• SonicOS 7
• Introduction
• NSa Series Overview
  • Deployment Options
    • Internet Edge Deployment
    • Medium and Distributed Enterprises
  • NSa Hardware Features
  • NSa System Requirements
• NSsp 10700, 11700, and 13700 Overview
  • Features
    • Connectivity, Port Density and Performance
    • Firmware Features
  • Hardware Features
    • +
    • Rear Panel
    • System Specifications
• Determining the WAN Type
• System Setup
  • Default Settings
  • System Startup
  • Basic Configuration
  • Registration and Licensing
  • Creating a MySonicWall Account
• Setup Options
  • Zero Touch
  • Setting Up with NSM
  • Setting Up with SonicExpress
  • Setting Up with CLI
• Running the Setup Wizard
• Testing and Troubleshooting Connectivity
• Migration Tool
  • About Migration
  • Using the Migration Tool
• SonicWall Support
  • About This Document

Determining the WAN Type

Before configuring your SonicWall appliance, you need to determine the type of WAN connection for your setup . SonicWall supports the following types:

• Static—Configures the appliance for a network that uses static IP addresses.
• DHCP—Configures the appliance to request IP settings from a DHCP server on the Internet.
• PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is typically used with a DSL modem. If your ISP requires desktop software with a username and password, select NAT with PPPoE mode.
• PPTP—Point-to-Point Tunneling Protocol (PPTP) is used to connect to a remote server. PPTP typically supports older Microsoft Windows implementations that require tunneling connectivity.

• L2TP—Layer 2 Tunneling Protocol (L2TP) is used to transmit Layer 2 data over IP or other Layer 3 routed networks. Internet Service Providers (ISPs) often use it to enable virtual private networks (VPNs) for customers over the Internet. It does not encrypt network traffic itself.

  If L2TP is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

• Wire Mode (2-Port Wire)—Inserts the appliance into the network using two paired interfaces. Available Wire Mode types include Bypass, Inspect, and Secure. Bypass mode allows for quick and non-disruptive insertion into the data path. Inspect mode extends Bypass mode with traffic inspection for classification and flow reporting. Secure mode provides full SonicWall ReAssembly-Free Deep Packet Inspection™ (RF-DPI) and control of network traffic.

  Secure Mode also affords the same level of visibility and enforcement as conventional NAT or L2 Bridged Mode deployments, but without any L3/L4 transformations, and with no alterations of ARP or routing behavior. If Wire Mode is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

  When operating in Wire Mode, the MGMT interface is used for local management. To enable remote management, dynamic security services, and application intelligence updates, a WAN interface (separate from the Wire Mode interfaces) must be configured for Internet connectivity.

• Tap Mode (1-Port Tap)—Using a single interface, the firewall connects to and receives mirrored packets from an adjacent switch SPAN port. Similar to Inspect mode in Wire Mode, but with a single port and not in the physical path of traffic.

  If Tap Mode is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

For more information about WAN types including Wire Mode, Tap Mode, L2TP, and others, refer to the SonicOS 7 Network Firewall Administration Guide at the Technical Documentation portal.