Prism's network interfaces, interface priority, internet check, and VPN are configured from the Network menu of the web UI. This section details all available network settings.
Network Interfaces
Select Network > Network Interfaces to view the status of every network interface and the order in which Prism uses them.
Online Status
The banner at the top of the page shows the network status and the current uplink interface. The banner also shows Prism's public IP address.
Interface Priority
Prism connects services to the outside world in order of interface priority. External connections include:
- Teradek Cloud services
- Camera to Cloud
- Most "caller/push" streaming protocols
Prism's primary Internet connection is the highest priority interface with an established uplink.
The interface list shows the following columns:
- # - Priority position of the interface (1 is the highest priority). The current uplink interface is highlighted.
- Interface - Interface name (Wired 1, Wired 2, Wi-Fi, Modem A, Modem B, and so on), interfaces can be renamed.
- Status - Current detail for the interface, such as the connected Wi-Fi network and signal strength, or a status message (for example "Unable to detect ethernet cable" or "Nothing in this slot").
- State - Connection state, for example In use, No cable, No SIM, or No modem.
- Settings - Opens the settings panel for that interface.
The default priority order is Wired 1, Wired 2, Wi-Fi, then the modems in order (Modem A, Modem B, and so on).
To Change the Priority Order:
- Click Change order above the interface list.
- Move the interfaces up or down to set the order you want, then save the new order.
Interface Behavior
Prism attempts to connect to the internet through the first interface and continues down the list until it finds an interface with a valid internet connection. If an interface has internet but traffic to connected services are blocked, Prism will not attempt to authenticate those services over another interface.
Wired Interfaces
Prism devices support 2x gigabit Ethernet ports, Wired 1 and Wired 2. Click Settings next to an interface to open its settings panel. The top of the panel shows the connection state, a detail message, and the port's MAC address.
NOTE: Changes to interface settings are not saved until you click Apply. Click Discard to cancel your changes.
Wired 1
IP Mode - Sets how Wired 1 gets its IP address.
- DHCP (default) - Prism requests an IP address and configuration from the network's DHCP server.
- Static - You enter the IP address, subnet mask, domain, gateway, and DNS server manually.
Static Configuration options
- IP Address - The IP address of Wired 1 (default 192.168.1.200).
- Subnet Mask - Default 255.255.255.0.
- Domain - Optional.
- DNS Server - Enter up to three DNS server IP addresses, separated by commas without spaces (for example 8.8.8.8,8.8.4.4,1.1.1.1).
- Default Gateway - Default 192.168.1.1.
MTU - Maximum Transmission Unit, the largest Ethernet frame that can be sent across the connection. Range: 576 to 1500 (default 1500). Only change this setting if your network has unique requirements.
Link Speed - Controls the Ethernet connection speed and duplex mode between Prism and the network.
- Auto-Negotiate (default) - Prism and the network select the highest supported speed automatically.
- 100/Full - Forces a 100Mbps full-duplex link.
- 1000/Full - Forces a 1Gbps full-duplex link.
Custom Network Name - Name shown in the interface list instead of "Wired 1".
Wired 2
Wired 2 supports the same settings as Wired 1, plus a DHCP server mode, hotspot, and web UI access control.
IP Mode - Sets how Wired 2 gets or assigns IP addresses.
- DHCP Client (default) - Prism requests an IP address and configuration from the network's DHCP server.
- DHCP Server - Prism creates its own network and assigns IP addresses to devices connected to Wired 2. This mode also allows hotspot connectivity.
- Static - You enter the IP address, subnet mask, domain, gateway, and DNS server manually.
Web UI Access - Allows access to the web UI over Wired 2. Turn it off to keep hotspot or VPN users, or clients on a public network, out of the web UI. On by default.
Hotspot (DHCP Server only) - Allows devices connected to Wired 2 to use internet access over a modem, the other wired interface, Wi-Fi, or OpenVPN. Off by default.
Hotspot Interface (DHCP Server with Hotspot on) - Selects the interface that provides internet to the hotspot.
- Auto (default) - The hotspot uses the interface with the highest priority.
- A specific interface (for example Wired 1, Wi-Fi, Modem A, Modem B, Modem C, Modem D). The list shows each interface with its current state.
IP Address, Subnet Mask, Domain, DNS Server, Default Gateway (Static only) - Same as Wired 1.
MTU - Same as Wired 1. Range: 576 to 1500 (default 1500).
Link Speed - Same as Wired 1. Auto-Negotiate (default), 100/Full, or 1000/Full.
Custom Network Name - Name shown in the interface list instead of "Wired 2".
For step-by-step hotspot setup, see Hotspot Configuration.
Wi-Fi
Prism Flex, Mobile, and Jetpack have built-in 802.11ax chipsets for configuration, data sharing, and infrastructure Wi-Fi attachment.
Select Network > Network Interfaces, then click Settings next to Wi-Fi. The settings panel changes depending on the selected WiFi Mode.
CAUTION: If you are connected to the web UI over Wi-Fi, changing the WiFi Mode or the Wi-Fi network disconnects your browser from Prism when you click Apply. Make sure you can reconnect (for example over Ethernet or the new Wi-Fi network) before applying.
WiFi Mode
WiFi Mode
- Disabled - Wi-Fi is turned off.
- Client - Prism joins your Wi-Fi network for internet access. You can also configure Prism from any computer, phone, or tablet connected to the same network. Use Client mode for normal Wi-Fi operation, such as streaming to the internet over your local router.
- Access Point (default) - Prism creates its own standalone Wi-Fi network, so you can connect a computer, phone, or tablet directly to Prism for configuration. For streaming to the internet over Wi-Fi, use Client mode.
Client Mode
In Client mode, the top of the panel shows the connected network, signal strength, IP address, gateway, DNS servers, and MAC address.
Networks Nearby - Lists the Wi-Fi networks in range with their signal strength, security type (for example WPA2), and band (2.4GHz or 5GHz). The network Prism is connected to is marked Joined. Click Scan again to refresh the list, and Show all to see every network found. Click a network to join it.
Join a network that isn't listed - Use this for a network that hides its name (SSID). Enter the network name and credentials manually.
Remember networks - Prism saves each network it joins and rejoins saved networks automatically after a drop or restart, in the order listed under Saved networks. Turn it off to allow Prism to connect only to the currently configured network, which can be useful when several known networks are in range. On by default.
Saved networks - Lists remembered networks in priority order. Use the up and down arrows to change the order, or click Forget to remove a network.
IP address - Sets how Prism gets its Wi-Fi IP address.
- DHCP (default) - Prism requests an IP address and configuration from the network's DHCP server.
- Static - Enter the IP address, subnet mask, gateway, domain, and DNS server manually. The default static IP address is 192.168.1.200, with subnet mask 255.255.255.0 and gateway 192.168.1.1.
Custom Network Name - Name shown in the interface list instead of "Wi-Fi".
Certificates - Click Upload to upload a certificate for Enterprise (WPA2 Enterprise) networks: the network's certificate authority (.pem or .cer), or your own certificate to sign in with (.p12).
Access Point Mode
Access Point Name (SSID) - Name of the broadcast Wi-Fi network, 1 to 32 characters (default Prism-<model>-<last five digits of serial number>, for example Prism-857-XXXXX).
Security Mode
- None (default) - No password.
- WPA
- WPA2 - The most secure option.
- WPA/WPA2 - Accepts both WPA and WPA2 devices.
Password - Password for the access point, 8 to 63 characters. Shown when the security mode is not None.
Region - Select your region so the access point meets local requirements. The region sets which channels are available.
- United States (default)
- Europe
- Japan
- China
- South Korea
Channel - Select a specific channel or an automatic range. The list only shows channels allowed in the selected region.
- Auto (5GHz or 2.4GHz Range) (default)
- Auto (2.4GHz Range Only)
- Auto (5GHz Range Only)
- Specific channels:
- United States: Ch 1 to Ch 11, Ch 36 to Ch 48, Ch 149 to Ch 165
- Europe and Japan: Ch 1 to Ch 13, Ch 36 to Ch 48
- China and South Korea: Ch 1 to Ch 13, Ch 36 to Ch 48, Ch 149 to Ch 165
Hotspot - Shares internet access from a modem, wired interface, or OpenVPN with devices connected to the Prism access point. Off by default.
Hotspot Interface (Hotspot on) - Selects the interface that provides internet to the hotspot.
- Auto (default) - The hotspot uses the interface with the highest priority.
- A specific interface (for example Wired 1, Wired 2, Modem A to Modem D, OpenVPN).
Custom Network Name - Name shown in the interface list instead of "Wi-Fi".
WPA2 Enterprise Configuration
Prism supports EAP-TTLS, EAP-TLS, and PEAP-MSCHAPv2, three of the major authentication methods used in most modern RADIUS setups.
Upload your certificate under Certificates first, then select your network from Networks nearby. When you join an Enterprise network, select the authentication type you are using.
- EAP-TLS - Uses a certificate chain for authentication. Prism only accepts a .p12 file with a password. Most environments require a CA (certificate authority) certificate, server certificate, client certificate, and private key.
- EAP-TTLS/PAP - Uses a CA certificate, username, and password to authorize the device. Requires a certificate uploaded under Certificates beforehand.
- PEAP-MSCHAPv2 - Accepts a certificate presented by the server, then authorizes with a username and password.
Creating a .p12 File With All Required Files
- If you have a .p12 file with just the certificate and key, extract them:
openssl pkcs12 -in existing.p12 -nocerts -out existing_key.pem -nodes
openssl pkcs12 -in existing.p12 -nokeys -out existing_certs.pem
- Prepare your server certificate. If you have a certificate chain, combine it:
cat server.crt intermediate1.crt intermediate2.crt > server_chain.crt
- Create a new .p12 file that includes the existing content and the new server certificate, and set a password:
openssl pkcs12 -export -out new.p12 -inkey existing_key.pem -in existing_certs.pem -certfile server_chain.crt
Modems
Prism supports up to 8x Node devices, depending on product and configuration:
- Prism Flex - 2 Node modems
- Prism Mobile - 2 internal Node modems (4 if using Node II or Node II CBRS externally)
- Prism Mobile Backpack - 6 Node modems
- Prism Jetpack - 8 internal modems
Each modem appears in the interface list as Modem A, Modem B, and so on. Click Settings next to a modem to open its settings panel.
Modem Status
The top of the modem settings panel shows:
- State - Connection state, for example No SIM or No modem, with a short explanation.
- Detail - Status message from the modem, including the active SIM slot.
- Modem - Model of the connected device, for example Node 5G-Q, Node 5G-SW, Node II, Node II CBRS, or Node I.
Click Details to open the Detailed Status window. It shows the modem IMEI and firmware version, plus connection details when a SIM is connected.
Detailed status fields:
- Active MBN Profile - The modem loads the carrier's MBN profile when it detects a native SIM. If no native SIM is present, it loads the Generic profile instead.
- Band - The band or bands the Node is connected to. LTE connects to a single band, 5G-NSA shows LTE and 5G, and 5G-SA shows 5G only.
- ICCID - Identification number of the SIM or SIM profile.
- EID - Identification of the SIM hardware (used with Teradek Data).
- IMSI - Native network of the SIM. If the network the modem is connected to does not own the IMSI, the modem is roaming.
- Version - Firmware version of the internal Node chipset.
- IP address, Default Gateway, DNS Server, Netmask, MTU - Values the carrier assigns to the Node at registration.
NOTE: Applying modem settings restarts the modem, which drops off for about a minute. If another interface has internet, Prism stays online. Changing only the modem's name does not restart it.
Modem Settings
Modem - The modem toggle allows you to enable/disable the modem.
Slot - Selects which SIM slot the modem uses. Only one SIM slot can be used at a time per modem.
- Slot 1 (default)
- Slot 2/eSim
Shown for modems with two SIM slots (hidden for Node 5G-SW). SIM slot support by product:
- Prism Mobile - 2 physical SIM slots for each modem.
- Prism Mobile MK II and 5G - 1 physical SIM slot for each modem and 1 Teradek Standard Data eSIM.
- Prism Mobile GOV - 1 physical SIM slot for each modem.
- Prism Jetpack - 1 physical SIM slot for each of the 8 internal modems.
- Node II - 2 physical SIM slots for each modem.
- Node 5G - 1 physical SIM slot for each modem and 1 Teradek Standard Data eSIM (models with serials 03300420 and lower contain a Teradek Priority Data eSIM).
Configuration - Selects how the modem connects to the carrier. Each slot has its own configuration.
- Auto (default) - Uses auto APN or the internal APN list to connect to the network. Most carriers' SIMs connect with no additional configuration.
- Custom - Enter the APN, PIN, and authentication manually.
- Teradek Standard Data
- Teradek Priority Data
- Teradek Priority Data Europe
- Teradek Data Japan
- Teradek Data Caribbean
- Teradek Data Tier 1
Custom Network Name - Name shown in the interface list instead of "Modem A".
Auto Restart - Restarts the modem if it has not connected successfully after the restart timeout. Off by default. Not shown for Teradek Standard Data.
Restart Timeout (s) - Time in seconds the modem waits for a connection before it restarts, when Auto Restart is on. Range: 35 to 600 (default 180).
Custom Configuration
APN - Access Point Name, used to connect to the internet on most networks. The APN goes into slot 1 (CID 1) for all SIMs, except when the MBN profile is Verizon Wireless, where it goes into slot 3 (CID 3).
Pin - If the SIM needs a PIN to unlock, enter it here (4 to 8 digits). Prism makes one attempt per modem start.
CAUTION: The SIM allows 3 PIN attempts before it locks. A locked SIM may require a PUK (PIN Unlock Key) from your carrier.
Authentication - Authentication method required by the carrier.
- None (default)
- PAP
- CHAP
- MSCHAPV2
Username and Password - Credentials for authentication.
IP Type - Select IPV4 to force the carrier to offer IPv4 (default IPV4V6). This sets the CID to IP instead of IPV4V6. Use it only if your carrier supports it. Shown for all configurations except Auto.
464XLAT - Creates an IPv4 to IPv6 bridge: converts a carrier-assigned IPv6 address to a local IPv4 address (192.0.0.1) for use with Prism (Prism only supports IPv4 with the bonding protocol). Not supported by all carriers. Shown for Node II only, and not for Auto or Teradek Priority Data. This setting only works with the Generic MBN profile and is enabled automatically for Vivo Brazil. Still true?
Teradek Data Configurations
Use these configurations with Teradek Data SIM cards and eSIMs.
Teradek Carrier Mode (Teradek Standard Data, Teradek Priority Data, Teradek Priority Data Europe) - Carrier Lock is only used for multi-carrier specific SIM cards.
- Auto Carrier (default) - The modem selects the carrier automatically.
- Carrier Lock - The modem uses only the carrier you select.
PLMN (Teradek Standard Data with Carrier Lock) - PLMN code of the carrier to lock to. Use the help link in the UI to look up your carrier's PLMN code.
SIM Type (Teradek Priority Data with Carrier Lock) - Type of multi-carrier SIM.
- US Multi-Carrier - Then select a Carrier: AT&T, Verizon, or T-Mobile.
- UK Multi-Carrier - Then select a Carrier: EE, 3, Vodafone, or O2.
- Korea Multi-Carrier - Then select a Carrier: KT or SKTelecom.
- Custom - Enter the PLMN code (5 to 6 digits).
SIM Type (Teradek Priority Data Europe) - KPN, 3, or Elisa. With Carrier Lock, enter the PLMN code (5 to 6 digits). This configuration also shows the Pin field.
Carrier (Teradek Data Japan) - NTT Docomo or Au.
Carrier (Teradek Data Caribbean) - Digicel or Flow.
Carrier (Teradek Data Tier 1) - Verizon, AT&T, T-Mobile, US Cellular, Bell, Rogers, or Vodafone.
Advanced Modem Settings (Varies by Modem)
The following settings appear only for some modem models and configurations. [SCREENSHOT NEEDED: Advanced modem settings on a Node 5G-Q or Node 5G-SW]
5G Mode (not Node II, Node II CBRS, or Node 5G-Q) - Sets which 5G network types the modem can use.
- Both (default) - Non-Standalone and Standalone.
- NSA - Non-Standalone only.
- SA - Standalone only.
5G Standalone (Node 5G-Q) - Enables the 5G Standalone network if available. On by default.
Data Mode Preference (Node 5G-Q) - Selects how the modem connects to the network.
- Auto (default) - Automatically selects the best available data mode.
- WCDMA Only - Connects only on 3G WCDMA networks.
- LTE Only - Connects only on 4G LTE networks.
- 5G NSA Only - Connects only using 5G Non-Standalone (requires LTE support).
- 5G SA Only - Connects only using 5G Standalone (no LTE required).
Carrier Profile (not Node 5G-SW) - Selects your carrier's Modem Binary (MBN) profile: Auto (default) or a specific profile. The profile applies the correct network settings, such as bands, protocols, and features, for your operator. The list comes from the modem (for example Generic, AT&T USA, T-Mobile USA, Verizon VoLTE USA, Vodafone UK).
CAUTION: Locking carrier profiles may negatively impact your cellular experience and may cause your Node to stop working with other carriers or devices.
WCDMA Band Mode, LTE Band Mode, NSA 5G Band Mode, SA 5G Band Mode (not Node II; NSA and SA 5G not on Node II CBRS)
- Auto (default) - The modem uses all supported bands.
- Custom - Shows the matching Band Selection field, where you select the bands the modem can connect to.
External or Single-Slot Modems
Modems without dual SIM slots (for example an external USB modem, or an empty modem slot) show a simpler set of settings.
Modem - Turns the modem on or off.
Custom Network Name - Name shown in the interface list.
Auto Restart - Same as above.
Restart Timeout (s) - Same as above. Range: 35 to 600 (default 180).
APN - Access Point Name for the carrier.
Pin - SIM PIN (4 to 8 digits). 3 attempts are allowed before the SIM locks.
Authentication - Auto (default), PAP, or CHAP.
Username and Password - Credentials for authentication.
MTU - Maximum Transmission Unit for the modem connection. Range: 0 to 1500 (default 1400).
Modem Overview
Click Modem Overview above the interface list to open a summary of every modem slot. For each modem, the summary lists the available details, such as IMEI, status detail, modem firmware version, modem type, and model. Click Copy All to copy the summary to your clipboard, for example to send to Teradek support.
Internet Check
The Internet check card at the bottom of the Network Interfaces page shows how Prism decides whether each interface has internet. With the default setting, Prism pings three public DNS servers (Google, Cloudflare, OpenDNS) through each interface every 8 seconds, and any answer counts as online.
Click Change to edit the internet check settings.
Uplink Check - Sets how Prism checks for internet.
- Auto (default) - Pings three public DNS servers through each interface, as described above.
- Custom - Checks a URL or IP address that you enter.
- Disabled - Turns the internet check off.
Uplink Type (Custom only) - Curl (default) or Ping.
URL or IPv4 Address (Custom only) - Address to check.
Timeout (s) (Custom only) - Time in seconds to wait for an answer. Range: 4 to 600 (default 4).
Secure (https) (Custom with Curl only) - Uses HTTPS for the check.
VPN
Prism supports OpenVPN for remote administration of the device, and for passthrough of NAT'ed clients on the hotspot (users on the hotspot can access remote resources). TUN connections have been tested successfully.
Select Network > VPN to configure the VPN.
The status box at the top shows whether a VPN is set up, the current role (VPN client or VPN server), and the connection state.
This unit is a - Sets Prism's VPN role.
- VPN client - Prism joins a VPN you already run.
- VPN server - Prism runs a VPN server that lets other devices join Prism's network.
VPN profile (VPN client only) - The .ovpn file from your VPN provider or network admin. Click Upload profile to select and upload the file.
Start the VPN when the unit starts - Connects to the VPN every time Prism turns on. Off by default.
Bridge to Wired 2 - When on, devices connected to Wired 2 join the VPN's network directly (layer 2 TAP passthrough). This requires a TAP VPN profile, which carries Ethernet traffic.
VPN Server Settings
Public address (VPN server only) - Public IP address the client needs, typically your firewall's IP address if you use port forwarding.
Public port (VPN server only) - Public port the client needs. Range: 1 to 65535. Make sure to forward this port.
NOTE: Prism supports only one VPN configuration at a time.
OpenVPN Profile Format
To use OpenVPN as a client, provide a properly formatted .ovpn file. For example:
dev tun
persist-tun
persist-key
cipher AES-256-CBC
ncp-ciphers AES-128-GCM
auth SHA256
tls-client
client
resolv-retry infinite
remote example.remote-server.com 1194 udp
auth-user-pass
remote-cert-tls server
<ca>
-----BEGIN CERTIFICATE-----
MIICIjCCAYqgAwIBAgIJAIZT0NZxTgjCMA0GCSqGSIb3DQEBBQUAMBMxETAPBgNV
BAMTCGV4YW1wbGUuY29tMB4XDTE1MDgxOTEzMjA1OFoXDTE4MDgxODEzMjA1OFow
EzERMA8GA1UEAxMIbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzG1+2jf/Y/bQXFYVj1XVNb7h1Nw4uSg6GnTlnBiXhphYExFvJstbGvhw
...
-----END CERTIFICATE-----
</ca>
setenv CLIENT_CERT 0
key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
eXaMpLeKaYvFgM9K3Yw3E94iFeAlHe7O
8Ja27yNnM97kL9I4aSg39g9Z8LpQ3lN2
o2bM3pF6kz6N8O3l9P1F8I3pC9K8J7rF
m4X5H1vN4m2F7o4E9Z1K6yM5o1G8Q9M6
3aZ7D1o5P8n9V2j3Q5L8E9fN2R6M7g8D
...
-----END OpenVPN Static key V1-----
</tls-auth>
















