Wizards/PortShield.htm

Internet Connectivity Using the Setup Wizard

The first time you log into the SonicWALL, the Setup Wizard is launched automatically. To launch the Setup Wizard at any from the Management Interface, log into the SonicWALL. Click Wizards and select Setup Wizard.

¸

Tip: You can also configure all your WAN and network settings on the Network > Settings page of the SonicWALL Management Interface

Using the PortShield Wizard

The SonicWALL PortShield Interface Wizard enables you to quickly segment and configure the integrated 25-port managed PRO 1260 switch. After you complete the configuration, the wizard creates the necessary PortShield interfaces, address objects, NAT policies, and access rules so that you can configure the switch ports within the context of these settings.

Note that the wizard configuration is essentially a starting point for PortShield interface configuration. It provides two basic tasks in PortShield interface setup:

Partitions the ports on the device into groupings that become your PortShield interfaces.
Automatically assigns or enables manual assignment of an IP address and a subnetwork mask to each of the partitioned port groups.

For more detailed configuration, go to the PortShield interface configuration dialog boxes in either the Interfaces or Switch Ports environments in SonicOS.

Configuring a Static IP Address with NAT Enabled

Using NAT to set up your SonicWALL eliminates the need for public IP addresses for all computers on your LAN. It is a way to conserve IP addresses available from the pool of IPv4 addresses for the Internet. NAT also allows you to conceal the addressing scheme of your network. If you do not have enough individual IP addresses for all computers on your network, you can use NAT for your network configuration.

Essentially, NAT translates the IP addresses in one network into those for a different network. As a form of packet filtering for firewalls, it protects a network from outside intrusion from hackers by replacing the internal (LAN) IP address on packets passing through a SonicWALL with a "fake" one from a fixed pool of addresses. The actual IP addresses of computers on the LAN are hidden from outside view.

This section describes configuring the SonicWALL appliance in the NAT mode. If you are assigned a single IP address by your ISP, follow the instructions below.

¸:

Tip: Be sure to have your network information including your WAN IP address, subnet mask, and DNS settings ready. This information is obtained from your ISP.

Start the Setup Wizard

Note:  Your Web browser must be Java-enabled and support HTTP uploads in order to fully manage SonicWALL. Internet Explorer 5.0 and above as well as Netscape Navigator 4.0 and above meet these criteria.

Log in to the device.
Click on the Network option in the left navigation bar. The management software displays the Interfaces page. If the default page is different, click on the Interfaces option in the left navigation bar.

Note that you can launch the SonicWALL PRO 1260 Wizard from the following areas in SonicOS:

the Network > Interfaces window as shown in this example.
the Network > Switch Ports window (button to the upper right of the device graphic of the PRO 1260)
the System > Status window (button in the upper right hand corner of window).
the Wizards window launched by clicking on the Wizards option in the navigation pane.
Click the Setup Wizard button. SonicOS displays the Partition Integrated Switch screen. This screen enables you to map a specified number of ports to an interface. It contains preset groupings of ports. SonicOS groups ports in counting order and automatically assigns them to PortShield Interfaces named by numbers also in counting order. The following table displays each grouping:

Grouping	Port Numbers
Primary LAN	1, 2, 3, 4, 5, 6
PortShield Interface 1	7, 8, 9, 10, 11, 12
PortShield Interface 2	13, 14, 15, 16, 17, 18
PortShield Interface 3	19, 20, 21, 22, 23, 24

Note: The default is 25 ports to one interface.
Click the Switch Partitioning list box and click on switch partition option that indicates the number of ports to be mapped to a specified number of interfaces. Then click Next to continue. SonicOS displays the Review Switch Partitioning Screen that enables you to review your selections.
Note: The port breakout for each grouping will vary depending on which switch partition option you selected in the previous screen
Review the switch partitions you selected in the Partition Integrated Switch screen and make sure they are the ones you want. If you decide you would like ports grouped in a different way, you can go back to the previous screen and make another section by clicking the back button. Also, you can regroup them after you complete the wizard configuration by going to either the Interfaces or Switch Ports window.
Note: Any changes you make in the wizard session for partitioning ports overwrite existing PortShield interfaces and related port configurations. Use care in assessing the switch partitions you chose before continuing.
If you are sure you want to use the switch partitions you created and to overwrite existing switch partitions, click Next. The management software displays the PortShield Interface Settings screen that enables you to select a type of configuration you want to use.
Click on the PortShield Interface Settings list box and click on a configuration type.
If you want the wizard to automatically configure your port-to-interface mappings, click Auto-configure PortShield Interfaces.
If you want to manually configure your port-to-interface mappings, click Configure PortShield Interfaces Manually.
Click Next to continue. SonicOS displays the Interface Trust dialog box that enables you to set access levels between different PortShield interfaces.
Click Next. SonicOS displays the Switch Configuration Summary screen. This screen displays the following settings you configured in the PortShield Wizard:
the number of PortShield interfaces you created
the zone type to which you mapped the PortShield interface
the port ranges assigned to each PortShield interface
the setting of the Interface Trust on the LAN zone (either enabled or disabled)
Review the settings. If you decide you want this initial PortShield configuration for your SonicWALL PRO 1260, click Apply. Wait a few moments while the SonicOS stores the configuration to flash memory on the device
If the device does not accept the configuration because of a conflict, the wizard indicates it could not create the configuration. You may want to exit and try creating another PortShield configuration with the wizard of try configuring a PortShield interface in either the Interfaces or Switch Ports window.
If the device accepts the configuration, SonicOS displays the PortShield Wizard Complete screen
To provide more settings for the PortShield interfaces you created, go to either the Interfaces or Switch Ports windows and continue your configuration there.

SonicWALL, Inc. http://www.sonicwall.com 1160 Bordeaux Drive Sunnyvale, CA 94089-1209