20
SonicWall
NSA
2600/3600/4600/5600/6600
Getting
Started
Guide
Determining
the
WAN
Type
Before
configuring
your
SonicWall
NSA
appliance,
you
need
to
determine
the
type
of
WAN
connection
that
your
setup
will
use.
SonicWall
supports
the
following
types:
• Static
—Configures
the
appliance
for
a
network
that
uses
static
IP
addresses.
• DHCP
—Configures
the
appliance
to
request
IP
settings
from
a
DHCP
server
on
the
Internet.
• PPPoE
—Point
‐
to
‐
Point
Protocol
over
Ethernet
(PPPoE)
is
typically
used
with
a
DSL
modem.
If
your
ISP
requires
desktop
software
with
a
username
and
password,
select
NAT
with
PPPoE
mode.
• PPTP
—Point
‐
to
‐
Point
Tunneling
Protocol
(PPTP)
is
used
to
connect
to
a
remote
server.
PPTP
typically
supports
older
Microsoft
Windows
implementations
that
require
tunneling
connectivity.
• L2TP
—Layer
2
Tunneling
Protocol
(L2TP)
is
used
to
transmit
Layer
2
data
over
IP
or
other
Layer
3
routed
networks.
Internet
Service
Providers
(ISPs)
often
use
it
to
enable
virtual
private
networks
(VPNs)
for
customers
over
the
Internet.
It
does
not
encrypt
network
traffic
itself.
If
L2TP
is
not
available
in
the
Setup
Wizard,
you
can
configure
it
later
in
the
SonicOS
management
interface.
• Wire
Mode
(2
‐
Port
Wire)
—Inserts
the
appliance
into
the
network
using
two
paired
interfaces.
Available
Wire
Mode
types
include
Bypass
,
Inspect
,
and
Secure
.
Bypass
mode
allows
for
quick
and
non
‐
disruptive
insertion
into
the
data
path.
Inspect
mode
extends
Bypass
mode
with
traffic
inspection
for
classification
and
flow
reporting.
Secure
mode
provides
full
SonicWall
ReAssembly
‐
Free
Deep
Packet
Inspection™
(RF
‐
DPI)
and
control
of
network
traffic.
Secure
Mode
affords
the
same
level
of
visibility
and
enforcement
as
conventional
NAT
or
L2
Bridged
Mode
deployments,
but
without
any
L3/L4
transformations,
and
with
no
alterations
of
ARP
or
routing
behavior.
If
Wire
Mode
is
not
available
in
the
Setup
Wizard,
you
can
configure
it
later
in
the
SonicOS
management
interface.
• Tap
Mode
(1
‐
Port
Tap)
—Using
a
single
interface,
the
firewall
connects
to
and
receives
mirrored
packets
from
an
adjacent
switch
SPAN
port.
Similar
to
Inspect
mode
in
Wire
Mode,
but
with
a
single
port
and
not
in
the
physical
path
of
traffic.
NOTE:
When
operating
in
Wire
Mode,
the
firewall’s
MGMT
interface
is
used
for
local
management.
To
enable
remote
management
and
dynamic
security
services
and
application
intelligence
updates,
a
WAN
interface
(separate
from
the
Wire
Mode
interfaces)
must
be
configured
for
Internet
connectivity.
Summary of Contents for NSA 6600
Page 8: ...8 SonicWall NSA 2600 3600 4600 5600 6600 Getting Started Guide ...
Page 18: ...18 SonicWall NSA 2600 3600 4600 5600 6600 Getting Started Guide ...
Page 50: ...50 SonicWall NSA 2600 3600 4600 5600 6600 Getting Started Guide ...
Page 60: ...60 SonicWall NSA 2600 3600 4600 5600 6600 Getting Started Guide ...
Page 62: ...62 SonicWall NSA 2600 3600 4600 5600 6600 Getting Started Guide ...
Page 63: ...NSA 2600 3600 4600 5600 6600 Getting Started Guide Updated March 2017 232 003419 51 Rev A ...
