Configure Internet Ports

From internet ports, select a port pair.
To enable the interface, for
Admin Up
, select
Yes
.
(Optional)
Enter a description.
For
Interface Type
, select
Port
.
For
Use these Ports For
, select
Internet
.
Alternatively, you can select
Private WAN
for
Use these Ports For
to configure a WAN port for a Private WAN circuit.
For
Scope
, toggle
Local
or
Global
.
The default is
Local
.
If the scope is local, the route is not advertised to the data center.
If the scope is global, the route is advertised to the data center.
This setting is applicable only to branch sites. It is not applicable to data center sites.
Configuring a global static route will advertise the destination IP/prefix to other sites automatically.
For
Circuit Label
, select the circuit label that corresponds to your internet connection for this site.
Select
Enable IPv6 On This Interface
to configure IPv6.
For
IPv6 Configuration
, select
AutoConf
or
Static
.
Autoconf
indicates the Global IP address is derived using stateless address autoconfiguration (SLAAC).
Choose
Static
if the IP address is fixed and is manually assigned. Additionally specify the
IPv6 Address/Mask
,
Default Gateway (IPv6)
, and
DNS server(s)(IPv6)
.
For
IPv4 Configuration
, select
DHCP
or
Static
.
Choose
DHCP
if the IP address is dynamically assigned.
Choose
Static
if the IP address is fixed and is manually assigned. Additionally specify the
IP Address/Mask
,
Default Gateway
, and
DNS server(s)
.
In Advanced Options,
(optional)
specify
MAC
,
IP MTU
,
External NAT Address and Port (IPv4)
,
External NAT Address and Port (IPv6)
,and
Physical
from the available range.
IP MTU value should be at least 1280 for IPv6. If it is less than 1280, IPv6 cannot be enabled.
Click
Save Port
.

The ION device inherently hardens all the ports designated as
Internet
. You can access only UDP 4500, 500 (ISAKMP), and ESP ports. The utilization of UDP port 500 (ISAKMP) is exclusively reserved for standard VPNs. Configure the ports accordingly to avoid automatic rejection of requests. The ION device blocks any unsolicited incoming internet traffic.