##
WANaccel_Logs

WAN Acceleration > Logs

The WAN Acceleration > Logs page provides a detailed list of the log event messages. On this page, you can configure how the Logs are viewed.

Figure 35
WAN Acceleration Logs

 

Minimum Priority

Displays the log entries by minimum priority type.

Categories

Displays the log entries by categories.

# Entries

Selects the number of entries displayed in the logs list.

Refresh

Refreshes the WAN Acceleration > Logs page. The refresh interval can be entered in the box to the right of the Refresh symbol. The interval can be increased to a maximum of 600 seconds.
Click the Refresh button to manually update the Logs page.
Click the Pause button to stop updates on the page

Priority

Filters the log entries by priority type.

Category

Filters the log entries by category type.

Message

Filters the log messages by entering part of a message in the text field.

Configuring WAN Acceleration

This section includes procedures for configuring the SonicWALL WXA series appliance. All configuration procedures are performed on the SonicWALL NSA/TZ series appliance’s management interface. Refer to “Configuration Task List Overview” section for details on the SonicWALL NSA/TZ management interface.This section includes the following subsections:

 
•
“Configuring the Network Interface for the SonicWALL WXA Series Appliance” section
 
•
“Configuring TCP Acceleration” section
 
•
“Configuring WFS Acceleration” section
 
•
“Verifying WAN Acceleration Configurations” section

Configuring the Network Interface for the SonicWALL WXA Series Appliance

To configure your SonicWALL NSA/TZ to be used with the WXA series appliance, perform the following steps:

Step 1
In your web browser, enter https://nsatzipaddress . The SonicWALL user interface is displayed.
Step 2
Navigate to the Network > Interfaces page.

Step 3
Click the Edit button in the row for the port you want the SonicWALL WXA series appliance to be connected to.

The Interface Settings General Tab is displayed.

Step 4
Enter the following:
 
•
Zone: Drop-down — LAN
 
•
Mode/IP Assignment: Drop-down — Static IP Mode
 
•
IP Address: Text Field — Enter the IP Address for the port. This example uses 10.203.30.162.
 
•
Subnet Mask: Text Field — Enter the subnet mask for the port.
 
•
(Optional) Comment: Text Field — Enter text that describes the device.
For example, WXA connection.
 
•
(Optional) Management: checkboxes — Select the management methods.
Step 5
Click OK .
Step 6
Navigate to the Network > DHCP Server page.
Step 7
Navigate to the WAN Acceleration page.
Step 8
Select the Enable WAN Acceleration checkbox.
 
Note
This example assumes that the correct DNS server has already been entered in the Network > DNS page. If you have not entered the DNS server, you can overwrite the DNS specirfied in the Network > DNS Server > Click the Edit button for the lease you want to change, and then click DNS/WINS tab. Enter the DNS IP Addresses in the text fields provided.
Step 9
Under the DCHP Server Lease Scopes, click Add Dynamic .
The Dynamic Range Configuration window is displayed.

Step 10
Do the following
a.
Select the Enable this DHCP Scope checkbox.
b.
Select the Interface Pre-Populate checkbox and then select port X5 in the drop-down.
The information will be auto populated.
c.
Click OK .
Step 11
Connect an Ethernet cable from the SonicWALL WXA series appliance to the X5 port on the SonicWALL NSA/TZ security appliance.
Step 12
Confirm that the SonicWALL NSA/TZ has a DCHP lease for the SonicWALL WXA.
Navigate to the Network > DHCP Server page.

Step 13
Navigate to the WAN Acceleration > Status page.

 

Step 14
Click Create static DHCP lease for WXA .
A DHCP lease will be set for the SonicWALL WXA series appliance.
Step 15
Verify that the lease was created. Navigate to the Network > DHCP Server page.
A dynamic range is set for the WXA appliance.

Configuring TCP Acceleration

To configure the TCP Acceleration service, follow the steps in the sections below:

Configuring a VPN for TCP Acceleration

If a Virtual Private Network (VPN) is already configured on your network, follow the steps listed below to permit TCP Acceleration:
Note: If you have a site to site VPN, you can use a spare SonicWALL NSA/TZ series appliance in Layer 2 bridge mode with a SonicWALL WXA series appliance connected. Refer to the SonicOS Administrators Guide for Layer 2 bridge mode configuration.

Step 1
Navigate to the VPN > Settings page.
Figure 36
VPN > Settings

Step 2
Click the Configure button for the VPN policy you wish to use.
The Configure VPN Policy pop-up window displays.
Figure 37
VPN Policy Advanced Configuration

Step 3
Select the Advanced tab.
Step 4
Select the checkbox for Permit TCP Acceleration .
Step 5
Click the OK button.

Configuring a Non-VPN for TCP Acceleration

If you do not have a VPN configured on your network and you are using a custom routing policy, you need to add two routing policies on each site: One for outgoing traffic, and one for incoming traffic. Both routing policies are configured to permit TCP Acceleration. The illustration below displays the configuration between two non-VPN sites. Refer to this Illustration as an example for the following sections:

 
•
“Configuring a Routing Policy for Outgoing Traffic” section
 
•
“Configuring a Routing Policy for Incoming Traffic” section
Figure 38
Non-VPN Network Configuration

Configuring a Routing Policy for Outgoing Traffic

The steps in this section are configured from the Remote Site. Follow the same steps for configuring the Data Center.

Step 1
Navigate to the Network > Address Objects page.
Figure 39
Network > Address Objects

Step 2
Click the Add button.
The Add Address Object Group pop-up window displays.
Figure 40
Add Address Object Group

Step 3
Enter a name ( Data Center ) for the address object in the Name text field.
Step 4
Click the Zone Assignment drop-down, select WAN .
Step 5
Click the Type drop-down, select Network .
Step 6
Enter the LAN IP address of the Data Center ( 192.168.10.0 ) in the Network text field.
Step 7
Enter the netmask IP address ( 255.255.255.0 ) in the Netmask text field.
Step 8
Click the Add button.
Step 9
Navigate to the Network > Routing page.
Figure 41
Add Routing Policies

Step 10
Click the Add button.
The Route Policy Settings pop-up window displays.
Figure 42
Route Policy Settings

Step 11
Click the Source drop-down, select Any .
Step 12
Click the Destination drop-down, select the address object you created (Data Center .)
Step 13
Click the Service drop-down, select Any .
Step 14
Click the Gateway drop-down, select the X1 Default Gateway .
Step 15
Click the Interface drop-down, select the X1 interface.
Step 16
Enter 1 in the Metric text field.
This gives the route policy a high priority level. A larger metric number would have a lower priority.
Step 17
Select the Permit TCP Acceleration checkbox.
Step 18
Click the OK button.

Configuring a Routing Policy for Incoming Traffic

The steps in this section are configured from the Remote Site. Follow the same steps for configuring the Data Center.

Step 1
Navigate to the Network > Address Objects page.
Figure 43
Network > Address Objects

Step 2
Click the Add button.
The Add Address Object Group pop-up window displays.
Figure 44
Add Address Object Group

Step 3
Enter a name ( Remote Site ) for the address object in the Name text field.
Step 4
Click the Zone Assignment drop-down, select LAN .
Step 5
Click the Type drop-down, select Network .
Step 6
Enter the LAN IP address of the Remote Site ( 192.168.20.0 ) in the Network text field.
Step 7
Enter the netmask IP address ( 255.255.255.0 ) in the Netmask text field.
Step 8
Click the Add button.
Step 9
Navigate to the Network > Routing page.
Figure 45
Add Routing Policies

Step 10
Click the Add button.
The Route Policy Settings pop-up window displays.
Figure 46
Route Policy Settings

Step 11
Click the Source drop-down, select Data Center .
Step 12
Click the Destination drop-down, select the address object you created (Remote Site .)
Step 13
Click the Service drop-down, select Any .
Step 14
Click the Gateway drop-down, select (0.0.0.0 ).
Step 15
Click the Interface drop-down, select the X0 interface.
Step 16
Enter 1 in the Metric text field.
This gives the route policy a high priority level. A larger metric number would have a lower priority.
Step 17
Select the Permit TCP Acceleration checkbox.
Step 18
Click the OK button.

Configuring the TCP Acceleration Tab

The Configuration tab gives you the option to select the mode, service object, and address object that are included or excluded from the TCP Acceleration service. Note: To view a list, create, and edit service objects, navigate to the Network > Address Objects page. Below is examples of three different TCP Acceleration configurations:

Example 1

To configure acceleration of all the service objects, except those excluded by default. Follow the steps below:

Note: The option to choose a TCP Acceleration Service Object is read-only in this mode

Step 1
Navigate to WAN Acceleration > TCP Acceleration.
Step 2
Select the Configuration tab.
Figure 47
Configuring TCP Acceleration Example 1

Step 3
Select the Enable TCP Acceleration checkbox.
Step 4
In the TCP Acceleration Mode drop-down, select All TCP services except those excluded by default .
Step 5
In the Address Object always excluded from TCP Acceleration drop-down, select None .
Step 6
Click the Apply Changes button.

Example 2

To configure acceleration of only the HTTP web traffic. Follow the steps below:

Step 1
Navigate to WAN Acceleration > TCP Acceleration.
Step 2
Select the Configuration tab.
Figure 48
Configuring TCP Acceleration Example 2
Step 3
Click the Enable TCP Acceleration checkbox.
Step 4
In the TCP Acceleration Mode drop-down, select Only TCP Services Specified in TCP Acceleration Service Object .
Step 5
In the TCP Acceleration Service Object drop-down, select HTTP .
Step 6
In the Address Object always excluded from TCP Acceleration , select None .
Step 7
Click the Apply Changes button.

Example 3

To configure acceleration of everything except Microsoft SQL database traffic or traffic to the Guest Authentication Servers. Follow the steps below:

Step 1
Navigate to WAN Acceleration > TCP Acceleration.
Step 2
Select the Configuration tab.
Figure 49
Configuring TCP Acceleration Example 3

Step 3
Select the Enable TCP Acceleration checkbox.
Step 4
In the WFS Acceleration Mode drop-down, select All TCP services except those specified in TCP Acceleration Service Object and those excluded by default .
Step 5
In the TCP Acceleration Service Object , select Microsoft Structured Query Language (MS SQL) .
Step 6
In the Address Object always excluded from TCP Acceleration drop-down, select Guest Authentication Servers .
Step 7
Click the Apply Changes button.

Configuring WFS Acceleration

This section provides details on configuring WFS Acceleration. The SonicWALL WXA series appliance must be connected to a SonicWALL NSA or TZ series appliance on a port other than X0 and X1. In this example, X5 is used as the connection to the SonicWALL WXA series appliance.

Figure 50
SonicWALL WXA Connection

 

The SonicWALL WXA series appliance allows the user to reach such speeds because WFS Acceleration is implemented between the two devices. This is how it works:

Step 1
The SonicWALL WXA series appliances join the data center domain.
For example, mydomain.local .
This step allows the WXA series appliances to talk to each other.
Step 2
A hostname is assigned to each SonicWALL WXA series appliance.
This example uses fastboxhq for the data center and fastbox for the remote site.
This step allows the two hostnames be accessible across the domain.
Step 3
The SonicWALL WXA fastboxhq is configured to share All Shares on the File Server.
Step 4
The SonicWALL WXA fastbox is configured to share All Shares on fastboxhq.
Steps 3 and 4 allow the domain users to access shares on the data center.

Enabling WFS Acceleration

Once you have configured the network interface for the port you want to connect the SonicWALL WXA series appliance to the SonicWALL NSA or TZ series appliance, you can configure WFS Acceleration.

Before you chose how you want to join the SonicWALL WXA series appliance to the domain, you must enable WFS Acceleration on your SonicWALL NSA/TZ security appliance.

To configure WFS Acceleration on the SonicWALL NSA/TZ security appliance, perform the following steps:

Step 1
Open a Web browser.
Step 2
Enter https://nsatzipaddress .
The SonicWALL user interface is displayed.
Step 3
Navigate to the WAN Acceleration > WFS Acceleration page.
Step 4
Select the Configuration tab.

Step 5
Click Enable WFS Acceleration , select X5 IP in the ‘Public’ WFS Acceleration Address: drop-down, and then click Apply Changes .

Joining the Domain

After you have configured the network interface, enabled WFS Acceleration, and created a DHCP Scope, you can configure the local and remote domains.

You can join the domain for WFS Acceleration using one of the following methods:

 
•
Manually Joining the Domain with Administrator Account Credentials
 
•
Manual with Unprivileged Account Credentials
 
•
Automatically Joining the Domain for WFS Acceleration

Manually Joining the Domain with Administrator Account Credentials

To join the domain manually, perform the following steps on the WXA series appliance at each site:

Step 1
In the WAN Acceleration > WFS Acceleration page, select the Domain Details Tab.
Step 2
If this is the first time setting up WFS Acceleration, enter the following in the Enter Domain Details... panel:

Step 3
Enter your settings, and then click Apply Changes .
The page will be populated with the Configured Domain settings.

Step 4
Click Join Domain .

The Join Domain pop-up window displays.

Step 5
Enter the username and password for the administrator of the domain. It will be an account on the domain controller.
The WXA series appliance will create a computer account on the domain controller, using the hostname that was used in step 2.
At the SonicWALL NSA/TZ security appliance, nearest to (data center site) the domain controller, perform the following steps:
Step 1
Login to the SonicWALL NSA/TZ security appliance at the data center.
Step 2
Navigate to the WAN Acceleration > WFS Acceleration page.
Step 3
Click the Shares tab.
Step 4
Click Add New Server... .
The Add Server Pop-up window is displayed.

Step 5
Do the following:
 
•
Remote Server Name: Text Field — Enter the host name of the DC/Share server.
 
•
Local Device Name: Text Field — Enter the domain name of the SonicWALL WXA series appliance on the local site or one of its SPN Aliases and must resolve to the public WFS IP address or select a local device name from the drop-down list.
 
•
Select the Add All Shares: Checkbox.
Deselect this to add shares manually.
 
•
Click Apply .
At the SonicWALL NSA/TZ security appliance farthest from (remote site) the domain controller, perform the following steps:
Step 1
Login to the NSA/TZ security appliance at your remote site.
Step 2
Navigate to the WAN Acceleration > WFS Acceleration page.
Step 3
Click the Shares tab.
Step 4
Click Add New Server... .

Step 5
Make sure the Remote Server Name and the Local Device Name (from step 4 for the data center site) text fields match.
Step 6
Enter the information for this server, and then click Apply .
Step 7
Explore the path \\fastbox\ on the PC located at the remote site.
After the first download of files, connection speed will improve because files are now cached on the WXA series appliance.

Automatically Joining the Domain for WFS Acceleration

To auto-join the SonicWALL WXA series appliances, perform the following steps:

Step 1
Access the domain controller and create a computer account. The computer account must use the default hostname or a hostname specified in the Domain Details tab (the name of the WXA series appliance). If a new hostname is entered in the Domain Details tab, it overrides the default hostname. The authentication code is the password for the computer account.

Step 2
Click Change... .
Step 3
In the Enter the object name to select text field, enter SELF , and then click OK .

Step 4
Right click on the computer account, go to Properties and select the setting Trusted for Delegation .

Step 5
Open a cmd.exe window.
Step 6
Set the password for the computer account, where ABCD-EFGH is the auth code.

 
Note
The password for the computer account must be the auth code found on the WAN Acceleration > Status page on the SonicWALL NSA/TZ security appliance.
At the SonicWALL NSA/TZ security appliance nearest (data center site) the domain controller, perform the following steps:
Step 1
Login to the SonicWALL NSA/TZ security appliance at the data center.
Step 2
On the SonicWALL NSA/TZ security appliance, navigate to the WAN Acceleration > WFS Acceleration page.
Step 3
Navigate to the WAN Acceleration > WFS Acceleration page.
Step 4
Click Domain Details .
The Autodiscovered Domain Panel is displayed an populated with the information added in previous pages. If you do not see all checkboxes, refer to the Troubleshooting section of this document.

 

Step 5
Click the Shares tab.
Step 6
Click Add New Server... .
The Add Server Pop-up window is displayed.

 
•
Remote Server Name: Text Field — Enter the host name of the DC/Share server.
 
•
Local Device Name: Text Field — Enter the domain name of the SonicWALL WXA series appliance on the local site or one of its SPN Aliases and must resolve to the public WFS IP address or select a local device name from the drop-down list.
 
•
Select the Add All Shares: Checkbox.
Deselect this to add shares manually.
 
•
Click Apply .
At the SonicWALL NSA/TZ security appliance farthest from (remote site) the domain controller, perform the following steps:
Step 1
Login to the SonicWALL NSA/TZ security appliance at your remote site.
Step 2
Navigate to the WAN Acceleration > WFS Acceleration page.
Step 3
Click the Shares tab.
Step 4
Click Add New Server... .

Step 5
Make sure the Remote Server Name and the Local Device Name (from step 4 for the data center site) text fields match.
Step 6
Enter the information for this server, and then click Apply .
Step 7
Explore the path \\fastbox\ on the PC located at the remote site.
After the first download of files, connection speed will improve because files are now cached on the WXA series appliance
 
Note
In this configuration example, you may have more than one remote server in the data center. If Add All Shares is selected, there must be a new service principal name (SPN) Alias for each additional server. The SonicWALL WXA series appliance attempts to create the DNS entries automatically for each alias created. If DNS entries are not automatically created, they need to be added manually. Add new SPN Aliases in the domain controller by issuing setspn – A cifs/alias realname and setspn – A cifs/alias.fq.dn realname CLI commands.
 
Note
If Add All Shares is not selected, the same local device name can have each manual share forwarded to a different server.

Verifying WAN Acceleration Configurations

This section details how to verify if the TCP Acceleration and WFS Acceleration on your SonicWALL WXA series appliance is configured correctly.

Verifying the TCP Acceleration Configuration

After you complete the step-by-step TCP Acceleration procedures, verify TCP Acceleration is working by checking the WAN Acceleration > Statistics Tab.

Step 1
On the SonicWALL NSA/TZ series appliance user interface, navigate to the WAN Acceleration > Statistics Tab .
Figure 51
Verifying TCP Acceleration

Step 2
View the statistics data and graphs to verify TCP Acceleration.
This indicates if the SonicWALL WXA series appliance is using TCP Acceleration for data transfer.

If the Statistics tab’s data and graphs do not display any information, TCP Acceleration is not configured correctly or is disabled.

Step 3
Refer to the “Configuring WAN Acceleration” section and check the TCP Acceleration panel on the Status page for details.

Verifying the WFS Acceleration Configuration

After completing the step-by-step WFS Acceleration configuration procedures. Verify WFS Acceleration is working by two different methods:

 
•
Click the Test Configuration button in the WFS Acceleration > Domain Details tab.
 
•
Click the Run WFS Configuration Tests button in the WFS Acceleration > Tools tab.

Verify Using the WFS Acceleration > Domain Details Tab

To verify that the WFS Acceleration was successful using the WFS Acceleration > Domain Details tab, perform the following steps:

Step 1
Navigate to the WAN Acceleration > WFS Acceleration page.
Step 2
Select the Domain Details tab.

Step 3
Click Test Configuration .
If the WFS Acceleration service is not functioning properly, refer to “Configuring WAN Acceleration” section and check the configuration settings.

Verify Using the WFS Acceleration > Tools Tab

To verify that the WFS Acceleration service was successful using the WFS Acceleration > Tools tab, perform the following steps:

Step 1
Navigate to the WAN Acceleration > WFS Acceleration .
Step 2
Click the Tools tab.

Step 3
In the Diagnostic Tools drop-down, select Test WFS Configuration .

Step 4
Click Run WFS Configuration Test .
The results display when the test is complete.

Troubleshooting WFS Acceleration

Problem: The Joined Domains checkbox is not selected in the Domain Details tab.

Solution:

Click Join Domain at the bottom of the page. When the Join Domain pop-up window is displayed, leave the fields empty, and then click Apply .
This action will force the WXA series appliance to join the domain.

Troubleshooting WAN Acceleration

Problem: When I click Create static DHCP lease for WXA on the WAN Acceleration > Status page, I get an error message.

Solution: If you changed any of the interface settings for the WXA series appliance, you must navigate to the WAN Acceleration > Advanced > Interface Settings tab and click Renew DHCP Lease .
If this does not work, click Reboot on the WAN Acceleration > Advanced > Device Settings tab to reboot the WXA series appliance.