Manage Equipment

The Onyx Portal enables you to onboard, monitor, and manage Onyx Edge, APs, DAS, and Mesh Node equipment in your network.

Provisioning Support

The Provisioning Server generates and provisions the keys required for each Onyx Edge and Mesh Node to operate with the Onyx Portal. The Provisioning Server generates a permanent UUID and Challenge Key, for each Onyx Edge based on its eth0 hardware address, and for each Mesh Node based on its serial number, which the equipment use to connect with the Onyx Portal. Software reimages do not affect the permanent UUID and Challenge Key.

IPSec Support

NOTE: In this release, IPSec is supported only in 4G networks.

IPSec is an open, standards-based secure network architecture / protocol suite used to secure traffic between two endpoints in an IP network. When enabled on an Onyx Edge and an associated AP, an encrypted IPSec tunnel is set up between them, and data flows between them are authenticated and encrypted for secure communications.

NOTE: IPSec-enabled Onyx Edge must be associated only with directly connected IPSec-enabled APs. Any directly connected non-IPSec APs, if present, must be on a different subnet from the IPSec virtual-IP-pool subnet.

NOTE: IPSec must not be enabled on APs behind Mesh Nodes.

NOTE: IPSec on an Onyx Edge cannot be disabled until IPSec is disabled on all associated APs.

NOTE: When IPSec is enabled, DHCP service will be disabled as all directly connected APs will have to connect via IPSec.

NOTE: IPSec is not supported in conjunction with HA/Onyx Edge pools. IPSec-enabled Onyx Edge and APs must not be associated with an Onyx Edge pool. IPSec must not be enabled on Onyx Edge and APs already associated with a pool. For more information, see Manage Onyx Edge High Availability.

The Onyx Portal/Orchestrator provides the IPSec certificates for the Onyx Edge and the AP. The IPSec CA Certificate, IPSec Equipment Certificate, and IPSec Private Key files must be downloaded from the Onyx Portal and uploaded on the AP equipment's configuration interface.

Workflow to enable IPSec support:

1

In the Onyx Portal, configure the Onyx Edge for IPSec support.

See Manage Onyx Edge.

2

In the Onyx Portal, configure the AP for IPSec support.

See Manage APs.

3

In the AP equipment's configuration interface, enable and configure IPSec support. See Enable and Configure IPSec on AP Equipment.