802.11g 802.11n 802.11ac

    #ofChannelsinUSA 23 11 11 11 21

    #ofChannelsinEU 23 13 13 13 16

    #ofChannelsinJapan 15 14 14 14 19

    FrequencyBand 5GHz 2.4GHz 2.4GHz 2.4/5GHz 5GHz

    Max.DataRate 54Mbps 11Mbps 54Mbps 450Mbps(For3X3MIMO)

    1.3Gbps(ForQAM64,MIMO3X3,and80MHzchannels)

    Radius(Range) 90ft/25m 120ft/35m 120ft/35m 300ft/90m 120ft/35m

    NOTE:Although802.11b/g/nstandardsprovidebetween11and14channels,onlythreeofthosechannelsarefullydiscrete(nonoverlapping)channels.

    8 SonicWallSonicPointN2GettingStartedGuide

  • 2

    InitialSetup

    Thissectionprovidesabasicchecklistofmaterials,hardwareinformation,anddescribeshowtoconnectandconfigurephysicalaspectsoftheSonicWallSonicPointN2includingantennas,cabling,andmounting.

    Checkpackagecontentsonpage9

    Deploymentrequirementsonpage10

    SonicPointN2availableports/statusLEDsonpage11

    Installingantennasonpage13

    ConnectingEthernetcablesonpage13

    Wirelessaccesspointplacementconsiderationsonpage15

    MountingtheSonicPointN2onpage17

    CheckpackagecontentsBeforecontinuing,ensurethatyourSonicPointN2packagecontainsthefollowingmaterials:

    SonicWallSonicPointN2GettingStartedGuide 9

  • Anyitemsmissing?Ifanyoftheitemscorrespondingtoyourproductaremissingfromthepackage,contactTechnicalSupportat:https://support.sonicwall.com/contactsupport

    Alistingofthemostcurrentsupportdocumentsareavailableonlineat:https://support.SonicWall.com/SonicWallSonicPointseries/ace/releasenotesguides

    DeploymentrequirementsSonicOSfirmware

    SonicWallSonicPointN2accesspointsarecentrallymanagedbySonicWallnetworksecurityappliancesrunningthefollowingversionsofSonicOS:

    SonicOS5.9.1.6orahigher5.9release SonicOS6.2.5.1orhigher

    PoweroverEthernet

    An802.3atcompliantPoEinjectororPoEcapableswitchcapableofproviding25wattsofpowertoeachSonicPointN2isrequired.

    Internetconnectivity

    AnactiveInternetconnectionisrequiredforyourfirewalltodownloadthelatestSonicPointfirmware.

    GigabitEthernetconnectivity

    802.11nwirelesshardwarerequiresmorebandwidththanasingle(orevendual)10/100Ethernetconnectioncanhandle.GigabitEthernetconnectivitybetweentheWLANandtheLANisrequiredtotakefulladvantageof802.11nspeed.

    SeeProductsafetyandregulatoryinformationonpage29.

    SonicPointN2ApplianceChecklist

    SonicWallSonicPointN2ApplianceAntennas(6)MountingKit(CeilingBrackets,AnchorandScrewKit)GettingStartedGuide

    10 SonicWallSonicPointN2GettingStartedGuide

    https://support.sonicwall.com/contact-supporthttps://support.sonicwall.com/contact-supporthttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guides
  • SonicPointN2availableports/statusLEDsAvailableports

    LAN1/PoEport.ProvidesEthernetandPoweroverEthernet(PoE)connections.

    LAN2port.ProvidesanadditionalEthernetconnection.RefertotheSonicOSAdministrationGuideforusecases.

    Consoleport.ProvidesamanagementconnectionusingCLI>DB9cable(forcommandlinemanagementonly).

    SonicWallSonicPointN2GettingStartedGuide 11

  • StatusLEDs

    LED(lan2)On(solidyelloworgreen,Ethernetlink)Blinkingyellow(1GEthernetactivity)Blinkinggreen(10/100MEthernet

    LED(lan1)On(solidyelloworgreen,Ethernetlink)Blinkingyellow(1GEthernetactivity)Blinkinggreen(10/100MEthernetactivity)

    LED(5G)On(solidgreen,5GHzradiolink)Blinkinggreen(5GHzradioactivity)

    LED(2.4G)On(solidgreen,2.4GHzradiolink)Blinking(2.4GHzradioactivity)

    LED(Tool)On(solidyellow,error)Blinking(safemode)

    LED(Power)On(solidblue,power)Blinking(booting/FWupgrade)

    12 SonicWallSonicPointN2GettingStartedGuide

  • Installingantennas

    ToinstalltheantennasonyourSonicPointN2

    1 Removeallsixantennasfromtheirbagsandplaceoneoneachconnector.Matchthefittingswiththeantennastyle.Therearethreeofeachtype.

    2 Carefullyfingertightenthefittings.

    3 Adjusttheantennasforoptimalreception.

    Foroptimalwirelesscoverageinmostcases,theSonicPointN2antennasshouldbeorientedvertically.ThecirculardesignoftheSonicPointaidesincreatingastrongmultidirectionalwirelesssignalpattern.Inmostcases,leavingtheantennasstraightup(asshownintheillustration)providesthebestoverallcoverage.

    ConnectingEthernetcablesTheSonicPointN2canbecabledwithCAT5,CAT5e,orCAT6Ethernetcabling.

    TIP:TheremaybeadeadzonedirectlyunderneaththeSonicPointN2whenitismountedontheceilingwiththeantennasorientedvertically.Youcanmitigatethisbyslightlyanglingtheantennas.

    CAUTION:TheSonicPointN2usesdipoleantennaswith5.5dBiat5GHzand3.5dBiat2.4GHz.OnlyantennasprovidedbySonicWallareauthorizedforusewiththeSonicPointN2.Beawareoftheregulationsinyourregionbeforeusingotherantennas.

    SonicWallSonicPointN2GettingStartedGuide 13

  • TheSonicPointN2ispoweredusingPoweroverEthernet(PoE).ASonicWall802.3atcompliantPoElineinjector(soldseparately),oran802.3atcompliantswitchisrequiredtopowereachSonicPointN2.

    ToconnectPoEtoyourSonicPointN2

    1 UsinganEthernetcable,connecttheData inportontheSonicWallPoEInjectortoanexistingWLANzoneinterfaceortoanunusedinterfacetobeconfiguredlaterinSonicOS.

    2 UsingasecondEthernetcable,connecttheDataandPoweroutportontheSonicWallPoEinjectortotheLAN1/PoEportonyourSonicPointN2.

    3 PlugthepowercordoftheSonicWallPoEinjectorintoanappropriatepoweroutlet.

    4 WaitfortheLAN1LEDontheSonicPointN2toilluminategreen.Thisindicatesanactiveconnection.

    SeeProductsafetyandregulatoryinformationonpage29.CAUTION:An802.3atcompliantPoEinjectororPoEcapableswitchcapableofproviding25wattsofpowertoeachSonicPointN2isrequired.

    Tomaintain25wattsofpowertotheSonicPointN2,themaximumlengthofCAT5ecablefromthe802.3atPoEinjectortotheSonicPointN2is30meters.

    Local Network (LAN)

    X1 WAN

    X0 LAN

    Internet

    X2 WLAN

    PoE Injectoror PoE Switch

    Wireless Clients

    14 SonicWallSonicPointN2GettingStartedGuide

  • WirelessaccesspointplacementconsiderationsPhysicalplacementoftheSonicPointN2wirelessaccesspointhasameasurableeffectonwhocanandcannotaccessyourwirelesssignal.

    AccesspointsshouldbekeptclearofRadioFrequency(RF)interferencesources.RFbarrierscanbecircumventedbydeployingmultipleaccesspoints.

    Asitesurveywillhelpfindtheoptimumwirelessaccesspointplacement,butyoucanfindusablelocationswithoutit.

    Considerationsinclude:

    NumberofaccesspointsversususerdensityIftoomanyusersareservicedbyasingleaccesspoint,maximumtransferratesarereachedandthataccesspointmaybecomeabottleneckforthewholesystem.

    BandwidthHowmuchdataismovingupstreamanddownstreamforagiventypeofuser?

    EthernetcablingWhereareyourunningthepoweredEthernet(PoE)cabletoandhowareyousecuringthatcable?IsyourPoEswitch802.3atcompliantandabletopowerallaccesspointswith25wattseach?

    Tomaintain25wattsofpowertotheSonicPointN2,themaximumlengthofCAT5ecablefromthe802.3atPoEinjectortotheSonicPointN2is30meters.

    Hubs/SwitchesYourwirelessdeploymenthastotiebackintoyournetworksecurityapplianceandLANresources.Considerwhereyourkeynetworkingdevicesaredeployedandhowtheywillconnectefficientlywithyourwirelessappliances.WhatspeedisneededforyourEthernetconnectiontoaccommodatethenumberofaccesspointsyouareinstalling?AGigabitEthernetinterfaceisrecommendedwhenconnectingaSonicPointN2toyourSonicWallnetworksecurityappliance.

    LegacyclientsOlderlaptopsandmobiledevicesmaynotsupport802.11n.Althoughclientswith802.11a/g/bhardwarearesupportedbytheSonicWallSonicPointN2,thepresenceoftheselegacyclientswithinrangeofyourwirelessnetworkcouldaffecttheconnectionspeedofyour802.11nclients.

    Forexample,an802.11bdeviceauthenticatedtotheSonicPointN2couldlimitallclientsconnectedtothatradioto802.11bdatarates.

    SonicWallSonicPointN2GettingStartedGuide 15

  • RadiofrequencybarriersDetermininghowtocircumventRFbarrierscanbeachallengingpartoftheplacementprocess,butRFbarrierscanalsobeusedbeneficiallyinanattempttoblocksignalswhereyoudonotwantcoverage.The5GHzfrequencyismoresensitivetoRFbarriers.Awallthatallowsa2.4GHzwirelessnetworktooperatemayblocka5GHzone.

    RFinterferenceRFinterferencefromhome,office,andmedicalequipmentisacommonchallengeinwirelessdeployments.

    WhenconsideringRFinterferencesources,rememberthatmostcell/wirelessphonesandBluetoothdevicesonlyutilizethe2.4GHzfrequency.Assuch,theyshouldnotcausesignificantinterferencewithwirelessnetworksoperatinginthe5GHzfrequency.CommonRFbarriertypes

    BarrierType RFSignalBlocking

    Openair VeryLow

    Glass,wood,drywall,cubepartitions Low

    Floorsandouterwalls,aquariums(brick/marble/granite/water)

    Medium

    Concrete,securityglass,wiremesh,stackedbooks/paper

    High

    Metalpartitions,desks,reinforcedconcrete

    VeryHigh

    CommonsourcesofRFinterference

    InterferenceSource PossibleRange BandsAffected

    2.4GHzphones 100feet 2.4GHz(802.11b/g/n)

    Bluetoothdevices 30feet 2.4GHz(802.11b/g/n)

    Microwaveoven 1020feet 2.4and5GHz,dependingonshielding

    Scientificandmedicalequipment

    Shortdistance,varies

    2.4and5GHz,dependingonshielding

    16 SonicWallSonicPointN2GettingStartedGuide

  • MountingtheSonicPointN2YoucanmountyourSonicWallSonicPointN2toawallorceiling,oryoucansimplysetitonaflatsurface.

    ForsafetytipswhenmountingtheSonicPointN2,seeProductsafetyandregulatoryinformationonpage29.

    MountingusingceilingbracketsThemountingkitincludesalargebracket,twosmallbrackets,anchorscrews,andscrews.

    Largeceilingbracket

    Smallceilingbrackets

    TheundersideoftheSonicPointN2hastwoinsertionpointsforthescrews.YoucanusetheseinsertionpointstoattacheitherthelargebracketorthetwosmallbracketstotheSonicPointN2.

    Holesforscrews

    SonicWallSonicPointN2GettingStartedGuide 17

  • TomounttheSonicPointN2toacrossbarbetweenceilingpanelsusingthelargebracket

    1 UsetheincludedscrewstoattachthelargebrackettotheundersideoftheSonicPoint.

    2 SupportingtheSonicPointinonehand,positiontheedgeclipsofthebracketovertheedgeoftheceilingcrossbarandrotatetheSonicPointcounterclockwise(totheleftwhenlookingupatit)untilthebracketissecurelyattachedtothecrossbar.

    ToremovetheSonicPointN2fromtheceilingcrossbar,rotateitclockwise(totherightwhenlookingupatit)untilthebracketdetachesfromthecrossbar.

    Fastenthelargeceilingbracketwithscrews.

    18 SonicWallSonicPointN2GettingStartedGuide

  • TomounttheSonicPointN2toacrossbarbetweenceilingpanelsusingthesmallceilingbrackets:

    1 UsetheincludedscrewstoattachthesmallbracketstotheundersideoftheSonicPoint,makingsurebothbracketsareparallel.

    2 SupportingtheSonicPointinonehand,cliptheedgeofeachbracketovertheedgeoftheceilingcrossbarasshowninthefollowingimage.MakesuretheSonicPointissecurelyattachedtothecrossbarbeforereleasingthedevice.

    Ceiling crossbar

    Mounting brackets

    SonicPoint unit

    SonicWallSonicPointN2GettingStartedGuide 19

  • Mountingusinganchorscrews

    TomounttheSonicPointN2usingtheanchorscrews

    1 Onthemountingsurface,markthelocationtomaketwoscrewholes.Themarksshouldbehorizontallyparalleltoeachother.

    2 Screwtheanchorscrewsintotheceilingtileordrywalltotheirfulldepth.

    3 Insertthescrewsintotheanchors,andscrewthemindeepenoughtoleaveminimalspacebetweenthescrewheadsandthewallsurface.

    4 SupportingtheSonicPointinyourhands,securelyfittheundersideslotsoftheSonicPointontothescrewheads.

    20 SonicWallSonicPointN2GettingStartedGuide

  • 3

    ConfiguringSonicOSforwirelessaccess

    ThissectionprovidesinstructionsforconfiguringSonicOSonyourSonicWallnetworksecurityappliancetoconnectyourSonicPointN2totheWLANzoneandmanageitasaLayer2device.Formoreadvancedconfigurations,includingLayer3managementofyourSonicPointN2onaLANzone,refertotheSonicOSAdministrationGuide.

    ConfiguringSonicOSforSonicPointN2onpage21

    VerifyingSonicPointoperationonpage25

    Troubleshootingtipsonpage26

    ConfiguringSonicOSforSonicPointN2YouonlyneedtocompletethreesimpleconfigurationtasksinSonicOStoprepareyourSonicPointN2toprovidesecurewirelessaccess.

    1 ConfigurethenetworkinterfacetowhichtheSonicPointN2isconnected.

    2 ConfiguretheWLANzonefortrustandsecurityservices.

    3 ConfiguretheSonicPointN2entryforthedesiredradiofrequency,mode,andauthenticationtype.

    SonicWallSonicPointN2GettingStartedGuide 21

  • ConfiguringthenetworkinterfaceEachSonicPointorgroupofSonicPointsmustbeconnectedtoaphysicalnetworkinterfacethatisconfiguredinawirelesszone.SonicOSprovidesastandardwirelesszone(WLAN)whichcanbeappliedtoanyavailableinterface.

    ToconfigurethenetworkinterfaceinSonicOS

    1 NavigatetotheNetwork>InterfacespageandclickConfigurefortheinterfacetowhichyourSonicPointisconnected.

    2 SelectWLANzonefortheZonetype.

    3 SelectStaticIPModefortheMode/IPAssignment.

    4 IntheIPAddressfield,typeinanyprivateIPaddressthatdoesnotinterferewiththeIPaddressrangeofanyotherinterfacesontheappliance.

    5 EnteraSubnetMask.Thedefaultis255.255.255.0.

    6 UsethedefaultsettingsorselectappropriatesettingsfortheotherfieldsandthenclickOK.

    SonicOS5.9interfacesettings

    SonicOS6.2interfacesettings

    CAUTION:AllowingManagementandUserLogintotheappliancefromawirelesszonecanposeasecuritythreat,especiallyifyouoryourusershavenotsetstrongpasswords.

    22 SonicWallSonicPointN2GettingStartedGuide

  • ConfiguringtheWLANzone

    ToconfiguretheWLANzoneinSonicOS

    1 OntheNetwork>ZonespageintheWLANrow,clicktheiconintheConfigurecolumn.

    2 OntheGeneraltab,selecttheAllowInterfaceTrustsettingtoautomatethecreationofAccessRulestoallowtraffictoflowbetweentheinterfaceswithinthezone,regardlessoftheinterfacestowhichthezoneisapplied.

    Forexample,iftheWLANzonehasboththeX2andX3interfacesassignedtoit,selectingAllowInterfaceTrustcreatesthenecessaryaccessrulestoallowhostsontheseinterfacestocommunicatewitheachother.

    3 Selectthecheckboxestoenablesecurityservicesonthiszone.Minimally,youwouldenableGatewayAntiVirus,IPS,andAntiSpyware.IfyourwirelessclientsareallrunningSonicWallClientAntiVirus,selectEnableClientAVEnforcementService.

    4 OntheGuestServicestab,optionallyconfigureguestInternetaccess.ForinformationaboutGuestServices,seetheSonicOSAdministrationGuide.

    5 OntheWirelesstab,selectOnlyallowtrafficgeneratedbyaSonicPoint/SonicPointNtoallowonlytrafficfromSonicPointstoentertheWLANzoneinterfaces,providingmaximumsecurity.

    6 Whenfinished,clickOK.

    SonicWallSonicPointN2GettingStartedGuide 23

  • ConfiguringtheSonicPointN2settingsWhenaSonicPointN2isinitiallyconnectedtoaninterface,thefirewallusesadefaultprovisioningprofiletocreateaSonicPointN2entry.Itcantakeupto5minutesfortheentrytobecreated.

    YoucanmodifytheSonicPointN2entrytoconfiguretheaccesspointname,radiofrequencymode,authenticationtype,andothersettingsspecifictoyourSonicPointN2.

    TomodifytheSonicPointN2entryinSonicOS

    1 NavigatetotheSonicPoint>SonicPointspage.

    2 IntheSonicPointNstable,clicktheconfigurebuttonintherowfortheSonicPointN2entryyouwishtomodify.

    Generaltabsettings

    3 OntheGeneraltab,selectEnableSonicPoint.

    4 IntheNamefield,optionallytypeinanewnameforthisSonicPointN2.Theexistingnameisassignedbytheprovisioningprofilebasedonthenameprefixintheprofilewithauniquenumberappended.

    Thisistheaccesspointnamethatappearsinclientslistsofavailablewirelessconnections.

    5 VerifytheCountryCodefortheareaofoperation.

    6 Configuretheremainingoptionsasneeded.Formoreinformation,seetheSonicOSAdministrationGuide.

    Radio0/Radio1Basictabsettings

    7 ClicktheRadio0Basictab,ortheRadio1Basictab.

    TheconfigurationisverysimilarfortheRadio0andRadio1Basictabs.Themaindifferencesaretheradiofrequencies:

    TIP:FordeploymentsofmultipleSonicPointsthatneedthesameprovisioningsettings,youcancreateacustomprovisioningprofileintheuppersectionoftheSonicPoint>SonicPointspage.IntheNetwork>Zonespage,youcanedittheWLANzoneandspecifythisprofileontheWirelesstab.AnySonicPointsconnectingtoaninterfaceintheWLANzonewillthenbeprovisionedwiththeassignedprofile.SeetheSonicOSAdministrationGuideformoreinformation.

    Radio Frequency DefaultMode

    Radio0 5GHz 5GHz802.11n/aMixed

    Radio1 2.4GHz 2.4GHz802.11n/g/bMixed

    24 SonicWallSonicPointN2GettingStartedGuide

  • 8 SelectEnableRadio.

    9 SelectaModeorusethedefault.

    10 UnderWirelessSecurity,selecttheAuthenticationTypeforyourwirelessnetwork.SonicWallrecommendsusingWPA2astheauthenticationtypeifallclientdevicessupportit.

    11 SelecttheCipherType.WhenusingWPAandWPA2,SonicWallrecommendsAESformaximumsecurity.

    12 Fillinthefieldsspecifictotheauthenticationtypethatyouselected.Theremainingfieldschangedependingontheselectedauthenticationtype.

    13 Optionally,underACLEnforcement,selectEnableMACFilterListtoenforceAccessControlbyallowingordenyingtrafficfromspecificdevices.SelectaMACaddressobjectgroupfromtheAllowListorDenyListtoautomaticallyallowordenytraffictoandfromalldeviceswithMACaddressesinthegroup.TheDenyListisenforcedbeforetheAllowList.

    Radio0/Radio1Advancedtabsettings

    14 ClicktheRadio0Advancedtab,ortheRadio1Advancedtab.

    TheconfigurationisverysimilarfortheRadio0AdvancedandRadio1Advancedtabs.Formostadvancedoptions,thedefaultsettingsgiveoptimumperformance.Forafulldescriptionofthefieldsonthistab,seetheSonicOSAdministrationGuide.

    15 OptionallyselecttheHideSSIDinBeaconcheckbox.

    TheSSIDreferstotheaccesspointnamethatappearsinclientslistsofavailablewirelessconnections.

    HidingtheSSIDprovidesadditionalsecuritybecauseitrequirestheusertoknowtheaccesspointnamebeforeconnecting.

    16 Whenyouarefinishedconfiguringalltabs,clickOK.

    VerifyingSonicPointoperationToverifythattheSonicPointisprovisionedandoperational,navigatetotheSonicPoint>SonicPointspageinSonicOS.IntheSonicPointNstable,theStatuscolumndisplaystheSonicPointN2status.ItshouldsayOperational.

    TIP:PSKusesapersonalpassphraseforauthentication,EAPusesanEnterpriseRADIUSserver.

    NOTE:OlderclientdevicesmightnotsupportAES.

    SonicWallSonicPointN2GettingStartedGuide 25

  • ToverifyInternetconnectivityviatheSonicPointN2

    1 ConnectaclientdevicetotheSonicPointN2byselectingtheappropriateaccesspointname(SSID).

    2 Ensurethattheclientdeviceisnotconnectedtoanyothernetworkconnections(wiredLAN,3G/4GWWAN).

    3 Inabrowser,enterhttp://SonicWall.comintheaddressbarandpressEnter.TheSonicWallwebsiteshoulddisplay.Ifyouareunabletobrowsetoawebsite,refertoTroubleshootingtips.

    TroubleshootingtipsWhentheSonicPointN2iscorrectlyconnectedtoaSonicWallnetworksecurityappliance,thetwounitsperformanencryptedexchange,andanentryfortheSonicPointN2isautomaticallycreatedintheSonicPointNstableontheSonicPoint>SonicPointspageinSonicOS.

    Iftheentrydoesnotappearinthetablewithin5minutesofconnectingtheSonicPointN2:

    MakesuretheSonicPointN2isconnectedtoaninterfacethatisconfiguredaspartofawirelesszone.EitherthedefaultWLANzoneoracustomzonewithtypesettowirelessisrequired.

    EnsurethattheSonicPointN2isproperlyconnectedbyEthernetcabletoan802.3atcompliantPoEdevice.APoEcapableswitchorPoEinjectorisrequired.

    Ifan802.3atcompliantPoEinjectorisbeingused,verifythattheSonicPointN2isconnectedtothePoEportlabeledDataandPowerOut.

    IftheSonicPointN2hasanentryinthetable,butrebootsfrequentlyorseemsnonfunctional:

    VerifythatyourPoEswitch/injectoris802.3atcompliantandratedtodeliver25wattsofpowertoeachPoEport.802.3afcompliantPoEdevicesdonotprovidesufficientpowertoproperlyruncurrentgeneration802.11devices.An802.3atcompliantswitchorPoEinjectorisrequiredtopowertheSonicWallSonicPointN2.

    ClickSynchronizeSonicPointsontheSonicPoint>SonicPointspagetoforceSonicOStodownloadanewSonicPointfirmwareimagefromtheSonicWallbackendserver.

    26 SonicWallSonicPointN2GettingStartedGuide

  • 4

    Supportandproductregistration

    ThissectionprovidesinformationaboutregisteringyourSonicWallSonicPointN2,requirementsforreceivingtechnicalsupport,andotheronlinesupportandtrainingoptions.

    Registrationandsupportonpage27

    Onlinesupportandtrainingonpage28

    RegistrationandsupportAllSonicPointN2wirelessaccesspointsincludeaninitialsubscriptiontoSonicWall24x7Support.

    SonicOSwillautomaticallyregisteryourSonicPointN2onMySonicWall,ifconnectedtotheInternet.Itmaytakeupto24hoursforyourSonicPointN2tobeautomaticallyregistered.

    Optionally,youcanmanuallyregistertheSonicPointN2onMySonicWallbyloggingintoyouraccountat:http://www.MySonicWall.com.

    TheSonicPointN2willalsobeassociatedinMySonicWallwiththeregisteredSonicWallnetworksecurityappliancetowhichitisconnected.SeetheAssociatedProductssectionatthebottomoftheapplianceServiceManagementpageinMySonicWall.

    SonicWallSonicPointN2GettingStartedGuide 27

    http://www mysonicwall.com
  • Inordertoreceivetechnicalsupport,yourSonicPointN2musthaveanactiveSupportsubscription.

    OnlinesupportandtrainingSonicWalloffersavarietyofonlinesupportandtrainingoptionsforyourconvenience.

    Customersupport

    SonicWallofferstelephone,emailandWebbasedsupporttocustomerswhohaveavalidWarrantyorwhopurchasedaSupportContract.ReviewourWarrantySupportPolicyforproductcoverage.SonicWallalsooffersafullrangeofconsultingservicestomeetyourneeds.

    For more information, visit: https://support.SonicWall.com/

    Knowledgebase

    TheKnowledgeBaseallowsuserstosearchforSonicWalldocumentsbybrowsingtheknowledgebase,searchingforkeywords,orusingfulltextsearch.

    Formoreinformation,visit:https://support.SonicWall.com/SonicWallsonicpointseries/kb

    Userforums

    TheSonicWallUserForumsarearesourcethatprovideuserstheabilitytocommunicateanddiscussavarietyofsecurityandappliancesubjectmatters.Theforumsareorganizedbycategories.

    Formoreinformation,visit:https://forum.SonicWall.com/

    Training

    SonicWalloffersanextensivesalesandtechnicaltrainingcurriculum.SonicWallTrainingprovidestheETraining,instructorledtraining,customtraining,technicalcertification,andusesauthorizedtrainingpartners.

    Formoreinformation,visit:https://support.SonicWall.com/SonicWallsonicpointseries/training

    Relateddocumentation

    SonicOSAdministrationGuide SonicOSReleaseNotes SonicOSConfigurationorDeploymentGuides

    Formoreinformation,visithttps://support.SonicWall.com/SonicWallsonicpointseries/ace/releasenotesguides

    28 SonicWallSonicPointN2GettingStartedGuide

    https://support.sonicwall.com/sonicwall-sonicpoint-series/kbhttps://support.sonicwall.com/sonicwall-sonicpoint-series/kbhttps://support.sonicwall.com/sonicwall-sonicpoint-series/traininghttps://support.sonicwall.com/sonicwall-sonicpoint-series/traininghttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guideshttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guideshttps://forum.sonicwall.com/https://forum.sonicwall.com/https://support.sonicwall.com/https://support.sonicwall.com/
  • 5

    Productsafetyandregulatoryinformation

    Thissectionprovidesproductsafetyandregulatoryinformation.

    Mountingtheapplianceonpage30

    VerwarnungWeiterehinweisezurmontageonpage31

    EUandEFTAonpage32

    Declarationofconformityonpage33

    ProductswithUL2043printedontheirproductlabelsarewithinthelimitspecifiedintheUL2043StandardforFireTestforHeatandVisibleSmokeReleaseforDiscreteProductsInstalledinAirHandlingSpaces(Plenum).AppliesonlywhenpoweredthroughPoE.ThePoEpowersupplyisnotcoveredthebytheUL2043evaluationofthisAccessPoint.

    SonicWallSonicPointN2complieswithFCCUNIINewRulesforDynamicFrequencySelection(DFS).

    NOTE:Additionalregulatorynotificationsandinformationforthisproductcanbefoundonlineat:https://support.SonicWall.com/SonicWallSonicPointseries/ace.

    RegulatoryModel/Type ProductName

    APL260B3 SonicPointN2

    SonicWallSonicPointN2GettingStartedGuide 29

    https://support.software.dell.com/https://support.sonicwall.com/sonicwall-sonicpoint-series/ace
  • MountingtheapplianceWARNING:

    Mountinalocationawayfromdirectsunlightandsourcesofheat.Amaximumambienttemperatureof104F(40C)isrecommended.

    Routecablesawayfrompowerlines,fluorescentlightingfixtures,andsourcesofnoisesuchasradios,transmitters,andbroadbandamplifiers

    Ensurethatnowaterorexcessivemoisturecanentertheunit.

    Allowunrestrictedairflowaroundtheunitandthroughtheventsonthesideoftheunit.Aminimumof1inch(25.44mm)clearanceisrecommended.

    Considerationmustbegiventotheconnectionoftheequipmenttothesupplycircuitandthattheeffectofoverloadingthecircuitshasminimalimpactonovercurrentprotectionandsupplywiring.Appropriateconsiderationofequipmentnameplateratingsmustbeusedwhenaddressingthisconcern.

    Thisdeviceisnotintendedforuseinthedirectfieldofviewatvisualdisplayworkplaces.Toavoidincommodingreflectionsatvisualdisplayworkplaces,

    thisdevicemustnotbeplacedinthedirectfieldofview.

    CableconnectionsWARNING:

    AllEthernetandRS232(Console)cablesaredesignedforintrabuildingconnectiontootherequipment.Donotconnecttheseportsdirectlytocommunicationwiringorotherwiringthatexitsthebuildingwheretheapplianceislocated.

    LithiumBatteryWARNING:

    TheLithiumBatteryusedintheSonicWallappliancecannotbereplacedbytheuser.TheappliancemustbereturnedtoaSonicWallauthorizedservicecenterforreplacementwiththesameorequivalenttyperecommendedbythemanufacturer.If,foranyreason,thebatteryorSonicWallappliancemustbedisposedof,dosofollowingthebatterymanufacturer'sinstructions.

    30 SonicWallSonicPointN2GettingStartedGuide

  • PowersupplyinformationforAPL260B3Thisproduct'spowerisprovidedbytheEthernetcablepluggedintotheLANport,thisiscalledPowerOverEthernetorPOE.ThePOEsourceshouldonlybeULlistedmarkedClass2orLPSwithanoutputrated48VDC,minimum0.6A,Tma:minimum40degreesC.

    VerwarnungWeiterehinweisezurmontage

    WhlenSiefrdieMontageeinenOrt,derkeinemdirektenSonnenlichtausgesetztistundsichnichtinderNhevonWrmequellenbefindet.DieUmgebungstemperaturdarfnichtmehrals40Cbetragen.

    FhrenSiedieKabelnichtentlangvonStromleitungen,LeuchtstoffrhrenundStrquellenwieFunksendernoderBreitbandverstrkern.

    StellenSiesicher,dassdasGertvorWasserundhoherLuftfeuchtigkeitgeschtztist.

    StellenSiesicher,dassdieLuftumdasGertherumzirkulierenkannunddieLftungsschlitzeanderSeitedesGehusesfreisind.HieristeinBelftungsabstandvonmindestens26mmeinzuhalten.

    PrfenSiedenAnschlussdesGertsandieStromversorgung,damitderberstromschutzsowiedieelektrischeLeitungnichtvoneinereventuellenberlastungderStromversorgungbeeinflusstwerden.PrfenSiedabeisorgfltigdieAngabenaufdemAufkleberdesGerts.berlastenSienichtdenStromkreis.

    DasGertistnichtfrdieBenutzungimunmittelbarenGesichtsheldamBildschirmarbeitsplatzvorgesehen.UmstrendeReflexionenamBildshirmarbeitsplatzzuvermeiden,darfdiesesProduktnichtimunmittelbarenGesichtsfeldplatziertverden.

    VerwarnungKabelverbindungenAlleEthernetundRS232CKabeleignensichfrdieVerbindungvonGerteninInnenrumen.SchlieenSieandieAnschlssederSonicWallkeineKabelan,dieausdemGebudeherausgefhrtwerden,indemsichdasGertbefindet.

    SonicWallSonicPointN2GettingStartedGuide 31

  • VerwarnungHinweiszurLithiumbatterieDieinderInternetSecurityAppliancevonSonicWallverwendeteLithiumbatteriedarfnichtvomBenutzerausgetauschtwerden.ZumAustauschenderBatteriemussdieSonicWallineinvonSonicWallautorisiertesServiceCentergebrachtwerden.DortwirddieBatteriedurchdenselbenoderentsprechenden,vomHerstellerempfohlenenBatterietypersetzt.BeachtenSiebeieinerEntsorgungderBatterieoderderSonicWallInternetSecurityAppliancediediesbezglichenAnweisungendesHerstellers.

    InformationenzurstromversorgungAPL260B3WenndieStromversorgungvonderSonicWallProduktpaketfehlt,wendenSonicWalldenTechnischenSupportunterhttps://support.SonicWall.com/.

    DieStromversorgungdurchdasEthernetKabelindieLANAnschlussangeschlossenvorgesehenist,wirddiesalsPoweroverEthernetoderPoE.DiesesProduktdarfnurinVerbindungmiteinemfrdenEuropischenMarktgenehmigtenundmitdemLogoLPS.Ausgang:48VDC

    Gleichsspannung,mind.0,6A,mindestTMAmindestens40GradC,betriebenwerden.

    EUandEFTAThisdeviceisapprovedforuseinEUmemberstatesandEFTAcountriesasshownontheappliancelabel.

    SonicPointN2(RM:APL260B3)RFTransmitterBandsandPower

    FrequencyBand MaximumRadioFrequencyPowerTransmitted

    MHz dBmEIRP

    24122472 19.98

    51805240 19.7

    52605320 18.36

    55005700 19.34

    32 SonicWallSonicPointN2GettingStartedGuide

    https://support.sonicwall.com/
  • DeclarationofconformityADeclarationofConformityinaccordancewiththedirectivesandstandardshasbeenmadeandisonfileat:SonicWallInternationalLimited,CityGatePark,Mahon,Cork,Ireland.

    CEdeclarationscanbefoundonlineat:https://support.SonicWall.com/.

    NOTE:Additionalregulatorynotificationsandinformationforthisproductcanbefoundonlineat:https://support.SonicWall.com/

    SonicWallSonicPointN2GettingStartedGuide 33

    https://support.software.dell.com/https://support.sonicwall.com/https://support.sonicwall.com/https://support.sonicwall.com/
  • ( RoHS)/

    (Pb)

    (Hg)

    (Cd)

    (Cr+6)

    (PBB)

    (PBDE) / (Chassis/Bracket)

    - O O O O O

    ( )(Mechanicalparts(fan,heatsinketc.)

    - O O O O O

    (PCBA)

    - O O O O O

    / (Cable/connector)

    - O O O O O

    (powersupply)

    - O O O O O

    (Accessories) - O O O O O 1.O 2.

    34 SonicWallSonicPointN2GettingStartedGuide

  • SonicWall Support

    TechnicalsupportisavailabletocustomerswhohavepurchasedSonicWallproductswithavalidmaintenancecontractandtocustomerswhohavetrialversions.

    TheSupportPortalprovidesselfhelptoolsyoucanusetosolveproblemsquicklyandindependently,24hoursaday,365daysayear.ToaccesstheSupportPortal,gotohttps://support.sonicwall.com/.

    TheSupportPortalenablesyouto:

    Viewknowledgebasearticlesandtechnicaldocumentation

    Downloadsoftware

    Viewvideotutorials

    Collaboratewithpeersandexpertsinuserforums

    Getlicensingassistance

    AccessMySonicWall

    LearnaboutSonicWallprofessionalservices

    Registerfortrainingandcertification

    TocontactSonicWallSupport,refertohttps://support.sonicwall.com/contactsupport.

    SonicWallSonicPointN2GettingStartedGuide 35

    https://support.sonicwall.com/https://support.sonicwall.com/contact-support
  • 36 SonicWallSonicPointN2GettingStartedGuide

  • SonicPoint N2 Getting Started GuideUpdated - January 2017232-003412-50 Rev A

    IntroductionIn this guideWireless overviewSonicWall wireless firewallingFrequency bands and channels802.11 comparison chartInitial SetupCheck package contentsAny items missing?Deployment requirementsSonicPoint N2 available ports/status LEDsInstalling antennasConnecting Ethernet cablesWireless access point placement considerationsRadio frequency barriersRF interferenceMounting the SonicPoint N2Mounting using ceiling bracketsMounting using anchor screwsConfiguring SonicOS for wireless accessConfiguring SonicOS for SonicPoint N2Configuring the network interfaceConfiguring the WLAN zoneConfiguring the SonicPoint N2 settingsVerifying SonicPoint operationTroubleshooting tipsSupport and product registrationRegistration and supportOnline support and trainingProduct safety and regulatory informationMounting the applianceCable connectionsLithium BatteryPower supply information for APL26-0B3Verwarnung Weitere hinweise zur montageVerwarnung KabelverbindungenVerwarnung Hinweis zur LithiumbatterieInformationen zur stromversorgung APL26-0B3EU and EFTADeclaration of conformity