• Secure Mobile Access 12.4
• About This Guide
• CMS Configuration
  • Introduction to CMS
    • Overview
    • CMS Deployment Options
    • What’s New in This Release
      • Global Policy Settings
      • CMS Alerts Logging
    • Central Management Server
    • Central Management Console
    • Managed Appliances
    • Licensing CMS
    • Central User Licenses
    • Global Traffic Optimizer
    • FIPS and CMS
    • Getting Started in Five Steps
  • Installing and Configuring the Central Management Server
    • Overview
    • Kernel based Virtual Machine
    • Supported Platforms for CMS with Global HA
    • Hardware Resource Requirements
    • Installation Files
    • Setting Up a CMS
  • Configuring Appliances for Central Management
    • Overview
    • Firmware Compatibility with the CMS
    • Enabling Central Management on SMA Appliance
    • Registering an SMA Appliance with the CMS
    • Previously Configured Appliances
  • Using the Management Console Menus
    • Overview
    • Dashboard
      • Alerts
      • Appliances Pane
      • Appliance Load
      • Central License Usage Pane
      • About Pane
    • Management Server
      • Alerts
        • View Alerts
        • Configure Alerts
        • Notification
      • Configure
        • Central Management Settings
        • CMS Address Pool
        • Licensing
        • Administrators
          • General Settings
        • Network Settings
        • SSL Settings
        • Services
          • Manage SSH settings from CMS
      • Monitor
        • Configure the logging setting for Managed appliances
      • Maintain
    • Managed Appliances
      • Add/Remove
      • Configure
        • Overview
        • Configuring the Managed Appliances
          • Define Policy
          • Synchronize
        • Support multiple policies with CMS and shared licensing
          • Applying authentication servers to specific appliance
          • Applying SMTP configuration service to specific appliance
          • Applying SMS service to specific appliance
          • Applying realms to a subset of appliance
          • Assign rules to a subset of appliances
          • Support multiple GTO services
      • Monitor
        • User Sessions
        • Reports
        • Health
      • Maintain
  • Central User Licensing
    • Overview
    • How Central User Licenses Work
      • Central Spike User Licenses
      • Central Email Licenses
      • Perpetual Pooled Licenses
    • Enabling Central User Licensing
    • Getting Started with Central User Licensing
      • Setting Up CMS to Use Central User Licenses
      • Setting up CMS for Centralized Appliance Configuration and Management
      • Resetting a CMS License
  • Global High Availability
    • High Availability of the VPN Service
    • High Availability of the CMS
    • Disaster Recovery for the VPN Service
  • Alerts and SNMP
    • Overview
    • Pre-Configured Alerts
    • Configuring SNMP
  • Capture Advanced Threat Protection
    • Enabling Capture ATP
    • File Options
    • Web Services
    • Advanced Settings
  • Central FIPS Licensing
• Global High Availablity
  • Introduction to Global HA and GTO
  • Planning GTO Deployment
    • Choosing a Deployment Model
    • Minimizing Configuration Differences
    • GTO Service Names and DNS Delegations
    • Provisioning Certificates
      • Let's Encrypt
      • Adding Certificates to SMA Appliances
      • Generating a Certificate Signing Request (CSR)
      • Importing SSL Certificates
  • Setting up GTO
    • Setting up the CMS and SMA appliances
    • Enabling GTO service for managed appliances with the CMS
    • Setting up a Basic GTO Service
    • Monitoring and Configuring GTO
    • Defining the Central Policy
  • Extending GTO Deployment
    • Enabling Cached Credentials
    • Additional Deployment Notes
• SonicWall Support
  • About This Document

Setting Up a CMS

To setup a Centrally Managed VPN infrastructure

For setting up a CMS on AWS, Azure and KVM, refer to the respective Getting Started Guide.

1. Setup a virtual instance (ESX/ESXi, Hyper-V) of the release firmware.
2. Start the virtual machine and wait for a login prompt to appear.
3. Login as root (no password is required).
4. Press any key to continue.

5. Enter the network settings for the internal interface (labeled 2 on the appliance).

   • IP Address
   • Subnet mask
   • Gateway

   If you are on the same network as the appliance, press Enter when prompted for the gateway.

6. Continue the Setup Wizard steps to access the console from a browser at https://<Internal-IP-Address>:8443

   The Setup Wizard Welcome screen displays.

   

7. Click Next to view the License Agreement.

8. Read the agreement and, if you agree, select I accept the terms of the license agreement.

   

9. Click Next.

   The Basic Settings page displays.

10. Select Configure this machine as a CMS to manage the licensing and configuration of up to 100 SMA appliances.

11. Under Administrator password, enter the password you want for the administrator and confirm it.

    Be sure to save or write this password down in a secure location. If you forget it, it cannot be recovered.

12. Under Date and time, select the time zone from the Time Zone menu.

    

13. Click Next.

    The Network Settings page displays.

14. Enter a descriptive name in the Appliance name field.

15. Select the Single interface option.

    CMS is restricted to a single interface; it cannot be set up with dual interfaces.

16. Enter the Internal Interface IP address and Subnet mask.

    

17. Click Next.

    The Routing page displays.

18. From the Routing mode field, select Default gateway.

19. In the Default gateway IP address field, enter the gateway IP address.

    

20. Click Next.

    The Name Resolution page displays.

21. Enter your domain in the Default domain field.

22. Enter the IP address of the primary DNS server into the DNS Server field.

    

23. Click Next.

    The Central Management page displays.

24. Under Locale, enter the Country and the Location.

25. Enable Central User Licensing and Policy Synchronization.

    

26. Click Next for the Completion screen.

    

27. Click Finish.

    The configuration changes are applied and a Log in screen displays.

    

28. Log in with user name as admin and the password that you configured.

    The Central Management Console (CMC) Dashboard page displays.

    

    You can now download and install a CMS license from MySonicWall.com. Refer to Licensing.