> For the complete documentation index, see [llms.txt](https://docs.gxc.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.gxc.io/docs/network-configuration-and-operations-guides/5g-onyx-portal-4.x-operations/manage-networks.md). # Manage Networks The Onyx Portal enables you to add, configure, and manage your networks and network parameters such as throughput and bandwidth, and the usage policies around what the equipment can access. The Onyx Portal supports the creation of 4G and 5G specific networks. ## Networking / UE Exposure Modes The Onyx 5G Platform supports two primary networking modes that determine how the Onyx Edge integrates with enterprise networks and manages UE traffic. * Network Address Translation (NAT) Mode * Multi-APN-VLAN (Bridge) Mode The 5G NAT and Bridge modes provide flexibility between fully isolated, NAT-protected networks and slice-aware VLAN-integrated networks where enterprise IT retains control of addressing and policies. ### NAT Mode In the 5G NAT mode, the Onyx Edge functions as a secure gateway between the private 5G RAN and the enterprise network (N6 interface). APs and FHMs connect to the Onyx Edge via dedicated private fronthaul links, isolated from the enterprise LAN. The Onyx Edge assigns IP addresses to UE (from its local pool) and to APs and FHMs (via its DHCP service on the fronthaul network). NAT applied on the N6 interface ensures strong isolation (the enterprise LAN sees only the Onyx Edge's NAT IP address and cannot directly access APs, FHMs, or UE). This mode provides simplified IP management and complete control over RAN infrastructure, ideal for security- and privacy-focused deployments where enterprises do not require direct access to individual UE devices. ### Bridge (APN-on-VLAN) Mode In the 5G Bridge mode, the Onyx Edge bridges UE traffic directly into enterprise VLANs without applying NAT. APs/FHMs connect to the Onyx Edge via dedicated private fronthaul links, isolated from the enterprise LAN. The Onyx Edge assigns IP addresses to APs and FHMs via its DHCP service on the fronthaul network. Each APN is mapped to a dedicated VLAN by the Onyx Edge, allowing traffic segregation and policy enforcement. Enterprise DHCP service assigns IP addresses to UE per VLAN, making them directly accessible as native enterprise devices. The N6 interface is configured as a VLAN trunk to carry tagged UE traffic to the enterprise network. Unlike NAT mode (where UE are hidden behind the Onyx Edge IP address), Bridge mode provides complete enterprise visibility and policy control over connected UE while maintaining strong RAN isolation and per-APN traffic segregation through VLAN isolation. This mode is recommended for organizations seeking deep integration with enterprise routing, security, and management tools. {% hint style="info" %} **NOTE**: For detailed information on the networking modes, refer to the *4G & 5G Onyx Networking Modes Application Note*. {% endhint %} ## Switch Default Network When you log on to Onyx Portal, from the list of networks available under the selected Onyx Portal account, you must select the default network for your session. When you select a particular network, the Onyx Portal screens display data for that network. **To switch the default network:** {% stepper %} {% step %} After you log on to the Onyx Portal, in the header area of the page, click

(switch default network). The **Networks** page displays the list of networks configured under the selected Onyx Portal account. {% endstep %} {% step %} Click the name of the network that you want to switch to. A confirmation dialog box is displayed.

{% endstep %} {% step %} To confirm switching the network, click **Yes**. The default network switches, and the selected network's name is displayed in the header area. *

indicates the default network is a 4G network. *

indicates the default network is a 5G network. {% endstep %} {% endstepper %} ## View Default Network's Details **To view the default network's details:** {% stepper %} {% step %} In the navigation pane, click **Network**. The ***\*** page displays the default network's details. * **Network** – The network's identifying details and associated equipment/subscriber counts.

* **Name** – The network's name. * **UE Display Short Name** – The network's short name that is displayed in UE screens. * **Description** – The network's description. * Counts of Onyx Edge, APs, FHM, APNs, and subscribers associated with the network. * **Core** – The network's core (EPC/5GC) configuration, including UE exposure mode and PLMN identifiers.

* **UE Exposure Mode** – The UE IP allocation mode—**NAT**, **Direct on APN-VLAN**. * **PLMN ID** – The network's PLMN ID (MCC+MNC concatenated). * **Slot Pattern** – The network's configured slot pattern. * **SUCI Profile** – The network's SUCI encryption profile used to protect subscriber identifiers over the air.

* **Profile ID** – The SUCI protection profile's identifier. * **Protection Scheme** – The SUCI encryption scheme in use (e.g., ProfileA). * **Public Key** – The home network public key used to encrypt the UE's SUCI. * **SAS** – The Spectrum Access System (SAS) related information.

* **SAS Provider** – The SAS provider used by the network for CBRS spectrum coordination and access authorization. * **Venues** – The list of venues associated with the network.

* **Download Root CA Certificate** – In the upper-right corner of the page, click to download the network's Root CA certificate (.pem file).

NOTE: On enabling IPSec for an AP, this Root CA Certificate file, the AP Certificate and AP Private Key must be uploaded to the AP equipment's configuration interface. For more information see Enable and Configure IPSec on AP Equipment.

* **Delete Network** – In the upper-right corner of the page, click to permanently delete the network, after confirmation; Fails if the network still has associated venues, Onyx Edge, APs, FHM, or Mesh Node. {% endstep %} {% endstepper %} ## View Available Networks This section describes how to: * [*View Summary Details of All Networks*](#view-summary-details-of-all-networks) * [*View a Network's Details*](#view-a-networks-details) ### View Summary Details of All Networks **To view the summary details of all networks under the selected Onyx Portal account:** {% stepper %} {% step %} In the header area, click

(switch network). The **Networks** page displays the summary details of all networks configured under the current Onyx Portal account.

* **Name** – The network's name. * **Venues** – The number of venues configured in the network. * **4G/5G** – The network's type—4G or 5G. To sort the table by network type, click the column header. * **Onyx Edge Appliances** – The number of Onyx Edge configured in the network. * **Access Point** – The number of APs configured in the network. * **Mesh Node** – The number of Mesh Nodes configured in the network. In the current release, Mesh Node is specific to 4G networks. * **FHM** – The number of FHMs configured in the network. In the current release FHM is specific to 4G networks. * **Actions** – Options to view details, edit, and delete networks. {% endstep %} {% endstepper %} ### View a Network's Details **To view a network's details:** {% stepper %} {% step %} In the header area, click

(switch network). The **Networks** page displays the summary details of all networks configured under the selected Onyx Portal account. {% endstep %} {% step %} To view the details of a specific network, in the **Actions** column, click the corresponding ⋮ (options) icon, then click **View**.

The ***\*** page displays the selected network's details. * **Network** – The network's identifying details and associated equipment/subscriber counts.

* **SAS Provider** – The SAS provider used by the network for CBRS spectrum coordination and access authorization. * **Venues** – The list of venues associated with the network.

* **Download Root CA Certificate** – In the upper-right corner of the page, click to download the network's Root CA certificate (.pem file).

* **Delete Network** – In the upper-right corner of the page, click to permanently delete the network, after confirmation; Fails if the network still has associated venues, Onyx Edge, APs, FHM, or Mesh Node. {% endstep %} {% endstepper %} ## Create Networks This section describes how to create a 5G network. {% hint style="info" %} **NOTE:** You can create networks only if you are a GXC Administrator, Partner Administrator, or a Super Administrator. {% endhint %} {% hint style="info" %} **NOTE:** You can create networks only under customer accounts. Before you create a network, make sure you have selected the appropriate customer account. {% endhint %} **To create a 5G network:** {% stepper %} {% step %} In the header area, click

(switch network). The **Networks** page displays the summary details of all networks configured under the selected Onyx Portal account. {% endstep %} {% step %} In the upper-right corner of the page, click **Add Network**. The **Create Network** page > **Network** tab is displayed.

{% endstep %} {% step %} Enter the following details: * **Network Name** – (Required) The network's name. The network name must be unique within the customer account and must be an alphanumeric string of 1–32 characters. * **UE Display Short Network Name** – (Required) The network's short name that is displayed in UE screens. * **Description** – (Required) The network's description. {% endstep %} {% step %} At the bottom of the page, click **Configure Core/RAN**. The **Create Network** page > **Core/RAN** tab is displayed.

{% endstep %} {% step %} Enter the following details. * **4G / 5G** – Click the toggle button to select the 5G network type. Default setting: 4G. {% hint style="info" %} **NOTE:** After you create a network, its type cannot be changed. {% endhint %} * **APN on a VLAN** – To enable the "Direct on APN-VLAN" mode, turn on the toggle button. To enable the NAT mode, turn off the toggle button. Default setting: disabled (NAT mode). For more information, see [*Networking Modes*](#networking-modes). * **Slot Pattern** – (Required) Select the slot pattern. The slot pattern configuration refers to allocating specific subframes within the radio frame for downlink and uplink data transmissions, facilitating efficient data exchange between the AP and UE. The UL/DL distribution percentages are displayed alongside each option. * **DDDDDDDSUU (DL 77%, UL 21%)** – Allocates approximately 77% of subframes within each radio frame for downlink transmission and the remaining 21% for uplink transmission. * **DDDSU (DL 74%, UL 23%)** – Allocates approximately 74% of subframes within each radio frame for downlink transmission and the remaining 23% for uplink transmission. * **DDSUU (DL 54%, UL 43%)** – Allocates approximately 54% of subframes within each radio frame for downlink transmission and the remaining 43% for uplink transmission. * **DSUUU (DL 34%, UL 63%)** – Allocates approximately 34% of subframes within each radio frame for downlink transmission and the remaining 63% for uplink transmission. * **DSUUUUDSUU (DL 25%, UL 72%)** – Allocates approximately 25% of subframes within each radio frame for downlink transmission and the remaining 72% for uplink transmission. * **DDSUUUUUUU (DL 20%, UL 77%)** – Allocates approximately 20% of subframes within each radio frame for downlink transmission and the remaining 77% for uplink transmission. * **MCC** – (Required) The Mobile Country Code, a three-digit code that uniquely identifies the country or geographical area within the IMSI. Default value: 315. * **MNC** – (Required) The Mobile Network Code, a three-digit code, combined with the MCC, uniquely identifies a mobile network operator within a country. Default value: 010. {% endstep %} {% step %} At the bottom of the page, click **Configure Users**. The **Create Network** page > **Users** tab is displayed.

{% endstep %} {% step %} Enter the following details: * **Users** – Click to select one or more users from the customer account who should have permission to manage this network. To remove access for a particular user, clear the corresponding checkbox. Default value: **User with All Network Access**. {% endstep %} {% step %} To save the network, in the upper-right corner of the page, click **Save Network**. Saving the network automatically sets it as the default network for your current session. {% endstep %} {% endstepper %} ## Edit Networks This section describes how to edit a network. {% hint style="info" %} **NOTE:** You can edit networks only if you are a GXC Administrator, Partner Administrator, or a Super Administrator. {% endhint %} **To edit a 5G network's settings:** {% stepper %} {% step %} In the header area, click

(switch network). The **Networks** page displays the summary details of all networks configured under the selected Onyx Portal account. {% endstep %} {% step %} For the network that you want to edit, in the **Actions** column, click the corresponding ⋮ (options) icon, then click **Edit**.

The **Edit Network** page > **Network** tab is displayed.

{% endstep %} {% step %} Edit the following details as required. * **Network Name** – (Required) The network's name. The name must be unique within the customer account and must be an alphanumeric string of 1–32 characters. * **UE Display Short Network Name** – (Required) The network's short name that is displayed in UE screens. * **Description** – (Required) The network's description. {% endstep %} {% step %} In the lower-left bottom of the page, click **Configure Core/RAN**.

{% endstep %} {% step %} Edit the following details as required: * **4G / 5G** – (Read only) Indicates the network type is 5G. * **APN on a VLAN** – To enable the "Direct on APN-VLAN" mode, turn on the toggle button. To enable the NAT mode, turn off the toggle button. For more information, see [*Networking Modes*](#networking-modes). * **Slot Pattern** – (Required) Select the slot pattern. The Slot Pattern configuration refers to allocating specific subframes within the radio frame for downlink and uplink data transmissions, facilitating efficient data exchange between the AP and UE. The UL/DL distribution percentages are displayed alongside each option. * **DDDDDDDSUU (DL 77%, UL 21%)** – Allocates approximately 77% of subframes within each radio frame for downlink transmission and the remaining 21% for uplink transmission. * **DDDSU (DL 74%, UL 23%)** – Allocates approximately 74% of subframes within each radio frame for downlink transmission and the remaining 23% for uplink transmission. * **DDSUU (DL 54%, UL 43%)** – Allocates approximately 54% of subframes within each radio frame for downlink transmission and the remaining 43% for uplink transmission. * **DSUUU (DL 34%, UL 63%)** – Allocates approximately 34% of subframes within each radio frame for downlink transmission and the remaining 63% for uplink transmission. * **DSUUUUDSUU (DL 25%, UL 72%)** – Allocates approximately 25% of subframes within each radio frame for downlink transmission and the remaining 72% for uplink transmission. * **DDSUUUUUUU (DL 20%, UL 77%)** – Allocates approximately 20% of subframes within each radio frame for downlink transmission and the remaining 77% for uplink transmission. * **MCC** – (Required) The Mobile Country Code, a three-digit code that uniquely identifies the country or geographical area within the IMSI. Default value: 315. * **MNC** – (Required) The Mobile Network Code, a three-digit code, when combined with the MCC, uniquely identifies a mobile network operator within a country. Default value: 010. {% endstep %} {% step %} In the lower-right bottom of the page, click **Configure Users**.

{% endstep %} {% step %} Edit the following details as required: * **Users** – Click to select one or more users from the customer account who should have permission to manage this network. To remove access for a particular user, clear the corresponding checkbox. Default value: **All Users**. {% endstep %} {% step %} To save your changes, in the upper-right corner of the page, click **Save Network**. {% endstep %} {% endstepper %} ## Delete Networks {% hint style="info" %} **NOTE:** You can delete networks only if you are a GXC Administrator, Partner Administrator, or a Super Administrator. {% endhint %} {% hint style="info" %} **NOTE:** You cannot delete a network if there are any venues, Onyx Edge, or APs associated with it. {% endhint %} **To delete a network:** {% stepper %} {% step %} In the header area, click

(switch network). The **Networks** page displays the summary details of all networks configured under the selected Onyx Portal account. {% endstep %} {% step %} To delete a particular network, in the **Actions** column, click the corresponding ⋮ (options) icon, then click **Delete**.

A confirmation dialog box is displayed.

{% endstep %} {% step %} To confirm deleting the network, click **Yes**. {% endstep %} {% endstepper %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.gxc.io/docs/network-configuration-and-operations-guides/5g-onyx-portal-4.x-operations/manage-networks.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.