About Modem Interfaces
You can add one modem to a supported Firebox device. The modem is available as an external interface and appears in the list of Firebox interfaces.
About 4G LTE and 5G
On the Firebox T80 and T85, you can connect to a 4G LTE cellular network with an LTE interface module. On the Firebox T45-CW, you can connect to a cellular network with the integrated 5G modem. This enables you to install a SIM card and use the cellular connection as an external interface on the Firebox for primary or backup WAN connectivity.
You cannot use a USB modem with Firebox models that have built-in 5G connectivity or have a 4G LTE interface module installed.
For information on how to configure the 4G LTE or 5G modem interface, go to Configure a 4G LTE or 5G Modem.
Modems and Firebox Features
You can specify the modem interface when you configure these features:
- BOVPN and BOVPN virtual interfaces
- Dynamic DNS
- 1-to-1 NAT
- SNAT
- Dynamic NAT
- SD-WAN routing Tip!
- Traffic management — Applies to modem interfaces for outgoing traffic only
- Multi-WAN
- Mobile VPN
The modem interface also appears in the Aliases list. You can add the modem interface to policies on your Firebox.
For mobile VPN connections to a modem interface that has a dynamic IP address, you must:
- Register the modem interface with a dynamic DNS provider.
- Configure dynamic DNS on the Firebox.
For more information about dynamic DNS, go to About the Dynamic DNS Service. - Specify the domain name for the modem interface in the mobile VPN settings
To configure a 3G/4G modem interface, go to Configure a Modem Interface.
To configure a 4G LTE or 5G modem interface, go to Configure a 4G LTE or 5G Modem.
Modems and Multi-WAN
You can configure a modem interface to participate in multi-WAN. By default, modem interfaces do not participate in multi-WAN. For information about multi-WAN methods, go to About Multi-WAN Methods.
When you configure a modem interface as a multi-WAN participant, link monitor is not enabled for the modem by default to prevent unwanted bandwidth consumption. To configure the modem interface to monitor the default gateway or another source that you specify, you must enable link monitor. For more information about link monitor configuration, go to About Link Monitor.
You can configure branch office VPN connections to fail over to the modem interface. For more information about VPN modem failover, go to Configure VPN Modem Failover.
Modem Failover
If your modem is configured as an external interface with failover enabled, and all other external interfaces become unavailable, traffic automatically fails over to the modem interface. For more information about modem failover, go to Configure Modem Failover.
Supported Firebox Models
These Firebox models support modems:
- Firebox T Series: T15, T20, T25, T35, T40, T45, T55, T70, T80, T85, NV5
(The Firebox T80 and T85 also support the 4G LTE Modem interface module)
You cannot use a USB modem with the Firebox T45-CW because it has a built-in 5G LTE modem interface.
- Firebox M Series: M270, M290, M370, M390, M470, M570, M590, M670, M690
USB dial-up modems are not supported.
Connect a serial or 3G/4G modem to a USB port on the Firebox:
- To use a serial modem, you must have a dial-up account with an Internet Service Provider (ISP).
- To use a 4G LTE or 3G/4G modem, the Firebox must use the minimum version of Fireware OS that supports the modem and you must have a 3G or 4G data plan with a wireless service provider.
Supported Modems
The 4G LTE interface module is currently supported only on the Firebox T80 or T85. The Firebox T45-CW has an integrated 5G modem.
You can configure these 3G/4G modems on your Firebox:
| Carrier | 3G/4G USB Modem | Vendor ID | Product ID | Fireware OS Requirement |
|---|---|---|---|---|
| N/A (UK and NL) | D-Link DWM-221 | 0x2001 | 0x7e19 | v11.10.7 or higher |
| N/A (UK and NL) | D-Link DWM-2221 | 0x0BDB | 0x1926 | v12.0 or higher |
| AT&T | Novatel Global Modem USB8003 | 0x1410 | 0xb024 | v12.5.8 / v12.7.1 or higher |
| AT&T | Netgear 340U2 | 0x1199 | 0x9051 | v11.10.2 or higher |
| AT&T | Sierra 313U | 0x0f3d | 0x68aa | v11.7.4 or higher |
| AT&T | Sierra Elevate 4G | 0x1199 | 0x68a3 | v11.8.3 Update 1 or higher |
| AT&T | Netgear BEAM | 0x1199 | 0x9051 | v11.12.2 or higher |
| AT&T | Velocity MF861 | 0x19d2 | 0x1405 | v12.1 or higher |
| Bell (CA) | Huawei E8372 | 0x12d1 | 0x14db | v11.10.7 or higher |
| Deutsche Telekom | Huawei E3372 | 0x12d1 | 0x1506 | v11.10.7 or higher |
| Deutsche Telekom | Huawei E3372 | 0x12d1 | 0x14dc | v11.12 or higher |
| NTT / DoCoMo (Japan) | NCXX UX302NC NCXX UX302NC-R |
0x11f6 | 0x1035 | v12.2 or higher |
| NTT DoCoMo / au by KDDI / Softbank (Japan) | Fuji Soft FS040U | 0x1C9E | 0xF133 | v12.2 or higher |
| SFR (FR) | Huawei E3372 | 0x12d1 | 0x14dc | v11.12 or higher |
| Sprint | Franklin U602 | 0x1fac | Unknown | v11.7.3 or higher |
| Sprint | Sierra 250U | N/A | N/A | v11.7.3 or higher |
| Sprint | Franklin U301 | N/A | N/A | v11.9.1 or higher |
| Sprint | Netgear 341U | 0x1199 | 0x9055 | v11.8.3 or higher |
| Sprint | Netgear 341U (revision) | 0x1199 | 0x9057 | v12.2 or higher |
| Sprint | Franklin U772 | 0x1fac | 0x0232 | v11.12.2 or higher |
| Telcel (MX) | Huawei E3372 | 0x12d1 | 0x14dc | v11.12 or higher |
| Telus (CA) | Netgear 340U2 | 0x1199 | 0x9051 | v11.10.2 or higher |
| T-Mobile | ZTE MF683 | 0x19d2 | 0x0157 | v11.7.3 or higher |
| T-Mobile | ZTE MF190 | 0x19d2 | 0x0117 | v11.9.3 or higher |
| T-Mobile (NL) | Huawei E3372-235 | 0x12d1 | 0x1506 | v11.10.7 or higher |
| T-Mobile (NL) | Huawei E3372-236 | 0x12d1 | 0x14dc | v11.12 or higher |
| Telstra (ANZ) | Huawei E8372 | 0x12d1 | 0x14db | v11.10.7 or higher |
| Telstra (ANZ) | Sierra 320U | 0x0f3d | 0x68aa | v11.8.1 or higher |
| Verizon | Pantech UML295 | 0x10a9 | 0x6064 | v11.10.2 or higher |
| Verizon | Novatel U620L | 0x1410 | 0x9022 | v11.10.5 or higher |
| Verizon | Global Modem USB730L1 4 | 0x1410 | 0x9032 | v12.1.1 or higher |
| Wind (Italy) | Huawei E3372-320 USB 4G LTE | 0x12d1 | 0x1f01 0x14db |
v12.7.2 or higher |
1 The D-Link DWM-222 and Verizon Global Modem USB730L modems require more power than the USB port can supply on T15 Fireboxes. You may experience poor modem performance or frequent modem reboots. To use these modems with your Firebox, you can connect a powered USB hub to the Firebox and connect the modem to the hub. Other modem models might be affected.
2 To use the Netgear 340U with your Firebox, you might have to disable the Identity Morphing feature on the modem. For more information, see the Knowledge Base article NETGEAR AC340U modem not working with Firebox.
3 To use the AT&T USB800 Global Modem with your Firebox, you might have to change the local configuration on the modem. For more information, see the Knowledge Base article AT&T USB800 modem connects and disconnects from Firebox.
4 In some cases, your Firebox might fail to properly detect the USB730L modem, and the PID will appear as 0x9032 instead of the correct 0x9031. This indicates the modem is in a debug or diagnostic mode. To resolve this issue, follow these steps to revert the modem to Enterprise mode:
- Connect the USB730L to a client PC.
- With a web browser, connect to http://192.168.1.1/labtestinfo
- Under Device Mode, click Enterprise Mode.
- Wait about 2 minutes while the modem restarts. then click Save Changes to confirm the mode change.
Serial Modem Support
These serial modems are also supported:
- Zoom FaxModem 56K model 2949
- MultiTech 56K Data/Fax Modem International
- OMRON ME5614D2 Fax/Data Modem
- Hayes 56K V.90 serial fax modem