: Configure a Cellular Software Bypass Pair
Focus
Focus

Configure a Cellular Software Bypass Pair

Table of Contents

Configure a Cellular Software Bypass Pair

Let us learn how to configure a cellular software bypass pair.
Where Can I Use This?What Do I Need?
  • Prisma SD-WAN
  • Active Prisma SD-WAN license
Software cellular bypass creates a software bridge between the ethernet and cellular interfaces of an ION device. To support cellular WAN links in a high availability (HA) configuration, configure a software cellular bypass pair with a cellular link as one interface and an ethernet link as another interface. When both the links are active, the active ION device employs a path selection algorithm to select the best path.
In an HA topology, when the WAN link attached to the active device fails, the active device can continue to route traffic over the WAN link attached to the backup device. If one of the ION devices fails, the other device can take over routing of the traffic between LANs and to/from the WANs.
  1. Select WorkflowsDevicesClaimed Devices, select the device you want to configure.
  2. Select Interfaces.
  3. Select a port.
  4. For Admin Up, select Yes.
    When you create a bypass pair, both the ports are up. When you bring down the bypass pair, both ports will be set to down. After that you have to bring up the ports individually. For security reasons, bringing up the individual port of the bypass pair is necessary. Failing to do so, the individual ports of the bypass pair will remain down and may impact the software upgrade process.
  5. (Optional) Enter a Description.
  6. Select Bypass Pair as the Interface Type.
  7. For Pair With, choose a pairing port to create a bypass pair and then click Done.
    Set one port as WAN and the second as LAN on the Couple Ports to create a Bypass Pair pop-up. For cellular bypass pairs, the cellular interface is always WAN and the peer is always LAN.
  8. For Use These Ports For, select either Internet, or Private WAN.
  9. Choose a Circuit Label.
    The circuit label for the cellular interface should match the circuit label for the peer device’s directly attached cellular interface.
  10. The IPv4 Configuration is auto-negotiated for the Cellular bypass.
  11. Configure the Cellular WAN interface as an internet transit zone in the NAT Zone configuration.
  12. Save the bypass pair.

Configure WAN (Peer) Interfaces

In an HA configuration, the initial step is to configure a cellular bypass pair and configure a WAN port on each ION device. The next step is to mirror the WAN configuration on the connected WAN port of the other ION device.
The ION devices operate in an active/backup configuration, and through fail-to-wire functionality, the active ION device constantly maintains complete control and utilizes the full capacity of all the WAN circuits. As a result, you need to configure WAN circuits on both the ION devices.
  1. Select WorkflowsDevicesClaimed Devices, select the device you want to configure.
  2. Select Interfaces.
  3. Select a port.
  4. For Admin Up, select Yes.
  5. Select Internet or WAN for Use this ports for.
  6. Select Cellular in Peer Bypass Pair Wan Port Type to use the cellular bypass pair in a HA topology.
    This field is used in an HA environment to inherit cellular configuration on an Ethernet port using the peer bypass pair for the cellular traffic.
    When creating a Cellular 5G/LTE + Ethernet software bypass, the LAN interface in a bypass pair should be directly connected to the Ethernet port on the other ION device, which will terminate the VPNs built over the cellular circuit.
  7. Specify the APN profile for the Cellular interface.
  8. The IPv4 Configuration is auto-negotiated for the Cellular bypass.
  9. Choose a Circuit Label.
    Use the same circuit on the bypass pair. The circuit label for the cellular interface should match the circuit label for the peer spoke’s directly attached cellular interface.
  10. Save the configuration.