Configure a Modem Interface
To use a modem with your Firebox, connect the modem to your Firebox and power the modem on.
You can hot plug modems into the Firebox. The modem operates and does not require a Firebox reboot when:
- You plug in a new modem
- You unplug a modem and plug it in again
- The modem unexpectedly disconnects and reconnects to the Firebox
About 4G LTE and 5G
On the Firebox T80 and T85, you can connect to a 4G LTE cellular network with an LTE interface module. On the Firebox T45-CW, you can connect to a cellular network with the integrated 5G modem. This enables you to install a SIM card and use the cellular connection as an external interface on the Firebox for primary or backup WAN connectivity.
For more information, go to Configure a 4G LTE or 5G Modem.
You cannot use a USB modem at the same time as the LTE interface module on the Firebox T80 and T85, or on the T45-CW that has an integrated 5G modem.
Account Settings
To configure the account settings for your modem, from Fireware Web UI or Policy Manager:
- Select Network > Modem.
- Make sure that the Enable Modem check box is selected.
- From the Modem Type drop-down list, select the type of modem to configure.
In the Access Point Name (APN) text box, type the APN for the connection if one is required by your service provider. In many cases an APN is required if the LTE service is a business class connection. To determine the requirements to configure your LTE modem, verify with your provider if an Access Point Name (APN) is required to connect. In most cases, you do not have to specify the APN because the APN is automatically assigned by your service provider when the connection is established.
Some cellular providers lock their SIM card with a PIN to prevent unauthorized use. If the SIM card is locked, you can specify the PIN to unlock the SIM card. If you do not know your PIN, contact your provider for information on how to disable or unlock the SIM card. Do not attempt to guess the PIN because too many incorrect entries can lock and disable the SIM card.
To specify a PIN for a locked SIM card:
- From Fireware Web UI, select System Status > 4G LTE Modem, then click Unlock SIM Card.
- From Fireware System Manager, select Tools > Unlock SIM Card, or from the Front Panel tab, right-click LTE Status in the Interfaces section for modem0, then select Unlock SIM Card.
After you specify a correct PIN, the Firebox unlocks the SIM card and disables the PIN permanently. The PIN is not required again even if the Firebox is rebooted or restored to factory default settings because the action is performed on the SIM card.
To monitor the LTE modem status:
- From Fireware Web UI, select System Status > 4G LTE Modem or 5G Modem.
For more information, go to 4G LTE and 5G Modem Status. The 4G LTE or 5G modem status also appears on the Dashboard Front Panel in Fireware Web UI. - From Firebox System Manager, select the Front Panel tab and view the Interfaces section for modem0. For more information on the Firebox System Manger Front Panel, see Basic Device and Network Status (Front Panel).
For a 3G or 4G modem, the telephone number is the access number specified by your wireless service provider. Examples of 3G and 4G access numbers are *99#, *99****1#, and #777. The settings for access point name, account name, domain, and password are not required for all 3G/4G modems. To establish a connection, some wireless service providers also require an Access Point Name (APN). To determine the requirements to configure your modem, contact your wireless service provider.
- Select the Account tab.
- Select the Enable 3G/4G modem support check box.
If a Telephone number is not already specified, when you select this check box, the Telephone number is set to *99#. - (Optional) In the Telephone number text box, type the access number required by your wireless service provider.
- If your wireless service provider has another access number, in the Alternate Telephone number text box, type that number.
- If your connection requires an APN, in the Access point name text box, type the APN required by your wireless service provider.
- If your wireless service provider requires them, type the Account name, Account domain, and Account password the modem must use to connect to your account.
For a serial modem, configure these settings.
- Select the Account tab.
- In the Telephone number text box, type the telephone number of your ISP.
- If your ISP has another telephone number, in the Alternate Telephone number text box, type that number.
- In the Account name text box, type your dial-up account name.
- If you log in to your account with a domain name, in the Account domain text box, type the domain name.
For example, msn.com. - In the Account password text box, type the password you use to connect to your dial-up account.
Enable Modem Failover Debug Log Messages
If you have problems with your connection, you can enable your Firebox to send detailed log messages to the event log file when a modem failover occurs. You can then review the debug log messages to find any errors.
On the Account tab, select the Enable modem and PPP debug trace check box.
DNS Settings
If your ISP or wireless service provider does not provide DNS server information, or if you must use a different DNS server, you can manually add the IP addresses for a DNS server.
The MTU setting applies only to modems with PPP configurations.
- Select the DNS tab.
The DNS Settings page appears.
- Select the Manually configure DNS server IP addresses check box.
- In the Primary DNS server text box, type the IP address of the primary DNS server.
- If you have a secondary DNS server, in the Secondary DNS server text box, type the IP address for the secondary server.
- In the MTU text box, for compatibility purposes, you can set the Maximum Transmission Unit (MTU) to a different value. Most configurations can keep the default setting.
- Select the DNS tab.
The DNS Settings page appears.
- Select the Manually configure DNS server IP addresses check box.
- In the Primary DNS server text box, type the IP address of the primary DNS server.
- If you have a secondary DNS server, in the Secondary DNS server text box, type the IP address for the secondary server.
- In the MTU text box, for compatibility purposes, you can set the Maximum Transmission Unit (MTU) to a different value. Most users can keep the default setting.
Other DNS servers configured on your Firebox might take precedence over DNS servers obtained from your ISP or specified in the modem settings. For more information about DNS on the Firebox, go to About DNS on the Firebox.
Dial-Up Settings
- Select the Dial Up tab.
The Dialing Options page appears.
- In the Dial up timeout text box, type or select the number of seconds before a timeout occurs if your modem does not connect. The default value is two minutes.
- In the Redial attempts text box, type or select the number of times the Firebox tries to redial if your modem does not connect. The default value is three connection attempts.
- In the Inactivity timeout text box, type or select the number of minutes to wait if no traffic goes through the modem before a timeout occurs. The default value is no timeout (zero minutes).
- From the Speaker volume drop-down list, select the speaker volume for your modem.
- Select the Dial Up tab.
The Dialing Options page appears.
- In the Dial up timeout text box, type or select the number of seconds before a timeout occurs if your modem does not connect. The default value is two minutes.
- In the Redial attempts text box, type or select the number of times the Firebox tries to redial if your modem does not connect. The default value is three connection attempts.
- In the Inactivity timeout text box, type or select the number of minutes to wait if no traffic goes through the modem before a timeout occurs. The default value is no timeout (zero minutes).
- From the Speaker volume drop-down list, select the speaker volume for your modem.
Advanced Settings
Some dial-up ISPs or wireless service providers require that you specify one or more PPP options before you can connect. In China, for example, some ISPs require that you use the PPP option receive-all. The receive-all option forces PPP to accept all control characters from the peer.
- Select the Advanced tab.
- In the PPP options text box, type the required PPP options.
To specify more than one PPP option, separate each option with a comma.
- Select the Advanced tab.
- In the PPP options text box, type the required PPP options.
To specify more than one PPP option, separate each option with a comma.
Link Monitor
To prevent unwanted bandwidth consumption, link monitor is not enabled for modem interfaces by default. For more information about link monitor, go to About Link Monitor.
To configure link monitor targets for modem interfaces:
Fireware v12.3 or higher
From the Web UI, select Network > Link Monitor.
From Policy Manager, select Network > Configuration > Link Monitor.
Fireware v12.1 to v12.2.1
Link monitor settings for modems appear in the multi-WAN settings. For information about how to configure link monitor in Fireware v12.1 to v12.2.1, go to Configure Link Monitor in Fireware v12.1 to v12.2.1 in the WatchGuard Knowledge Base.