Best Practices for Wireless Networks (English)

Best Practices for
Wireless Networks
A guide for network administrators deploying, securing and
maintaining SonicWALL SonicPoint ACe/ACi wireless access points
Table of Contents
Introduction................................................................................................................................................................................................................ 2
Overview...................................................................................................................................................................................................................... 2
SonicPoint features................................................................................................................................................................................................... 3
Capacity planning and site layout.......................................................................................................................................................................... 5
Connecting your SonicPoints................................................................................................................................................................................. 8
Security...................................................................................................................................................................................................................... 10
Wireless Guest Services.......................................................................................................................................................................................... 12
Ongoing management........................................................................................................................................................................................... 13
Troubleshooting....................................................................................................................................................................................................... 14
Summary.................................................................................................................................................................................................................... 14
Appendix.................................................................................................................................................................................................................... 15
For More Information.............................................................................................................................................................................................. 17
Introduction
This guide is designed to help network administrators quickly locate answers to their questions about connecting, deploying,
configuring, securing, maintaining and troubleshooting SonicWALL SonicPoint ACe and ACi wireless access points (WAPs).
It goes beyond our technical documentation by summarizing the years of internal SonicWALL expertise our global support
teams have accumulated.
The guide is intended for reading online. It contains links to dozens of knowledge base (KB) articles we’ve posted that
address specific questions from administrators and troubleshooters like you. The purpose of the guide is to help you broaden
the reach of your network through SonicWALL SonicPoints while extending the security of your SonicWALL firewall. By
reading the guide, you’ll gain a deeper understanding of the best ways to plan your capacity, connect your SonicPoints,
enforce security, offer guest users secure wireless access to your network, manage your SonicPoints over their lifetime and
troubleshoot any problems that arise.
Overview
You’ve installed a SonicWALL firewall and now you want to extend your network and create a secure wireless solution with
SonicPoint wireless access points.
SonicPoint wireless access points
The SonicPoint ACe and ACi models are Wi-Fi CERTIFIED™ and have the same performance characteristics, radios, protocol
support and 3x3 Multiple-Input Multiple-Output (MIMO) technology. The ACe has six external antennas and the ACi has six
internal antennas. Except where noted, the content in this guide applies to both models.
First, consult the SonicPoint ACe Getting Started Guide or SonicPoint ACi Getting Started Guide, depending on your model. The
guides introduce you to and remind you of terminology and networking basics you’ll need in managing SonicPoints, including:
• Layer 2 management of the SonicPoint
• Relationship and configuration of the SonicWALL firewall,
SonicOS (the UI running on SonicWALL) and SonicPoints
• Physical placement of the SonicPoint
• Antennas and cabling
2
• 2.4GHz and 5GHz frequencies (SonicPoint supports
operation on both)
• Frequency bands and nuances of IEEE 802.11
• Wireless firewalling
SonicWALL firewall
SonicPoints are designed for full integration and central WLAN management using SonicWALL SuperMassive™ 9000, Network
Security Appliance (NSA) and TZ series firewalls.
Use cases for the wireless LAN
Wireless networks have become a common feature in environments as varied as retail stores, hotels, bars/restaurants, medical
offices and airports. Although the hardware is the same, elements such as business justification, vision, physical layout,
average usage and vulnerability vary greatly among verticals.
The combination of the SonicWALL firewall and the wireless LAN has allowed restaurants to extend WiFi to their customers,
boosted productivity in agriculture and food, improved network utilization in non-profit organizations and lowered operating
costs in dental/healthcare.
SonicPoint features
SonicPoints are designed to offer all the features you expect in a wireless access point:
• Wireless security, including Wireless Intrusion Detection
Services (WIDS), wireless firewalling, secure Layer
3 wireless management and integrated Wireless
Guest Services (WGS) to enforce password access for
customers and guests
• Dual-radio and dual-band operation on either 2.4GHz or
5GHz networks
• IEEE 802.3at Power over Ethernet (PoE), also referred to
as “PoE Plus”
• Configuration as a Virtual Access Point (VAP) for logical
separation of secure wireless network traffic and secure
customer access
• Protocol support for 802.11 a/b/g/n/ac, WPA2 and WPA
• Implementation of firewall rules to all wireless traffic,
and control of all wireless client communications on the
network
• WiFi Multimedia (WMM), to provide wireless Quality of
Service on bandwidth-intensive applications such as VoIP
and multimedia traffic.
Those and other features are summarized in the overview of SonicPoint features and specifications.
3
Capacity planning and site layout
“What is the right number of SonicPoints for my building?”
We wish there was a simple answer to this question, but there isn’t.
Dozens of people checking email simultaneously may generate less WiFi traffic than a few people streaming high-definition
video simultaneously. Besides the volume of traffic, other variables include the wireless standard used by the client device,
physical proximity between the device and SonicPoint, and nearby sources of interference. Note also that there is a limit to
the number of SonicPoints that each SonicWALL firewall can manage – up to 128 per firewall – as we describe in this article
and this video.
Configuring antennas for maximum coverage
Antenna configuration is an important part of any wireless installation. To maximize the range of SonicPoints and help in
planning your deployment, use the radio frequency coverage patterns we include in our Wireless Network Security data sheet.
They provide useful details about antenna configuration for installing and positioning your SonicPoints and completing the
professional site survey we recommend (below).
Conducting a site survey
We strongly recommend that you perform a professional site survey before you deploy your SonicPoints. A site survey is the
best way to determine the optimal layout of SonicPoints in your building.
Educate yourself on the details of site surveys and compare the most popular tools for conducting surveys so that you can
avoid areas of signal interference and dead zones where signals are weak or absent. Planning will help you improve your
wireless network environment, and mapping out and recording your wireless network is a smart practice for maintenance in
the long run.
4
Radio frequency (RF) considerations
SonicPoints utilize dual radios operating on the 2.4GHz and 5GHz frequency bands. The former offers greater range but is
subject to interference from more sources; the latter moves packets faster but has limited penetration over distance. The
dual-mode operation of SonicPoints offers the best of both frequency bands and allows network administrators to opt for the
band that results in better performance and less overlap depending on where the device is installed.
SonicOS running on the SonicWALL firewall includes an RF Analysis utility (see below) for identifying potential or existing
wireless problems such as overloaded channels and channels with extreme interference.
For an introduction to or refresher on RF basics, consult our articles on the 2.4GHz and 5GHz bands, signal strength and
signal-to-noise ratio, Wave1 and Wave2 in 802.11ac and the 802.11 physical layer (advanced modulation).
SonicPoints also support Distributed Frequency Selection (DFS), a spectrum-sharing mechanism that allows wireless LANs
(WLANs) to coexist with radar systems. Upon initial setup, the SonicPoint automatically selects a frequency that does not
interfere with certain radar systems while operating in the 5GHz frequency band. During ongoing operation the SonicPoint
will continue to monitor the 5GHz band and, if it senses radar interference, will automatically switch to a channel that does
not interfere with the radar system.
Power considerations
Green AP (access point) is a feature of SonicPoint ACe and ACi that puts the radios to sleep to reduce power consumption
when no client is connected to the AP. As soon as a client connects, a sleeping radio exits power-save mode. You can also set
Green AP on each radio independently.
The SonicPoint ACi is powered using Power over Ethernet (PoE) only. A Dell SonicWALL 802.3at-compliant PoE line injector
(sold separately) or an 802.3at-compliant switch is required to power each SonicPoint ACi. To maintain the required 25 watts
of power to the SonicPoint ACi, the maximum length of CAT5e cable from the 802.3at PoE injector to the SonicPoint ACi is
30 meters.
The SonicPoint ACe supports Power over Ethernet (PoE) and also includes an AC adapter, giving you greater flexibility where
electrical outlets are not readily accessible.
Geographic/Regulatory considerations
For the U.S. market, the SonicPoint ACe and ACi are available in a specific set of SKUs that comply with U.S. FCC regulations
for WiFi devices. For the rest of the world, the SonicPoint ACe and ACi are available in the International SKU except for Japan
which has its own set of SKUs. We’ve created an FAQ and a related video on the differences in country codes between the U.S.
and International SKUs.
To review the list of supported channels by country, refer to pages 9 and 10 in the SonicPoint ACe Getting Started Guide and
SonicPoint ACi Getting Started Guide.
5
Connecting your SonicPoints
SonicPoints connect both in hardware (mounting, power, cabling) and in software (SonicOS, network interface, WLAN zone
and SonicPoint ACe/ACi settings, all configured on the SonicWALL firewall).
Most sites manage their SonicPoints in a Layer 2 configuration, in which a switch is directly connected to a port designated
as a WLAN in the SonicWALL firewall. Any SonicPoint plugged into that switch is automatically provisioned, then managed
through SonicOS running on the firewall.
For the SonicPoint ACe, you’ll find an article and video on out-of-box setup that explains how to connect for Layer 2
management. A similar article and video explain Layer 2 management on the SonicPoint ACi.
You configure and manage SonicPoints through SonicOS, the SonicWALL firewall user interface. SonicOS also contains a
Wireless > Settings menu, covered in the “Configuring Wireless Settings” section of the SonicOS Administration Guide.
A live demo of the SonicOS user interface is available at TZ600.demo.sonicwall.com. You can freely explore the configuration
menu and options, including the wireless settings in the “SonicPoints” sub-menu, as they appear on a SonicWALL firewall.
Connecting your SonicPoints
2nd floor
SonicWALL
PoE Injector
SonicPoint ACe
1st floor
PoE switch
Internet
SonicPoint ACe
Lobby
SonicWALL
PoE Injector
SonicPoint ACe
SonicWALL
SuperMassive firewall
6
Layer 3 configuration
SonicPoints also support management in a Layer 3 configuration over a routed network. This includes local Layer 3
management, when SonicPoints are outside of the Layer 2 network but on the same intranet as the SonicWALL, and remote
Layer 3 Management, when SonicPoints are remotely deployed across the internet cloud. Both Layer 3 configurations allow
you to scale easily from small to large deployments while maintaining centralized SonicOS network security protection
and providing flexible policy control. You’ll find background information and configuration procedures in the SonicOS
Administration Guide in the subsection “SonicPoint Layer 3 Management.”
Layer 3 tunneling between the SonicWALL firewall and SonicPoints is flexible enough to support Generic Routing
Encapsulation (GRE), site-to-site IPSec and SSL VPN.
Fairnet
FairNet uses policies to guarantee a minimum amount of bandwidth to each wireless client. This prevents disproportionate
bandwidth consumption by any single user on the wireless network. Consult this article for details on configuring FairNet
from SonicOS.
WiFi Multimedia (WMM)
SonicPoints support WMM, an interoperability certification for providing higher QoS on wireless networks for VoIP and
multimedia traffic. This article offers a background on Access Categories and the procedure for configuring SonicPoints.
Security
The combination of the SonicWALL firewall and SonicPoints creates a wireless network security solution that offers the full
spectrum of security for your wireless network.
Wireless firewalling
Many wireless APs connect devices to one another before the firewall has scanned the traffic moving among them. That
effectively circumvents content filtering, anti-virus and other security measures built into a firewall. In the SonicPoint model
of wireless firewalling, all traffic among connected devices moves through the firewall to ensure the same policies are being
applied to both wired and wireless traffic.
Read more about wireless firewalling on page 8 of the SonicPoint ACe Getting Started Guide and SonicPoint ACi Getting
Started Guide.
Authentication and access
Configured through SonicOS, SonicPoints support all major wireless encryption protocols including WEP, WPA-PSK,
WPA2-PSK, and WPA2-Auto-PSK. For authentication you can set up local users and groups in SonicOS or with an existing
RADIUS server. You can also integrate authentication through an LDAP/Active Directory/eDirectory server configuration with
SonicWALL, as described in this article and this video.
In the SonicOS Administration Guide you’ll find basic information on configuring authentication in the section “Configuring
Wireless Security” and a deeper dive into authentication options in the section “Managing Users and Authentication Settings.”
For additional context we’ve created videos on configuring WPA2-EAP Authentication for Wireless and allowing access
between wireless and LAN zones.
Finally, in case of difficulties in configuring authentication, have a look at our wireless authentication FAQs.
7
Virtual Access Points
A Virtual Access Point (VAP) is a multiplexed installation of a single, physical AP so that it presents itself as multiple, discrete
APs. To wireless LAN clients, each VAP appears to be an independent physical AP, visible as a BSSID. VAPs conserve radio
channels and help optimize WLAN infrastructure.
VAPs allow the network administrator to control wireless user access and security settings by creating multiple custom
configurations grouped and enforced on a single internal wireless radio within a single physical interface. That means you
can create profiles to govern the wireless access of different groups in your organization. You can schedule access to the VAP,
schedule each profile’s access to the VAP and allow one VAP profile access while denying others.
The versatility of VAPs allows for multiple profiles, access control lists (ACLs) and schedules in a single SonicPoint. You can
provision SonicPoints as an internal VLAN on a switch, isolated from the LAN.
Internet
RADIUS
Server
VLAN 50
VLAN 100
VLAN 150
VLAN 200
VLAN 250
SSID: VAP-Corporate
SSID: VAP-Legacy
SSID: VAP-Guest_Secure
SSID: VAP-Guest
SSID: VAP-SSL-VPN
VLAN IDs
Provisioned to SonicPoints
SSID:
VAP-Guest
SSID:
VAP-Guest
Secure
SSID:
VAP-Legacy
Guest User
Trusted Guest
Wireless Printer
WGS
No Encryption
No LAN Access
WPA - PSK
WiFiSec Enforced
LAN Access
WEP
MAC Filtering
LAN Access
SSID:
VAP-Guest
SSID:
VAP-Corporate
SSID:
VAP-SSL-VPN
Guest User
Corporate User
SSL-VPN User
WGS
No Encryption
No LAN Access
WPA/WPA2
WiFiSec Enforced
LAN Access
Open
SSL-VPN Enforced
LAN Access
Ethernet LAN
LAN with Multiple VLAN
Individual WLAN SSID
8
Wireless Intrusion Detection Services (WIDS)
WIDS enables the SonicWALL firewall to recognize and take countermeasures against the most common types of illicit
wireless activity. Besides Sequence Number Analysis and Association Flood Detection, you can enable Rogue Access
Point Detection and schedule IDS scans across your network. See the section “Configuring Wireless IDS” in the SonicOS
Administration Guide for basic information on configuring and scheduling WIDS.
Advanced Wireless Intrusion Detection and Prevention
While the SonicPoint is operating in Wireless Intrusion Detection and Prevention (WIDP) mode it monitors the radio spectrum
for the presence of unauthorized (rogue) access points (intrusion detection) and can be configured by the administrator to
take countermeasures automatically (intrusion prevention). The active countermeasures include adding an Evil Twin, blocking
traffic from the rogue access points and disassociating rogue access points and the clients associated with them. See the
section “Configuring Advanced IDP” in the SonicOS Administration Guide for information on configuring Advanced WIDP.
Other security topics
Wireless networking introduces other security issues unfamiliar to administrators of wired networks. SonicPoints are designed
to address those issues through features like creating a watch list of threats to your wireless network and scheduling the
SonicPoint wireless radio.
Wireless Guest Services
One of the most compelling use cases for wireless networking is wireless guest services (WGS), which SonicOS allows you to
configure in individual guest accounts for temporary access that is separate from your internal wireless users. SonicPoints and
SonicOS enforce authentication and limit guest access. This solution brief includes an overview of WGS.
For unique portal branding and granular authentication for wireless guest users, WGS offers lightweight hotspot messaging
(LHM), a free set of customizable interfaces for creating branded welcome pages, targeted advertising or special offers.
Custom access functions include branding, advertising, time online and bandwidth used. You can determine whether the
page comes directly from SonicWALL through WGS or from redirection to another server or cloud-based offering. GuestAir is
an example of a cloud-based, external authentication service that uses LHM.
Combining Virtual Access Point (VAP) profiles and Wireless Guest Services is a powerful way to enforce security while
accommodating visitors to your building.
9
Ongoing management
Once you have deployed and configured SonicPoints, your ongoing management burden is light. We have prepared
knowledge base articles and videos in several relevant areas.
Registration
You can register your SonicPoints at mysonicwall.com either manually or automatically. The product warranty and support
contract begin upon registration. See this article and video for details.
Firmware updates and upgrades
Firmware updates and upgrades for SonicPoints come from software.sonicwall.com through SonicOS on the managing
SonicWALL firewall. We’ve created an article and a video on generally managing SonicPoints, along with articles on
downloading and updating SonicPoint firmware.
Changing configuration
Currently, SonicPoints reboot whenever you make a change to their radio configuration. Since the reboot may significantly
affect wireless network users, this article provides several ways to minimize the impact.
Global Management System (GMS)
You can manage the SonicWALL firewall through HTTPS, SNMP or the SonicWALL Global Management System (SonicWALL
GMS). Management functions of SonicPoints through GMS include creating and maintaining profiles, implementing intrusion
detection, configuring VAPs, running RF Monitor and applying FairNet policies. For detailed instructions, consult the section
“Configuring Firewall SonicPoints” in the Global Management System Administration Guide.
10
Troubleshooting
SonicPoint support teams spend most of their time troubleshooting and generating knowledge base articles that address the
questions of network administrators worldwide. We’ve rolled many common problems into a single Wireless Troubleshooting
Guide that summarizes solutions for these issues:
o Unable to detect SonicPoint
o SonicPoint provisioning issues
o Unable to see SSID
o Unable to get DHCP lease
o Unable to authenticate or associate
o Throughput issues
o Environmental and other general considerations for wireless deployment
Other troubleshooting
For basic troubleshooting of SonicPoints we’ve created an article and video covering commonly reported problems with
legacy access points, auto-management in LAN/DMZ zones and Ethernet.
Other areas of common troubleshooting include PoE (802.3af/802.3at) compliance, continuous rebooting, collecting
SonicPoint logs, determining the wireless passphrase from the firewall and finding access points when using WMM-PS.
Note that troubleshooting is not limited to the network. Be sure to upgrade the wireless drivers on
the client computers and devices to the latest version in order to optimize wireless connectivity,
compatibility and performance. SonicPoint ACe and ACi are Wi-Fi CERTIFIED by the Wi-Fi Alliance
for interoperability, security and a range of application-specific protocols. SonicPoint products
have been tested rigorously with other devices to ensure interoperability with other Wi-Fi
CERTIFIED equipment operating in the same frequency band.
Summary
The 802.11 performance of SonicWALL SonicPoints integrates smoothly with the comprehensive security of
SonicWALL firewalls.
The SonicWALL Wireless Network Security solution combines the front-line security and performance of SonicPoint access
points with the full network protection of the SonicWALL next-generation firewall. Your organization can give guests
password-protected access to the internet while enabling employees to access internal systems and resources safely from a
variety of WiFi-enabled devices. With SonicPoints your users can run bandwidth-intensive apps without signal degradation,
even in high-density environments. Manage your SonicPoints, your security and your wired and wireless networks with autodetection and auto-provisioning from a single pane of glass through SonicOS or through the Global Management System.
This guide has shown the SonicPoint’s rich feature set and tight integration with the firewall. It serves as a reference guide for the
years of documentation we’ve compiled for our customers while extending both access and security as far as the WLAN reaches.
For more information, follow our Network, SRA and Email Security Blog and visit the SonicPoint support forum for full-text
search on more than 3,500 entries, posts and solutions from the SonicPoint community.
11
Appendix
The following table summarizes all the references in this guide.
Type
Title
Description
URL
Admin Guides
AG
SonicOS Administration Guide
Respective sections of Administration Guide cover
Configuring Wireless Security, Configuring Wireless
IDS, and Managing Users and Authentication
Settings.
https://support.software.dell.
com/sonicwall-nsa-series/
release-notes-guides
AG
Global Management System
Administration Guide
“Configuring Firewall SonicPoints” section covers
management functions of SonicPoints through
GMS, including creating and maintaining profiles,
implementing intrusion detection, configuring
VAPs, running RF Monitor and applying FairNet
policies.
https://documents.software.
dell.com/sonicwall-gms/
software/
Case Studies
CS
Bravo Brio Restaurant Group
BBRG extends PCI-compliant WiFi to restaurant
guests using Dell SonicWALL.
https://www.sonicwall.
com/casestudy/
bravo-brio-restaurantgroup867310824383/
CS
Cal-Maine Foods
Egg supplier cuts TCO and boosts productivity with
SonicWALL.
https://www.sonicwall.com/
casestudy/calmaine-foodscalmaine-foods-cuts-tco-andboosts-productivity-with-dellsonicwall867312824447/
CS
Our Kids of Miami-Dade/Monroe Inc.
Non-profit gains 30% in network utilization with
SonicWALL.
https://www.sonicwall.
com/casestudy/our-kidsof-miamidademonroeinc-our-kids-gains-30-innetwork-utilization-with-dellsonicwall867326824488/
CS
Western Dental Services
Dental healthcare provider lowers operational
costs with SonicWALL GMS.
https://www.sonicwall.com/
casestudy/western-dentalservices-western-dentalservices-lowers-operationalcosts-withdell-sonicwallgms867496827567/
Explore the configuration menu and options
including the wireless settings in the “SonicPoints”
sub-menu as they appear on a SonicWALL firewall.
https://nsa6600.demo.
sonicwall.com/main.html
Live Demos
D
SonicOS Live Demo
Getting Started Guides
GS
SonicPoint ACe Getting Started Guide
Provides instructions for basic installation and
configuration of the SonicPoint ACe wireless
access point in single-unit or multi-unit wireless
deployments.
https://support.software.
dell.com/download/
downloads?id=5792808
GS
SonicPoint ACi Getting Started Guide
Provides instructions for basic installation and
configuration of the SonicPoint ACi wireless
access point in single-unit or multi-unit wireless
deployments.
https://support.software.
dell.com/download/
downloads?id=5792811
12
Type
Title
Description
URL
Knowledge Base articles
KB
KB13389: Built-in Wireless Overview
Overview of the Wireless menu in SonicOS.
https://support.software.dell.
com/kb/sw13389
KB
How to configure WiFi Multimedia
parameters on SonicPoint to prioritize
multimedia traffic. (SW11684)
Configuring SonicPoints to support WiFi
Multimedia (WMM) to provide wireless Quality of
Service on bandwidth-intensive applications such
as VoIP and multimedia traffic.
https://support.software.dell.
com/kb/sw11684
KB
KB12836: SonicPoint ACi/ACe/N2:
Overview, Features and Specifications
Overview of features and specifications for
SonicPoint models.
https://support.software.dell.
com/kb/sw12836
KB
KB9051: SonicPoint N/Ni/Ne/NDR/
ACi/ACe/N2 supported firewalls and
firmware versions
Up-to-date list of supported products and
firmware.
https://support.software.dell.
com/kb/sw9051
KB
KB12786: Max SonicPoints supported
per SonicWALL firewall
Maximum number of SonicPoints supported by
firewall model.
https://support.software.dell.
com/kb/sw12786
KB
KB12874: Why is a Wireless Site Survey
needed?
Details on site surveys, including a list of popular
tools for conducting them.
https://support.software.dell.
com/kb/sw12874
KB
Improve your wireless network
environment (SW13674).
General planning guidelines for wireless networks.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw13674
KB
Where can I find Visio stencils for
network diagrams, presentations, etc.?
(SW7764)
For mapping out, recording and presenting a
wireless network using Visio.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw7764
KB
Using RF Analysis on SonicPoint(s)
Using RF Analysis utility to discover and identify
potential or existing wireless problems.
http://help.sonicwall.com/
help/sw/eng/6700/26/2/3/
content/SonicPoint_RF_
Analysis.060.3.htm
KB
RF Basic Background: 2.4GHz and 5GHz
Bands (SW13087)
RF basics of 2.4GHz and 5GHz bands.
https://support.software.dell.
com/kb/sw13087
KB
KB13230: RF Basic Background: Signal
Strength and SNR
RF basics of signal strength and signal-to-noise
ratio.
https://support.software.dell.
com/kb/sw13230
KB
KB13293 RF Basic Background:
802.11ac Wave1 and Wave2
RF basics of 802.11ac Wave1 and Wave2.
https://support.software.dell.
com/kb/sw13293
KB
KB13292 RF Basic Background: 802.11
Physical Layer (Advanced Modulation)
RF basics of 802.11 physical layer.
https://support.software.dell.
com/kb/sw13292
KB
Green AP for power saving (SW13192)
Green AP feature allows the SonicPoint radio to
save power by going to sleep.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw13192
KB
What are the Country Code differences
between a SonicPoint Domestic and
SonicPoint International (SW13120)
Answers to questions about SonicPoint SKUs for
the U.S. and the rest of the world.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw13120
KB
KB13913: SonicPoint ACi: Out of Box
Setup
Basic hardware setup and configuration of
SonicPoint ACi.
https://support.software.dell.
com/kb/sw13913
KB
KB13912: SonicPoint ACe: Out of Box
Setup
Basic hardware setup and configuration of
SonicPoint ACe.
https://support.software.dell.
com/kb/sw13912
KB
SonicWALL TZ Series and SonicWALL
X-Series – managing SonicPoint ACe/
ACi access points (SW13970)
Using SonicPoints with X-Series switches.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw13970
KB
SonicPoint-N Layer 3 Management
using GRE Tunnel over the Internet
(SW10300)
Layer 3 management using GRE tunnel.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw10300
KB
UTM-Wireless: How to configure
SonicPoint Layer 3 Management over
an IPSEC site-site VPN tunnel (DHCP
over VPN) which acts a default route for
all traffic for the remote site (SW11970)
Layer 3 management over an IPSec site-to-site
VPN tunnel.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw11970
13
Type
Title
Description
URL
Knowledge Base articles
KB
How to configure SonicPoint N Layer 3
Management over SSL VPN (SW11203)
Layer 3 management over SSL VPN.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw11203
KB
UTM: How to configure SonicPoint
FairNet (SW11714)
Configuring FairNet policies to guarantee a
minimum amount of bandwidth to each wireless
client.
https://support.software.dell.
com/kb/sw11714
KB
Wireless Authentication FAQs
(SW12607)
Troubleshooting client connection problems to
SonicPoints.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw12607
KB
KB13373: Overview of Wireless Virtual
Access Points (VAPs)
Basics and benefits of VAPs, including radio
channel conservation and optimized WLAN
infrastructure.
https://support.software.dell.
com/kb/sw13373
KB
KB5801: Configuring a Virtual Access
Point (VAP) Profile for Wireless
Corporate Users using SonicPoints
VAP profiles for WLAN users in corporate
environment.
https://support.software.dell.
com/kb/sw5801
KB
Configuring ACLs (Mac Filter list)
for individual Virtual Access Points
(SonicOS 5.9 and above) (SW10401)
Configuring individual ACLs (Access Control Lists)
to provide more effective authentication control on
VAPs.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw10401
KB
KB13360: What is the BSSID of a Virtual
Access Point or a SonicPoint?
Determining BSSID of a VAP.
https://support.software.dell.
com/kb/sw13360
KB
KB12883: Configuring Schedule on
SonicPoint/Wireless VAP (Virtual Access
Point) in SonicOS Enhanced
Scheduling availability of VAPs.
https://support.software.dell.
com/kb/sw12883
KB
KB10339: Scheduling a Virtual Access
Point Profile
Scheduling a VAP profile.
https://support.software.dell.
com/kb/sw10339
KB
KB11104: How to Provision SonicPoints
on the primary WLAN interface with
Virtual Access Points (VAP) on VLAN Example with a NetGear Switch
Provisioning SonicPoints as an internal VLAN on a
switch, isolated from the LAN.
https://support.software.dell.
com/kb/sw11104
KB
KB13383: How to configure Rogue
Access Point Detection in Wireless
Intrusion Detection Settings (IDS)
Using WIDS to detect rogue access points on the
WLAN.
https://support.software.dell.
com/kb/sw13383
KB
Adding RF Threat Stations to the Watch
List (SW13909)
Updating the watch list for RF threat stations.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw13909
KB
KB5798: Configuring a Virtual Access
Point (VAP) Profile for Wireless Guest
Access Using SonicPoints
Configuring WGS on a VAP.
https://support.software.dell.
com/kb/sw5798
KB
How to Register SonicPoint ACi/ACe/N2
Access Points (SW13078)
Registration of SonicPoints.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw13078
KB
KB12818: How to manage SonicPoint
access points
Managing and upgrading SonicPoint firmware.
https://support.software.dell.
com/kb/sw12818
KB
How to download SonicPoint firmware
(SW14070)
URLs for updating firmware.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw14070
KB
How to update SonicPoint firmware
(SW9641)
Updating SonicPoint firmware through SonicOS
and SonicWALL firewall.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw9641
KB
How to reduce the SonicPoint reboot
impact when perform configuration
change (SW12868)
Minimizing impact on SonicPoint access after
configuration changes.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw12868
14
Type
Title
Description
URL
Summarizing solutions for multiple issues:
https://support.software.dell.
com/kb/sw8393
Knowledge Base articles
KB
KB 8393 Wireless Troubleshooting
Guide
•
Unable to detect SonicPoint
•
SonicPoint provisioning issues
•
Unable to see SSID
•
Unable to get DHCP lease
•
Unable to authentication or associate
•
Throughput problems
KB
Basic Troubleshooting of SonicPoints
(SW12832)
Troubleshooting SonicPoint-SonicWALL firewall
connection issues.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw12832
KB
KB12867 PoE compliance
(802.3af/802.3at) should be checked
when powering up the SonicPoint with
PoE switches
Do’s and don’ts for Power over Ethernet (PoE).
https://support.software.dell.
com/kb/sw12867
KB
SonicPoint continuously rebooting or
stuck at initializing (SW14178)
Troubleshooting continuous rebooting or hanging
during initialization.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/sw14178
KB
SEEG: Wireless client cannot find APs
when using WMM-PS (179040)
Troubleshooting wireless clients that cannot find
SonicPoints in power save mode.
https://support.software.dell.
com/sonicwall-sonicpointseries/kb/179040
KB
Supported Wireless Broadband Cards
and Devices
List of PC cards, USB devices and wireless service
providers supported by SonicPoints.
https://www.sonicwall.
com/supported-wirelessbroadband-cards-devices/
Complete configuration details for Layer 3 remote
management of SonicPoints.
https://support.software.
dell.com/download/
downloads?id=5371869
Management Guide
MG
SonicPoint Layer 3 Management Guide
Solution Briefs
SB
Wireless Guest Services (WGS) solution
brief
Overview of WGS (guest WiFi) with deployment
scenario.
https://www.sonicwall.com/
docs/sonicwall-wirelessguest-services-wgs-solutionbrief-technicalbrief-24392.pdf
SB
The Secure WiFi Portal of Choice For
SonicWALL Guest Users
Details on GuestAir’s cloud-based implementation
of WGS, including external authentication.
http://www.exertisvad.co.uk/
wp-content/uploads/2014/11/
GuestAir-Datasheet.pdf
V
How to find the maximum SonicPoints
supported per SonicWALL UTM
appliance
Maximum number of SonicPoints supported by
firewall model.
http://bcove.me/40ii69ma
V
SonicPoint Domestic vs. International
Answers to questions about SonicPoint SKUs for
the U.S. and the rest of the world.
http://bcove.me/sipqjate
V
SonicPoint ACi: Out of Box Setup
Basic hardware setup and configuration of
SonicPoint ACi.
http://bcove.me/ibaqqcoe
V
SonicPoint ACe: Out of Box Setup
Basic hardware setup and configuration of
SonicPoint ACe.
http://bcove.me/vcmztjsq
V
How to Configure WPA2-EAP
Authentication for Wireless
Configuring WPA2-EAP authentication.
http://bcove.me/jri79l0z
Videos
15
Type
Title
Description
URL
V
How to allow access between Wireless
and LAN zones
Configuring access between wireless and LAN
zones.
http://bcove.me/xqbykosw
V
How to allow one VAP profile access to
the LAN while denying others in Built-in
Wireless
Restricting access for individual VAP profiles.
http://bcove.me/p3aqe4ys
V
How to schedule the SonicPoint
Wireless Radio
Scheduling time windows of availability for
SonicPoints.
http://bcove.me/4sveotxa
V
How to register a SonicPoint
Registration of SonicPoints.
http://bcove.me/6v6p8wzx
V
How to manage SonicPoint access
points
Managing and upgrading SonicPoint firmware.
http://bcove.me/z9gntnkd
V
Basic Troubleshooting of SonicPoints
Troubleshooting SonicPoint-SonicWALL firewall
connection issues.
http://bcove.me/v305dzt2
V
How to collect SonicPoint logs
Collecting logs from SonicPoints.
http://bcove.me/cyiwvvnx
V
How to find out the Wireless Passphrase
from Firewall running on SonicOS
enhanced 5.9.0.0 and above
Obtaining wireless passphrase from firewall.
http://bcove.me/rodq60a2
Videos
16
For More Information
© 2016 Dell, Inc. ALL RIGHTS RESERVED. This document
contains proprietary information protected by copyright.
No part of this document may be reproduced or
transmitted in any form or by any means, electronic or
mechanical, including photocopying and recording for any
purpose without the written permission of Dell, Inc. (“Dell”).
Dell Security logo and products—as identified in this
document—are trademarks or registered trademarks of
Dell, Inc. in the U.S.A. and/or other countries. All other
trademarks and registered trademarks are property of their
respective owners.
The information in this document is provided in connection
with Dell products. No license, express or implied, by
estoppel or otherwise, to any intellectual property right
is granted by this document or in connection with the
sale of Dell products. EXCEPT AS SET FORTH IN DELL’S
TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE
AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO
LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS,
About Dell Security
Dell Security solutions help you create and maintain a strong
security foundation with interconnected solutions that span
the enterprise. From endpoints and users to networks, data
and identity, Dell Security solutions mitigate risk and reduce
complexity so you can drive your business forward.
www.dell.com/security
If you have any questions regarding your potential use of
this material, contact:
Dell
5455 Great America Parkway,
Santa Clara, CA 95054
www.dell.com/security
Refer to our Web site for regional and international
office information.
17
Misc-BestPracticesGuideWireless-US-VG-23463
IMPLIED OR STATUTORY WARRANTY RELATING TO ITS
PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR
A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO
EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT,
CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL
DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES
FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR
LOSS OF INFORMATION) ARISING OUT OF THE USE OR
INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS
BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Dell makes no representations or warranties with respect
to the accuracy or completeness of the contents of this
document and reserves the right to make changes to
specifications and product descriptions at any time without
notice. Dell does not make any commitment to update the
information contained in this document.

Download Report