SonicPOINTS connected to Switch versus specifically to SonicWALL Appliance

Posted on 2013-01-25
Medium Priority
Last Modified: 2016-11-23
Hello E-E,

Here wer go!

I have a customer that recently purchased a building next door.  The current building is: 'Building One' and the new building is: 'Building Two'.

Building One -

* Sinlge Firewall TZ 210 [Lattest Firmware]
* Single Dell Switch 2800

* SonicWALL Port XO: ( [LAN ZONE] -- patched to Dell Switch 2800.
* SonicWALL Port X3: ( [WLAN ZONE] -- CAT5 run about 85 feet to switch number 2 [Dell 2800] in building next door.

Builing Two -

I have two SonicPOINT NDR's connected to switch 2 in next door building [Dell 2848].  The SonicPOINTS come right up with no issues on the SonicWALL.  I am able to configure them with no problems.  That said, I could have a major problem too.  Something that would normally be a problem with larger networks and not so much with smaller ones like what I have described above.

Other devices are also connected to both switches.  I am concerned because the article below states that this should not work or is not supported.  Basically the article below states that I **MUST** connect SonicPOINTS directly the SonicWALL Appliance.


Please help me understand so that I can modify sites in this config.  Your help is greatly appreciated.

Question by:BygRob
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 13

Accepted Solution

Ugo Mena earned 2000 total points
ID: 38820456
SonicWALL uses two proprietary protocols (SDP and SSPP) and both *cannot* be routed across any layer 3 device. Any SonicPoint that will be deployed must have an Ethernet connection back to the provisioning SonicWALL UTM appliance, in the same broadcast domain/network.

Tested switches
Most Cisco switches work well; however SonicWALL does not recommend deploying SonicPoints using the “Cisco Express” switch line.
SonicWALL does not recommend deploying SonicPoints using Netgear PoE switches.
If you are using D-Link PoE switches, you will need to shut off all their proprietary broadcast- control/storm control mechanisms, as they will interfere with the provisioning and acquisition ¿mechanisms in the SonicPoint (see section regarding this).
Dell; make sure to configure STP for fast start on SonicPoint ports.
Extreme; make sure to configure STP for fast start on SonicPoint ports.
Foundry; make sure to configure STP for fast start on SonicPoint ports.
HP ProCurve; make sure to configure STP for fast start on SonicPoint ports.
Wiring Considerations
Make sure wiring is CAT5, CAT5e, or CAT6 end to end.
Due to signaling limitations in 802.3af and Ethernet cable runs cannot go over 100 meters between PoE switch and SonicPoint.
You will need to account for PoE power loss the longer the cable run is; this can can be up to 16%, and due to this that port will require more power to be supplied.
When an Ethernet port becomes electrically active, most switches by default will activate the spanning-tree protocol on the port to determine if there are loops in the network topology. During this detection period of 50-60 seconds the port does not pass any traffic – this feature is well-known to cause problems with SonicPoints. If you do not need spanning-tree, disable it globally on the switch, or disable it on each port connected to a SonicPoint device.

If this is not possible, check with the switch manufacturer to determine if they allow for “fast spanning-tree detection”, which is a method that runs spanning-tree in a shortened time so as to not cause connectivity issues. Please refer to the switch-specific sections at the end of this technote for programming samples on how to do this.
Many switches have port aggregation turned on by default – this causes a lot of issues and should be deactivated on ports connected directly to SonicPoints.
PAGP/Fast EtherChannel/EtherChannel – turn this off on the ports going to SonicPoints.
LACP – turn this off on the ports going to SonicPoints.

Author Comment

ID: 38820506
So can I keep the SonicPOINTS connected to the Dell switch? Then a patch cord from the Dell switch back to the port on the Sonicwall UTM appliance?  This is how I have many of my locations now.  Some of the Dell switches have up to 4 SonicPoints connected to a switch.  That said, the switch would have two cables that physically go back to the SonicWALL applicance.  One to X1 for LAN and one to X3 for WLAN.  

The other items on your reply have already been dealt with in the very beginning - i.e. Spanning Tree.  None of my switches are Layer Three and I don't use any routers.  I use the SonicWALL other avilable ports to create subnets.

Also, the switches are not configured for VLAN's.  Other devices, like PC's and printers are connected to the same switch.  If you are in agreement that my configuration is OK, should I VLAN the access points? Benefits?
LVL 13

Expert Comment

by:Ugo Mena
ID: 38820569
As long as your switches are not L3, then you should be ok.
Based on your description, it sounds like you have a fairly solid setup.

How is the cable run between buildings installed? Are you using outdoor rated wiring?

I am assuming there is only 1 switch in building 2? you stated it is a 2800 or a 2848.

Pretty safe to say that if your SonicPoints are powering up and connecting to your TZ210, then your switch is not blocking (SDP and SSPP) SonicWall's two proprietary protocols.
Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!


Author Comment

ID: 38820582
Cool.  The buidling are litterally attached.  I had professional conduit ran then contractor to run CAT6.  With slack on both ends the run is under 80 Feet.  

There is one switch in the main building and one switch in the new building.
LVL 13

Expert Comment

by:Ugo Mena
ID: 38820627
Right on. Nice work!
LVL 32

Expert Comment

ID: 38822352
Your electrical ground systems in the two facilities need to be bonded since you are bridging the two together with a non-current carrying conductor (the network cable).
Otherwise, you have a ground potential difference that can cause an uncontrolled discharge of energy across the network cable.
For small projects, it's cheaper to use a fiber converter at each end, and remove the copper conductor from the equation.  A metal conduit joining the two structures is going to introduce the same problem if there are two separate electrical systems.

Featured Post

Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Before I go to far, let's explain HA (High Availability) and why you should consider it.  High availability is the mechanism used to provide redundancy to any service at the same site and appears as a single service to the users of that service.  As…
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
Suggested Courses

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question