Determining the WAN Type

Before setting up your SonicWall appliance, you must first identify the type of WAN connection used in your setup. SonicWall supports the following connection types:

• Static-Configures the appliance for a network that uses static IP addresses.
• DHCP-Configures the appliance to request IP settings from a DHCP server on the internet.
• PPPoE-Point-to-Point Protocol over Ethernet (PPPoE) is typically used with a DSL modem. If your ISP requires desktop software with a username and password, select NAT with PPPoE mode.
• PPTP-Point-to-Point Tunneling Protocol (PPTP) is used to connect to a remote server. PPTP typically supports older Microsoft Windows implementations that require tunneling connectivity.
• L2TP-Layer 2 Tunneling Protocol (L2TP) is used to transmit Layer 2 data over IP or other Layer 3 routed networks. Internet Service Providers (ISPs) often use it to enable virtual private networks (VPNs) for customers over the internet. It does not encrypt network traffic itself. If L2TP is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

• Wire Mode (2-Port Wire)-Inserts the appliance into the network using two paired interfaces. Available Wire Mode types include Bypass, Inspect, and Secure. Bypass mode allows for quick and non-disruptive insertion into the data path. Inspect mode extends Bypass mode with traffic inspection for classification and flow reporting. Secure mode provides full SonicWall ReAssembly-Free Deep Packet Inspection™ (RF-DPI) and control of network traffic.

  Secure Mode also affords the same level of visibility and enforcement as conventional NAT or L2 Bridged Mode deployments, but without any L3/L4 transformations, and with no alterations of ARP or routing behavior. If Wire Mode is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

  When operating in Wire Mode on SonicOS, local management is conducted through the firewall's management interface. To enable remote management, along with dynamic security services and application intelligence updates, it is essential to configure a separate WAN interface for internet connectivity, distinct from the interfaces utilized in Wire Mode.

• Tap Mode (1-Port Tap)-Using a single interface, the firewall connects to and receives mirrored packets from an adjacent switch SPAN port. Similar to Inspect mode in Wire Mode, but with a single port and not in the physical path of traffic. If Tap Mode is not available in the Setup Wizard, you can configure it later in the SonicOS management interface.

For more information about WAN types including Wire Mode, Tap Mode, L2TP, and others, refer to the SonicOS 8 Administration documentation or online Help available at the Technical Documentation portal.