>
    Strata Copilot
    Configure Cellular Interfaces
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Sites and Devices
    5. Prisma SD-WAN Ports and Interfaces
    6. Configure Cellular Interfaces
    Download PDF
    Prisma SD-WAN

    Configure Cellular Interfaces

    Table of Contents

    Configure Cellular Interfaces

    Configure cellular interfaces to use the required WAN path and circuit labels. Set the following manual configurations on the cellular ION device.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    The cellular ION devices have integrated 4G or 5G cellular modem for primary or backup WAN connectivity. If there is no 4G or 5G coverage, these modems can fall back to 3G network. In a typical deployment, the cellular WAN is configured as a backup to the wired WAN interface. It can also be configured in an active/active model with wired WAN interface and also as the only WAN link.
    These cellular ION devices are optionally installed with dual SIMs to provide backup connectivity when the primary SIM carrier connection is down. These devices detect SIMs from carriers such as AT&T, T-Mobile, Verizon, and auto configure the required modem profile and firmware and bring up cellular WAN connectivity.
    Configure the cellular feature on the ION device by setting SIM specific configuration like primary SIM slot, SIM PIN configuration and cellular IP interface specific configuration. Separate primary and backup interface configurations are supported to allow configuring different APNs and circuit labels for different SIMs.
    Configure the cellular interfaces to use the required WAN path and circuit labels.
    Manually configure cellular interface on the cellular ION device. You can create a new APN profile, Use for Internet or Private WAN , Circuit Label, Modify Cellular SIM Settings, Manage SIM Operations, and Customize Cellular Firmware.
    1. Select ConfigurationPrisma SD-WANION DevicesClaimed, select the device you want to configure.
    2. Configure the Device and select Interfaces, and then select Cellular Interfaces.
    3. In the General section:
      1. Enter a Name and (Optional) Description, and add Tags for the port channel interface.
      2. Select Admin up for the interface.
      3. The SIM card status shows the SIM Slot, Primary, Carrier, and SIM Status.
    4. In the Network Setting section, enter Use this port for that corresponds to your Internet or private WAN.
      1. Interface Status is already populated.
      2. IPv4 Configuration is populated for the interface.
      3. For Security Zone, select a device to bind..
      4. Select the Circuit Label.
      5. Select the circuit label that corresponds to your private WAN connection for this site. For more information on how to reduce non-user traffic on cellular links, refer to Minimize Metered LTE Usage.
      6. Select the APN Configuration.
      7. Based on the SIM, you may need to configure a specific APN to get the cellular connection up. Contact your carrier to get this information.
        • Auto APN—By default, Auto APN is selected.
          If you are using a regular (dynamic IP) SIM from AT&T, AT&T FirstNet, T-Mobile, Verizon, or Telstra, use the default Auto APN option.
          If the system does not find a matching Access Point Name (APN) for the Mobile Country Code (MCC) and Mobile Network Code (MNC) of the SIM card, it configures an empty APN. This configuration allows the modem to accept the preferred APN from the network operator.
        • Use APN Profile—You can either select from the available list of APN profiles or create a new customized APN profile.
        • Enter APN Configuration—You can manually enter the APN:
          1. Enter APN.
          2. (Optional) Enter Authentication Type, select from PAP, CHAP or PAP/CHAP.
          3. (Optional) Configure the User name and Password given by the cellular carrier.
      8. Select IPv4 or IPv4v6 for IP Address Type. By default, IPv4 is selected.
      9. Select IPFIX Collector and IPFIX Filter for the interface.
    5. In the NAT Configuration, configure NAT Zone as internet.
    6. From the Advanced Settings, enter the External Nat Address.
    7. Enter the Port number.
    8. Enter the IP MTU range. IPv4 range is 552-1428 and IPv6 range is between 1280-1428.
    9. Select the Network Selection of the Cellular SIM/s to customize the cellular network for each interface.
      The default value is Auto. After you modify the network selection, falling back to other technologies such as 5G, LTE, UMTS doesn’t change automatically, you need to manually change the network.
      The network selection option is available from device software version 6.5.1.
    10. Save Cellular Interface to save the configuration.

    © 2026 Palo Alto Networks, Inc. All rights reserved.