4G configuration examples

 

The following information provides 4G configuration examples.

 

This document is not restricted to specific software or hardware versions. Procedures and information in the examples might be slightly different depending on the software or hardware version of the device.

The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

The following information is provided based on the assumption that you have basic knowledge of the 4G feature.

 

Make sure the device supports USB 4G modems. Connect a USB 4G modem to the device before you configure 4G settings.

A USB 4G modem is available when the USB interface to which the modem is attached is shut down.

Do not remove a USB 4G modem while it is transmitting data. As a best practice, shut down the cellular interface before removing the USB 4G modem.

USB 4G modems are hot swappable.

To prevent an Eth-channel interface from obtaining an incorrect IP address through DHCP, add the Eth-channel interface to the Untrust security zone immediately after you activate the 4G feature. If you fail to do so, you must add the interface to the Untrust security zone and then reboot the interface or re-enable DHCP on the interface.

Network configuration

As shown in Figure 1, the device provides a USB 4G modem, and the PC accesses the LTE network through the device. Configure 4G settings for internal users to access the Internet through the device.

Figure 1 Network diagram

 

Software versions used

This configuration example was created and verified on Feature 9602P17 of an F100-C-A6-WL device.

Procedure

1.     Assign an IP address to interface GE1/0/1.

# On the top navigation bar, click Network.

# From the navigation pane, select Interface Configuration > Interfaces.

# Click the Edit icon for GE1/0/1.

# In the dialog box that opens, configure the interface:

a.     Select the Trust security zone.

b.     On the IPv4 Address tab, enter the IP address and mask of the interface. In this example, enter 10.1.1.1/24.

c.     Retain the default settings for the other fields.

d.     Click OK.

2.     Configure 4G settings.

# On the top navigation bar, click Network.

# From the navigation pane, select Interface Configuration > 4G.

# On the page that opens, configure the following parameters:

¡     Select a supported cellular interface.

The device automatically creates Eth-channel interface 0 for the cellular interface, adds the Eth-channel interface to dialer group 1, and permits all IPv4 packets on the interface. By default, the Eth-channel interface uses DHCP to obtain an IP address and is enabled with traditional DDR.

¡     Configure the dial number for placing calls. The device will automatically enable automatic dialup.

¡     Set the interval for dialer autodial. DDR makes call attempts at the intervals until a connection is established.

# Click Apply.

3.     Add the Eth-channel interface to the Untrust security zone.

# On the top navigation bar, click Network.

# From the navigation pane, select Security Zones.

# Add Eth-channel interface 0 to the Untrust security zone.

4.     Create a security policy.

# On the top navigation bar, click Policies.

# From the navigation pane, select Security Policies > Security Policies.

# Click Create.

# In the dialog box that opens, create a security policy as follows:

¡     Specify the policy name as test-a.

¡     Select Trust as the source security zone.

¡     Select Untrust as the destination security zone.

¡     Select IPv4 as the type.

¡     Select Permit as the action.

¡     Specify 10.1.1.2/24 as the source IPv4 address.

¡     Retain the default settings for the other fields.

# Click OK.

5.     Configure NAT outbound on the Eth-channel interface.

# On the top navigation bar, click Policies.

# From the navigation pane, select NAT > Dynamic NAT.

# Click Create.

# In the dialog box that appears, configure outbound dynamic NAT:

¡     Select the Eth-channel interface.

¡     Select the IP address of the interface as the source address after NAT.

¡     Retain the default settings for the other fields.

# Click OK.

Verifying the configuration

Verify that the PC can access the LTE network through the device and you can view the operating status of the device from the Web interface.

To view the operating status of the device, click Network on the top navigation bar and then select Interface Configuration > 4G from the navigation pane.

Figure 2 Viewing device operating status