Focus

PAN-OS Web Interface Help

Network > Interfaces > Cellular

Table of Contents

Network > Interfaces > Cellular

Learn how to configure a 5G cellular interface.

Click Add and use the following fields to configure a cellular interface:

Cellular Interface Settings	Configure In	Description
Slot	Cellular Interface	Select the Slot that you want to use for the interface: Use Slot 1 if you are not using a chassis-based system.
Interface Name		Select the Interface Name that you want to use.
Comment		Optionally enter a Comment about the interface.
Netflow Profile		If you want to export unidirectional IP traffic that traverses an ingress interface to a NetFlow server, select the server profile or click Netflow Profile to define a new profile (see Device > Server Profiles > NetFlow). Select None to remove the current NetFlow server assignment from the interface.
Virtual Router	Cellular InterfaceConfig	Assign a virtual router to the interface, or click New Virtual Router to define a new one (see Network > Virtual Routers). Select None to remove the current virtual router assignment from the interface.
Logical Router		Assign a logical router to the interface, or click New Logical Router to define a new one (see Network > Routing > Logical Routers). Select None to remove the current logical router assignment from the interface.
Security Zone		Select a security zone for the interface, or click New Zone to define a new zone. Select None to remove the current zone assignment from the interface.
Radio		Select the Radio setting. Off—(Default value) Disables the radio setting and the cellular interface. On—Enables the radio setting and the cellular interface. This option allows you to reset the radio settings during troubleshooting.
GPS		Select the GPS setting. To enable the GPS option, you must select On for the Radio option as well as the GPS option. Off—(Default value) Disables the GPS setting. On—Enables the GPS setting.
Primary SIM Slot		Select the Primary SIM Slot that contains the SIM card you want the firewall or Panorama to use for the interface.
Automatically create default route pointing to network provided default gateway	Cellular InterfaceIPv4	Select whether you want the firewall or Panorama to Automatically create default route pointing to network provided default gateway. This option is enabled by default and creates a default route to the default gateway provided by the network.
Default Route Metric	Cellular InterfaceIPv4	Specify the Default Route Metric to define the metric for the route. When a routing protocol has more than one route to the same destination network, it prefers the route with the lowest metric value. The default is 10; the range is 1—65535.
Enable IPv6 on the interface (`PAN-OS 11.1.5 and later releases`)	Cellular InterfaceIPv6	Select to enable IPv6 addressing on the interface.
EUI-64 (`PAN-OS 11.1.5 and later releases`)		Enter the Extended Unique Identifier (EUI-64) in hexadecimal format (for example, 00:32:07:FE:4A:12:4C:33). If you leave this field blank, the firewall uses the EUI-64 generated from the MAC address of the physical interface.
Automatically create default route pointing to network provided default gateway (`PAN-OS 11.1.5 and later releases`)		This option is enabled by default and creates a default route to the default gateway provided by the network.
Default Route Metric (`PAN-OS 11.1.5 and later releases`)		Specify the Default Route Metric to define the metric for the route. When a routing protocol has more than one route to the same destination network, it prefers the route with the lowest metric value. The default is 10; the range is 1 to 65535.
Link State	Cellular InterfaceAdvanced	Select the Link State for the interface. auto—The interface is available only if there is a peer connection. up—The interface is available. down—The interface is not available.
Slot	Cellular InterfaceAdvancedSlot	Select the Slot. Only one SIM slot can be active at a time. By default, SIM1 is the active SIM slot. If the firewall or Panorama can't establish a session within 5 minutes, it attempts to establish the session with the alternate SIM slot.
Pin		To require a PIN to prevent unauthorized use of the SIM slots, enter a Pin for the slot.
Confirm Pin		Enter the PIN again to Confirm Pinfor the slot.
APN Profile		Specify the APN profile that you want the SIM card to use by default. The SIM slot uses this APN profile unless you override it with a custom APN profile. If you don't specify an APN profile, the firewall or Panorama uses the default auto APN profile. If you need to specify a custom APN profile, you can do so by selecting Cellular InterfaceAdvancedAPN Profile.
APN Profile	Cellular InterfaceAdvancedAPN Profile	Add the default APN Profile.
Authentication Type		Select the Authentication Type. None—(Default) The firewall or Panorama does not require authentication for the connection to the APN. CHAP—Use Challenge Handshake Authentication Protocol (CHAP) to connect to the APN. PAP—Use Password Authentication Protocol (PAP) to connect to the APN. auto—Allow the firewall or Panorama to automatically detect the authentication type based on the service provider. If the connection to the initial authentication type isn't successful, the firewall or Panorama attempts the connection with the alternate authentication type.
APN		Enter the APN.
Username		Enter the Username for the account.
Password		Enter the Password for the account.
Confirm Password		Enter the password again to Confirm Password for the account.
Management Profile	Cellular InterfaceAdvancedOther Info	Select the Management Profile you want to use for the interface (see Network > Network Profiles > Interface Mgmt.
MTU		Specify the maximum transfer unit (MTU) value. The default value is 1428 bytes; the range is 576—1500 bytes.
Adjust TCP MSS		To adjust the packet size if you encounter latency issues, you can Adjust TCP MSS to configure the maximum segment size.
IPv4 MSS Adjustment		Specify the IPv4 MSS Adjustment value. The default is 40; the range is 40—300.

Network > Interfaces > PoE

Network > Interfaces > Fail Open