Strata Cloud Manager

1. Add a cellular interface.

   1. Select ConfigurationNGFW and Prisma Access and choose the Configuration Scope that contains your firewalls.
   2. Select Network & DeviceInterfacesCellular and click Add Cellular.

2. On the Interface tab, configure the general settings.

   1. Enter the Interface Name.
   2. (Optional) Select a Default Interface Assignment.
   3. (Optional) Enter a Comment to describe the interface.
   4. (Optional) Select a Netflow Profile or click Create New.
3. Under Assign Interfaces To, assign the interface to a router and a zone.

   1. Select a Logical Routers or Virtual Router option.
   2. Select a Zone or click Create New.
4. Under SIM Settings, configure each SIM slot that you use.

   1. Select the SIM Slot 1 or SIM Slot 2.
   2. Enter the PIN and Confirm PIN for the SIM.
   3. For APN/DNN Profile, select a profile or click Create New to add an APN or DNN profile. The default is None (Auto).
   4. (Optional) To run more than one APN or DNN session, click Add Sub Interface and configure the subinterface.

      In the Add Sub Interface window, configure the following:

      1. In General, complete the Interface Name by selecting the unit number from the drop-down.
      2. (Optional) Enter a Comment, and select a Netflow Profile or click Create New.
      3. For APN/DNN Profile, select the profile for this session or click Create New. This field is required.
      4. Under Assign Interfaces To, select a Logical Routers or Virtual Router option, and select a Zone or click Create New.
      5. Under IP Address, configure the IPv4 and, if needed, IPv6 settings.
      6. (Optional) Expand Advanced Settings, and then click Add.
5. Configure the IP address settings.

   1. In IP Address and SD-WAN, on the IPv4 tab, keep Automatically create default route selected to add a default route through the cellular interface.
   2. Enter the Default Route Metric. The default is 10.
   3. (Optional) Select Enable SD-WAN to add SD-WAN capability to the interface, and then configure the SD-WAN settings.

      You can configure the SD-WAN settings only after you enable SD-WAN on the IPv4 tab. The SD-WAN tab shows SD-WAN Interface Status as Enabled.

      • For SD-WAN Interface Profile, select an SD-WAN interface profile, or click New SD-Wan Interface Profile to create one. The default is None.
      • If the branch is behind a device that performs NAT, select Enable for Upstream NAT, so that the Auto VPN configuration uses the public IP address of the upstream device as the tunnel endpoint.
   4. (Optional) On the IPv6 tab, select Enable IPv6 on the interface, and then configure the following settings:

      • For Interface ID, keep the default, EUI-64 (default 64-bit Extended Unique Identifier).
      • Keep Automatically create default route pointing to network provided default gateway selected to add an IPv6 default route.
      • Enter the Default Route Metric. The default is 10.
6. (Optional) Expand Advanced Settings and configure additional interface settings.

   1. On the Link Settings tab, set the Link State: Auto detect, Force to up, or Force to down. The default is Auto detect.
   2. On the Other Info tab, select a Management Profile or click Create New.
   3. Enter the MTU (576–1500).
   4. (Optional) Select Adjust TCP MSS to adjust the maximum segment size.
7. On the Modem tab, configure the modem.

   1. For Radio, select Enable to turn on the cellular radio.

      The radio is off by default. With the radio off, the firewall doesn't establish a packet session.
   2. (Optional) For GPS, select Enable to turn on GPS.
   3. For Primary SIM Slot, select 1 or 2.
   4. (Optional) To relay DHCP requests over the cellular interface, select Enable for DHCP Relay.

      Enabling or disabling this option resets the modem during commit and can disrupt traffic. If your network requires it, disable NAT when you enable DHCP relay over the cellular interface. For the full procedure, see configure DHCP relay over a cellular interface.
8. Click Save, and then select Push Config to push the configuration to your firewalls.