Configuring LTE Interfaces

 

The LTE Mini-Physical Interface Module (Mini-PIM) provides wireless WAN support on the SRX320, SRX340, SRX345, and SRX550M (High Memory) Services Gateways. The topics below discuss the overview and configuration details of LTE interfaces on security devices.

LTE Mini-PIM Overview

The LTE Mini-Physical Interface Module (Mini-PIM) provides wireless WAN support on the SRX320, SRX340, SRX345, and SRX550M (High Memory) Services Gateways. The LTE Mini-PIM operates on both 3G and 4G networks. Table 1 provides a summary of the different models of the Mini-PIM.

Table 1: LTE Mini-PIM Models

Model

Mode

Operating Region

Frequency Band

SRX-MP-LTE-AE

  • LTE

  • HSPA+

  • North America

  • European Union

For LTE:

  • Bands 1 through 5, 7, 8, 12, 13, 20, 25, 26, 29, 30, and 41

For 3G (HSPA+):

  • Bands 1 through 5, and 8

SRX-MP-LTE-AA

  • LTE

  • HSPA+

  • Asia

  • Australia

For LTE:

  • Bands 1,3, 5, 7, 8, 18, 19, 21, 28, 38, 39, 40, and 41

For 3G (HSPA+):

  • Bands 1, 5, 6, 8, 9, and 19

Supported Features

The LTE Mini-PIM supports the following features:

  • Automatic switchover between service providers through dual SIMs—The Mini-PIM supports up to two Subscriber Identity Module (SIM) cards. Dual SIM cards allow connectivity to two different ISP networks and provide a failover mechanism when the current active network fails. Each SIM card is associated with a profile, which is used to connect to the network.

  • Multiple service provider and access point name (APN) profiles—You can configure up to 16 profiles for each SIM, although only one profile can be active at a time. The LTE Mini-PIM supports two SIM cards and so you can configure a total of 32 profiles.

  • LTE carrier aggregation—Carrier aggregation expands the LTE bandwidth by combining secondary bands, which results in increased capacity and network efficiency.

  • SIM security functions—The Mini-PIM supports security functions such as SIM lock and unlock, and PIN change.

  • Always-on, dial-on-demand, and backup modes—The Mini-PIM can be configured in three modes:

    • Always-on—The Mini-PIM connects to the 3G/4G network after booting. The connection is always maintained, as long as there are no network or connectivity problems.

    • Dial-on-demand—The Mini-PIM initiates a connection when it receives interesting traffic. You define interesting traffic using the dialer filter. To configure dial-on-demand using a dialer filter, you first configure the dialer filter and then apply the filter to the dialer interface.

      Note

      The dial-on-demand mode is supported only if the LTE mini-PIM is configured as a primary interface.

    • Backup—The Mini-PIM connects to the 3G/4G network when the primary connection fails.

  • Primary and backup interface—You can configure the LTE Mini-PIM either as a primary interface or as a backup interface.

    When configured as the primary interface, the LTE Mini-PIM supports both the Always-on and Dial-on-demand modes.

    When configured as the backup interface, the LTE Mini-PIM connects to the network only when the primary interface fails.

  • Over-the-air upgrade for modem firmware—Over-the-air (OTA) firmware upgrade enables automatic and timely upgrade of modem firmware when new firmware versions are available. The OTA upgrade can be enabled or disabled on the LTE Mini-PIM.

    Note

    OTA upgrade is disabled by default.

Understanding the LTE Physical Interface

The physical interface for the 4G LTE Mini-PIM uses the name cl-slot number/0/0, where slot number identifies the slot on the services gateway in which you insert the Mini-PIM. For example, cl-1/0/0. The Mini-PIM can be inserted in any of the Mini-PIM slots on the SRX320, SRX340, SRX345, and SRX550M Services Gateways. You configure the following properties on the physical interface:

  • A dialer pool to which the physical interface belongs and the priority of the interface in the pool.

  • Profiles for the SIM cards.

  • Radio access technology (automatic, 3G, LTE)

Understanding the LTE Logical Interface

The dialer interface, dl0, is a logical interface, which is used to trigger calls. When traffic is sent to the dl0 interface, it enables the physical interface in the dialer pool and places calls through the physical interface. The dialer interface can perform backup and dialer filter functions. You can configure the dialer interface to operate in any one of the following ways:

The following rules apply when you configure dialer interfaces:

  • You cannot configure the dialer interface as a constituent link in a multilink bundle.

  • You cannot configure any dial-in options for the dialer interface.

You configure the following for a dialer interface:

  • A dialer pool to which the physical interface belongs.

  • Dial string (destination number to be dialed).

You can also specify optional operating parameters for the dialer interface:

  • Activation delay—Number of seconds after the primary interface is down before the backup interface is activated. The default value is 0 seconds, and the maximum value is 60 seconds.

  • Deactivation delay—Number of seconds after the primary interface is up before the backup interface is deactivated. The default value is 0 seconds, and the maximum value is 60 seconds.

Class of Service on the Dialer Interface

The dialer interface has limited bandwidth, which can lead to traffic congestion. Starting with Junos OS Release 15.1X49-D100, the dialer interface supports the configuration of 4G LTE dialer interface Class of Service (CoS) parameters on SRX320, SRX340, SRX345, and SRX550M devices. The dialer interface supports the following CoS parameters:

  • Behavior aggregate and multifield classifiers

  • Policers

  • Shapers

  • Schedulers

  • Rewrite rules

Note

The dialer interface (dl0) supports scheduling only at the physical interface queue level. As this interface does not support shaping at the logical interface level, per-unit scheduling is not supported on the dialer interface.

See Class of Service Feature Guide (Security Devices) for information on configuring these parameters.

LTE Mini-PIM Configuration Overview

The configuration process for the LTE Mini-PIM includes the following tasks:

  1. Install your SRX Series device and establish basic connectivity for your device. For more information, see the SRX Series Hardware Guide for your device.

  2. Establish an account with a cellular network service provider. Contact your service provider for more information.

  3. Gather the following information from the service provider:

    • Username and password

    • Access Point Name (APN)

    • Authentication (Challenge Handshake Authentication Protocol (CHAP) or Password Authentication Protocol (PAP))

  4. Install the LTE Mini-PIM.

  5. Configure the LTE Mini-PIM. See:

Configuring the LTE Mini-PIM as the Primary Interface

Figure 1 illustrates a scenario where the LTE Mini-PIM is installed on a SRX320 Services Gateway and functions as the primary interface. This procedure assumes that the LTE Mini-PIM is installed in slot 1 on the SRX320 Services Gateway.

Note

The LTE Mini-PIM can be installed in any of the Mini-PIM slots on the SRX320, SRX340, SRX345, and SRX550M Services Gateways.

Figure 1: LTE Mini-PIM Used as a Primary Interface
LTE
Mini-PIM Used as a Primary Interface

Before you begin the procedure, ensure that dl0.0 is not configured as a backup. If dl0.0 is configured as a backup option for any interface on the SRX Series device, then this configuration overrides the configuration outlined in this procedure, and the LTE Mini-PIM will function as a backup interface.

Use the show interfaces | display set | match backup-option | match dl0.0 command to check whether any interface uses dl0.0 as a backup interface. If dl0.0 is configured as a backup interface, then delete the configuration by issuing the following command:

delete interfaces interface-name unit 0 backup-options interface dl0.0

To configure the LTE Mini-PIM as a primary interface:

  1. Configure the dialer interface:
    user@host# set interfaces dl0 unit 0 family inet negotiate-address
    user@host# set interfaces dl0 unit 0 family inet6 negotiate-address
    user@host# set interfaces dl0 unit 0 dialer-options pool dialer-pool-number
    user@host# set interfaces dl0 unit 0 dialer-options dial-string dial-number
    user@host# set interfaces dl0 unit 0 dialer-options always-on
  2. Configure the dialer pool for the LTE Mini-PIM physical interface:
    user@host# set interfaces cl-1/0/0 dialer-options pool number
  3. Configure the profile. The Subscriber Identity Module (SIM) uses a profile to establish a connection with the network. You can configure up to 16 profiles for each SIM card. The LTE Mini-PIM supports two SIM cards and so you can configure a total of 32 profiles, although only one profile can be active at a time.
    user@host# run request modem wireless create-profile profile-id profile-id cl-1/0/0 slot sim-slot-number access-point-name apn-name authentication-method none
    Note

    sim-slot-number is the slot on the Mini-PIM in which the SIM card is inserted.

  4. Verify that the profile is configured successfully:
    user@host# run show modem wireless profiles cl-1/0/0 slot 1
  5. Activate the SIM card:
    user@host# set interfaces cl-1/0/0 act-sim sim-slot-number
  6. Select the profile and configure the radio access type for the SIM card:
    user@host# set interfaces cl-1/0/0 cellular-options sim sim-slot-number select-profile profile-id profile-id
    user@host# set interfaces cl-1/0/0 cellular-options sim sim-slot-number radio-access automatic
    Note

    If a SIM card is installed in the second slot, then select the profile and configure the radio access type for the secondary SIM card as well.

  7. Verify the status of the wireless network and dialer interface:
    user@host# run show modem wireless network
    user@host# run show interfaces dl0.0
    Note

    If the LTE Mini-PIM gets an IP address with a mask of /32 from the service provider, the user has to configure the default gateway information using the set interfaces cl-interface cellular-options sim sim-slot gateway ip-address/mask command to make the Mini-PIM accept the assigned IP address.

Configuring the LTE Mini-PIM as a Backup Interface

You can configure the LTE Mini-PIM as a backup interface. If the primary interface fails, the Mini-PIM connects to the network and remains online only until the primary interface becomes functional. The dialer interface is enabled only when the primary interface fails.

Figure 2 illustrates a scenario where the LTE Mini-PIM is installed on a SRX320 Services Gateway and functions as a backup interface. The ge-0/0/1 port is connected to the Internet and functions as the primary interface.

Note

The LTE Mini-PIM can be installed in any of the Mini-PIM slots on the SRX320, SRX340, SRX345, and SRX550M Services Gateways. In this scenario, the Mini-PIM is installed on slot 1.

Figure 2: LTE Mini-PIM Used as a Backup Interface
LTE
Mini-PIM Used as a Backup Interface

To configure the LTE Mini-PIM as a backup interface:

  1. Configure the dialer interface:
    user@host# set interfaces dl0 unit 0 family inet negotiate-address
    user@host# set interfaces dl0 unit 0 family inet6 negotiate-address
    user@host# set interfaces dl0 unit 0 dialer-options pool dialer-pool-number
    user@host# set interfaces dl0 unit 0 dialer-options dial-string dial-number
  2. Configure the dialer pool for the LTE Mini-PIM physical interface:
    user@host# set interfaces cl-1/0/0 dialer-options pool dialer-pool-number
  3. Configure the profile. The Subscriber Identity Module (SIM) uses a profile to establish a connection with the network. You can configure up to 16 profiles for each SIM card. The LTE Mini-PIM supports two SIM cards and so you can configure a total of 32 profiles, although only one profile can be active at a time.
    user@host# run request modem wireless create-profile profile-id profile-id cl-1/0/0 slot sim-slot-number access-point-name l3vpn.corp authentication-method none
    Note

    sim-slot-number is the slot on the Mini-PIM in which the SIM card is inserted.

  4. Verify that the profile is configured successfully:
    user@host# run show modem wireless profiles cl-1/0/0 slot 1
  5. Activate the SIM card:
    user@host# set interfaces cl-1/0/0 act-sim sim-slot-number
  6. Select the profile and configure the radio access type for the SIM card:
    user@host# set interfaces cl-1/0/0 cellular-options sim sim-slot-number select-profile profile-id profile-id
    user@host# set interfaces cl-1/0/0 cellular-options sim sim-slot-number radio-access automatic
    Note

    If a SIM card is installed in the second slot, then select the profile and configure the radio access type for the secondary SIM card as well.

  7. Configure the Ethernet interface as the primary interface, which connects to the wireless network. Configure the dl0 interface as the backup interface.
    user@host# set interfaces ge-0/0/1 unit 0 family inet address 192.168.2.1/24
    user@host# set interfaces ge-0/0/1 unit 0 backup-options interface dl0.0
  8. Verify the status of the wireless network and dialer interface:
    user@host# run show modem wireless network
    user@host# run show interfaces dl0.0
Note

The activation-delay and deactivation-delay command-line options can be used to avoid interface flaps by forcing a delay between the time the primary interface changes states, and the time the dialer interface is enabled or disabled. The activation delay controls the time between the primary interface going down and the activation of the dialer interface. Similarly, the deactivation delay controls the time between the recovery of the primary interface and the deactivation of the backup interface.

Example: Configuring the LTE Mini-PIM as a Backup Interface

This example shows how to configure the LTE Mini-PIM as a backup interface. If the primary interface fails, the Mini-PIM connects to the network and remains online only until the primary interface becomes functional.The dialer interface is enabled only when the primary interface fails.

Note

The LTE Mini-PIM can be installed in any of the Mini-PIM slots on the SRX320, SRX340, SRX345, and SRX550M Services Gateways. In this scenario, the Mini-PIM is installed on slot 1.

Requirements

This example uses the following hardware and software components:

  • Junos OS Release or later for SRX320

Overview

Configuration

CLI Quick Configuration

To quickly configure this example, copy the following command, paste it into a text file, remove any line breaks, change any details necessary to match your network configuration, copy and paste the command into the CLI at the [edit] hierarchy level, and then enter commit from configuration mode.

Configuring the LTE Mini-PIM as a Backup Interface

Step-by-Step Procedure

The following example requires you to navigate various levels in the configuration hierarchy. For instructions on how to do that, see Using the CLI Editor in Configuration Mode in the CLI User Guide.

To configure Mini-PIM as a backup interface:

  1. Create the dialer interface:
  2. Define the dialer pool for the LTE Mini-PIM physical interface:
  3. Create and configure the profile. The Subscriber Identity Module (SIM) uses a profile to establish a connection with the network. You can configure up to 16 profiles for each SIM card. The LTE Mini-PIM supports two SIM cards and so you can configure a total of 32 profiles, although only one profile can be active at a time.
    Note

    sim-slot-number is the slot on the Mini-PIM in which the SIM card is inserted.

  4. Activate the SIM card:
  5. Select the profile and configure the radio access type for the SIM card:
    Note

    If a SIM card is installed in the second slot, then select the profile and configure the radio access type for the secondary SIM card as well.

  6. Specify Ethernet interface as the primary interface, which connects to the wireless network. Specify the dl0 interface as the backup interface.
Note

The activation-delay and deactivation-delay command-line options can be used to avoid interface flaps by forcing a delay between the time the primary interface changes states, and the time the dialer interface is enabled or disabled. The activation delay controls the time between the primary interface going down and the activation of the dialer interface. Similarly, the deactivation delay controls the time between the recovery of the primary interface and the deactivation of the backup interface.

Results

From configuration mode, confirm your configuration by entering the show interfaces dl0.0 command. If the output does not display the intended configuration, repeat the configuration instructions in this example to correct it.

user@host>

Verification

Verification of the configured profile

Purpose

Verify that the profile is configured successfully.

Action

From operational mode, run the show modem wireless profiles cl-1/0/0 slot 1 command.

user@host> show modem wireless profiles cl-1/0/0 slot 1

Verification of status of the dialer interface

Purpose

Verify that the dialer interface is configured successfully.

Action

From operational mode, run the show interfaces dl0.0 command.

user@host> show interfaces dl0.0

Verification of status of the modem network and modem firmware

Purpose

Verify that the wireless network is configured, check the firmware, and check if the sim is active.

Action

From operational mode, enter the show modem wireless network cl-1/0/0 command to verify the network status and show modem wireless firmware cl-1/0/0 command to verify the firmware and sim status. Alternatively you can use the show configuration command to verify the complete status.

user@host> show configuration

Configuring the LTE Interface as a Dial-on-Demand Interface

When the LTE interface is configured as a primary interface, it can function either in always-on mode or in dial-on-demand mode. In always-on mode, the interface remains connected to the network whereas In dial-on-demand mode, the connection is established only when needed.

In dial-on-demand mode, the dialer interface is enabled only when network traffic configured as an “interesting traffic” arrives on the network. Interesting traffic triggers or activates the wireless WAN connection. You define an interesting packet by using the dialer filter. To configure dial-on-demand by using a dialer filter, you first configure the dialer filter and then apply the filter to the dialer interface. Once the traffic is sent over the network, an inactivity timer is triggered and the connection is closed after the timer expires.

Note

The dial-on-demand mode is supported only if the LTE Mini-PIM is configured as a primary interface.

Figure 3 illustrates a scenario where the LTE Mini-PIM is installed on a SRX320 Services Gateway and functions as the primary interface. This procedure assumes that the LTE Mini-PIM is installed in slot 1 on the SRX320 Services Gateway.

Note

The LTE Mini-PIM can be installed in any of the Mini-PIM slots on the SRX320, SRX340, SRX345, and SRX550M Services Gateways.

Figure 3: LTE Mini-PIM Used as a Dial-on-Demand Interface
LTE Mini-PIM Used as a Dial-on-Demand Interface

To configure the LTE Mini-PIM as a dial-on-demand interface:

  1. Configure the dialer interface:
    user@host# set interfaces dl0 unit 0 family inet negotiate-address
    user@host# set interfaces dl0 unit 0 family inet6 negotiate-address
    user@host# set interfaces dl0 unit 0 family inet filter dialer dialer-filter-name
    user@host# set interfaces dl0 unit 0 dialer-options pool dialer-pool-number
    user@host# set interfaces dl0 unit 0 dialer-options dial-string dial-number
    Note

    Optionally, you can configure the idle-timeout value, which determines the duration for which the connection will remain enabled in the absence of interesting traffic.

    user@host# set interfaces dl0 unit 0 dialer-options idle-timeout idle-timeout-value
  2. Configure the dialer pool for the LTE Mini-PIM physical interface:
    user@host# set interfaces cl-1/0/0 dialer-options pool number
  3. Create the dialer filter rule:
    user@host# set firewall family inet dialer-filter dialer-filter-name term term1 from destination-address ip-address then note
  4. Set the default route:
    set routing-options static route ip-address next-hop dl0.0
  5. Configure the profile. The Subscriber Identity Module (SIM) uses a profile to establish a connection with the network. You can configure up to 16 profiles for each SIM card. The LTE Mini-PIM supports two SIM cards and so you can configure a total of 32 profiles, although only one profile can be active at a time.
    user@host# run request modem wireless create-profile profile-id profile-id cl-1/0/0 slot sim-slot-number access-point-name apn-name authentication-method none
    Note

    sim-slot-number is the slot on the Mini-PIM in which the SIM card is inserted.

  6. Verify that the profile is configured successfully:
    user@host# run show modem wireless profiles cl-1/0/0 slot 1
  7. Activate the SIM card:
    user@host# set interfaces cl-1/0/0 act-sim sim-slot-number
  8. Select the profile and configure the radio access type for the SIM card:
    user@host# set interfaces cl-1/0/0 cellular-options sim sim-slot-number select-profile profile-id profile-id
    user@host# set interfaces cl-1/0/0 cellular-options sim sim-slot-number radio-access automatic
    Note

    If a SIM card is installed in the second slot, then select the profile and configure the radio access type for the secondary SIM card as well.

  9. Verify the configuration by sending traffic to the destination address. The traffic is routed to the dl0 interface and if it matches the dialer filter rule, then the dl0 is triggered to dial.
  10. Verify the status of the wireless network and dialer interface:
    user@host# run show modem wireless network
    user@host# run show interfaces dl0.0