Wireless: SonicPoint Layer 3 Management using GRE Tunnel over the Internet

03/26/2020 924 14010

DESCRIPTION:

- With SonicOS 5.9 firmware the SonicWall UTM appliances are capable of discovering and managing SonicPoints over the Internet.
- SonicPoint will use the AC IP (Access controller) for discovery.
- GRE / DTLS (phase II) tunnel is established between the SonicWall UTM appliance and the SonicPoint device(s) to carry management and data traffic.
 

RESOLUTION:

 Discovering and managing SonicPoints using the GRE Tunnel over the Internet / WAN. 
 

Please Note: The settings shown in this technote are as per the scenario mentioned above, you must substitute the settings as per your setup. 

Deployment Steps:
 
Part 1:  Configuration on the SonicWall UTM appliance

Part 2:  configuration on the Intermediate ISP Router/Firewall to allow GRE Protocol to the SonicPoint.
Part3: Configuration on the SonicPoint: 

 
Detailed configuration steps:
 
Part 1:  Configuration on the SonicWall UTM appliance

1. Login to the SonicWall Management Interface and go to Network > Interfaces page
2. Select WLAN tunnel interface in the Add Interface drop down menu and configure as per your setup

Please Note: A DHCP scope (172.17.35.1/24) will be automatically created in the Network > DHCP Server page for the wireless clients.


 

Part 2:  configuration the Intermediate Router to perform DHCP Relay/IPHelper

Important:On the ISP Router/Firewall you must Allow/Forward the GRE Protocol to the SonicPoint IP address, please contact your ISP/Firewall support for assistance.
 

Part 3: Configuration on the SonicPoints

Step 1: Downloading the SonicOS 5.9 compatible firmware for SonicPoint
 
Method 1: Connecting the SonicPoint to SonicWall UTM appliance running SonicOS 5.9 and above
 
When the SonicPoints are connected to a SonicWall UTM appliance’s WLAN interface/Zone running SonicOS 5.9 and above, they will automatically be updated with the latest firmware.
 
Method 2: Manually updating SonicPoint firmware 

1. Download the TSR from a SonicWall UTM appliance running 5.9 or above

1. Open the TSR in a Text reader/editor and find the SonicPoint download URL
2. Copy-Paste the Download URL in a Web Browser and download the appropriate SonicPoint Image

Step 2: Accessing the SonicPoint Management Interface in Standalone Mode:

1. The default management interface of the SonicPoint is 192.168.1.20
2. If you are connecting to the LAN port on the SonicPoint directly from a PC or through only the PoE injector, you need to configure the Local Area Connection on the PC to be in the same subnet as the SonicPoint. 
   • IP address: 192.168.1.100.
   • Netmask: 255.255.255.0.
3. Connect directly to the LAN port of the SonicPoint with a crossover cable or regular cat. 5 Ethernet cable.
   • Connect to the LAN port of the SonicPoint through the PoE injector with a regular cat. 5 Ethernet cable.
   • If the SonicPoint is connected to a port in a SonicWall security appliance and the port is not in a Wireless zone, you can connect to it through the security appliance provided there are rules to allow HTTP management traffic between the zone your management station is in and the zone the SonicPoint is in.
4. Start your Web browser and direct it to the default management IP address for the SonicPoint, 192.168.1.20

Troubleshooting Tip: If you are unable to access the SonicPoint you may press the Reset Button to access it in SafeMode and then follow the above step #2:



Step 3: Uploading the SonicOS 5.9 compatible firmware for SonicPoints

1. Start your Web browser and direct it to the default management IP address for the SonicPoint, 192.168.1.20
2. Login to the SonicPoint management interface with the default username "admin" and default password "password". 

 Step 4: Configuring the L3 Management Settings

1. Navigate to SonicPoints Network > Interfaces page
2. Under L3 Management settings, enable the option/check “Enable AC IP configuration”.
3. Enter the AC IP as: 1.1.1.1 (X1/WAN Interface of SonicWall UTM Appliance)
4. Enable the Disable local DHCP Client option.

1. Click on Accept button on top.
2. You will get a prompt at the bottom to Restart the SonicPoint, click on the link and restart the SonicPoint. 

Please Note:After the reboot the SonicPoint will try to establish GRE/DTLS tunnel with CAPWAP settings to the IP address mentioned in the AC IP field to complete the SonicPoint provisioning. 

 
How to Test

Go to SonicPoint | Status page, you must see the remote SonicPoint labelled MGMT: Layer 3.