Wizards_Setup
The first time you log into your SonicWALL appliance, the Setup Wizard is launched automatically. To launch the Setup Wizard at any time from the management interface, click the Wizards button in the top right corner, and select Setup Wizard.
Tip You can also configure all your WAN and network settings on the Network > Settings page of the SonicWALL Management Interface
Topics:
• Configuring a Static IP Address with NAT Enabled
• Select Deployment Scenario (SonicWALL TZ Series Appliance only)
• Change Administrator Password
• Configure Modular Device Type
• Ports Assignment (SonicWALL TZ series and NSA 240 appliances only)
• SonicWALL Configuration Summary
The Setup Wizard helps you configure the following settings:
• WAN networking mode and WAN network configuration
• 3G/4G or Analog Modem configuration (SonicWALL TZ series)
• LAN network configuration
• Wireless LAN network configuration (wireless devices)
Configuring a Static IP Address with NAT Enabled
Using NAT to set up your SonicWALL eliminates the need for public IP addresses for all computers on your LAN. It is a way to conserve IP addresses available from the pool of IPv4 addresses for the Internet. NAT also allows you to conceal the addressing scheme of your network. If you do not have enough individual IP addresses for all computers on your network, you can use NAT for your network configuration.
Essentially, NAT translates the IP addresses in one network into those for a different network. As a form of packet filtering for firewalls, it protects a network from outside intrusion from hackers by replacing the internal (LAN) IP address on packets passing through a SonicWALL with a “fake” one from a fixed pool of addresses. The actual IP addresses of computers on the LAN are hidden from outside view.
This section describes configuring the SonicWALL appliance in the NAT mode. If you are assigned a single IP address by your ISP, follow the instructions below.
Tip Be sure to have your network information including your WAN IP address, subnet mask, and DNS settings ready. This information is obtained from your ISP.
1. Click the Wizard button on the top right corner of the SonicOS management interface.
2. In the Welcome screen, select the Setup Wizard and then click Next.
Select Deployment Scenario (SonicWALL TZ Series Appliance only)
3. On a SonicWALL TZ series (wired or wireless) appliance, select the appropriate deployment scenario for your network and then click Next:
• Office Gateway - Provide secure access for my wired and wireless users.
• Secure or Open Access Point - Add secure wireless access to an existing wired network. When selecting this mode, the wizard will skip over the steps for configuring the LAN interface.
4. To set the password, enter a new password in the New Password and Confirm New Password fields. Click Next.
Tip It is very important to choose a password which cannot be easily guessed by others.
5. Select the appropriate Time Zone from the Time Zone menu. The SonicWALL’s internal clock is set automatically by a Network Time Server on the Internet.
6. If appropriate, select Automatically adjust clock for daylight saving time.
7. Click Next.
8. If you are setting up a SonicWALL TZ series appliance that supports 3G/4G devices for Wireless WAN connection over cellular networks, or supports analog modem devices for dial-up WAN connection, select the type of device:
• 3G/4G/Mobile
• Analog Modem
9. Click Next. If you have selected
• None, go to WAN Network Mode
• 3G/4G/Mobile, go to Configure 3G/4G
• Analog Modem, go to Configure Modem
10. If you are setting up a SonicWALL TZ series appliance that supports 3G/4G devices for Wireless WAN connection over cellular networks, select how you will use the 3G/4G device:
• Yes, I will use 3G/4G for primary or backup Internet connectivity.
• No, I will not use 3G/4G at this time.
11. Click Next. If you selected
• Yes, go to WAN Failover 3G/4G/Modem Connection
• No, go to WAN Network Mode
WAN Failover 3G/4G/Modem Connection
12. Select the appropriate connection information from the Country, Service Provider, and Plan Type drop-down menus.
Note The selections available in the Service Provider and Plan Type menus depend on your selections in the Country and Service Provider menus, respectively.
13. Click Next.
14. Based on your selections in the previous step, the Setup Wizard displays your account information for verification:
• Profile Name
• Connection Type
• Dialed Number
• User Name (optional)
• Password (optional)
• Confirm Password (optional)
• APN
15. Click Next. Go to WAN Network Mode.
16. If you are setting up a SonicWALL TZ series appliance that supports analog modem devices for dial-up WAN connection, select how you will use the modem:
• Yes, I will use a dialup account as primary or backup Internet connectivity.
• No, I will not use the modem at this time.
17. Click Next. If you selected
• Yes, go to WAN Failover Dialup Connection
• No, go to WAN Network Mode
WAN Failover Dialup Connection
18. Enter the appropriate information in these fields:
• Profile Name
• Phone Number
• User Name
• Password
• Confirm Password
19. Click Next.
20. Confirm that you have the proper network information necessary to configure the SonicWALL to access the Internet. Click the hyperlinks for definitions of the networking terms.
Select one of the following options:
– Router-based Connections - Static IP, if your ISP assigns you a specific IP address or group of addresses.
– Cable/Modem-based Connections - DHCP, if your ISP automatically assigns you a dynamic IP address.
– DSL Connections - PPPoE, if your ISP provided you with client authentication software, a user name, and a password.
– VPN Connections - PPTP, if your ISP provided you with encrypted server IP address, user name, and password.
21. Click Next and then go to the corresponding section:
|
Enter the public IP address provided by your ISP in the SonicWALL WAN IP Address field, then fill in the rest of the fields: WAN Subnet Mask, Gateway (Router) Address, DNS Server Address, and optional DNS Server Address #2.
23. Select whether to Allow HTTPS on this WAN Interface.
CAUTION Be cautious in allowing HTTPS management from the WAN because of potential vulnerability. If you do allow HTTPS management, ensure the password you specified on the Setup Wizard Change Administrator Password page is very strong; see Change Administrator Password.
24. Select whether to Allow Ping on this WAN Interface.
25. Click Next. Proceed to LAN Settings.
WAN Network Mode: NAT with DHCP Client
DHCP is a networking mode that allows you to obtain an IP address for a specific length of time from a DHCP server. The length of time is called a lease which is renewed by the DHCP server typically after a few days. When the lease is ready to expire, the client contacts the server to renew the lease. This is a common network configuration for customers with cable or DSL modems. You are not assigned a specific IP address by your ISP.
The Setup Wizard page states that the SonicWALL’s DHCP Clients will attempt to obtain an IP address from the SonicWALL dynamically.
26. Select whether to Allow HTTPS on this WAN Interface.
CAUTION Be cautious in allowing HTTPS management from the WAN because of potential vulnerability. If you do allow HTTPS management, ensure the password you specified on the Setup Wizard Change Administrator Password page is very strong; see Change Administrator Password.
27. Select whether to Allow Ping on this WAN Interface.
28. Click Next. Proceed to LAN Settings.
WAN Network Mode: NAT with PPPoE Client
NAT with PPPoE Client is a network protocol that uses Point to Point Protocol over Ethernet to connect with a remote site using various Remote Access Service products. This protocol is typically found when using a DSL modem with an ISP requiring a user name and password to log into the remote server. The ISP may then allow you to obtain an IP address automatically or give you a specific IP address.
29. Select whether to use a dynamic or static IP address:
• Obtain an IP Address Automatically
• Use the following IP Address; enter the IP Address provided by your ISP in the following field
30. Enter the user name and password provided by your ISP in the PPPoE User Name and PPPoE Password fields.
31. Select whether the user is disconnected after a period of inactivity and enter the inactive period, in minutes, in the Inactivity Disconnect (minutes) field. The default is 10 minutes.
32. Select whether to Allow HTTPS on this WAN Interface.
CAUTION Be cautious in allowing HTTPS management from the WAN because of potential vulnerability. If you do allow HTTPS management, ensure the password you specified on the Setup Wizard Change Administrator Password page is very strong; see Change Administrator Password.
33. Select whether to Allow Ping on this WAN Interface.
34. Click Next. Proceed to LAN Settings.
WAN Network Mode: NAT with PPTP Client
NAT with PPTP Client mode uses Point to Point Tunneling Protocol (PPTP) to connect to a remote server. It supports older Microsoft implementations requiring tunneling connectivity.
35. Enter the PPTP Server IP Address, PPTP User Name, and PPTP Password.
36. Select whether the appliance should
• Obtain an IP Address Automatically
• Use the following IP address; for this you also must specify the following:
– WAN Subnet Mask
– Gateway (Router) Address
37. Select whether to Allow HTTPS on this WAN Interface.
CAUTION Be cautious in allowing HTTPS management from the WAN because of potential vulnerability. If you do allow HTTPS management, ensure the password you specified on the Setup Wizard Change Administrator Password page is very strong; see Change Administrator Password.
38. Select whether to Allow Ping on this WAN Interface.
39. Click Next.
Note On a SonicWALL TZ series appliance, the LAN Settings and LAN DHCP Server settings are only displayed if you selected the Office Gateway deployment scenario.
40. The LAN page allows the configuration of the SonicWALL LAN IP Addresses and the LAN Subnet Mask.The SonicWALL LAN IP Addresses are the private IP address assigned to the LAN port of the SonicWALL. The LAN Subnet Mask defines the range of IP addresses on the LAN. The default values provided by the SonicWALL work for most networks. If you do not use the default settings, enter your preferred private IP address and subnet mask in the SonicWALL LAN IP Address and LAN Subnet Mask fields.
41. Click Next.
42. The SonicWALL DHCP Settings page configures the SonicWALL DHCP Server. If enabled, the SonicWALL automatically configures the IP settings of computers on the LAN. To enable the DHCP server, select Enable DHCP Server on LAN, and specify the range of IP addresses that are assigned to computers on the LAN.
If you do not select Enable DHCP Server on LAN, you must configure each computer on your network with a static IP address on your LAN.
43. Click Next.
(SonicWALL wireless security appliances only) Select whether or not you want to configure Wi-If Protected Access (WPA) security:
• WPA/WPA2 Mode - WPA is the security wireless protocol based on 802.11i standard. It is the recommended protocol if your wireless clients support WPA also.
• Connectivity - Caution! This mode offers no encryption or access controls and allows unrestrained wireless access to the device.
Note If you want to configure WEP security, navigate to the Wireless > Security page.
WPA Mode Settings (SonicWALL wireless security appliances only)
44. Configure the WPA settings for your SonicWALL security appliance. See Wireless > Security for more information on these settings.
45. Click Next.
Ports Assignment (SonicWALL TZ series and NSA 240 appliances only)
46. Optionally, you can configure the initial PortShield group assignments for your appliance. See Configuring PortShield Groups for more information on the PortShield wizard.
47. Click Next.
SonicWALL Configuration Summary
The Configuration Summary page displays the configuration defined using the Setup Wizard:
• To modify any of the settings, click Back to return to the appropriate page.
• If the configuration is correct, click Apply.
The SonicWALL appliance stores the network settings and displays an information page:
49. Click Close to return to the SonicWALL Management Interface.