Overriding WAN Backhaul Configuration

1. Select Configuration → Devices from the web UI.
   The Device Configuration screen displays a list of managed devices or peer controllers, service platforms, or access points.
2. Select a target device in the lower left-hand side of the UI.
   You can also select a target device by double-clicking it in the list in the Device Configuration screen.
3. Select Profile Overrides → Interface.
4. Select WAN Backhaul.
   

   Profile Overrides - WAN Backhaul Screen

   

   

   Note

   A blue override icon (to the left of a parameter) defines the parameter as having an override applied. To remove an override go to the Basic Configuration section of the device and click Clear Overrides. This removes all overrides from the device.
5. Refer to the WAN (3G) Backhaul configuration to specify WAN card settings:

   WAN Interface Name	The WAN Interface name for the WAN 3G Backhaul card.
   Reset WAN Card	If the WAN Card becomes unresponsive or experiences other errors, click Reset WAN Card to power cycle and reboot the WAN card.
   Enable WAN (3G)	Select to enable 3G WAN card support on the device. A supported 3G card must be connected to the device for this feature to work properly.

6. Define or override the following authentication parameters in the Basic Settings field:

   Username	Provide a username for authentication support by the cellular data carrier.
   Password	Provide a password for authentication support by the cellular data carrier.
   Access Point Name (APN)	Enter the name of the cellular data provider if necessary. This setting is needed in areas with multiple cellular data providers using the same protocols, such as Europe and Asia.
   Authentication Type	Specify the authentication type used by the cellular data provider. Supported authentication types are None, PAP, CHAP, MSCHAP, and MSCHAP-v2.

7. Define or override the following NAT parameter in the Network Address Translation (NAT) field:

   NAT Direction

   Define the NAT (Network Address Translation) direction. Options include: Inside The inside network is transmitting data over the network its intended destination. On the way out, the source IP address is changed in the header and replaced by the (public) IP address. Outside Packets passing through the NAT on the way back to the controller or service platform managed LAN are searched against to the records kept by the NAT engine. There, the destination IP address is changed back to the specific internal private class IP address in order to reach the LAN over the network. None No NAT activity takes place. This is the default setting.

8. Define or override the following security parameters in the Security Settings field:

   IP Inbound Firewall Rules

   Select an inbound IPv4 ACL to associate with traffic on the WAN backhaul. This setting pertains to IPv4 inbound traffic only and not IPv6. IPv4 operates as a best effort delivery method, as it does not guarantee delivery, and does not ensure proper sequencing or duplicate delivery (unlike (TCP). IPv4 hosts can use link local addressing to provide local connectivity. If an appropriate IP ACL does not exist, click Add to create a new one.

   VPN Crypto Map

   If necessary, specify a crypto map for the wireless WAN. A crypto map can be up to 256 characters long. If a suitable crypto map is not available, click Create button to configure a new one.

9. Define or override the following route parameter in the Default Route Priority field:

   WWAN Default Route Priority

   Use the spinner control to define a priority from 1 - 8,000 for the default route learned by the wireless WAN. The default value is 3000.

10. Click OK to save the changes and overrides made to the WAN Backhaul screen.
    Click Reset to revert to the last saved configuration.