SonicWALL TZ 170 Network Card User Manual
Contents
1. Establishing Secure Wireless Connections For a wireless client to securely connect to the Sonic WALL TZ 170 Wireless using WiFiSec the SonicWALL Global VPN Client GVC or Sonic WALL Global Security Client GSC must be installed and configured Installing and configuring Sonic WALL GVC involves the following procedures e Installing the SonicWALL GVC or SonicWALL GSC Using the Setup Wizard on page 25 e Creating an Office Gateway Connection Profile Using the New Connection Wizard on page 25 e Establishing a WiFiSec VPN Connection Using the WLAN GroupVPN Policy on page 26 Installing the SonicWALL GVC or Sonic WALL GSC Using the Setup Wizard If you do not already have Sonic WALL GVC or SonicWALL GSC installed 1 Insert the SonicWALL Resource CD that came with your SonicWALL security appliance into your computer Open the Software folder on the Sonic WALL Resource CD Open the SonicWALL Global VPN Client folder Open the GVC Zip file Launch setup exe Follow the instructions in the GVC Setup Wizard to install SonicWALL GVC pa Ot e O Note SonicWALL GVC is free to use for WiFiSec secured wireless connections For remote VPN access through a WAN port you must have a GVC Client License For complete product documentation on SonicWALL GVC or SonicWALL GSC see your Resource CD or visit the SonicWALL Web site at lt http www sonicwall com support documentation htmI gt Tip You can download the2. Enter a unique password for the user Confirm Password Re enter the password Note You can add additional users in the SonicWALL security appliance s Management Interface Refer to the SonicOS Standard Administrator s Guide for instructions on adding users Click Next SonicWALL TZ 170 Wireless Getting Started Guide Page 15 4 Page 16 10 Wireless Guest Services Allows guest users to connect to the Internet without any access to your private network Enable Wireless Guest Check to enable Wireless Guest Services on your network Services Account Name Enter the account name your guest users must use to log into Wireless Guest Services Account Password Enter a password for the guest account Confirm Password Re enter the password Account Lifetime Specify the length of time this account may exist before you need to regenerate it Session Lifetime Specify the length of time a guest user may be logged in A brief description of the guest account Note You can add additional guest accounts in the SonicWALL security appliance s Management Interface Refer to the SonicOS Standard Administrator s Guide Click Next 11 SonicWALL Configuration Summary Displays your network configuration information Confirm that the settings displayed match the information you collected in Procedure 1 Collecting Required Information on page 4 Click Apply to apply your settings to the SonicWALL security applianc
3. Accessing the Management Interface on page 8 and use the LAN IP address you set in Procedure 5 Step 6 LAN Settings on page 14 Log in as admin with your administrative password In the menu on the left click Network e In the Interfaces table click the configure icon 349 in the WAN line WAN NAT with DHCP Client 10 0 202 84 255 255 0 0 100 Mbps half duplex IREIEASEW Ni Mi f Inthe WAN Properties window enter the host name and click OK Run the Setup Wizard Use the Setup Wizard again to reconfigure your network settings a Goto Procedure 4 Accessing the Management Interface on page 8 and use the LAN IP address you set in Procedure 5 Step 6 LAN Settings on page 14 b Login as admin with your administrative password c Click the Wizards button in the top right corner of the management interface to restart the wizard d Select Setup and click Next to start the Setup Wizard SonicWALL TZ 170 Wireless Getting Started Guide Page 17 amp Registering Your SonicWALL TZ 170 Wireless Page 18 Once you have established your Internet connection it is recommended you register your SonicWALL security appliance at mySonicWALL com Registering your SonicWALL security appliance provides the following benefits e Activate 30 day subscriptions to SonicWALL s Gateway Anti Virus Anti Spyware and Intrusion Prevention Service Content Filtering Service Network Anti Virus Service e Activ
4. Click Next SonicWALL TZ 170 Wireless Getting Started Guide Page 13 6 LAN Settings The LAN Settings screen configures your LAN interface SonicWALL LAN Accept the default IP address or enter a new IP address of the IP Address LAN interface Record the address l LAN Subnet Mask Accept the default or enter a subnet mask for your LAN Enable Leave this option checked if you plan to have more than one Windows Networking Windows computer on your network Windows Networking Support has no effect on computers with other operating systems By default your SonicWALL TZ 170 Wireless is configured with a LAN network IP address 192 168 168 168 and subnet mask 255 255 255 0 which will work well for most installations In most cases leave the default LAN IP address and subnet mask unchanged VA Note The LAN IP address is the address you will use to access the SonicWALL TZ 170 Wireless management interface Click Next 7 LAN DHCP Settings The LAN DHCP Settings screen allows you to select whether or not to use the DHCP server in the Sonic WALL TZ 170 Wireless to automatically distribute IP addressing information to computers and other network devices on your LAN Enable DHCP Server Leave this checkbox checked to use the DHCP server in the on LAN SonicWALL TZ 170 Wireless security appliance Do not select this option if you already have a DHCP server on your network or if you want to require your network clients to have s
5. 5 Hang the mounting plate on the screws Use the middle row of mounting holes 6 Slide the plate down to the narrowest part of the keyhole so that the mounting plate rests on the screws 7 Tighten the mounting screws to secure the mounting plate wo AO ama a rg SonicWALL TZ 170 Wireless Getting Started Guide Page 35 8 Snap the SonicWALL TZ 170 Wireless onto the mounting plate Mounting Models the SonicWALL TZ 170 Wireless on the Ceiling 1 Locate a metal support to hang the SonicWALL TZ 170 Wireless 2 Using the mounting plate as a template mark the places to insert the mounting anchors 3 Drill two holes for 6 x 1 1 4 screws in the marked location 5 Hang the mounting plate on the screws Page 36 Slide the plate down to the narrowest part of the keyhole so that the mounting plate rests on the screws Tighten the mounting screws to secure the mounting plate SonicWALL TZ 170 Wireless Getting Started Guide Page 37 8 Snap the Sonic WALL TZ 170 Wireless onto the mounting plate F Gani 3 Ka AA a ag rhe aaa PA i mG Pee oa 7 i e Pag J PA ng Fl s 5 F i E7 1 Pal 5 o apes on ka bi i z na Page 38 Copyright Notice 2005 SonicWALL Inc All rights reserved Under the copyright laws this manual or the software described within can not be copied in whole or part without the written consent of the manufacturer except in the normal use of the software to make
6. e One mounting kit e Two antennas e One SonicWALL SonicWALL TZ 170 Wireless Resource CD The RJ45 CLI cable is only included with the purchase of a SonicWALL TZ 170 Wireless with SonicOS Enhanced A power cord is included only with units shipped to North America SonicWALL TZ 170 Wireless Getting Started Guide Page 1 SonicWALL TZ 170 Wireless Front and Back Panels Overview Console Port WAN Port Optional Port LAN Ports 15 Power jreless PoE Indicator Wireless LAN 1 5 On Activity Link Activity Test Light Power Light iFiSec Enforcement on act WiFiSec KK f nin Hl wireless access point opt wan Page 2 SonicWALL TZ 170 Wireless Configuration Steps Collecting Required Information page 4 Setting Up the SonicWALL TZ 170 page 5 Connecting the Sonic WALL TZ 170 Wireless page Accessing the Management Interface page 8 Using the SonicWALL Setup Wizard page 10 Testing Your Connection page 17 Registering Your SonicWALL TZ 170 Wireless page 18 Activating SonicWALL Security Services page 21 Connecting Wireless Clients to the SonicWALL TZ 170 Wireless page 24 O Connecting Computers to Your SonicWALL TZ 170 Wireless page 27 What You Need to Begin e A computer to use as a management station for initial configuration of the SonicWALL TZ 170 Wireless e An Internet connection e A Web browser supporting Java and HTTP uploads Internet Explorer 5 0 or higher Netscape Navigator
7. IP address for a resource in your network that is published outside your network to the WAN Router A device that routes data between networks through IP address information in the header of the IP packet A router forwards packets to other routers until the packets reach their destination The Internet is the largest example of a routed network SSID A Service Set Identifier is a unique string of characters that identifies a wireless network SonicWALL TZ 170 Wireless Getting Started Guide Page 31 Page 32 Subnet A portion of a network Each subnet within a network shares a common network address and is uniquely identified by a subnetwork number Subnet Mask A 32 bit number used to separate the network and host sections of an IP address A subnet mask subdivides an IP network into smaller pieces An example of a subnet mask might be 255 255 255 248 for subnet with only eight IP addresses TCP IP Transmission Control Protocol Internet Protocol is the basic communication protocol of the Internet It supports sending information in packets and identifies each device with a unique numeric IP address VPN A Virtual Private Network is a virtual network that encrypts data and sends it privately over the Internet to protect sensitive information WAN A Wide Area Network is a geographically distributed network composed of multiple networks joined into a single large network The Internet is a global WAN WLAN A Wireless Local Ar
8. If you have more than one address enter the second one in the Alternate DNS server field 10 Click OK and then click OK again 11 Restart the computer for changes to take effect Windows 98 1 In the Start menu select Settings and then select Control Panel 2 Open Network 3 Double click TCP IP in the TCP IP Properties window 4 Select Specify an IP Address 5 Type an IP address from your LAN IP range in the IP Address field 6 Type 255 255 255 0 in the Subnet Mask field 7 Type the Sonic WALL TZ 170 Wireless LAN IP Address in the Default Gateway field 8 Click DNS Configuration 9 Type the DNS IP address in the Preferred DNS Server field If you have more than one address type the second one in the Alternate DNS server field 10 Click OK and then click OK again 11 Restart the computer for changes to take effect Glossary of Networking Terms Default Gateway A device on an Internetwork that forwards packets to another network DHCP Dynamic Host Configuration Protocol allocates IP addresses to computers on the network automatically without assigning a computer a static fixed IP address DNS A Domain Name System is a hierarchical naming system that resolves a domain name with its associated IP address A DNS server looks up the name of a computer and finds the corresponding IP address This allows users to access hosts using friendly text based names instead of IP addresses These names are called fully q
9. Not Appear If you cannot connect to the SonicWALL TZ 170 Wireless appliance or the Setup Wizard does not display verify the following configurations e Did you correctly enter the SonicWALL TZ 170 Wireless management IP address 192 168 168 168 in your Web browser e s your computer running pop up blocking software e Are the Local Area Connection settings on your computer set to obtain an IP address dynamically DHCP or set to a static IP of 192 168 168 20 See Configuring Computers for Your Network with DHCP on page 27 for instructions on changing your Local Area Connection settings e Do you have the Ethernet cable connected to your computer and to one of the LAN ports 1 through 5 on your SonicWALL TZ 170 Wireless e Some browsers may not launch the Setup Wizard automatically In this case log into SonicWALL TZ 170 Wireless using admin as the user name and password as the password After you log in click the Wizards button on the System 7 Status page Select Setup to begin configuring your SonicWALL TZ 170 Wireless e Some popup blockers may prevent the launch of the setup wizard You can temporarily disable your popup blocker or add the management IP address of your Sonic WALL 192 168 168 168 by default to your popup blocker s allow list SonicWALL TZ 170 Wireless Getting Started Guide Page 9 Page 10 O Using the SonicWALL Setup Wizard The Sonic WALL Setup Wizard provides user guided instructions f
10. 4 7 or higher Mozilla 1 7 or higher or Mozilla Firefox are recommended SonicWALL TZ 170 Wireless Getting Started Guide Page 3 o Collecting Required Information Internet Service Provider ISP Information Collect the following information about your Internet service If you connect You probably Please record Via use Cable modem DHCP No Internet connection information usually required DSL with a router Some service providers require a host name Check with your ISP Host Name Home DSL PPPoE User Name Password Note Your ISP may require your user name in the format name SP com T1 Static IP IP Address Static broadband Subnet Mask Default Gateway Cable or DSL with Router IP Address a static IP Primary DNS Secondary DNS optional Dial in to a server PPTP Server Address User Name o ccqccqfqfqflf OZO OoOO O OO Password Note fyou are not using one of the network configurations above refer to the SonicOS Standard Administrator s Guide Other Information SonicWALL Management Interface To access the SonicWALL TZ 170 Wireless Web based management interface These are the default settings which you can modify User Name admin Password password Page 4 Setting Up the SonicWALL TZ 170 Physically setting up your SonicWALL security appliance involves e Installing the Antennas e Adjusting the Antennas e Applying Power e Applying Power with the SonicWALL Power over E
11. M WAN M LAN 3 Inthe Signature Groups table select Prevent All for High Priority attacks Click ES in the top right corner of the page Enabling Gateway Anti Virus Service 1 2 3 Select the Security Services gt Gateway Anti Virus page in the Sonic WALL management interface In the Gateway Anti Virus Global Settings section click the Enable Gateway Anti Virus on Interface checkbox and check the WAN and LAN interface boxes Gateway Anti Virus Global Settings MV Enable Gateway Anti Virus on Interface lV WAN M LAN Click IT in the top right corner of the page Enabling Anti Spyware Service 1 2 Select the Security Services gt Anti Spyware page in the Sonic WALL management interface In the Gateway Anti Spyware Global Settings section click the Enable Anti Spyware checkbox Select which interfaces you want to apply Anti Spyware service on You can select any combination of WAN LAN and OPT For best protection from spyware select the Prevent All checkbox for High Medium and Low danger levels This will block all spyware that can be detected Anti Spyware Global Settings MV Enable Anti Spyware on Interface Iv WAN M LAN T OPT Signature Groups Prevent All Detect All Log Redundancy Filter seconds High Danger Level Spyware Iv O fo Medium Danger Level Spyware lv m fo O Low Danger Level Spyware O IV Click IT in the top right corner of the page SonicWALL TZ 170 Wireless Getting St
12. Protects hosts on your network from viruses by enforcing the use client based Anti Virus software Premium Content Filtering Service Enhances productivity by limiting access to objectionable Web content At the end of your free trial period the services will automatically expire unless you purchase a subscription from your reseller or at lt https Awww mySonicWALL com gt Activate the Sonic WALL Security Services If your SonicWALL management interface is displaying the Manage Services Online table on the System gt Licenses page skip to Step 5 1 2 3 Log in to your SonicWALL management interface In the left navigation menu click System and then Licenses Near the bottom of the System gt Licenses page under Manage Security Services Online click the link For Free Trials Click Here Log in with your mySonicWALL com account name and password if prompted In the Manage Services Online table click Try in the Free Trial column for Gateway Anti Virus In the SonicWALL Gateway Anti Virus page click Continue Your Gateway Anti Virus Anti Spyware and Intrusion Prevention Service free trial is now activated In the Manage Services Online table click Try in the Free Trial column for Network Anti Virus and for CFS Premium Service to activate the Complete Anti Virus and Content Filtering Service CFS free trials SonicWALL TZ 170 Wireless Getting Started Guide Page 21 Page 22 Your SonicWALL Security Service free t
13. Using the WLAN GroupVPN Policy 1 2 3 In the SonicWALL Global VPN Client window double click the Office Gateway profile Depending on your configuration the Connection Warning dialog box may display Connection Warning X A Traffic is only allowed to secured peers Enabling this connection will block all traffic that does not get sent to a secured peer This means that you may no longer be able to browse the Internet share local files etc Do you want to continue FT Ifyes don t show this dialog again Click Yes to continue In the Enter Username Password dialog box enter the authentication credentials for the user configured on the Sonic WALL security appliance s local user database for access to the WLAN GroupVPN such as WiFiSec user you created in the Setup Wizard xl Enter Username Password This peer requires that you log in with a username and password Please enter your usemame and password assigned to you by your network administrator Usemame poe User Password E The peer does not allow saving of usemame and password Lok o 4 Click OK You now have secure wireless access Note The status in the GVC window will display Connected when the connection is established If it displays Enabled you are not yet authenticated with the VPN Connecting Computers to Your SonicWALL TZ 170 Wireless You can attach up to ten twenty five or an unlimited number computers
14. a backup copy The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original This exception does not allow copies to be made for others whether or not sold but all of the material purchased with all backup copies can be sold given or loaned to another person Under the law copying includes translating into another language or format Specifications and descriptions subject to change without notice Trademarks SonicWALL is a registered trademark of SonicWALL Inc Microsoft Windows 98 Windows NT Windows 2000 Windows XP Windows Server 2003 Internet Explorer and Active Directory are trademarks or registered trademarks of Microsoft Corporation Netscape is a registered trademark of Netscape Communications Corporation in the United States and other countries Netscape Navigator and Netscape Communicator are also trademarks of Netscape Communications Corporation and may be registered outside the United States Adobe Acrobat and Acrobat Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and or other countries Mozilla and Firefox are trademarks of the Mozilla Foundation Other product and company names mentioned herein may be trademarks and or registered trademarks of their respective companies and are the sole property of their respective manufacturers SonicWALL TZ 170 Wireless Getting Started Guide Page 39 Notes P
15. ace click System in the left navigation menu SONICWALL Status 3 On the System gt Status page in the Security Services section click the Register link Nodes Users 10 Nodes 0 in use 4 is Ths Your SonicWALL is not registered Click here to Reaister your SonicWALL R BO1S1BF Y To manually register Te aber the following information Serial Number 0006B112514B P Authentication Code FUAU DE2R ster and go to the SonicWALL Web site You will be given a registration code which you should enter below 4 In the mySonicWALL com Login page click the here link in If you do not have a mySonicWALL account please click here to create one The mySonicWALL com account form is displayed 5 In the MySonicWall Account page enter in your information in the Account Information Personal Information and Preferences fields All fields marked with an asterisk are required fields Note Remember your username and password to access your mysSonicWALL com account 6 Click Submit after completing the MySonicWALL Account form 7 When the mySonicWALL com server has finished processing your account you will see a page saying that your account has been created Click Continue Congratulations Your mySonicWALL com account is activated SonicWALL TZ 170 Wireless Getting Started Guide Page 19 Page 20 Registering Your SonicWALL TZ 170 Wireless 1 If you are not logged into the Son
16. age 40 SonicWALL Inc 1143 Borregas Avenue T 408 745 9600 www sonicwall com Sunnyvale CA 94089 1306 F 408 745 9300 2005 SonicWALL Inc SonicWALL is a registered trademark of SonicWALL Inc Other product and company names mentioned herein may be trademarks and or registered trademarks of their respective companies Specifications and descriptions subject to change with out notice P N 232 000789 00 RevA 06 05 DB SONICWALL
17. arted Guide Page 23 Page 24 Connecting Wireless Clients to the SonicWALL TZ 170 Wireless For wireless clients to connect to your Sonic WALL TZ 170 Wireless security appliance they need e Awireless network card installed and configured for the Sonic WALL security appliance s service set identifier SSID which you set up in Procedure 5 Using the Sonic WALL Setup Wizard Step 8 WLAN 802 11b g Settings on page 15 e SonicWALL Global VPN Client GVC or SonicWALL Global Security Client GSC installed and configured for a secure wireless connection Connecting to the Wireless Network You connect to the wireless network according to the requirements of your client operating system Your wireless client may automatically detect and display the SonicWALL security appliance s SSID in a list of available wireless networks or you may need to manually configure your wireless card with the SonicWALL security appliance s SSID Wireless Network Connection 2 x ee ee naaa To access a wireless network select it from the list and then click Connect Available wireless networks 4 TechPubs SonicPoint i SWPat This wireless network is not secure Because a network key WEP is not used for authentication or for data encryption data sent over this network might be subject to unauthorized access jv Mian can ee wine melai even though it F you are having difficulty connecting to a network click Advanced Advanced
18. ate SonicWALL security service licenses e Access SonicOS firmware updates e Obtain SonicWALL technical support Before You Register Verify that the time and DNS settings on your SonicWALL security appliance are correct when you register the device You should have set these settings in Procedure 5 Using the SonicWALL Setup Wizard Step 3 Change Time Zone on page 17 and Step 5 WAN Network Mode on page 12 You need a mySonicWALL com account to register your SonicWALL security appliance You can create a new mySonicWALL com account directly from the SonicWALL management interface If you already have a mysonicWALL com account go to Registering Your SonicWALL TZ 170 Wireless on page 20 to register your SonicWALL security appliance Note mySonicWALL com registration information is not sold or shared with any other company Creating a mySonicWALL com Account Creating a mySonicWALL com account is fast simple and FREE Simply complete an online registration form in the SonicWALL TZ 170 Wireless management interface If you already have a mysonicWALL com account go to Registering Your SonicWALL TZ 170 Wireless on page 20 to register your SonicWALL security appliance 1 Ifyou are not logged into the SonicWALL TZ 170 Wireless management interface log in with the username admin and the administrative password you set in the Setup Wizard 2 Ifthe System gt Status page is not displayed in the management interf
19. b COMPREHENSIVE INTERNET SECURITY SonicWALL Security Appliances SonicWALL TZ 170 Wireless Getting Started Guide SONICWALL SONICWALL TZ 170 Wireless Security Appliance Getting Started Guide The SonicWALL TZ 170 Wireless security appliance is a total security platform for both your wired and wireless network delivering enterprise class layered security by integrating 802 11b g wireless networking gateway anti virus intrusion prevention and content filtering capabilities in an easy to use low cost platform This Getting Started Guide provides instructions for basic installation and configuration of the Sonic WALL TZ 170 Wireless After you complete this guide computers on your wired and wireless network will have secure Internet access A Note For complete documentation refer to the SonicOS Standard Administrator s Guide on the SonicWALL Resource CD or at lt http www sonicwall com support documentation html gt Before You Begin Check Package Contents Any Items Missing e One SonicWALL TZ 170 Wireless If any items are missing from your package security appliance contact e One SonicWALL TZ 170 Wireless SonicWALL Support Getting Started Guide Web lt http www sonicwall com support gt One SonicOS Standard E mail customer_service sonicwall com Release Notes e One straight through Ethernet cable e One crossover Ethernet cable red e One RJ45 CLI cable e One 5 Volt DC power supply e One power cord
20. controlled in the USA Lithium Battery Warning The Lithium Battery used in the SonicWALL security appliance may not be replaced by the user Return the SonicWALL security appliance to a SonicWALL authorized service center for replacement with the same or equivalent type recommended by the manufacturer If for any reason the battery or SonicWALL security appliance must be disposed of do so following the battery manufacturer s instructions Cable Connections All Ethernet cables are designed for intra building connection to other equipment Do not connect these ports directly to communication wiring or other wiring that exits the building where the SonicWALL TZ 170 Wireless is located SonicWALL TZ 170 Wireless Getting Started Guide Page 33 Mounting the SonicWALL TZ 170 Wireless Wall Mounting the SonicWALL TZ 170 Wireless Follow the instructions below to mount the SonicWALL TZ 170 Wireless on the wall 1 Using the mounting plate as a template mark the places to insert the mounting anchors 2 Using a 2 Phillips screw driver press the tip of the anchor into the marked places on the hollow wall 3 Turn the screwdriver clockwise until the anchor is flush with the wall Repeat for the second anchor Blg SGY 3 ER e sala El ane Ka i res Li PERES Dian phir Lien a N Bi Sda a om 4 Insert a 6 x 11 4 pan head Phillips self tapping screw into each anchor leaving a gap for the mounting plate Page 34
21. depending on your license in any combination of wired and wireless connections to your SonicWALL TZ 170 Wireless TI 47 K LAN 5 LAN 4 LAN 2 O Sug Configuring Computers for Your Network with DHCP If you enabled the DHCP Server in the Setup Wizard each computer on your network must be configured to obtain its IP address dynamically The following steps provide instruction on changing the Local Area Connection settings for four versions of Microsoft Windows e Windows XP e Windows 2000 e Windows NT e Windows 98 L Note f you are not using DHCP refer to the SonicOS Standard Administrator s Guide SonicWALL TZ 170 Wireless Getting Started Guide Page 27 Page 28 Windows XP 1 Open the Local Area Connection Properties window Start 5 Settings 5 Network Connections on most versions of Windows XP Right click on the Local Area Connection icon and select Properties In the list of connection items select Internet Protocol TCP IP and click Properties Select Obtain an IP address automatically Select Obtain DNS Server automatically Click OK and then OK again to apply the settings Windows 2000 Ab E Ola eS ET From your Windows Start menu select Settings Open Network and Dial up Connections Right click on the Local Area Connection icon and select Properties Highlight Internet Protocol TCP IP and click Properties select Obtain an IP address automatically select Obtain DNS Server a
22. e If you click Cancel no settings will be applied to the SonicWALL security appliance The Storing SonicWALL Configuration screen displays during this process Setup Wizard Complete Your SonicWALL TZ 170 Wireless is now successfully configured for LAN Wireless and Internet access Click Restart to complete the configuration process The SonicWALL security appliance will reboot which will take approximately one minute When the Test LED is no longer lit the SonicWALL security appliance is ready for network traffic QO Testing Your Connection 1 After the SonicWALL TZ 170 Wireless reboots and the login page reappears open another Web browser and navigate to lt http www sonicwall com gt If you can view the SonicWALL home page you have configured your SonicWALL TZ 170 Wireless correctly If you cannot view the SonicWALL home page try a second URL If you still cannot view a Web page try one of these solutions Restart your Management Station Your management station may need to restart to accept new network settings from the DHCP server in the SonicWALL security appliance Restart your DSL Modem Your DSL Modem may need to restart to communicate with the DHCP Client in the SonicWALL security appliance Enter a Host Name in your WAN DHCP Settings If you selected DHCP for your WAN settings you may need to specify a host name for your connection a Check with your ISP to see if a host name is required b Goto Procedure 4
23. ea Network is a LAN with wireless connections instead of physical connections SONICWALL TZ 170 Wireless Security Appliance Regulatory Statement and Safety Instructions Regulatory Model Type Product Name APL14 034 SonicWALL TZ 170 Wireless VA Note Detailed regulatory information can be found in the electronic file SonicWALL Products Regulatory Statement pdf located on the Sonic WALL Resource CD provided with the unit Power Supply Information Models APL14 034 If you need to order a power supply for your Sonic WALL TZ 170 Wireless contact SonicWALL Technical Support at 408 752 7819 for a replacement A Alert This product should only be used with a UL listed power supply marked Class 2 or LPS with an output rated 5 VDC minimum 2 4 A Considerations for Mounting the APL14 034 e Mount in a location away from direct sunlight and sources of heat A maximum ambient temperature of 104 F 40 C is recommended e Route cables away from power lines fluorescent lighting fixtures and sources of noise such as radios transmitters and broadband amplifiers e Ensure that no water or excessive moisture can enter the unit e Allow unrestricted airflow around the unit and through the vents on the side of the unit A minimum of 1 inch 25 44mm clearance is recommended North American Authorized Channels SonicWALL declares that the APL14 034 when sold in US or Canada is limited to CH1 CH11 by specified firmware
24. egular power supply or it can get power through the LAN 1 Ethernet port using the an 802 3af standard PoE injector like the SONICWALL PoE Injector To apply power with the PoE injector 1 2 To power source Plug the power cord of the PoE injector into the power outlet Connect an Ethernet cable to the Data and Power out port on the PoE Injector and connect the other end of the cable to the LAN 1 port on the back of your SonicWALL TZ 170 Wireless Alert The PoE Injector Ethernet cable must be inserted into the LAN 1 port only to power the SonicWALL TZ 170 Wireless na f Ethernet cable Data in Data and Power out Sonic WALL PoE Injector To LAN amp Connecting the SonicWALL TZ 170 Wireless Connecting the WAN Cable to the Internet Internet DSL or Cable Modem 1 Connect one end of an Ethernet cable to your Internet connection such as a DSL modem or cable modem This cable may already be connected between your computer and your modem If so disconnect it from your computer and leave it connected to the Internet 2 Connect the other end of the cable to the WAN port on the back of your SonicWALL TZ 170 Wireless The WAN LED on the front panel light up indicating an active connection WAN Management Station LAN port 1 1 Connect one end of an Ethernet cable to the computer you are using to manage the SonicWALL TZ 170 Wireless 2 Connect the other end of the cable to port 1
25. he administrative password This is the password for the admin account Old Password Should be populated with the default password password Enter your new password Re enter your new password Note Keep your new password in a safe place If you lose your password you will have to reset the SonicWALL security appliance to factory settings and lose your configuration For instructions on resetting your Sonic WALL security appliance refer to the SonicOS Standard Administrator s Guide Click Next Change Time Zone Change the Time Zone setting to your local time zone Select the time zone for your location from the list Automatically Check this setting if you live in an area that observes Daylight adjust clock for Saving Time daylight saving time Note It is important that you set the time zone correctly before you register your SonicWALL TZ 170 Wireless Click Next WAN Network Mode The Setup Wizard automatically detects most networking modes If it does not detect a networking mode you may have a static IP address see Procedure 1 Collecting Required Information on page 4 Confirm the selection or select the correct type of network connection for your network Select Static IP if you want to give the SonicWALL TZ 170 Wireless a specific unchanging IP address DHCP Select DHCP if your ISP assigns your computer a dynamic IP address DHCP is commonly used with cable modems PPPoE Select PPPoE if your ISP
26. ic WALL TZ 170 Wireless management interface log in with the username admin and the administrative password you set in the Setup Wizard If the System 7 Status page is not displaying in the management interface click System in the left navigation menu SONICWALL gt ME Ww Status fm Licenses ff Administration f Time On the System gt Status page in the Security Services section click the Register link The mySonicWALL com Login page is displayed mySonicWALL com Login mySonicWALL com is a one stop resource for registering all your SonicWALL Internet Security Appliances and managing all your SonicWALL security service upgrades and changes mySonicWALL provides you with an easy to use interface to manage services and upgrades for multiple SonicWALL appliances For more information on mySonicWALL please visit the FAQ If you do not have a mySonicWall account please click here to create one Otherwise please enter your existing mySonicWALL com username and password below User Name myaccount Enter your mySonicWALL com account username and password in the User Name and Password fields then click Submit The next several pages inform you about SonicWALL s Security Services Click Continue on each page At the top of the Product Survey page enter a friendly name for your SonicWALL security appliance in the Friendly Name field The friendly name allows you to easily identify your SonicWALL security appliance in you
27. k Next PPPoE The Setup Wizard screen should display WAN Network Mode NAT with PPPoE Client Obtain an IP Address Select this if your ISP assigns you a dynamic IP address Automatically Use the following Select this if your ISP has assigned you a static IP address IP Address and enter the address PPPoE User Name Enter the user name for your Internet account Your ISP may require you to enter your username in e mail address format including and the domain name for example joe user sonicwall com PPPoE Password Enter the password for your Internet account Inactivity Disconnect Check this box if you want the SonicWALL TZ 170 Wireless minutes to disconnect from the Internet if there is no traffic for the number of minutes you enter Click Next PPTP The Setup Wizard screen should display WAN Network Mode NAT with PPTP Client PPTP Server IP Enter the address of the PPTP server Address PPTP User Name Enter your network user name PPTP Password Enter your network password Obtain an IP Address Select this if the server assigns you a dynamic IP address Automatically Use the following Check this if you have been given a static IP address and fill IP Address in the following three fields SonicWALL WAN Enter the static IP address for your connection IP Address WAN Subnet Mask Enter the subnet mask for your connection Gateway Router Enter the address of your Internet Gateway Address
28. latest GVC installer at SonicWALL s product Web site at lt http help mysonicwall com applications vpnclient gt Creating an Office Gateway Connection Profile Using the New Connection Wizard 1 In your Windows Start Menu select Start gt Programs gt SonicWALL Global VPN Client The first time you open SonicWALL GVC the New Connection Wizard automatically launches Welcome to the New Connection S Wizard This wizard will guide you through the process of adding a new connection to your configuration If the New Connection Wizard does not display click the New Connection Wizard icon on the far left side of the toolbar to launch it Click Next 2 Inthe Choose Scenario page select Office Gateway Click Next SonicWALL TZ 170 Wireless Getting Started Guide Page 25 Page 26 3 In the Completing the New Connection Wizard page select any of the following options e Select Create a desktop shortcut to this connection if you want to create a shortcut icon on your desktop for this VPN connection e Select Enable this connection when the program is launched if you want to automatically establish this VPN connection when you launch the Sonic WALL Global VPN Client Click Finish The new VPN connection policy appears in the SonicWALL Global VPN Client window If you selected to enable the connection automatically it will display the Enter Username Password screen immediately Establishing a WiFiSec VPN Connection
29. or configuring your SonicWALL TZ 170 Wireless Note It is important that you have collected any required ISP information before using the Setup Wizard See the list in Procedure 1 Collecting Required Information on page 4 Tip f you do not know what type of Internet connection you have contact your ISP In addition the SonicWALL Setup Wizard will attempt to detect your connection settings Configuring the SonicWALL TZ 170 Wireless Welcome Click Next to begin 1 Deployment Scenario Select the wireless deployment scenario that best matches your deployment requirements Clicking on the deployment scenario link displays a diagram of the deployment to show how the scenario is best used Step 1 Deployment Scenario Select the appropriate deployment scenario for your SonicvyAl access for my wired and wireless users ecure Access Point Add secure wireless access to an existing wired network Guest Internet Gateway Provide guests controlled wireless access to the Internet only Wireless Bridge Operate in Wireless Bridge mode to securely bridge This Getting Started Guide follows the procedure for setting up an Office Gateway deployment which is a commonly used wireless deployment for LAN and WLAN to Internet connectivity For instructions on setting up other wireless network deployments refer to the SonicOS Standard Administrator s Guide Select Office Gateway and click Next Change Password Change t
30. or ports 2 5 if you are using a PoE injector on the back of your SonicWALL TZ 170 Wireless The port LED on the front panel light up indicating an active connection gt on act WiFiSec P KA 17 SonicWALL TZ 170 Wireless Getting Started Guide Page 7 Accessing the Management Interface The computer you use to manage the SonicWALL TZ 170 Wireless must be set up to accept a dynamic IP address or have an unused IP address in the 192 168 168 x 24 subnet such as 192 168 168 20 For instructions on configuring your IP address see Configuring Computers for Your Network with DHCP on page 27 To access the Web based management interface of the SonicWALL TZ 170 Wireless 1 On the management station you have connected to your SonicWALL TZ 170 Wireless start your Web browser A Alert Disable pop up blocking software or add the management IP address of your SonicWALL 192 168 168 168 by default to your popup blocker s allow list before accessing the SonicWALL management interface Your Web browser must support Java and HTTP uploads Current versions of Internet Explorer Netscape Navigator Mozilla and Firefox are recommended 2 Enter 192 168 168 168 the default LAN management IP address in the Location or Address field 3 The SonicWALL Setup Wizard launches and guides you through the configuration and setup of your Sonic WALL TZ 170 Wireless Page 8 If the Sonic WALL Setup Wizard Does
31. r mySonicWALL com account Please complete the Product Survey SonicWALL uses this information to further tailor services to fit your needs Note SonicWALL Product Survey information is not sold or shared with any other company Click Submit When the mySonicWALL com server has finished processing your registration you will see a page informing you that your SonicWALL TZ 170 Wireless appliance is registered Click Continue and the System gt Licenses page is displayed showing the available security services You can activate the services from this page now or at any time in the future Congratulations Your Sonic WALL TZ 170 Wireless is now fully operational You can continue with this Getting Started Guide to Activate Sonic WALL Security Services Set up secure wireless access to your SonicWALL security appliance Set up computers on your network for secure Internet access Mount your Sonic WALL TZ 170 Wireless on a wall ceiling or other surface O Activating SonicWALL Security Services When you register your Sonic WALL TZ 170 Wireless you are eligible for a Free Trial of the Sonic WALL Security Services Gateway Anti Virus Anti Spyware Intrusion Prevention Service Provides real time protection for all hosts behind your Sonic WALL from viruses spyware worms and application layer attacks using deep packet inspection to detect and prevent malicious content before it can reach hosts on your network Network Anti Virus
32. range in the IP address field Type 255 255 255 0 in the Subnet Mask field Type the SonicWALL TZ 170 Wireless LAN IP Address into the Default Gateway field Type the DNS IP address in the Preferred DNS Server field If you have more than one address type the second one in the Alternate DNS server field Click OK for the settings to take effect ndows 2000 From your Windows Start menu select Settings Open Network and Dial up Connections Click Properties Highlight Internet Protocol TCP IP and click Properties Select Use the following IP address Type an IP address from your LAN IP range IP address field Type 255 255 255 0 in the Subnet field Type the SonicWALL TZ 170 Wireless LAN IP Address into the Default Gateway field If you have a DNS Server IP address from your ISP enter it in the Preferred DNS Server field Click OK for the settings to take effect SonicWALL TZ 170 Wireless Getting Started Guide Page 29 Page 30 Windows NT 1 From the Start menu highlight Settings and then select Control Panel 2 Open Network 3 Double click TCP IP in the TCP IP Properties window 4 Select Specify an IP Address 5 Type an IP address from your LAN IP range in the IP Address field 6 Type 255 255 255 0 in the Subnet Mask field 7 Type the Sonic WALL TZ 170 Wireless LAN IP Address in the Default Gateway field 8 Click DNS at the top of the window 9 Type the DNS IP address in the Preferred DNS Server field
33. requires a username and password to establish a connection and assign a dynamic address PPPoE is commonly used with DSL modems PPTP Select PPTP if you dial into a specific server and log into a VPN to establish a connection With PPTP you can have either a static or dynamic IP Address Click on the yellow link for a networking type to see a definition Click Next SonicWALL TZ 170 Wireless Getting Started Guide Page 11 Page 12 5 WAN Network Mode The second WAN network mode screen configures your WAN settings for the selection you made in the previous screen Static IP The Setup Wizard screen should display WAN Network Mode NAT Enabled Static IP SonicWALL WAN IP Enter a single static IP address This must be in the Address address range assigned to you by your ISP WAN Subnet Mask Enter the subnet mask for your network provided by your ISP For example 255 255 255 0 Gateway Router Enter the IP address of your Internet gateway provided by Address your ISP DNS Server Address Enter the IP address of the DNS server for your network provided by your ISP DNS Server Address You can enter a secondary back up DNS server to use if 2 optional the first one fails Click Next DHCP The Setup Wizard screen should display WAN Network Mode NAT with DHCP Client If you selected DHCP you do not need to enter any WAN networking settings The network settings are provisioned automatically from a DHCP server Clic
34. rials are now activated You must now enable each service on your Sonic WALL security appliance Use the following instructions to configure each service with its default values For complete configuration instructions see the administrative guides available on your Sonic WALL resource CD and on the Web at http www sonicwall com support documentation htmIs Enabling Premium Content Filtering Service 1 Select the Security Services gt Content Filter page in the Sonic WALL management interface 2 Select the LAN checkbox to apply the filter to all computers on your LAN interface Content Filter Type TITE m e Web Features on ae 3 Click Configure select the categories to block in the URL List tab and click OK 4 Click CITI in the top right corner of the page Enabling Network Anti Virus Service 1 Select the Security Services gt Network Anti Virus page in the SonicWALL management interface 2 Select the Enable Anti Virus checkbox Settings jv Enable Anti Virus 3 Click E in the top right corner of the page Users on your network will be prompted to download the Sonic WALL Anti Virus client Enabling Intrusion Prevention Service 1 Select the Security Services gt Intrusion Prevention page in the SonicWALL management interface 2 Inthe IPS Global Settings section click the Enable IPS on Interface checkbox and check the WAN and LAN interface check boxes IPS Global Settings V Enable IPS on Interface
35. tatic IP addresses LAN Address Range If you enabled the DHCP Server enter a range of IP addresses in the same subnet as the LAN IP address or leave the default range unchanged The default DHCP range will work for most installations Click Next Page 14 8 WLAN 802 11b g Settings The WLAN 802 11b g Settings screen allows you to configure your wireless network settings For security reasons change this setting Enter a unique name to identify the wireless connection The SSID can con tain up to 32 numbers and letters Radio Mode Select the transmission standard to use The default Mixed works for most office and home settings Country Code Select the country where you are deploying this Sonic WALL security appliance This configures the channels used to comply with regulations in your country Channel Select the broadcast channel you want the SonicWALL secu rity appliance to use The default AutoChannel automati cally detects the channel with the least interference See Sonic WALL TZ 170 Wireless Security Appliance Regulatory Statement and Safety Instructions on page 33 for information on authorized channels Click Next 9 WiFiSec VPN Client User Authentication WiFiSec is a Sonic WALL wireless security implementation that uses an IPSec VPN to secure wireless network connections The WiFiSec screen allows you to create a VPN user for your wireless network UserName Enter a user name for the VPN user
36. thernet PoE Injector Installing the Antennas To use the wireless feature of the SonicWALL TZ 170 Wireless you must install the antennas on the back of the appliance Remove the antennas from the bag and place one on each connector Finger tighten the fittings on the connectors Adjusting the Antennas You can adjust the antennas for best radio reception In most cases the antennas should be pointing straight up and perpendicular to the box Start from that position and move them until you notice better reception Certain area such as the area directly below the SonicWALL TZ 170 Wireless have relatively poorer reception SonicWALL TZ 170 Wireless Getting Started Guide Page 5 Page 6 Applying Power 1 Plug the power supply into back of the SonicWALL security appliance Bi and into an appropriate power outlet The Power LED on the front panel lights up green when you plug in the SonicWALL TZ 170 Wireless The Test LED lights up and may blink while the appliance performs a series of diagnostic tests When the Test light is no longer lit the Sonic WALL security appliance is ready for configuration If the Test LED remains lit after the SonicWALL TZ 170 Wireless has booted restart the Sonic WALL security appliance For more trouble shooting information refer to the SonicOS Standard Administrator s Guide Applying Power with the SonicWALL Power over Ethernet PoE Injector The SonicWALL TZ 170 Wireless can use a r
37. ualified domain names FQDN IP Address An Internet Protocol Address is a thirty two bit number that identifies a computer or other resource on the Internet or on any TCP IP network The number is usually expressed as four numbers from 0 to 255 separated by periods for example 172 16 31 254 ISP An Internet Service Provider is the company that provides a connection to the Internet LAN A Local Area Network is typically a group of computers located at a single location and is commonly based on the Ethernet architecture NAT Network Address Translation is an Internet standard that allows your local network to use private IP addresses which are not recognized on the Internet The IP address used for the router is the only routable IP address The computers behind the NAT can access the Internet through the router but Internet users cannot access the computers behind the router Packet A unit of information transmitted over the Internet or within any TCP IP network Packets have a header which contains information about the source destination and protocol to be used for the data and a body which contains the data being transmitted PPPoE The Point to Point Protocol over Ethernet supports the transmission of network packets over an analog phone line Private IP Address An IP address for a resource in your network that is not known or published outside the zone for example LAN where it is located Public IP Address An
38. utomatically Click OK and then OK again to apply the settings Windows NT OO CO OB ae ee From the Start list highlight Settings and then select Control Panel Open Network Double click TCP IP in the TCP IP Properties window Select Obtain an IP address automatically Click DNS at the top of the window Select Obtain DNS Server automatically Click OK and then click OK again Restart the computer to apply the settings Windows 98 POE EN O a SG NO ES In the Start menu select Settings and then select Control Panel Open Network Double click TCP IP in the TCP IP Properties window Select Obtain IP Address automatically Click DNS Configuration Select Obtain DNS Server automatically Click OK and then click OK again Restart the computer to apply the settings Static IP If you did not enable the Sonic WALL security appliance DHCP server you must configure each computer with a static IP address from your LAN or WLAN IP address range After the Sonic WALL TZ 170 Wireless has restarted follow the steps below for configuring your network clients running any of the following Microsoft Windows operating systems on your LAN WLAN Windows XP 1 2 T Wi Po T Ole oS 9 10 Open the Local Area Connection Properties window Double click Internet Protocol TCP IP to open the Internet Protocol TCP IP Properties window Select Use the following IP address and type an IP address from your LAN IP
Download Pdf Manuals
Related Search