Next-Generation Firewall
Network > Interfaces > Cellular
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
-
-
-
-
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 11.0 (EoL)
- PAN-OS 10.2
- PAN-OS 10.1
- PAN-OS 10.0 (EoL)
- PAN-OS 9.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 8.1 (EoL)
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 10.2
- PAN-OS 10.1
Network > Interfaces > Cellular
Learn how to configure a 5G cellular interface.
Click Add and use the following fields to configure a cellular
interface:
Cellular Interface Settings
|
Configure In
|
Description
|
---|---|---|
Slot
|
Cellular Interface
|
Select the Slot that you want to use for the
interface:
|
Interface Name
|
Select the Interface Name that you want to
use.
| |
Comment
| Optionally enter a Comment about the interface. | |
Netflow Profile
|
If you want to export unidirectional IP traffic that traverses an
ingress interface to a NetFlow server, select the server profile or
click Netflow Profile to define a new profile
(see Device > Server Profiles > NetFlow). Select
None to remove the current NetFlow server
assignment from the interface.
| |
Virtual Router
|
Cellular InterfaceConfig
|
Assign a virtual router to the interface, or click New
Virtual Router to define a new one (see Network > Virtual Routers). Select
None to remove the current virtual router
assignment from the interface.
|
Logical Router
| Assign a logical router to the interface, or click New Logical Router to define a new one (see Network > Routing > Logical Routers). Select None to remove the current logical router assignment from the interface. | |
Security Zone
|
Select a security zone for the interface, or click New
Zone to define a new zone. Select
None to remove the current zone
assignment from the interface.
| |
Radio
| Select the Radio setting.
This option allows you to reset the radio settings during
troubleshooting. | |
GPS
| Select the GPS setting. To enable the GPS option, you must select
On for the Radio
option as well as the GPS option.
| |
Primary SIM Slot
| Select the Primary SIM Slot that contains the SIM card you want the firewall or Panorama to use for the interface. | |
(PAN-OS 11.2.3 and later
releases, SD-WAN plugin 3.3.1 and later releases) Enable
SD-WAN
|
Cellular InterfaceIPv4
|
Select this option to enable
SD-WAN on the cellular interface. SD-WAN enabled cellular interface
support automatic traffic steering based on the collected metrics
amongst qualified paths/links for the cellular and wireless WAN
connection.
|
Automatically create default route pointing to network provided
default gateway
|
Select whether you want the firewall or Panorama to
Automatically create default route pointing to
network provided default gateway. This option is
enabled by default and creates a default route to the
default gateway provided by the network.
| |
Default Route Metric
|
Specify the Default Route Metric to define the
metric for the route. When a routing protocol has more than one
route to the same destination network, it prefers the route with the
lowest metric value. The default is 10; the range is 1 to 65535.
| |
(PAN-OS 11.2.3 and later releases) Enable IPv6 on the
interface
|
Cellular InterfaceIPv6
|
Select to enable IPv6 addressing on the interface.
|
(PAN-OS 11.2.3 and later releases) EUI-64
|
Enter the Extended Unique Identifier (EUI-64) in hexadecimal format
(for example, 00:32:07:FE:4A:12:4C:33). If you leave this field
blank, the firewall uses the EUI-64 generated from the MAC address
of the physical interface.
| |
(PAN-OS 11.2.3 and later releases) Automatically create
default route pointing to network provided default gateway
|
This option is enabled by default and creates a default route to the
default gateway provided by the network.
| |
(PAN-OS 11.2.3 and later releases) Default Route Metric
|
Specify the Default Route Metric to define the
metric for the route. When a routing protocol has more than one
route to the same destination network, it prefers the route with the
lowest metric value. The default is 10; the range is 1 to 65535.
| |
(PAN-OS 11.2.3 and later releases, SD-WAN plugin 3.3.1 and later
releases) SD-WAN Interface Profile
|
Cellular InterfaceSD-WAN
|
Select an existing SD-WAN interface profile
or create a new SD-WAN interface profile. SD-WAN interface profile
defines the characteristics of ISP connections and specifies the
speed of links and how frequently the firewall monitors the link,
and specify a Link Tag for the link.
|
(PAN-OS 11.2.3 and later releases, SD-WAN plugin 3.3.1 and later
releases) Upstream NAT
|
Enable—Select this option if you are adding an
SD-WAN hub or branch device that is behind a NAT device.
NAT IP Address Type—Static
IP. Select IP Address or
FQDN and enter a single IP address or
FQDN of the public-facing interface on the upstream, NAT-performing
device.
Auto VPN configuration uses this address as the tunnel endpoint of
the hub or branch.
| |
Link Settings
|
Cellular InterfaceAdvanced
| Select the Link State for the
interface.
|
Slot |
Cellular InterfaceAdvancedSIM SettingsSlot
| Select the Slot. Only one SIM slot can be active at a time. By default, SIM1 is the active SIM slot. If the firewall or Panorama can't establish a session within 5 minutes, it attempts to establish the session with the alternate SIM slot. |
Pin | To require a PIN to prevent unauthorized use of the SIM slots, enter a Pin for the slot. | |
Confirm Pin | Enter the PIN again to Confirm Pinfor the slot. | |
APN Profile | Specify the APN profile that you want the SIM card to use by default. The SIM slot uses this APN profile unless you override it with a custom APN profile. If you don't specify an APN profile, the firewall or Panorama uses the default auto APN profile. If you need to specify a custom APN profile, you can do so by selecting Cellular InterfaceAdvancedAPN Profile. | |
APN Profile |
Cellular InterfaceAdvancedAPN Profile
| Add the default APN Profile. |
Authentication Type | Select the Authentication Type.
| |
APN | Enter the APN. | |
(PAN-OS 11.2.3 and later releases) PDP Type | Select the packet data protocol (PDP) type that the APN profile allows: IPv4 (default); IPv6, or both. | |
Username | Enter the Username for the account. | |
Password | Enter the Password for the account. | |
Confirm Password | Enter the password again to Confirm Password for the account. | |
Management Profile |
Cellular InterfaceAdvancedOther Info
| Select the Management Profile you want to use for the interface (see Network > Network Profiles > Interface Mgmt. |
MTU | Specify the maximum transfer unit (MTU) value. The default value is 1428 bytes; the range is 576—1500 bytes. | |
Adjust TCP MSS | To adjust the packet size if you encounter latency issues, you can Adjust TCP MSS to configure the maximum segment size. | |
IPv4 MSS Adjustment | Specify the IPv4 MSS Adjustment value. The default is 40; the range is 40—300. |