Ctrlk
GXC Main Website
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Manage Networks

The Onyx Portal enables you to add, configure, and manage your networks and network parameters such as throughput and bandwidth, and the usage policies around what the equipment can access. The Onyx Portal supports the creation of 4G and 5G specific networks.

Networking / UE Exposure Modes

The Onyx 5G Platform supports two primary networking modes that determine how the Onyx Edge integrates with enterprise networks and manages UE traffic.

  • Network Address Translation (NAT) Mode

  • Multi-APN-VLAN (Bridge) Mode

The 5G NAT and Bridge modes provide flexibility between fully isolated, NAT-protected networks and slice-aware VLAN-integrated networks where enterprise IT retains control of addressing and policies.

NAT Mode

In the 5G NAT mode, the Onyx Edge functions as a secure gateway between the private 5G RAN and the enterprise network (N6 interface). APs and FHMs connect to the Onyx Edge via dedicated private fronthaul links, isolated from the enterprise LAN. The Onyx Edge assigns IP addresses to UE (from its local pool) and to APs and FHMs (via its DHCP service on the fronthaul network). NAT applied on the N6 interface ensures strong isolation (the enterprise LAN sees only the Onyx Edge's NAT IP address and cannot directly access APs, FHMs, or UE). This mode provides simplified IP management and complete control over RAN infrastructure, ideal for security- and privacy-focused deployments where enterprises do not require direct access to individual UE devices.

Bridge (APN-on-VLAN) Mode

In the 5G Bridge mode, the Onyx Edge bridges UE traffic directly into enterprise VLANs without applying NAT. APs/FHMs connect to the Onyx Edge via dedicated private fronthaul links, isolated from the enterprise LAN. The Onyx Edge assigns IP addresses to APs and FHMs via its DHCP service on the fronthaul network. Each APN is mapped to a dedicated VLAN by the Onyx Edge, allowing traffic segregation and policy enforcement. Enterprise DHCP service assigns IP addresses to UE per VLAN, making them directly accessible as native enterprise devices. The N6 interface is configured as a VLAN trunk to carry tagged UE traffic to the enterprise network. Unlike NAT mode (where UE are hidden behind the Onyx Edge IP address), Bridge mode provides complete enterprise visibility and policy control over connected UE while maintaining strong RAN isolation and per-APN traffic segregation through VLAN isolation. This mode is recommended for organizations seeking deep integration with enterprise routing, security, and management tools.

NOTE: For detailed information on the networking modes, refer to the 4G & 5G Onyx Networking Modes Application Note.

Switch Default Network

When you log on to Onyx Portal, from the list of networks available under the selected Onyx Portal account, you must select the default network for your session. When you select a particular network, the Onyx Portal screens display data for that network.

To switch the default network:

1

After you log on to the Onyx Portal, in the header area of the page, click (switch default network).

The Networks page displays the list of networks configured under the selected Onyx Portal account.

2

Click the name of the network that you want to switch to.

A confirmation dialog box is displayed.

3

To confirm switching the network, click Yes.

The default network switches, and the selected network's name is displayed in the header area.

  • indicates the default network is a 4G network.

  • indicates the default network is a 5G network.

View Default Network's Details

To view the default network's details:

1

In the navigation pane, click Network.

The <network name> page displays the default network's details.

  • Network – The network's identifying details and associated equipment/subscriber counts.

    • Name – The network's name.

    • UE Display Short Name – The network's short name that is displayed in UE screens.

    • Description – The network's description.

    • Counts of Onyx Edge, APs, FHM, APNs, and subscribers associated with the network.

  • Core – The network's core (EPC/5GC) configuration, including UE exposure mode and PLMN identifiers.

    • UE Exposure Mode – The UE IP allocation mode—NAT, Direct on APN-VLAN.

    • PLMN ID – The network's PLMN ID (MCC+MNC concatenated).

    • Slot Pattern – The network's configured slot pattern.

  • SUCI Profile – The network's SUCI encryption profile used to protect subscriber identifiers over the air.

    • Profile ID – The SUCI protection profile's identifier.

    • Protection Scheme – The SUCI encryption scheme in use (e.g., ProfileA).

    • Public Key – The home network public key used to encrypt the UE's SUCI.

  • SAS – The Spectrum Access System (SAS) related information.

    • SAS Provider – The SAS provider used by the network for CBRS spectrum coordination and access authorization.

  • Venues – The list of venues associated with the network.

  • Download Root CA Certificate – In the upper-right corner of the page, click to download the network's Root CA certificate (.pem file).

    NOTE: On enabling IPSec for an AP, this Root CA Certificate file, the AP Certificate and AP Private Key must be uploaded to the AP equipment's configuration interface. For more information see Enable and Configure IPSec on AP Equipment.

  • Delete Network – In the upper-right corner of the page, click to permanently delete the network, after confirmation; Fails if the network still has associated venues, Onyx Edge, APs, FHM, or Mesh Node.

View Available Networks

This section describes how to:

View Summary Details of All Networks

To view the summary details of all networks under the selected Onyx Portal account:

1

In the header area, click (switch network).

The Networks page displays the summary details of all networks configured under the current Onyx Portal account.

  • Name – The network's name.

  • Venues – The number of venues configured in the network.

  • 4G/5G – The network's type—4G or 5G. To sort the table by network type, click the column header.

  • Onyx Edge Appliances – The number of Onyx Edge configured in the network.

  • Access Point – The number of APs configured in the network.

  • Mesh Node – The number of Mesh Nodes configured in the network. In the current release, Mesh Node is specific to 4G networks.

  • FHM – The number of FHMs configured in the network. In the current release FHM is specific to 4G networks.

  • Actions – Options to view details, edit, and delete networks.

View a Network's Details

To view a network's details:

1

In the header area, click (switch network).

The Networks page displays the summary details of all networks configured under the selected Onyx Portal account.

2

To view the details of a specific network, in the Actions column, click the corresponding ⋮ (options) icon, then click View.

The <network name> page displays the selected network's details.

  • Network – The network's identifying details and associated equipment/subscriber counts.

    • Name – The network's name.

    • UE Display Short Name – The network's short name that is displayed in UE screens.

    • Description – The network's description.

    • Counts of Onyx Edge, APs, FHM, APNs, and subscribers associated with the network.

  • Core – The network's core (EPC/5GC) configuration, including UE exposure mode and PLMN identifiers.

    • UE Exposure Mode – The UE IP allocation mode—NAT, Direct on APN-VLAN.

    • PLMN ID – The network's PLMN ID (MCC+MNC concatenated).

    • Slot Pattern – The network's configured slot pattern.

  • SUCI Profile – The network's SUCI encryption profile used to protect subscriber identifiers over the air.

    • Profile ID – The SUCI protection profile's identifier.

    • Protection Scheme – The SUCI encryption scheme in use (e.g., ProfileA).

    • Public Key – The home network public key used to encrypt the UE's SUCI.

  • SAS – The Spectrum Access System (SAS) related information.

    • SAS Provider – The SAS provider used by the network for CBRS spectrum coordination and access authorization.

  • Venues – The list of venues associated with the network.

  • Download Root CA Certificate – In the upper-right corner of the page, click to download the network's Root CA certificate (.pem file).

    NOTE: On enabling IPSec for an AP, this Root CA Certificate file, the AP Certificate and AP Private Key must be uploaded to the AP equipment's configuration interface. For more information see Enable and Configure IPSec on AP Equipment.

  • Delete Network – In the upper-right corner of the page, click to permanently delete the network, after confirmation; Fails if the network still has associated venues, Onyx Edge, APs, FHM, or Mesh Node.

Create Networks

This section describes how to create a 5G network.

NOTE: You can create networks only if you are a GXC Administrator, Partner Administrator, or a Super Administrator.

NOTE: You can create networks only under customer accounts. Before you create a network, make sure you have selected the appropriate customer account.

To create a 5G network:

1

In the header area, click (switch network).

The Networks page displays the summary details of all networks configured under the selected Onyx Portal account.

2

In the upper-right corner of the page, click Add Network.

The Create Network page > Network tab is displayed.

3

Enter the following details:

  • Network Name – (Required) The network's name. The network name must be unique within the customer account and must be an alphanumeric string of 1–32 characters.

  • UE Display Short Network Name – (Required) The network's short name that is displayed in UE screens.

  • Description – (Required) The network's description.

4

At the bottom of the page, click Configure Core/RAN.

The Create Network page > Core/RAN tab is displayed.

5

Enter the following details.

  • 4G / 5G – Click the toggle button to select the 5G network type. Default setting: 4G.

NOTE: After you create a network, its type cannot be changed.

  • APN on a VLAN – To enable the "Direct on APN-VLAN" mode, turn on the toggle button. To enable the NAT mode, turn off the toggle button. Default setting: disabled (NAT mode). For more information, see Networking Modes.

  • Slot Pattern – (Required) Select the slot pattern. The slot pattern configuration refers to allocating specific subframes within the radio frame for downlink and uplink data transmissions, facilitating efficient data exchange between the AP and UE. The UL/DL distribution percentages are displayed alongside each option.

    • DDDDDDDSUU (DL 77%, UL 21%) – Allocates approximately 77% of subframes within each radio frame for downlink transmission and the remaining 21% for uplink transmission.

    • DDDSU (DL 74%, UL 23%) – Allocates approximately 74% of subframes within each radio frame for downlink transmission and the remaining 23% for uplink transmission.

    • DDSUU (DL 54%, UL 43%) – Allocates approximately 54% of subframes within each radio frame for downlink transmission and the remaining 43% for uplink transmission.

    • DSUUU (DL 34%, UL 63%) – Allocates approximately 34% of subframes within each radio frame for downlink transmission and the remaining 63% for uplink transmission.

    • DSUUUUDSUU (DL 25%, UL 72%) – Allocates approximately 25% of subframes within each radio frame for downlink transmission and the remaining 72% for uplink transmission.

    • DDSUUUUUUU (DL 20%, UL 77%) – Allocates approximately 20% of subframes within each radio frame for downlink transmission and the remaining 77% for uplink transmission.

  • MCC – (Required) The Mobile Country Code, a three-digit code that uniquely identifies the country or geographical area within the IMSI. Default value: 315.

  • MNC – (Required) The Mobile Network Code, a three-digit code, combined with the MCC, uniquely identifies a mobile network operator within a country. Default value: 010.

6

At the bottom of the page, click Configure Users.

The Create Network page > Users tab is displayed.

7

Enter the following details:

  • Users – Click to select one or more users from the customer account who should have permission to manage this network. To remove access for a particular user, clear the corresponding checkbox. Default value: User with All Network Access.

8

To save the network, in the upper-right corner of the page, click Save Network.

Saving the network automatically sets it as the default network for your current session.

Edit Networks

This section describes how to edit a network.

NOTE: You can edit networks only if you are a GXC Administrator, Partner Administrator, or a Super Administrator.

To edit a 5G network's settings:

1

In the header area, click (switch network).

The Networks page displays the summary details of all networks configured under the selected Onyx Portal account.

2

For the network that you want to edit, in the Actions column, click the corresponding ⋮ (options) icon, then click Edit.

The Edit Network page > Network tab is displayed.

3

Edit the following details as required.

  • Network Name – (Required) The network's name. The name must be unique within the customer account and must be an alphanumeric string of 1–32 characters.

  • UE Display Short Network Name – (Required) The network's short name that is displayed in UE screens.

  • Description – (Required) The network's description.

4

In the lower-left bottom of the page, click Configure Core/RAN.

5

Edit the following details as required:

  • 4G / 5G – (Read only) Indicates the network type is 5G.

  • APN on a VLAN – To enable the "Direct on APN-VLAN" mode, turn on the toggle button. To enable the NAT mode, turn off the toggle button. For more information, see Networking Modes.

  • Slot Pattern – (Required) Select the slot pattern. The Slot Pattern configuration refers to allocating specific subframes within the radio frame for downlink and uplink data transmissions, facilitating efficient data exchange between the AP and UE. The UL/DL distribution percentages are displayed alongside each option.

    • DDDDDDDSUU (DL 77%, UL 21%) – Allocates approximately 77% of subframes within each radio frame for downlink transmission and the remaining 21% for uplink transmission.

    • DDDSU (DL 74%, UL 23%) – Allocates approximately 74% of subframes within each radio frame for downlink transmission and the remaining 23% for uplink transmission.

    • DDSUU (DL 54%, UL 43%) – Allocates approximately 54% of subframes within each radio frame for downlink transmission and the remaining 43% for uplink transmission.

    • DSUUU (DL 34%, UL 63%) – Allocates approximately 34% of subframes within each radio frame for downlink transmission and the remaining 63% for uplink transmission.

    • DSUUUUDSUU (DL 25%, UL 72%) – Allocates approximately 25% of subframes within each radio frame for downlink transmission and the remaining 72% for uplink transmission.

    • DDSUUUUUUU (DL 20%, UL 77%) – Allocates approximately 20% of subframes within each radio frame for downlink transmission and the remaining 77% for uplink transmission.

  • MCC – (Required) The Mobile Country Code, a three-digit code that uniquely identifies the country or geographical area within the IMSI. Default value: 315.

  • MNC – (Required) The Mobile Network Code, a three-digit code, when combined with the MCC, uniquely identifies a mobile network operator within a country. Default value: 010.

6

In the lower-right bottom of the page, click Configure Users.

7

Edit the following details as required:

  • Users – Click to select one or more users from the customer account who should have permission to manage this network. To remove access for a particular user, clear the corresponding checkbox. Default value: All Users.

8

To save your changes, in the upper-right corner of the page, click Save Network.

Delete Networks

NOTE: You can delete networks only if you are a GXC Administrator, Partner Administrator, or a Super Administrator.

NOTE: You cannot delete a network if there are any venues, Onyx Edge, or APs associated with it.

To delete a network:

1

In the header area, click (switch network).

The Networks page displays the summary details of all networks configured under the selected Onyx Portal account.

2

To delete a particular network, in the Actions column, click the corresponding ⋮ (options) icon, then click Delete.

A confirmation dialog box is displayed.

3

To confirm deleting the network, click Yes.

PreviousOnyx Portal Login and Navigation
NextManage Venues

Last updated

Was this helpful?