Is the 4G link the only WAN connection or in addition to a wired WAN link? If it's the only link then AutoVPN works by default. If you have a wired WAN link and want to use both that and the internal cellular link you can enable the Cellular active uplink feature and then use WAN 1 & the cellular link for AutoVPN/SD-WAN.