Bumblebee Static IP for Cellular

The Problem

Enterprises and B2B applications often require whitelisting of source IPs for incoming traffic for security reasons. This requirement creates a challenge when such traffic passes through a cellular network during failover. Standard cellular data services typically provide only dynamic egress IP addresses. The frequently changing dynamic IPs makes the entire whitelist project not possible.

On the other hand, requesting a static IP from the carrier is costly, as they often charge an initiation fee per site plus an additional monthly fee.

The Bumblebee Static IP Solution

Bumblebee Static IP feature backhauls cellular data traffic to the nearest Bumblebee cloud over a secure encrypted tunnel before egressing the traffic to the destination applications. The Bumblebee cloud then assigns static egress IPs, allowing enterprises to whitelist these IPs and close the security gap.

The solution is illustrated in the diagram below.

Bumblebee Static IP Solution

Configuration Steps

The configuration steps are as follows.

1. Under Cellular WAN click Dashboard on the left navigation bar

2. Select the CPE site you wish to enable Bumblebee Static IP from the dropdown menu

3. Select the CPE, click Actions -> Edit Bumblebee Static IP

4. Enable

5. Confirm

View Bumblebee Static IP

On the same Cellular WAN -> Dashboard page, scroll to the right to find Bumblebee Static IP

Exclusion

Troubleshooting tools such as Ping, Traceroute and Speedtest on Cellular interface do not go through the encrypted tunnel. Only LAN side generated traffic is tunneld through.