> For the complete documentation index, see [llms.txt](https://docs.gxc.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.gxc.io/docs/network-configuration-and-operations-guides/4g-onyx-portal-4.x-operations/manage-equipment.md).

# Manage Equipment

The Onyx Portal enables you to onboard, monitor, and manage Onyx Edge, APs, DAS, and Mesh Node equipment in your network.

## Provisioning Support

The Provisioning Server generates and provisions the keys required for each Onyx Edge and Mesh Node to operate with the Onyx Portal. The Provisioning Server generates a permanent UUID and Challenge Key, for each Onyx Edge based on its eth0 hardware address, and for each Mesh Node based on its serial number, which the equipment use to connect with the Onyx Portal. Software reimages do not affect the permanent UUID and Challenge Key.

## IPSec Support

{% hint style="info" %}
**NOTE:** In this release, IPSec is supported only in 4G networks.
{% endhint %}

IPSec is an open, standards-based secure network architecture / protocol suite used to secure traffic between two endpoints in an IP network. When enabled on an Onyx Edge and an associated AP, an encrypted IPSec tunnel is set up between them, and data flows between them are authenticated and encrypted for secure communications.

{% hint style="info" %}
**NOTE:** IPSec-enabled Onyx Edge must be associated only with directly connected IPSec-enabled APs. Any directly connected non-IPSec APs, if present, must be on a different subnet from the IPSec virtual-IP-pool subnet.
{% endhint %}

{% hint style="info" %}
**NOTE:** IPSec must not be enabled on APs behind Mesh Nodes.
{% endhint %}

{% hint style="info" %}
**NOTE:** IPSec on an Onyx Edge cannot be disabled until IPSec is disabled on all associated APs.
{% endhint %}

{% hint style="info" %}
**NOTE:** When IPSec is enabled, DHCP service will be disabled as all directly connected APs will have to connect via IPSec.
{% endhint %}

{% hint style="info" %}
**NOTE:** IPSec is not supported in conjunction with HA/Onyx Edge pools. IPSec-enabled Onyx Edge and APs must not be associated with an Onyx Edge pool. IPSec must not be enabled on Onyx Edge and APs already associated with a pool. For more information, see [*Manage Onyx Edge High Availability*](#manage-onyx-edge-high-availability).
{% endhint %}

The Onyx Portal/Orchestrator provides the IPSec certificates for the Onyx Edge and the AP. The IPSec CA Certificate, IPSec Equipment Certificate, and IPSec Private Key files must be downloaded from the Onyx Portal and uploaded on the AP equipment's configuration interface.

**Workflow to enable IPSec support:**

{% stepper %}
{% step %}
In the Onyx Portal, configure the Onyx Edge for IPSec support.

See [*Manage Onyx Edge*](#provisioning-support).
{% endstep %}

{% step %}
In the Onyx Portal, configure the AP for IPSec support.

See [*Manage APs*](#manage-aps).
{% endstep %}

{% step %}
In the AP equipment's configuration interface, enable and configure IPSec support.\
\
See [*Enable and Configure IPSec on AP Equipment*](#enable-and-configure-ipsec-on-ap-equipment).
{% endstep %}
{% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.gxc.io/docs/network-configuration-and-operations-guides/4g-onyx-portal-4.x-operations/manage-equipment.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.