Page 1
NSA_6600_GSG.book Page 1 Wednesday, April 3, 2013 4:52 PM Dell SonicWALL Network Security Appliances NSA 6600 NET WORK SECURIT Y Getting Started Guide...
NSA_6600_GSG.book Page 2 Wednesday, April 3, 2013 4:52 PM In this Guide Welcome to the Dynamic Security for the Global Network™. The Dell SonicWALL NSA 6600 is designed to be the most scalable, reliable, and best performing multifunction appliance in its class.
Configuring a Stateful HA Pair, page 31 • Configuring L2 Bridge Mode, page 37 Additional Information The following sections provide addition information for the Dell SonicWALL NSA 6600 appliance. • Support and Training Options, page 39 • Rack Mounting Instructions, page 43 •...
Page 6
NSA_6600_GSG.book Page 4 Wednesday, April 3, 2013 4:52 PM | In this Guide...
NSA_6600_GSG.book Page 5 Wednesday, April 3, 2013 4:52 PM Introduction to the NSA 6600 In this Section: This section describes the items shipped with the Dell SonicWALL NSA 6600 appliance, provides front and rear illustrations of the NSA 6600, and explains how to create a MySonicWALL account. •...
SonicWALL NSA 6600 CONSOLE MGMT Dell SonicWALL Network Security Appliance NET WORK SECURIT Y NSA 6600 Getting Started Guide Missing Items? If any items are missing from your package, contact Dell SonicWALL Support: Web: http://www.sonicwall.com/us/Support.html Email: customer_service@sonicwall.com | NSA 6600 Package Contents...
(CLI) via the enclosed serial CLI cable 1 Gigabit Ethernet Management Interface 10GE SDHC BYPASS ALARM STATUS TEST SonicWALL NSA 6600 CONSOLE MGMT USB Ports (2) For 3G/4G/Analog modem adaptor support X0-X7 (1 GE) Reset Button High-speed copper Gigabit Ethernet ports Press and hold for several seconds to set the appliance into Safe Mode.
NSA_6600_GSG.book Page 8 Wednesday, April 3, 2013 4:52 PM The Back Panel Fans (2) Dual auto-throttling fans for system temperature control Power Supply Provides power to the Dell SonicWALL appliance Expansion Bay by plugging in the AC adaptor and switching the For Dell SonicWALL-approved appliance on expansion modules Warning: Warning of Potential Hazard from Fan This manual contains specific warning and caution statements where they apply.
NSA_6600_GSG.book Page 9 Wednesday, April 3, 2013 4:52 PM Using this Getting Started Guide The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 6600 appliance. Using this Getting Started Guide |...
11. <http://www.mysonicwall.com>. MySonicWALL is used during registration of your To create a MySonicWALL account: Dell SonicWALL appliance and to activate or purchase licenses In your Web browser, navigate to for security services, support, or software specific to your <http://www.mysonicwall.com>.
NSA_6600_GSG.book Page 11 Wednesday, April 3, 2013 4:52 PM Configuring the Appliance In this Section: This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and procedures. • Determining the WAN Type, page 12 •...
NSA_6600_GSG.book Page 12 Wednesday, April 3, 2013 4:52 PM Determining the WAN Type System Requirements Before configuring your Dell SonicWALL NSA 6600 appliance, Before beginning the setup process, verify that you have: you will need to determine the type of WAN connection your •...
_________________________________ If you are IP Address: _____._____._____._____ LAN IP Address: Select a static IP address for your connecting with Dell SonicWALL appliance that is Static IP within the range of your local network. Subnet Mask:_____._____._____._____ _____._____._____._____ Subnet Mask: Record the subnet mask for the local Default Gateway: _____._____._____._____...
NSA_6600_GSG.book Page 14 Wednesday, April 3, 2013 4:52 PM Applying Power to the NSA 6600 Initial Setup Connect the power cord from the Dell SonicWALL NSA 6600 appliance into appropriate power outlets. This section provides initial configuration information and For further information regarding power requirements, refer to...
Page 17
NSA_6600_GSG.book Page 15 Wednesday, April 3, 2013 4:52 PM Accessing the Management Interface & Launch the Dell SonicWALL Setup Wizard by clicking the first Here link. Setup Wizard This wizard helps you quickly configure the Dell SonicWALL appliance to secure your Internet Once the NSA 6600 appliance is ready to be configured, ensure connection.
Troubleshooting Your LAN Connection Open another Web browser and navigate to: <http://www.sonicwall.com>. If you cannot connect to the Dell SonicWALL NSA 6600 or the If you can view the Dell SonicWALL home page, you have Setup Wizard does not display, consider the following: configured your Dell SonicWALL NSA 6600 correctly.
Activating & Managing Licenses Using MySonicWALL, page 21 • Upgrading Firmware, page 22 Note: Registration is an important part of the setup process and is necessary in order to receive the benefits of Dell SonicWALL security services, firmware updates, and technical support.
This section describes how to register and license your If your Dell SonicWALL NSA 6600 restarted, log into your appliance through SonicOS, as well as the alternate options appliance again at <http://192.168.168.168>. Enter the default available on MySonicWALL.
Alternative Registration Options To manually synchronize licenses with MySonicWALL from the SonicOS interface: If you have registered your Dell SonicWALL appliance through Login to your appliance and navigate to the System > the SonicOS interface, you can continue to the Licensing Licenses page.
NSA_6600_GSG.book Page 20 Wednesday, April 3, 2013 4:52 PM The following products and services are available for the Dell Licensing Security Services SonicWALL NSA 6600: • Service Bundles: • Comprehensive Gateway Security Suite To license a security service, complete one of the following •...
MySonicWALL In the MySonicWALL page, and click the appliance Name. The Applicable Services table displays a list of services that are already licensed on your Dell SonicWALL appliance. If you registered your appliance through SonicOS, all licensed Note that your initial purchase may have included security services are already activated.
• Saving a Backup Copy of Your Preferences, page 22 preferences, and can be imported back into the Dell SonicWALL security appliance if it is necessary to reboot • Obtaining the Latest Firmware, page 23 the firmware with factory default settings.
Page 25
To obtain a new SonicOS firmware image file for your Perform the following steps to upload new firmware to your Dell SonicWALL security appliance, perform the following Dell SonicWALL appliance and use your current configuration steps: settings upon startup. In a browser on your management computer, log into your MySonicWALL account at <http://www.mysonicwall.com>.
Page 26
The Front Panel section, on page 7 to locate the Reset button. The Test light begins to blink when the Dell SonicWALL security appliance has rebooted into SafeMode. Enter 192.168.1.254 into your computer’s Web browser to access the SafeMode management interface.
NSA_6600_GSG.book Page 25 Wednesday, April 3, 2013 4:52 PM Deployment Scenarios In this Section: This section provides configuration overviews, as well as deployment scenarios for your Dell SonicWALL NSA 6600. • Advanced Deployment Scenarios, page 26 • Configuring NAT Mode Gateway, page 30 •...
SuperMassive in addition to an existing gateway Scenario C: L2 Bridge Mode, page 29 appliance. Existing SonicWALL gateway appliance SuperMassive appliance in addition to an Scenario B: Stateful HA Pair, page 28 existing Dell SonicWALL gateway appliance. Internet or 10GE LAN Segment 2 10GE SDHC...
Page 29
In this scenario, the NSA 6600 is configured in NAT mode to operate as a single network gateway. Two Internet connections may be routed through the Dell SonicWALL appliance for load balancing and failover purposes. Because only a single Dell SonicWALL appliance is deployed, the added benefits of...
Page 30
NSA_6600_GSG.book Page 28 Wednesday, April 3, 2013 4:52 PM Scenario B: Stateful HA Pair For network installations with two Dell SonicWALL NSA 6600 Dell SonicWALL NSA Appliance 2 appliances configured as a stateful synchronized pair for Dell SonicWALL redundant High Availability (HA) networking.
Page 31
NSA_6600_GSG.book Page 29 Wednesday, April 3, 2013 4:52 PM Scenario C: L2 Bridge Mode For network installations where the Dell SonicWALL NSA 6600 Third Party Gateway is running in tandem with an existing network gateway. Internet or L2 Bridge Link LAN Segment 2 In this scenario, the original gateway is maintained.
Network Address Translation (NAT) allows private IP addresses on internal networks to be mapped to at least one public IP This section provides an overview of a Dell SonicWALL NSA address on the WAN interface of the Dell SonicWALL security 6600 appliance operating as a single network gateway in NAT appliance.
NSA_6600_GSG.book Page 31 Wednesday, April 3, 2013 4:52 PM The Dell SonicWALL NSA 6600 ships with the internal DHCP Configuring a Stateful HA Pair server active on the LAN port. However, if a DHCP server is already active on your LAN, the Dell SonicWALL appliance will disable its own DHCP server to prevent conflicts.
Initial High Availability Setup communicates the settings to the Secondary appliance. To configure HA on the Primary Dell SonicWALL, log in to your Before you begin the configuration of HA on the Primary Primary appliance and perform the following steps:...
NSA_6600_GSG.book Page 33 Wednesday, April 3, 2013 4:52 PM Configuring HA Monitoring Settings In the Primary IP Address field, enter the unique LAN or WAN management IP address of the Primary appliance. After configuring the HA settings, you need to configure the In the Secondary IP Address field, enter the unique LAN Monitoring settings for the LAN or WAN.This includes or WAN management IP address of the Secondary...
Set the Probe Level for the interval in seconds between communication with upstream or downstream systems. Dell SonicWALL recommends that you set the interval for The following settings are optional. You can configure these at least 5 seconds. You can set the Probe IP Address(es) settings from the High Availability >...
Completing HA Pair Association You can configure HA license synchronization by associating You will need to associate the two appliances on two Dell SonicWALL security appliances as HA Primary and HA MySonicWALL. The second appliance will automatically share Secondary on MySonicWALL.
Primary, including its IP registration link. This allows the unit to synchronize with the addresses and Ethernet MAC addresses. Dell SonicWALL license server and share licenses with the associated appliance. Log into the Secondary Dell SonicWALL appliance’s unique LAN/WAN IP address.
NSA_6600_GSG.book Page 37 Wednesday, April 3, 2013 4:52 PM Connection Overview Configuring L2 Bridge Mode Connect the X1 port on your Dell SonicWALL NSA 6600 to the LAN port on your existing Internet gateway device. Then This section provides instructions to configure the Dell...
Page 40
NSA_6600_GSG.book Page 38 Wednesday, April 3, 2013 4:52 PM Configuring the Secondary Bridge Interface Configure management options (HTTP, HTTPS, Ping, SNMP, SSH, User logins, or HTTP redirects). Navigate to the Network > Interfaces page from the navigation panel. Click the Configure icon in the right column of the X0 (LAN) Note: Do not enable Never route traffic on this bridge-pair interface.
NSA_6600_GSG.book Page 39 Wednesday, April 3, 2013 4:52 PM Support and Training Options In this Section: This section provides overviews of customer support and training options for the Dell SonicWALL NSA 6600. • Customer Support, page 40 • Knowledge Portal, page 40 •...
The Knowledge Portal is a resource which allows users to Dell SonicWALL NSA Support 24x7 delivers the enterprise- search for Dell SonicWALL documents based on the following class support features and quality of service that enterprise types of search tools: companies require to keep their networks running smoothly and •...
NSA_6600_GSG.book Page 41 Wednesday, April 3, 2013 4:52 PM User Forums Training The Dell SonicWALL User Forums is a resource that provides Dell SonicWALL offers an extensive sales and technical training users the ability to communicate and discuss a variety of curriculum for Network Administrators, Security Experts and security and appliance subject matters.
NSA_6600_GSG.book Page 43 Wednesday, April 3, 2013 4:52 PM Rack Mounting Instructions In this Section: This section provides illustrated rack mounting instructions for the Dell SonicWALL NSA 6600. For more information on rack mounting requirements, see the Product Safety and Regulatory Information section, on page 49.
Page 46
NSA_6600_GSG.book Page 44 Wednesday, April 3, 2013 4:52 PM Rack Mounting Instructions Assemble the Slide Rail Fasten 4 screws to the rail. WASHERS*8 M4 SCREW*8 | Rack Mounting Instructions...
Page 47
NSA_6600_GSG.book Page 45 Wednesday, April 3, 2013 4:52 PM Assemble the Slide Rail Fasten two-sided screws to the rail. M5 SCREW*8 M5 Nut*8 Rack Mounting Instructions | 45...
Page 48
NSA_6600_GSG.book Page 46 Wednesday, April 3, 2013 4:52 PM Assemble Inner Rail to Chassis Fasten 6 screws to attach the inner channel onto the chassis. M4 SCREW*6 | Rack Mounting Instructions...
Page 49
NSA_6600_GSG.book Page 47 Wednesday, April 3, 2013 4:52 PM Insert Chassis to Frame Slide inner channel into rails. Push hook down to separate. Rack Mounting Instructions | 47...
NSA_6600_GSG.book Page 49 Wednesday, April 3, 2013 4:52 PM Product Safety and Regulatory Information In this Section: This section provides regulatory along with trademark and copyright information. • Safety and Regulatory Information, page 50 • Warranty Information, page 54 • Copyright Notice, page 54...
Page 52
The appliance must be returned to a Dell SonicWALL • This product is not intended to be installed and used in a home or public area authorized service center for replacement with the same or equivalent type accessible to the general population.
Page 53
Netzteil. werden: • Vergewissern Sie sich, dass die Schrauben nach dem Austausch mit • Das Dell SonicWALL Modell ist für eine Montage in einem standardmäßigen 19- entsprechendem Werkzeug fest angezogen werden. Zoll-Rack konzipiert. • Vergewissern Sie sich, dass das Rack für dieses Gerät geeignet ist und verwenden Sie das vom Rack-Hersteller empfohlene Montagezubehör.
Page 54
NSA_6600_GSG.book Page 52 Wednesday, April 3, 2013 4:52 PM | Safety and Regulatory Information...
Page 55
Caution: Modifying this equipment or using this equipment for purposes not shown measures. in this manual without the written consent of Dell SonicWALL, Inc. could void the user’s authority to operate this equipment. Declaration of Conformity A “Declaration of Conformity”...