English dropdown-ico

Manual SonicWALL TZ170

22 pages 0.83 mb
Download

Go to site of 22

Summary
  • SonicWALL TZ170 - page 1

    SonicOS Hub and Spoke TZ170 VPNs with Checkpoint NG Introduction This technote will detail all steps to get a Hu b and Spoke setup between the SonicWALL SonicOS Enh anced and the Checkpoint NG. Within this setup the Checkpoint NG will be the HUB an d 2 TZ170 units will be the Spokes . Versions Used  SonicOS 2.5.0.2 Enhanced on both T Z170 units ...

  • SonicWALL TZ170 - page 2

    2 Before You Begin If you have not already done so, set up a mana gement system connecting to the SonicWALL’s intern al LAN interfac e. The SonicWALL should alread y be configured for internet acce ss; if not, do this before completing any further steps. T he Check Point FireWall-1 NG server is also as sumed to be properly configur ed for intern ...

  • SonicWALL TZ170 - page 3

    3 Next create an address object grou p for t he two checkpoint address object s. On the ‘Network > Address Objects’ page in the ‘Address Groups’ section, click on ‘A dd Group…’ to create the address grou p for the o bjects. Name: checkpoint_lan Name: Side_Bob_lan Zone Assignment: VPN Zone Assignment: VPN Type: Network Type: Network ...

  • SonicWALL TZ170 - page 4

    4 From the navigation bar on the left, cli ck on ‘VPN’, this will brin g up the ‘VPN > Settings’ pag e. In the ‘VPN Global Settings’ section, make sure the ‘Enable VP N’ radi o button is selected. In the ‘VPN Policies’ section, click on ‘Add’ to create the new VPN policy for the Check Poi nt FireWall-1. The ‘VPN Policy? ...

  • SonicWALL TZ170 - page 5

    5 Next select the ‘Network’ tab. In the ‘Local Networks’ section, select the radio b utton ne xt to ‘Choose local net work from list’ and select "LAN Primary Subnet" from the dropdown box. In the ‘Destination Net works’ section, select the radio butto n next to ‘Choose destination network from list’ and select "ch ...

  • SonicWALL TZ170 - page 6

    6 IKE (Phase 1) Proposal Exchange: Aggressive Mode DH Group: Group 5 Encryption: 3DES Authentication: SHA1 Life Time (seconds): 3600 Ipsec (Phase 2) Proposal Protocol: ESP Encryption: 3DES Authentication: SHA1 DH Group Group 2 Life Time (seconds): 3600 Do not enable Perfect Forward Securit y. Next select the ‘Advanced’ tab. Make sure that the o ...

  • SonicWALL TZ170 - page 7

    7 SonicWALL Setup Side Bob Log into the SonicWALL’s Management GUI usin g a current web browser. The address objects will be created first, and then a gro up wi ll be created to contain the address object s. From the navigation bar on the left, c lick on ‘Net work’ and then ‘Address Objects’, this will bring up the ‘Network > Address ...

  • SonicWALL TZ170 - page 8

    8 Name: checkpoint_lan Name: Side_Alice_lan Zone Assignment: VPN Zone Assignment: VPN Type: Network Type: Network Network: 192.168.170.0 Network: 180.10.10.0 Netmask: 255.255.255.0 Netmask: 255.255.255.0 Click ‘OK’ to finish. Click ‘OK’ to finish. Next create an address object grou p for t he two checkpoint address object s. On the ‘Netwo ...

  • SonicWALL TZ170 - page 9

    9 The ‘VPN Policy’ window will then appear. On the ‘General ’ tab pag e, ‘Security Policy’ se ction, select “IKE using Preshared Secret” from the ‘IPSec Keying Mode:’ dr opdown box. Name: "to_checkpoint" IPSec Primary Gateway Name or Address: 67.115.118.94 Shared Secret: HaRd!_to_Gue55_B0 b Local IKE ID: SNWL Identifie ...

  • SonicWALL TZ170 - page 10

    10 Next select the ‘Network’ tab. In the ‘Local Networks’ section, select the radio b utton ne xt to ‘Choose local net work from list’ and select "LAN Primary Subnet" from the dropdown box. In the ‘Destination Net works’ section, select the radio butto n next to ‘Choose destination network from list’ and select "c ...

  • SonicWALL TZ170 - page 11

    11 Ipsec (Phase 2) Proposal Protocol: ESP Encryption: 3DES Authentication: SHA1 DH Group Group 2 Life Time (seconds): 3600 Do not enable Perfect Forward Securit y. Next select the ‘Advanced’ tab. Make sure that the option Enable Keep Al ive has been check ed. All other options ca n be l eft as they are. Click the OK button. This completes the s ...

  • SonicWALL TZ170 - page 12

    12 Check Point FireWall-1NG Setup Log into SmartDashboard. Before the VPN can be setup it is necessary to cr eate Net work Objects for all devices and networks. To create the network objects, first click on ‘M anage’ on the top of the SmartDash board. Then click on ‘Network Objects…’ from the drop down box. The ‘Network Objects’ windo ...

  • SonicWALL TZ170 - page 13

    13 The ‘Network Properties’ window will then appear. In this window, enter the object: Name: CP_LAN Network Address: 192.168.170.0 Net Mask: 255.255.255.0 The next network objects to create are for the LAN of the SonicW AL L appliance at Side Alice a nd for the LAN of the SonicWALL appliance at Side Bob. From the ‘Network Objects’ windo w, ...

  • SonicWALL TZ170 - page 14

    14 Here we create the Network Object for the LAN of Side Bob. Make sure that the Object con t ains the corre ct LAN Network Address and Net Mask. Within our example we used: Name: Network_Bob Network Address: 10.234.234.0 Net Mask: 255.255.255 Next, edit the ‘Check Points’ net work object. It should be na med the same as the machi ne name then ...

  • SonicWALL TZ170 - page 15

    15 The ‘Check Point Gateway’ page will appear. On ‘General Properti es’, verify the ‘IP Address’ and that both ‘FireWall- 1’ and ‘VPN-1 Pro’ are selected. In this exam pl e, the ‘IP Addre ss’ is “192.168.170.1”. When finished, click ‘Topology’ on the left hand side. On ‘Topology’, verif y the network addresses of ...

  • SonicWALL TZ170 - page 16

    16 It is needed to create also Interoperable Network objects fo r the both SonicWALL app liances. Go to ‘Manage’ > ‘Net work Objects’ now the Network Objects windo w will then appear. To create the ‘Interoperable Devi ce ’ ob ject, click the ‘New’ button at the bottom of the ‘Network Obje cts’ window, then select ‘Interoper ...

  • SonicWALL TZ170 - page 17

    17 On the ‘Topology’ page, unde r the ‘VPN Domain’ section, sele ct ‘Manuall y d efined’ and se lect the previousl y created “Network_Alice” Net work Object with the dropdo wn menu. Click on ‘OK’ to finish. An Interoperable Device Object needs also to be created for Side Bob. Go to ‘Manage’ > ‘Net work Objects’ now th ...

  • SonicWALL TZ170 - page 18

    18 In this window, under ‘General Properti es’ enter: Name: SNWL_Bob IP Address: 80.62.91.20 Next click ‘Topology’ on the le ft hand sid e. On the ‘Topology’ page, unde r the ‘VPN Domain’ section select ‘Manuall y defined’ and sele ct the previousl y created “Network_Bob” Network Object with the dropdo wn menu. Click on ‘O ...

  • SonicWALL TZ170 - page 19

    19 From the ‘VPN Communities’ windo w, select the ‘New’ butto n on the bottom. Then select ‘Site To Site’ and ‘Star…’ The ‘Star Community Properties’ page will appear. On the ‘Star Community Properties’ page, enter the VPN name in the ‘Name:’ field. In this example, the ‘Name:’ is " HUB- TEST" which needs ...

  • SonicWALL TZ170 - page 20

    20 Next, click on ‘Satellite Gateways’. On the Satellite Gateways, click on the ‘Add…’ b utton under the ‘Satellite Gateways :’ section. This will bring up the ‘Satellite Gate ways’ window. Select here the address objects ‘SNWL_Alic e’ and address object ‘SNWL_Bob’ after this i s done press OK. ...

  • SonicWALL TZ170 - page 21

    21 Click on 'VPN Properties'. Enter the ‘IKE (Phase 1) Properties’ and the ‘IPsec (Phase 2) Properties ’. In this exampl e, the ‘IKE (Phase 1)’ section the settings are as follows: IKE (Phase 1) Properties Perform key exchange encryption with: 3DES Perform data integrity with: SHA1 Ipsec (Phase 2) Properties Perform IPsec data ...

  • SonicWALL TZ170 - page 22

    22 In the ‘Advanced Properties’ section, un der IKE (Phase 1), modify the ‘Renegotiate IKE securit y associations every’ fiel d to "60" minutes and the ‘Use Diffie-He llman group’ should be "Group 5 (1536 b it). Tick the option ‘Use aggressive mo de’ For the ‘Ipsec (Phase 2) Proposal’ section the settings are as f ...

Manufacturer SonicWALL Category Switch

Documents that we receive from a manufacturer of a SonicWALL TZ170 can be divided into several groups. They are, among others:
- SonicWALL technical drawings
- TZ170 manuals
- SonicWALL product data sheets
- information booklets
- or energy labels SonicWALL TZ170
All of them are important, but the most important information from the point of view of use of the device are in the user manual SonicWALL TZ170.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals SonicWALL TZ170, service manual, brief instructions and user manuals SonicWALL TZ170. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product SonicWALL TZ170.

Similar manuals

A complete manual for the device SonicWALL TZ170, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use SonicWALL TZ170 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of SonicWALL TZ170.

A complete SonicWALL manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual SonicWALL TZ170 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the SonicWALL TZ170, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the SonicWALL TZ170, that we can find in the current document
3. Tips how to use the basic functions of the device SonicWALL TZ170 - which should help us in our first steps of using SonicWALL TZ170
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with SonicWALL TZ170
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of SonicWALL TZ170 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning SonicWALL TZ170?

Use the form below

If you did not solve your problem by using a manual SonicWALL TZ170, ask a question using the form below. If a user had a similar problem with SonicWALL TZ170 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Captcha
New picture

Comments (0)