Determining the WAN Type

Before configuring your SonicWall appliance, you need to determine the type of WAN connection that your setup uses. SonicWall supports the following types:

• Static—Configures the appliance for a network that uses static IP addresses.
• DHCP—Configures the appliance to request IP settings from a DHCP server on the Internet.
• PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is typically used with a DSL modem. If your ISP requires desktop software with a username and password, select NAT with PPPoE mode.
• PPTP—Point-to-Point Tunneling Protocol (PPTP) is used to connect to a remote server. PPTP typically supports older Microsoft Windows implementations that require tunneling connectivity.
• L2TP—Layer 2 Tunneling Protocol (L2TP) is used to transmit Layer 2 data over IP or other Layer 3 routed networks. Internet Service Providers (ISPs) often use it to enable virtual private networks (VPNs) for customers over the Internet. It does not encrypt network traffic itself. If L2TP is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

• Wire Mode (2-Port Wire)—Inserts the appliance into the network using two paired interfaces. Available Wire Mode types include Bypass, Inspect, and Secure. Bypass mode allows for quick and non-disruptive insertion into the data path. Inspect mode extends Bypass mode with traffic inspection for classification and flow reporting. Secure mode provides full SonicWall ReAssembly-Free Deep Packet Inspection™ (RF-DPI) and control of network traffic.

  Secure Mode also affords the same level of visibility and enforcement as conventional NAT or L2 Bridged Mode deployments, but without any L3/L4 transformations, and with no alterations of ARP or routing behavior. If Wire Mode is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

When operating in Wire Mode, the firewall's MGMT interface is used for local management. To enable remote management and dynamic security services and application intelligence updates, a WAN interface (separate from the Wire Mode interfaces) must be configured for Internet connectivity.

• Tap Mode (1-Port Tap)—Using a single interface, the firewall connects to and receives mirrored packets from an adjacent switch SPAN port. Similar to Inspect mode in Wire Mode, but with a single port and not in the physical path of traffic. If Tap Mode is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

For more information about WAN types including Wire Mode, Tap Mode, L2TP, and others, refer to the SonicOS Administration documentation or online Help.