sonicwall™ sonicpoint aci · sonicwall sonicpoint aci getting started guide 3 1 introduction in...

SonicWallSonicPointACiGettingStartedGuide

RegulatoryModelNumber:APL270B1

Copyright2017SonicWallInc.Allrightsreserved.SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.AllothertrademarksandregisteredtrademarksarepropertyoftheirrespectiveownersTheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliatesproducts.Nolicense,expressorimplied,byestoppelorotherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERANDDISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANTYRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSE,ORNONINFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespecttotheaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytimewithoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.

Formoreinformation,visithttps://www.sonicwall.com/legal/.

SonicPointACiGettingStartedGuideUpdatedJanuary201723200341050RevA

Legend

WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.

CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.

IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

https://www.sonicwall.com/legal/

1

Introduction

InthisguideThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWallSonicPointACiwirelessaccesspointinsingleunitormultiunitwirelessdeployments.

Chapter1 Topics

Introductiononpage3 Wirelessoverviewonpage5

Chapter2 Topics

InitialSetuponpage9 Checkpackagecontentsonpage9 Deploymentrequirementsonpage10 SonicPointACiavailableports/statusLEDsonpage11 ConnectingEthernetcablesonpage13 Wirelessaccesspointplacementconsiderationsonpage14 MountingtheSonicPointACionpage16

SonicWallSonicPointACiGettingStartedGuide 3

Chapter3 Topics

ConfiguringSonicOSforwirelessaccessonpage21 ConfiguringSonicOSforSonicPointACionpage21 VerifyingSonicPointoperationonpage25 Troubleshootingtipsonpage26

Chapter4 Topics

Supportandproductregistrationonpage27 Registrationandsupportonpage27 Onlinesupportandtrainingonpage28

Chapter5 Topics

Productsafetyandregulatoryinformationonpage29 Mountingtheapplianceonpage30 VerwarnungWeiterehinweisezurmontageonpage31 EUandEFTAonpage32 Declarationofconformityonpage33

4 SonicWallSonicPointACiGettingStartedGuide

WirelessoverviewTheSonicPointACiispartofthenextevolutionarygenerationinwirelessaccesspointsaftertheSonicWallSonicPointNandNDR.

TheSonicPointACiprovidesphysicallayerenhancementsforhigherthroughputwithamaximumdatarateof1.3Gbps.Toachievethis,theSonicPointACiuses:

Widerchannels80MHzwidechannelsforthe802.11acradiomodule,whilecontinuingtosupport20/40MHzchannels.Thisallowsfordynamicperpacketnegotiationofchannelwidthssothatwhenthereisinterference,theSonicPointcantemporarilyfallbackto40or20MHzchannels.

Morespatialstreams3X3multipleinputandmultipleoutput,(MIMO)forthe802.11acradiomodule,wherethecapacityofaradiolinkismultipliedusingmultipathpropagation.


SonicWallwirelessfirewallingWhenawirelessdeviceusesaSonicWallSonicPointACiwirelessaccesspointtocommunicatewithawirelessdeviceonanothersubnetoronacompletelydifferentnetwork,trafficbetweenthedevicesisforcedtotraversetheSonicWallnetworksecurityappliance.ThistraversalenablessecurityservicestobeenforcedbySonicOS.

Standardpracticeforwirelessfirewalling(whereonewirelessclientiscommunicatingwithanother)bypassesmanyofthecriticalsecurityservices.Thefollowingillustrationshowsthestandardpracticeforwirelessfirewalling.

Standardwirelessfirewalling

Manysecurityproductsonthemarketsharethispotentialvulnerabilitywhentwousersconnectedbyacommonhuborwirelessaccesspointwishtoexchangedata.

SonicWalladdressesthissecurityshortcomingbymanagingtheSonicPointaccesspointsfromthenetworksecurityappliance.Thisallowscompletecontrolofthewirelessspace,includingzoneenforcementofsecurityservicesandcompletefirewallingcapabilities.

Securewirelessfirewalling

WLAN Zone Security Services

?

Content Filtering Service

Client Anti-Virus Enforcement

Gateway Anti-Virus

Gateway Anti-Spyware

Intrusion Prevention Service

Other Security Appliance

WLAN Zone Security Services

SonicWallappliance

SonicWallSonicPoint

Content Filtering Service

Client Anti-Virus Enforcement

Gateway Anti-Virus

Gateway Anti-Spyware

Intrusion Prevention Service

llnt


FrequencybandsandchannelsTherearecurrentlyfivewidelyadoptedstandardsfor802.11wirelessnetworktypes:a,b,g,n,andac.802.11nand802.11acarethenewestandhighestcapacitystandards,butolderclientdevicesmaynotbeabletoutilizethenewerstandards.

Differentfrequencybandsprovidevaryingsignalstrengthandqualityoverdifferentdistanceranges.Signalsinthe2.4GHzrangetendtopassthroughphysicalbarriersbetterandcarryfartherthanthoseinthe5GHzrange,buttheydonotprovideashighadatarate.Signalsinthe5GHzrangeprovidefasterdataratesforbetterthroughput,butthesignalattenuatesfasterandisbestsuitedforopenspaces.

Wirelessstandards

802.11(x) Frequencystandard Maximumdatarate

802.11a 5GHz 54Mbps

802.11b 2.4GHz 11Mbps

802.11g 2.4GHz 54Mbps

802.11n 2.4GHzand5GHz 450Mbps

802.11ac 5GHz+multichannel+multipath 1.3Gbps

Strengthsandweaknessesof5GHzand2.4GHzsignals

5GHz 2.4GHz

Strength Higherspeed,morechannels LongerRange,strongersignalpenetration

Weakness Limitedpenetrationofwalls,clientcompatibility Moresourcesofinterference


RefertoRadiofrequencybarriersandRFinterferenceonpage15fordetailedinformationaboutRFbarriersandinterference.

Toallowmultipleseparatewirelessnetworksinasharedandconfinedspace,theRFmediumisdividedintochannels.Fordevicesinthe5GHzrange(802.11a/n/ac),thismeansthepossibilityofupto23discretechannels.

Fordevicesusingthe2.4GHzrange(802.11b/g/n),thewirelessspaceislimitedtoamaximumof14overlappingchannels.Asaresultoftheseoverlappingchannels,2.4GHztechnologyprovidesonlyatotalofthreediscretechannels.

802.11comparisonchart802.11signalcharacteristics

802.11a 802.11b 802.11g 802.11n 802.11ac

#ofChannelsinUSA 23 11 11 11 21

#ofChannelsinEU 23 13 13 13 16

#ofChannelsinJapan 15 14 14 14 19

FrequencyBand 5GHz 2.4GHz 2.4GHz 2.4/5GHz 5GHz

Max.DataRate 54Mbps 11Mbps 54Mbps 450Mbps(For3X3MIMO)

1.3Gbps(ForQAM64,MIMO3X3,and80MHzchannels)

Radius(Range) 90ft/25m 120ft/35m 120ft/35m 300ft/90m 120ft/35m

NOTE:Although802.11b/g/nstandardsprovidebetween11and14channels,onlythreeofthosechannelsarefullydiscrete(nonoverlapping)channels.


2

InitialSetup

Thissectionprovidesabasicchecklistofmaterials,hardwareinformation,anddescribeshowtoconnectandconfigurephysicalaspectsoftheSonicWallSonicPointACiincludingcablingandmounting.

Checkpackagecontentsonpage9

Deploymentrequirementsonpage10

SonicPointACiavailableports/statusLEDsonpage11

ConnectingEthernetcablesonpage13

Wirelessaccesspointplacementconsiderationsonpage14

MountingtheSonicPointACionpage16

CheckpackagecontentsBeforecontinuing,ensurethatyourSonicPointACipackagecontainsthefollowingmaterials:


Anyitemsmissing?Ifanyoftheitemscorrespondingtoyourproductaremissingfromthepackage,contactTechnicalSupportat:https://support.sonicwall.com/contactsupport

Alistingofthemostcurrentsupportdocumentsareavailableonlineat:https://support.SonicWall.com/SonicWallSonicPointseries/ace/releasenotesguides

DeploymentrequirementsSonicOSfirmware

SonicWallSonicPointACiaccesspointsarecentrallymanagedbySonicWallnetworksecurityappliancesrunningthefollowingversionsofSonicOS:

SonicOS5.9.1.6orahigher5.9release

SonicOS6.2.5.1orhigher

PoweroverEthernet

An802.3atcompliantPoEinjectororPoEcapableswitchcapableofproviding25wattsofpowertoeachSonicPointACiisrequired.

Internetconnectivity

AnactiveInternetconnectionisrequiredforyourfirewalltodownloadthelatestSonicPointfirmware.

GigabitEthernetconnectivity

802.11acwirelesshardwarerequiresmorebandwidththanasingle(orevendual)10/100Ethernetconnectioncanhandle.GigabitEthernetconnectivitybetweentheWLANandtheLANisrequiredtotakefulladvantageof802.11acspeed.

SeeProductsafetyandregulatoryinformationonpage29.

SonicPointACiApplianceChecklist

SonicWallSonicPointACiApplianceMountingKit(CeilingBrackets,AnchorandScrewKit)GettingStartedGuide


https://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guideshttps://support.sonicwall.com/contact-supporthttps://support.sonicwall.com/contact-support

SonicPointACiavailableports/statusLEDsAvailableports

LAN1/PoEport.ProvidesEthernetandPoweroverEthernet(PoE)connections.

LAN2port.ProvidesanadditionalEthernetconnection.RefertotheSonicOSAdministrationGuideforusecases.

Consoleport.ProvidesamanagementconnectionusingCLI>DB9cable(forcommandlinemanagementonly).


StatusLEDs

LED(lan2)On(solidyelloworgreen,Ethernetlink)Blinkingyellow(1GEthernetactivity)Blinkinggreen(10/100MEthernet

LED(lan1)On(solidyelloworgreen,Ethernetlink)Blinkingyellow(1GEthernetactivity)Blinkinggreen(10/100MEthernetactivity)

LED(5G)On(solidgreen,5GHzradiolink)Blinkinggreen(5GHzradioactivity)

LED(2.4G)On(solidgreen,2.4GHzradiolink)Blinking(2.4GHzradioactivity)

LED(Tool)On(solidyellow,error)Blinking(safemode)

LED(Power)On(solidblue,power)Blinking(booting/FWupgrade)


ConnectingEthernetcablesTheSonicPointACicanbecabledwithCAT5,CAT5e,orCAT6Ethernetcabling.

TheSonicPointACiispoweredusingPoweroverEthernet(PoE).ASonicWall802.3atcompliantPoElineinjector(soldseparately),oran802.3atcompliantswitchisrequiredtopowereachSonicPointACi.

ToconnectPoEtoyourSonicPointACi

1 UsinganEthernetcable,connecttheData inportontheSonicWallPoEInjectortoanexistingWLANzoneinterfaceortoanunusedinterfacetobeconfiguredlaterinSonicOS.

2 UsingasecondEthernetcable,connecttheDataandPoweroutportontheSonicWallPoEinjectortotheLAN1/PoEportonyourSonicPointACi.

3 PlugthepowercordoftheSonicWallPoEinjectorintoanappropriatepoweroutlet.

4 WaitfortheLAN1LEDontheSonicPointACitoilluminategreen.Thisindicatesanactiveconnection.

SeeProductsafetyandregulatoryinformationonpage29.

CAUTION:An802.3atcompliantPoEinjectororPoEcapableswitchcapableofproviding25wattsofpowertoeachSonicPointACiisrequired.

Tomaintain25wattsofpowertotheSonicPointACi,themaximumlengthofCAT5ecablefromthe802.3atPoEinjectortotheSonicPointACiis30meters.

Local Network (LAN)

X1 WAN

X0 LAN

Internet

X2 WLAN

PoE Injectoror PoE Switch

Wireless Clients


WirelessaccesspointplacementconsiderationsPhysicalplacementoftheSonicPointACiwirelessaccesspointhasameasurableeffectonwhocanandcannotaccessyourwirelesssignal.

AccesspointsshouldbekeptclearofRadioFrequency(RF)interferencesources.RFbarrierscanbecircumventedbydeployingmultipleaccesspoints.

Asitesurveywillhelpfindtheoptimumwirelessaccesspointplacement,butyoucanfindusablelocationswithoutit.

Considerationsinclude:

NumberofaccesspointsversususerdensityIftoomanyusersareservicedbyasingleaccesspoint,maximumtransferratesarereachedandthataccesspointmaybecomeabottleneckforthewholesystem.

BandwidthHowmuchdataismovingupstreamanddownstreamforagiventypeofuser?

EthernetcablingWhereareyourunningthepoweredEthernet(PoE)cabletoandhowareyousecuringthatcable?IsyourPoEswitch802.3atcompliantandabletopowerallaccesspointswith25wattseach?

Tomaintain25wattsofpowertotheSonicPointACi,themaximumlengthofCAT5ecablefromthe802.3atPoEinjectortotheSonicPointACiis30meters.

Hubs/SwitchesYourwirelessdeploymenthastotiebackintoyournetworksecurityapplianceandLANresources.Considerwhereyourkeynetworkingdevicesaredeployedandhowtheywillconnectefficientlywithyourwirelessappliances.WhatspeedisneededforyourEthernetconnectiontoaccommodatethenumberofaccesspointsyouareinstalling?AGigabitEthernetinterfaceisrecommendedwhenconnectingaSonicPointACitoyourSonicWallnetworksecurityappliance.

LegacyclientsOlderlaptopsandmobiledevicesmaynotsupport802.11ac.Althoughclientswith802.11a/g/bhardwarearesupportedbytheSonicWallSonicPointACi,thepresenceoftheselegacyclientswithinrangeofyourwirelessnetworkcouldaffecttheconnectionspeedofyour802.11acclients.

Forexample,an802.11bdeviceauthenticatedtotheSonicPointACicouldlimitallclientsconnectedtothatradioto802.11bdatarates.


RadiofrequencybarriersDetermininghowtocircumventRFbarrierscanbeachallengingpartoftheplacementprocess,butRFbarrierscanalsobeusedbeneficiallyinanattempttoblocksignalswhereyoudonotwantcoverage.The5GHzfrequencyismoresensitivetoRFbarriers.Awallthatallowsa2.4GHzwirelessnetworktooperatecouldblocka5GHzone.

RFinterferenceRFinterferencefromhome,office,andmedicalequipmentisacommonchallengeinwirelessdeployments.

WhenconsideringRFinterferencesources,rememberthatmostcell/wirelessphonesandBluetoothdevicesonlyutilizethe2.4GHzfrequency.Assuch,theyshouldnotcausesignificantinterferencewithwirelessnetworksoperatinginthe5GHzfrequency.CommonRFbarriertypes

BarrierType RFSignalBlocking

Openair VeryLow

Glass,wood,drywall,cubepartitions Low

Floorsandouterwalls,aquariums(brick/marble/granite/water)

Medium

Concrete,securityglass,wiremesh,stackedbooks/paper

High

Metalpartitions,desks,reinforcedconcrete

VeryHigh

CommonsourcesofRFinterference

InterferenceSource PossibleRange BandsAffected

2.4GHzphones 100feet 2.4GHz(802.11b/g/n)

Bluetoothdevices 30feet 2.4GHz(802.11b/g/n)

Microwaveoven 1020feet 2.4and5GHz,dependingonshielding

Scientificandmedicalequipment

Shortdistance,varies

2.4and5GHz,dependingonshielding


MountingtheSonicPointACiYoucanmountyourSonicWallSonicPointACitoawallorceiling,oryoucansimplysetitonaflatsurface.

ForsafetytipswhenmountingtheSonicPointACi,seeProductsafetyandregulatoryinformationonpage29.

MountingusingceilingbracketsThemountingkitincludesalargebracket,twosmallbrackets,anchorscrews,andscrews.

Largeceilingbracket

Smallceilingbrackets

TheundersideoftheSonicPointACihastwoinsertionpointsforthescrews.YoucanusetheseinsertionpointstoattacheitherthelargebracketorthetwosmallbracketstotheSonicPointACi.

Holesforscrews


TomounttheSonicPointACitoacrossbarbetweenceilingpanelsusingthelargebracket

1 UsetheincludedscrewstoattachthelargebrackettotheundersideoftheSonicPoint.

2 SupportingtheSonicPointinonehand,positiontheedgeclipsofthebracketovertheedgeoftheceilingcrossbarandrotatetheSonicPointcounterclockwise(totheleftwhenlookingupatit)untilthebracketissecurelyattachedtothecrossbar.

ToremovetheSonicPointACifromtheceilingcrossbar,rotateitclockwise(totherightwhenlookingupatit)untilthebracketdetachesfromthecrossbar.

Fastenthelargeceilingbracket


TomounttheSonicPointACitoacrossbarbetweenceilingpanelsusingthesmallceilingbrackets:

1 UsetheincludedscrewstoattachthesmallbracketstotheundersideoftheSonicPoint,makingsurebothbracketsareparallel.

2 SupportingtheSonicPointinonehand,cliptheedgeofeachbracketovertheedgeoftheceilingcrossbarasshowninthefollowingimage.MakesuretheSonicPointissecurelyattachedtothecrossbarbeforereleasingthedevice.

Ceiling crossbar

Mounting brackets

SonicPoint unit


Mountingusinganchorscrews

TomounttheSonicPointACiusingtheanchorscrews

1 Onthemountingsurface,markthelocationtomaketwoscrewholes.Themarksshouldbehorizontallyparalleltoeachother.

2 Screwtheanchorscrewsintotheceilingtileordrywalltotheirfulldepth.

3 Insertthescrewsintotheanchors,andscrewthemindeepenoughtoleaveminimalspacebetweenthescrewheadsandthewallsurface.

4 SupportingtheSonicPointinyourhands,securelyfittheundersideslotsoftheSonicPointontothescrewheads.


3

ConfiguringSonicOSforwirelessaccess

ThissectionprovidesinstructionsforconfiguringSonicOSonyourSonicWallnetworksecurityappliancetoconnectyourSonicPointACitotheWLANzoneandmanageitasaLayer2device.Formoreadvancedconfigurations,includingLayer3managementofyourSonicPointACionaLANzone,refertotheSonicOSAdministrationGuide.

ConfiguringSonicOSforSonicPointACionpage21

VerifyingSonicPointoperationonpage25

Troubleshootingtipsonpage26

ConfiguringSonicOSforSonicPointACiYouonlyneedtocompletethreesimpleconfigurationtasksinSonicOStoprepareyourSonicPointACitoprovidesecurewirelessaccess.

1 ConfigurethenetworkinterfacetowhichtheSonicPointACiisconnected.

2 ConfiguretheWLANzonefortrustandsecurityservices.

3 ConfiguretheSonicPointACientryforthedesiredradiofrequency,mode,andauthenticationtype.


ConfiguringthenetworkinterfaceEachSonicPointorgroupofSonicPointsmustbeconnectedtoaphysicalnetworkinterfacethatisconfiguredinawirelesszone.SonicOSprovidesastandardwirelesszone(WLAN)whichcanbeappliedtoanyavailableinterface.

ToconfigurethenetworkinterfaceinSonicOS

1 NavigatetotheNetwork>InterfacespageandclickConfigurefortheinterfacetowhichyourSonicPointisconnected.

2 SelectWLANzonefortheZonetype.

3 SelectStaticIPModefortheMode/IPAssignment.

4 IntheIPAddressfield,typeinanyprivateIPaddressthatdoesnotinterferewiththeIPaddressrangeofanyotherinterfacesontheappliance.

5 EnteraSubnetMask.Thedefaultis255.255.255.0.

6 UsethedefaultsettingsorselectappropriatesettingsfortheotherfieldsandthenclickOK.

SonicOS5.9interfacesettings

SonicOS6.2interfacesettings

CAUTION:AllowingManagementandUserLogintotheappliancefromawirelesszonecanposeasecuritythreat,especiallyifyouoryourusershavenotsetstrongpasswords.


ConfiguringtheWLANzone

ToconfiguretheWLANzoneinSonicOS

1 OntheNetwork>ZonespageintheWLANrow,clicktheiconintheConfigurecolumn.

2 OntheGeneraltab,selecttheAllowInterfaceTrustsettingtoautomatethecreationofAccessRulestoallowtraffictoflowbetweentheinterfaceswithinthezone,regardlessoftheinterfacestowhichthezoneisapplied.

Forexample,iftheWLANzonehasboththeX2andX3interfacesassignedtoit,selectingAllowInterfaceTrustcreatesthenecessaryaccessrulestoallowhostsontheseinterfacestocommunicatewitheachother.

3 Selectthecheckboxestoenablesecurityservicesonthiszone.Minimally,youwouldenableGatewayAntiVirus,IPS,andAntiSpyware.IfyourwirelessclientsareallrunningSonicWallClientAntiVirus,selectEnableClientAVEnforcementService.

4 OntheGuestServicestab,optionallyconfigureguestInternetaccess.ForinformationaboutGuestServices,seetheSonicOSAdministrationGuide.

5 OntheWirelesstab,selectOnlyallowtrafficgeneratedbyaSonicPoint/SonicPointNtoallowonlytrafficfromSonicPointstoentertheWLANzoneinterfaces,providingmaximumsecurity.

6 Whenfinished,clickOK.


ConfiguringtheSonicPointACisettingsWhenaSonicPointACiisinitiallyconnectedtoaninterface,thefirewallusesadefaultprovisioningprofiletocreateaSonicPointACientry.Itcantakeupto5minutesfortheentrytobecreated.

YoucanmodifytheSonicPointACientrytoconfiguretheaccesspointname,radiofrequencymode,authenticationtype,andothersettingsspecifictoyourSonicPointACi.

TomodifytheSonicPointACientryinSonicOS

1 NavigatetotheSonicPoint>SonicPointspage.

2 IntheSonicPointNstable,clicktheconfigurebuttonintherowfortheSonicPointACientryyouwishtomodify.

Generaltabsettings

3 OntheGeneraltab,selectEnableSonicPoint.

4 IntheNamefield,optionallytypeinanewnameforthisSonicPointACi.Theexistingnameisassignedbytheprovisioningprofilebasedonthenameprefixintheprofilewithauniquenumberappended.

Thisistheaccesspointnamethatappearsinclientslistsofavailablewirelessconnections.

5 VerifytheCountryCodefortheareaofoperation.

6 Configuretheremainingoptionsasneeded.Formoreinformation,seetheSonicOSAdministrationGuide.

Radio0/Radio1Basictabsettings

7 ClicktheRadio0Basictab,ortheRadio1Basictab.

TheconfigurationisverysimilarfortheRadio0andRadio1Basictabs.Themaindifferencesaretheradiofrequencies:

TIP:FordeploymentsofmultipleSonicPointsthatneedthesameprovisioningsettings,youcancreateacustomprovisioningprofileintheuppersectionoftheSonicPoint>SonicPointspage.IntheNetwork>Zonespage,youcanedittheWLANzoneandspecifythisprofileontheWirelesstab.AnySonicPointsconnectingtoaninterfaceintheWLANzonewillthenbeprovisionedwiththeassignedprofile.SeetheSonicOSAdministrationGuideformoreinformation.

Radio Frequency DefaultMode

Radio0 5GHz 5GHz802.11ac/aMixed

Radio1 2.4GHz 2.4GHz802.11ac/g/bMixed


8 SelectEnableRadio.

9 SelectaModeorusethedefault.

10 UnderWirelessSecurity,selecttheAuthenticationTypeforyourwirelessnetwork.SonicWallrecommendsusingWPA2astheauthenticationtypeifallclientdevicessupportit.

11 SelecttheCipherType.WhenusingWPAandWPA2,SonicWallrecommendsAESformaximumsecurity.

12 Fillinthefieldsspecifictotheauthenticationtypethatyouselected.Theremainingfieldschangedependingontheselectedauthenticationtype.

13 Optionally,underACLEnforcement,selectEnableMACFilterListtoenforceAccessControlbyallowingordenyingtrafficfromspecificdevices.SelectaMACaddressobjectgroupfromtheAllowListorDenyListtoautomaticallyallowordenytraffictoandfromalldeviceswithMACaddressesinthegroup.TheDenyListisenforcedbeforetheAllowList.

Radio0/Radio1Advancedtabsettings

14 ClicktheRadio0Advancedtab,ortheRadio1Advancedtab.

TheconfigurationisverysimilarfortheRadio0AdvancedandRadio1Advancedtabs.Formostadvancedoptions,thedefaultsettingsgiveoptimumperformance.Forafulldescriptionofthefieldsonthistab,seetheSonicOSAdministrationGuide.

15 OptionallyselecttheHideSSIDinBeaconcheckbox.

TheSSIDreferstotheaccesspointnamethatappearsinclientslistsofavailablewirelessconnections.

HidingtheSSIDprovidesadditionalsecuritybecauseitrequirestheusertoknowtheaccesspointnamebeforeconnecting.

16 Whenyouarefinishedconfiguringalltabs,clickOK.

VerifyingSonicPointoperationToverifythattheSonicPointisprovisionedandoperational,navigatetotheSonicPoint>SonicPointspageinSonicOS.IntheSonicPointNstable,theStatuscolumndisplaystheSonicPointACistatus.ItshouldsayOperational.

TIP:PSKusesapersonalpassphraseforauthentication,EAPusesanEnterpriseRADIUSserver.

NOTE:OlderclientdevicesmightnotsupportAES.


ToverifyInternetconnectivityviatheSonicPointACi

1 ConnectaclientdevicetotheSonicPointACibyselectingtheappropriateaccesspointname(SSID).

2 Ensurethattheclientdeviceisnotconnectedtoanyothernetworkconnections(wiredLAN,3G/4GWWAN).

3 Inabrowser,enterhttps://SonicWall.comintheaddressbarandpressEnter.TheSonicWallwebsiteshoulddisplay.Ifyouareunabletobrowsetoawebsite,refertoTroubleshootingtips.

TroubleshootingtipsWhentheSonicPointACiisconnectedtoaSonicWallnetworksecurityappliance,thetwounitsperformanencryptedexchange,andanentryfortheSonicPointACiisautomaticallycreatedintheSonicPointNstableontheSonicPoint>SonicPointspageinSonicOS.

Iftheentrydoesnotappearinthetablewithin5minutesofconnectingtheSonicPointACi:

MakesuretheSonicPointACiisconnectedtoaninterfacethatisconfiguredaspartofawirelesszone.EitherthedefaultWLANzoneoracustomzonewithtypesettowirelessisrequired.

EnsurethattheSonicPointACiisproperlyconnectedbyEthernetcabletoan802.3atcompliantPoEdevice.APoEcapableswitchorPoEinjectorisrequired.

Ifan802.3atcompliantPoEinjectorisbeingused,verifythattheSonicPointACiisconnectedtothePoEportlabeledDataandPowerOut.

IftheSonicPointACihasanentryinthetable,butrebootsfrequentlyorseemsnonfunctional:

VerifythatyourPoEswitch/injectoris802.3atcompliantandratedtodeliver25wattsofpowertoeachPoEport.802.3afcompliantPoEdevicesdonotprovidesufficientpowertoproperlyruncurrentgeneration802.11devices.An802.3atcompliantswitchorPoEinjectorisrequiredtopowertheSonicWallSonicPointACi.

ClickSynchronizeSonicPointsontheSonicPoint>SonicPointspagetoforceSonicOStodownloadanewSonicPointfirmwareimagefromtheSonicWallbackendserver.


4

Supportandproductregistration

ThissectionprovidesinformationaboutregisteringyourSonicWallSonicPointACi,requirementsforreceivingtechnicalsupport,andotheronlinesupportandtrainingoptions.

Registrationandsupportonpage27

Onlinesupportandtrainingonpage28

RegistrationandsupportAllSonicPointACiwirelessaccesspointsincludeaninitialsubscriptiontoSonicWall24x7Support.

SonicOSwillautomaticallyregisteryourSonicPointACionMySonicWall,ifconnectedtotheInternet.Itmaytakeupto24hoursforyourSonicPointACitobeautomaticallyregistered.

Optionally,youcanmanuallyregistertheSonicPointACionMySonicWallbyloggingintoyouraccountat:http://www.MySonicWall.com.

TheSonicPointACiwillalsobeassociatedinMySonicWallwiththeregisteredSonicWallnetworksecurityappliancetowhichitisconnected.SeetheAssociatedProductssectionatthebottomoftheapplianceServiceManagementpageinMySonicWall.Inordertoreceivetechnicalsupport,yourSonicPointACimusthaveanactiveSupportsubscription.


http://www mysonicwall.com

OnlinesupportandtrainingSonicWalloffersavarietyofonlinesupportandtrainingoptionsforyourconvenience.

Customersupport

SonicWallofferstelephone,emailandWebbasedsupporttocustomerswhohaveavalidWarrantyorwhopurchasedaSupportContract.ReviewourWarrantySupportPolicyforproductcoverage.SonicWallalsooffersafullrangeofconsultingservicestomeetyourneeds.

Formoreinformation,visit:https://support.SonicWall.com/

Knowledgebase

TheKnowledgeBaseallowsuserstosearchforSonicWalldocumentsbybrowsingtheknowledgebase,searchingforkeywords,orusingfulltextsearch.

Formoreinformation,visit:https://support.sonicwall.com/sonicwallsonicpointseries/kb

Userforums

TheSonicWallUserForumsarearesourcethatprovideuserstheabilitytocommunicateanddiscussavariety

ofsecurityandappliancesubjectmatters.Theforumsareorganizedbycategories.

Formoreinformation,visit:https://forum.SonicWall.com/

Training

SonicWalloffersanextensivesalesandtechnicaltrainingcurriculum.SonicWallTrainingprovidestheETraining,instructorledtraining,customtraining,technicalcertification,andusesauthorizedtrainingpartners.

Formoreinformation,visit:https://support.sonicwall.com/sonicwallsonicpointseries/training

Relateddocumentation

SonicOSAdministrationGuide

SonicOSReleaseNotes

SonicOSConfigurationorDeploymentGuides

Formoreinformation,visit:https://support.sonicwall.com/sonicwallsonicpointseries/ace/releasenotesguides


https://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guideshttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace/release-notes-guideshttps://forum.sonicwall.com/https://forum.sonicwall.com/https://support.sonicwall.com/sonicwall-sonicpoint-series/kbhttps://support.sonicwall.com/sonicwall-sonicpoint-series/kbhttps://support.sonicwall.com/sonicwall-sonicpoint-series/traininghttps://support.sonicwall.com/sonicwall-sonicpoint-series/traininghttps://support.sonicwall.com/https://support.sonicwall.com/

5

Productsafetyandregulatoryinformation

Thissectionprovidesproductsafetyandregulatoryinformation.

Mountingtheapplianceonpage30

VerwarnungWeiterehinweisezurmontageonpage31

EUandEFTAonpage32

Declarationofconformityonpage33

ProductswithUL2043printedontheirproductlabelsarewithinthelimitspecifiedintheUL2043StandardforFireTestforHeatandVisibleSmokeReleaseforDiscreteProductsInstalledinAirHandlingSpaces(Plenum).AppliesonlywhenpoweredthroughPoE.ThePoEpowersupplyisnotcoveredthebytheUL2043evaluationofthisAccessPoint.

SonicPointACicomplieswithFCCUNIINewRulesforDynamicFrequencySelection(DFS).

NOTE:Additionalregulatorynotificationsandinformationforthisproductcanbefoundonlineat:https://support.SonicWall.com/SonicWallSonicPointseries/ace.

RegulatoryModel/Type ProductName

APL270B1 SonicPointACi


https://support.sonicwall.com/sonicwall-sonicpoint-series/acehttps://support.sonicwall.com/sonicwall-sonicpoint-series/ace

MountingtheapplianceWARNING:

Mountinalocationawayfromdirectsunlightandsourcesofheat.Amaximumambienttemperatureof104F(40C)isrecommended.

Routecablesawayfrompowerlines,fluorescentlightingfixtures,andsourcesofnoisesuchasradios,transmitters,andbroadbandamplifiers

Ensurethatnowaterorexcessivemoisturecanentertheunit.

Allowunrestrictedairflowaroundtheunitandthroughtheventsonthesideoftheunit.Aminimumof1inch(25.44mm)clearanceisrecommended.

Considerationmustbegiventotheconnectionoftheequipmenttothesupplycircuitandthattheeffectofoverloadingthecircuitshasminimalimpactonovercurrentprotectionandsupplywiring.Appropriateconsiderationofequipmentnameplateratingsmustbeusedwhenaddressingthisconcern.

Thisdeviceisnotintendedforuseinthedirectfieldofviewatvisualdisplayworkplaces.Toavoidincommodingreflectionsatvisualdisplayworkplaces,

thisdevicemustnotbeplacedinthedirectfieldofview.

CableconnectionsWARNING:

AllEthernetandRS232(Console)cablesaredesignedforintrabuildingconnectiontootherequipment.Donotconnecttheseportsdirectlytocommunicationwiringorotherwiringthatexitsthebuildingwheretheapplianceislocated.

LithiumBatteryWARNING:

TheLithiumBatteryusedintheSonicWallappliancecannotbereplacedbytheuser.TheappliancemustbereturnedtoaSonicWallauthorizedservicecenterforreplacementwiththesameorequivalenttyperecommendedbythemanufacturer.If,foranyreason,thebatteryorSonicWallappliancemustbedisposedof,dosofollowingthebatterymanufacturer'sinstructions.


PowersupplyinformationforAPL270B1Thisproduct'spowerisprovidedbytheEthernetcablepluggedintotheLANport,thisiscalledPowerOverEthernetorPOE.ThePOEsourceshouldonlybeULlistedmarkedClass2orLPSwithanoutputrated48VDC,minimum0.6A,Tma:minimum40degreesC.

VerwarnungWeiterehinweisezurmontage

WhlenSiefrdieMontageeinenOrt,derkeinemdirektenSonnenlichtausgesetztistundsichnichtinderNhevonWrmequellenbefindet.DieUmgebungstemperaturdarfnichtmehrals40Cbetragen.

FhrenSiedieKabelnichtentlangvonStromleitungen,LeuchtstoffrhrenundStrquellenwieFunksendernoderBreitbandverstrkern.

DasimLieferumfangenthaltenebzw.dieimLieferumfangenthaltenenNetzkabelsindnurfrdieVerwendunginbestimmtenLndernundRegionen

zugelassen.berprfenSiebittevorderVerwendungeinsNetzkabels,obesfrdieVerwendunginIhremLandoderIhrerRegionzugelassenistunddengefordertenNormenentspricht.

StellenSiesicher,dassdasGertvorWasserundhoherLuftfeuchtigkeitgeschtztist.

StellenSiesicher,dassdieLuftumdasGertherumzirkulierenkannunddieLftungsschlitzeanderSeitedesGehusesfreisind.HieristeinBelftungsabstandvonmindestens26mmeinzuhalten.

PrfenSiedenAnschlussdesGertsandieStromversorgung,damitderberstromschutzsowiedieelektrischeLeitungnichtvoneinereventuellenberlastungderStromversorgungbeeinflusstwerden.PrfenSiedabeisorgfltigdieAngabenaufdemAufkleberdesGerts.berlastenSienichtdenStromkreis.

DasGertistnichtfrdieBenutzungimunmittelbarenGesichtsheldamBildschirmarbeitsplatzvorgesehen.UmstrendeReflexionenamBildshirmarbeitsplatzzuvermeiden,darfdiesesProduktnichtimunmittelbarenGesichtsfeldplatziertverden.


VerwarnungKabelverbindungenAlleEthernetundRS232CKabeleignensichfrdieVerbindungvonGerteninInnenrumen.SchlieenSieandieAnschlssederSonicWallkeineKabelan,dieausdemGebudeherausgefhrtwerden,indemsichdasGertbefindet.

VerwarnungHinweiszurLithiumbatterieDieinderInternetSecurityAppliancevonSonicWallverwendeteLithiumbatteriedarfnichtvomBenutzerausgetauschtwerden.ZumAustauschenderBatteriemussdieSonicWallineinvonSonicWallautorisiertesServiceCentergebrachtwerden.DortwirddieBatteriedurchdenselbenoderentsprechenden,vomHerstellerempfohlenenBatterietypersetzt.BeachtenSiebeieinerEntsorgungderBatterieoderderSonicWallInternetSecurityAppliancediediesbezglichenAnweisungendesHerstellers.

InformationenzurstromversorgungAPL270B1WenndieStromversorgungvonderSonicWallProduktpaketfehlt,wendenSonicWalldenTechnischenSupportunterhttps://support.SonicWall.com/.

DieStromversorgungdurchdasEthernetKabelindieLANAnschlussangeschlossenvorgesehenist,wirddiesalsPoweroverEthernetoderPoE.DiesesProduktdarfnurinVerbindungmiteinemfrdenEuropischenMarktgenehmigtenundmitdemLogoLPS.Ausgang:48VDCGleichsspannung,mind.0,6A,mindestTMAmindestens40GradC,betriebenwerden.

EUandEFTAThisdeviceisapprovedforuseinEUmemberstatesandEFTAcountriesasshownontheappliancelabel.


https://support.sonicwall.com/

DeclarationofconformityADeclarationofConformityinaccordancewiththedirectivesandstandardshasbeenmadeandisonfileat:SonicWallInternationalLimited,CityGatePark,Mahon,Cork,Ireland.

CEdeclarationscanbefoundonlineathttps://support.SonicWall.com/.

SonicPointACi(RM:APL270B1)RFTransmitterBandsandPower

FrequencyBand MaximumRadioFrequencyPowerTransmitted

MHz dBmEIRP

24122472 18.75

51805240 22.36

52605320 22.5

55005700 29.33

NOTE:Additionalregulatorynotificationsandinformationforthisproductcanbefoundonlineat:https://support.SonicWall.com/


https://support.sonicwall.com/https://support.sonicwall.com/https://support.software.dell.com/https://support.sonicwall.com/

( RoHS)/

(Pb)

(Hg)

(Cd)

(Cr+6)

(PBB)

(PBDE) / (Chassis/Bracket)

- O O O O O

( )(Mechanicalparts(fan,heatsinketc.)

- O O O O O

(PCBA)

- O O O O O

/ (Cable/connector)

- O O O O O

(powersupply)

- O O O O O

(Accessories) - O O O O O 1.O 2.


SonicWall Support

TechnicalsupportisavailabletocustomerswhohavepurchasedSonicWallproductswithavalidmaintenancecontractandtocustomerswhohavetrialversions.

TheSupportPortalprovidesselfhelptoolsyoucanusetosolveproblemsquicklyandindependently,24hoursaday,365daysayear.ToaccesstheSupportPortal,gotohttps://support.sonicwall.com/.

TheSupportPortalenablesyouto:

Viewknowledgebasearticlesandtechnicaldocumentation

Downloadsoftware

Viewvideotutorials

Collaboratewithpeersandexpertsinuserforums

Getlicensingassistance

AccessMySonicWall

LearnaboutSonicWallprofessionalservices

Registerfortrainingandcertification

TocontactSonicWallSupport,refertohttps://support.sonicwall.com/contactsupport.


https://support.sonicwall.com/https://support.sonicwall.com/contact-support

SonicPoint ACi Getting Started GuideUpdated - January 2017232-003410-50 Rev A

IntroductionIn this guideWireless overviewSonicWall wireless firewallingFrequency bands and channels802.11 comparison chart

Initial SetupCheck package contentsAny items missing?

Deployment requirementsSonicPoint ACi available ports/status LEDsConnecting Ethernet cablesWireless access point placement considerationsRadio frequency barriersRF interference

Mounting the SonicPoint ACiMounting using ceiling bracketsMounting using anchor screws

Configuring SonicOS for wireless accessConfiguring SonicOS for SonicPoint ACiConfiguring the network interfaceConfiguring the WLAN zoneConfiguring the SonicPoint ACi settings

Verifying SonicPoint operationTroubleshooting tips

Support and product registrationRegistration and supportOnline support and training

Product safety and regulatory informationMounting the applianceCable connectionsLithium BatteryPower supply information for APL27-0B1

Verwarnung Weitere hinweise zur montageVerwarnung KabelverbindungenVerwarnung Hinweis zur LithiumbatterieInformationen zur stromversorgung APL27-0B1

EU and EFTADeclaration of conformity

sonicwall™ sonicpoint aci · sonicwall sonicpoint aci getting started guide 3 1 introduction in...

Documents