SonicWALL NSA 4600 - Determining the WAN Type

20
SonicWallNSA2600/3600/4600/5600/6600GettingStartedGuide
DeterminingtheWANType
BeforeconfiguringyourSonicWallNSAappliance,youneedto
determinethetypeofWANconnectionthatyoursetupwill
use.SonicWallsupportsthefollowingtypes:
•Static—Configurestheapplianceforanetworkthatuses
staticIPaddres ses.
•DHCP—ConfigurestheappliancetorequestIPsettings
fromaDHCPserverontheInternet.
•PPPoE
—Point‐to‐PointProtocoloverEthernet(PPPoE)is
typicallyusedwithaDSLmodem.IfyourISPrequires
desktopsoftwarewithausernameandpassword,select
NATwithPPPoEmode.
•PPTP—Point‐to‐PointTunnelingProtocol(PPTP)isusedto
connecttoaremoteserver.PPTPtypicallysupportsolder
MicrosoftWindows
implementationsthatrequire
tunnelingconnectivity.
•L2TP—Layer2TunnelingProtocol(L2TP)isusedtotransmit
Layer2dataoverIPorotherLayer3routednetworks.
InternetServiceProviders(ISPs)oftenuseittoenable
virtualprivatenetworks(VPNs)forcustomers overthe
Internet.Itdoesnotencryptnetworktrafficitself.
IfL2TPis
notavailableintheSetupWizard,youcanconfigureitlater
intheSonicOSmanagementinterface.
•WireMode(2‐PortWire)—Insertstheapplianceintothe
networkusingtwopairedinterfaces.AvailableWireMode 
typesincludeBypass,Inspect,andSecure.Bypassmode
allowsforquickandnon‐
disruptiveinsertionintothedata
path.InspectmodeextendsBypassmodewithtraffic
inspectionforclassificationandflowreporting.Secure
modeprovidesfullSonicWallReAssembly‐FreeDeep
PacketInspection™(RF‐DPI)andcontrolofnetworktraffic.
SecureModeaffordsthesamelevelofvisibi lityand
enforcementasconventionalNATorL2
BridgedMode
deployments,butwithoutanyL3/L4transformations,and
withnoalterationsofARPorroutingbehavior.IfWire
ModeisnotavailableintheSetupWizard,youcan
configureitlaterintheSonicOSmanagementinterface.
•TapMode(1‐PortTap)—Usingasingleinterface,the
firewallconnectstoand
receivesmirroredpacketsfroman
adjacentswitchSPANport.SimilartoInspectmodeinWire
Mode,butwithasingleportand notinthephysicalpathof
traffic.
NOTE:WhenoperatinginWireMode,thefirewall’s
MGMTinterfaceisusedforlocalmanagement.To
enableremotemanagementanddynamicsecurity
servicesandapplicationintelligenceupdates,aWAN
interface(separatefromtheWireModeinterfaces)
mustbeconfiguredforInternetconnectivity.