Main Menu
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Network Segmentation
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • English English English en
  • BLOG
  • CONTACT SALES
  • FREE TRIALS
  • English English English en
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Network Segmentation
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • Menu

How to provision X-Series switches on SonicWall TZ series firewalls

03/26/2020 31 People found this article helpful 122,725 Views

    Download
    Print
    Share
    • LinkedIn
    • Twitter
    • Facebook
    • Email
    • Copy URL The link has been copied to clipboard

    Description

    SonicWall X-Series Solution: How to provision X-Series switches on SonicWall TZ series firewalls

    Resolution

     

    For information on other SonicWall X-Series Solution related topics:

    How to provision X-Series Switches on a SonicWall TZ series firewall

    How to provision X-Series Switches on a SonicWall TZ High Availability (HA) system

    SonicWall X-Series Solution - Support for SonicWall Virtual Interfaces (VLANs)

    SonicWall integration with X-Series Switches FAQ

    SonicWall X-Series Solution Overview

    How to manage X-Series switch's admin credentials and management IP through the X-Switch's UI

    SonicWall X-Series Solution: Which models of X-Switches has support for POE+

    SonicWall X- Series Solution How to backup and restore X-Series switches

     

    --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

    How to provision a X-Switch on a SonicWall TZ series firewall?

    1. Check and Upgrade SonicWall TZ firewall SonicOS
    2. Prepare a X-Switch for SonicWall intergration
      1. Configure X-Switch into factory default mode
      2. Configure X-Switch into manage mode
    3. Provision a X-Switch on SonicWall

    Step 1: Check SonicWall TZ firewall SonicOS version and upgrade if needed.

    SonicWall X-Series Solution is only supported on SonicOS 6.2.5.0 or higher.

    SonicWall X-Series Solution only supports SonicWall TZ series firewalls in SonicOS 6.2.5.0

    Step 2: Preparing X-Switches for SonicWall integration:

    • Configuring the X-Switch into factory default mode
    • Configuring the X-Switch into manage mode

    Note: A factory default X-Switch is recommended for the SonicWall X-Series Solution. It guarantees that the X-Switch's configurations are in a well known state and can be managed from SonicOS.

    If you wish or need to modify the X-Switch basic parameters such as the Management IP and Credentials, you need to use the X-Switch User Interface. For details, see KB185479 (SonicWall X-Series Solution: How to mange X-Series switch's admin credentials and management IP through the X-Switch's UI).

    Note: You cannot modify the X-Switch's Management IP and Credentials from SonicOS

    The factory default X-Switch parameters in manage mode are:

    • The management IP address is 192.168.2.1
    • The admin user name is: admin
    • The admin password is: admin
    • All switch ports are in the default vlan of "vlan1"

    Step 2a: Configure X-Switch into factory default

    Locate the RESET button and press the RESET button for at least 7 seconds and release. The X-Switch will reboot into factory default mode.

    Image

    Step 2b: Configure X-Switch into manage mode

    Locate the MODE button and press the MODE button for at least 7 seconds and release. The X-Switch will transition to manage mode. Locate the (Mgmt) LED, it will light up when in manage mode.

    Image

    Note: If the X-Switch is not in manage mode then it cannot be manage from SonicOS

    Step 3: Provision and connect a factory default X-Switch on SonicWall in stand alone mode

    Setup a port on SonicWall to manage a X-Switch

    Select and Configure an interface on the SonicWall TZ firewall to manage the X-Switch (X-Switch management port). This interface must be in the same subnet as the X-Switch's management IP (192.168.2.1)

    In the following example:

    Interface X3 on the firewall is selected as the firewall's X-Switch management port

    • we created a custom zone "X-Switch Management"
    • assign X3 to the zone "X-Switch Management" with a static IP address (192.168.2.254/24)

    Image

    Add a factory default X-Switch in SonicOS.

    Go to Network | PortShield Groups | External Switch Configuration tab

    Click the Add Switch.... button for the Add Switch menu

    Image

    In the Add Switch menu, enter the request information and click the Add button to accept the settings

    Image

    Here, we have a Common Uplink example:

    The SonicWall Firewall Uplink is X3 (The SonicWall Firewall Uplink is connected to the X-Switch Uplink to form the Common Uplink)

    X-Switch Switch Uplink is port 2 (The X-Switch Uplink is connected to the SonicWall Firewall Uplink)

    X-Switch Switch Management is port 2 (The Switch Management link is share with the Common Uplink)

    The Common Uplink, carries PortShield traffic between the SonicWall and X-Switch. In addition this link is also shared with the X-Switch management link, allowing the SonicWall to manage the X-Switch. This option is called the Shared Common Uplink.

    Note: A Common Uplink can only be created during the Add Switch... procedure. If you forget to defined a Common Uplink during the Add Switch... procedure, then you must delete the Switch and add again.

    Image

    Note: The Switch Management link can be on a dedicated switch port and does not need to be shared with the Common Uplink. If you have limited port resources, then a share Common Uplink is a helpful option.

    Next, we have a no Common Uplink example:

    In this scenario, no Common Uplink is defined. The Switch Management is on a dedicated management link.

    In lieu of using a Common Uplink, we will setup Dedicated Uplinks later.

    Both the Firewall Uplink and Switch Uplink is set to None and only the Switch Management is defined.

    Image

    View the SonicWall / X-Switch Uplink in SonicOS

    Go to Network | PortShield Groups | Port Graphics tab

    Here, we can view various Uplinks.

    The ports with the up arrows are the Uplink Ports, the Uplink Portswith the same color are cabled together.

    In the following example, we show a Shared Common Uplink, functioning as both the Common Uplink and the Switch Management link.

    Image

    Next example, shows a dedicated management link and no Common Uplink.

    The X-Switch port 2 has a silhouette of a person to indicate that it is the Switch management port.

    Dedicated Uplinks are not defined yet and can be defined after PortShields are setup.

    Here, the SonicWall X-Switch management port was selected as X3 with IP of 192.168.2.254/24

    and is in the same subnet of a factory default X-Switch management IP with 192.168.2.1

    X-Switch management (port 2) is cable to SonicWall X3

    Image

    Next, check and view the X-Switch status in SonicOS

    Go to Network | PortShield Groups | External Switch Configuration tab

    The status indicator is green when the SonicWall is in communication with the X-Switch

    For this example:

    This PortShield Common Uplink / Switch management link is between SonicWall X3 and X-Switch port 2

    Image

    Next, assign X-Switch ports to SonicWall PortShield groups

    Go to Network | PortShield Groups | Port Graphics tab

    Select the X-Switch ports (you may select multiple ports) and click the Configure button for the Switch Port Settings menu

    In Switch Port Settings menu, enter the required parameters:

    Port Enable: (Enabled)
    PortShield Interface:  (SonicWall port #)
    Link Speed:  (Auto Negotiate)

    In the following example:


    X-Switch ports 3, 4, 5 are Portshield to SonicWall interface X0

    X-Switch ports 6, 7, 8 are Portshield to SonicWall interface X2

    Image

    On a SonicWall in stand alone mode, you may also PortShield SonicWall ports. This option is not allowed for SonicWalls in HA.

    In this example we wish to configure:

    • SonicWall port X4 PortShield to X2
    • SonicWall port X5 PortShield to X0

    Select the SonicWall ports (you may select multple ports) and click the Configure button for the Switch Port Settings menu

    In Switch Port Settings menu, enter the required parameters:

    Port Enable (Enabled)
    PortShield Interface:  (SonicWall port #)
    Link Speed:  (Auto Negotiate)

    Image

    Next, configure PortShield Dedicated Uplinks

    Go to Network | PortShield Groups | Port Configuration tab

    Select a X-Switch port and click its Configure button to enter the Switch Port Settings menu

    Select the check box "Dedicated Uplink...."

    The Port Configuration tab, list all SonicWall ports and X-Switch ports and what portshield groups they belong to if any.

    X-Switch ports that are assigned to a SonicWall Portshield groups can be assign the role of Dedicated Uplink. The role of a Dedicated Uplink is to carry traffic for a particular Portshield group.

    From the Port Configurations tab

    Select the X-Switch port and click its Configure button to enter the Switch Port Settings menu

    Image

    In the Switch Port Settings menu select the check box "Dedicated Uplink... and click OK

    Image

     

    In the following example:

    X-Switch port (ES1: 3) is a member of portshield X2. It is selected as the Dedicated Uplink for portshield group X2.

    Image

    To view the Dedicated Uplinks

    Go to Network | PortShield Groups | Port Graphics tab

    The ports with the up arrow are the Uplink Ports and the same color Uplink Ports should be cabled together.

    In the following example for Dedicated Uplinks:

    X-Switch port 3 is cabled to SonicWallX2 as a Dedicated Uplink for PortShield group X2

    X-Switch port 7 is cabled to SonicWall X0  as a Dedicated Uplink for PortShield group X0

    X-Switch port 2 is cabled to SonicWall X3 as the Switch Management Link

    Image

    Next example, shows a Common Uplink in conjunction with Dedicated Uplinks (mix mode Uplinks)

    You can also define a Common Uplink in conjunction with Dedicated Uplinks (mix mode Uplinks).

    In this scenario a Dedicated Uplink only carry PortShield traffic that has been assigned to it  and the Common Uplink carries all other PortShield traffic not covered by Dedicated Uplinks.

    In the following example for mixed mode Uplinks:

    X-Switch port 3 is cabled to SonicWall X2 as a Dedicated Uplink for PortShield group X2

    X-Switch port 2 is cabled to SonicWall X3 as a Common Uplink for all other PortShield traffic

    X-Switch port 2 also serves as the Switch Management Link

    Image

    Related Articles

    • Configuring and troubleshooting SonicWALL Switches
    • How can I get alerted if a WAN link goes down in a WAN fail-over scenario?
    • Configuring and troubleshooting High Availability

    Categories

    • Firewalls > TZ Series > X-Series Switching
    • Firewalls > SonicWall NSA Series > X-Series Switching
    • Firewalls > SonicWall SuperMassive 9000 Series > X-Series Switching

    Not Finding Your Answers?

    ASK THE COMMUNITY

    Was This Article Helpful?

    YESNO

    Article Helpful Form

    Article Not Helpful Form

    Company
    • Careers
    • News
    • Leadership
    • Awards
    • Press Kit
    • Contact Us
    Popular resources
    • Communities
    • Blog
    • SonicWall Capture Labs

    Stay In Touch

    • By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. You can unsubscribe at any time from the Preference Center.
    • This field is for validation purposes and should be left unchanged.
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
    • Instagram

    © 2022 SonicWall. All Rights Reserved.

    • Legal
    • Privacy
    • English
    Scroll to top
    Trace:cc0750a261fdf1eb77a7d3e0cb0c4ff9-90