Glossary
This glossary defines terms commonly used across GXC’s product interfaces and documentation.
0-9
3GPP
3rd Generation Partnership Project – A global collaboration of regional standards organizations responsible for developing and maintaining specifications for mobile communication technologies, including 3G, 4G LTE, and 5G. 3GPP ensures interoperability and consistency across global cellular networks.
4G
4th Generation Cellular – A mobile communication standard developed by 3GPP that offers higher data speeds, lower latency, and improved spectral efficiency compared to 3G. Technologies under 4G include LTE and LTE-Advanced.
5G
5th Generation Cellular – The latest mobile communication standard developed by 3GPP, designed to provide ultra-high data rates, low latency, massive device connectivity, and support for emerging use cases such as autonomous systems, IoT, and immersive media.
5G Core
GXC’s embedded 5G Core network supporting 5G SA architecture, with core functions including AMF, SMF, UPF, and UDM. It provides subscriber management, mobility management, session management, user-plane processing, and connectivity to external data networks for private 5G deployments.
A
ACS
Auto-Configuration Server – Manages AP configuration and prioritization in Onyx Edge Pools.
AES
Advanced Encryption Standard – A symmetric encryption algorithm widely used in GXC networks for securing user traffic, signaling, and configuration data. AES is recognized for its strong security and efficiency, supporting key sizes of 128, 192, or 256 bits.
AGL
Above Ground Level - The height of an antenna measured relative to the ground directly beneath the installation site.
agw_user
A limited-privilege user account in the Onyx Edge server, used by GXC partner and customer administrators to collect logs, restart services, restore factory settings, etc.
AKA
Authentication and Key Agreement – A mutual authentication protocol used primarily in mobile networks. AKA ensures that both the UE and the network can verify each other's identity, establishing shared cryptographic keys to secure communication.
Alert
A real-time notification in the Onyx Portal triggered by Alert Rules. Alerts are categorized by severity (Critical, Major, Minor, Other) and are used to monitor system health, troubleshoot issues, and maintain network performance.
Alert Counter Panel
An interface element in the Onyx Portal that displays real-time, color-coded counts of active Critical, Major, Minor, and Other alerts.
Alert Mute Rule
A user-defined rule in the Onyx Portal that temporarily suppresses alert email notifications based on severity, type, or equipment to prevent notification fatigue during planned maintenance or debugging windows.
Alert Receiver
A user or system configured to receive email notifications when Onyx Portal Alert Rules are triggered.
Alert Rule
A GXC-defined rule in the Onyx Portal to monitor specific network metrics or behaviors and trigger an Alert when a condition is met.
AMF
Access and Mobility Function – The 5G Core function responsible for managing user access, mobility events, and signaling between devices and the network.
ANR
Automatic Neighbor Relation – A self-optimizing network feature that automates the detection and management of neighbor cells. ANR helps maintain accurate neighbor lists for handovers, improving mobility performance and reducing manual configuration.
AMSL
Above Mean Sea Level - The height of an antenna or location measured relative to mean sea level.
AP
Access Point – GXC equipment that provides 4G or 5G radio access to UE. In 4G networks, the AP integrates radio and baseband processing functions. In 5G networks, GXC may use a disaggregated RAN architecture in which radio functions are provided by an RU and higher-layer RAN functions are provided by the DU and CU.
APN
Access Point Name – A network identifier used by UE to connect to an external PDN, such as the Internet or an enterprise LAN. In GXC deployments, the APN also specifies routing and QoS rules.
APN-Mapped VLANs
VLAN segmentation mapped to specific APNs, used for isolating device traffic and applying granular access policies.
Application Group
A logical collection of user-defined applications for traffic shaping, prioritization, and QoS control within the GXC network.
ARP
Allocation and Retention Priority – QoS parameter that influences bearer setup and prioritization under network load.
Authorized State
A CBSD state indicating that the SAS has granted spectrum access and authorized the CBSD to transmit.
AWS
Amazon Web Services – A cloud platform used to deploy GXC services.
AWS GuardDuty
AWS threat detection service monitoring for anomalies and malicious activity in Onyx infrastructure.
AWS KMS
AWS Key Management Service – AWS-managed service for creating, managing, and using cryptographic keys to secure stored data.
B
Backhaul
The communication link that transports user and control plane traffic between the Onyx Edge (Core) and RAN elements such as APs or FHMs. GXC supports both wired and wireless backhaul options, including LTE Mesh.
Bcrypt
A password hashing function designed to be computationally intensive, making brute-force attacks more difficult. Bcrypt automatically incorporates a salt and allows configurable complexity (cost), helping protect stored credentials from rainbow table and brute-force attacks.
BPF
Band Pass Filter – Device that allows selected frequency bands to pass while blocking others—used in DAS for spectrum isolation.
BRF
Band Reject Filter – Filter that blocks specific frequency bands to reduce interference in shared DAS environments.
BTS-CBSD
Base Transceiver Station CBSD – Fixed CBSD base station that provides wireless connectivity to end-user devices and CPE-CBSDs in CBRS deployments.
C
CA
Carrier Aggregation – An AP transmission mode that combines multiple carriers (contiguous or non-contiguous) across the same or different frequency bands to increase bandwidth, enhance data rates, and optimize spectrum usage in GXC networks.
CA Certificate
Certificate Authority Certificate - A digital certificate used to verify the authenticity of certificates presented by trusted systems and services.
CAPTCHA
Completely Automated Public Turing test to tell Computers and Humans Apart – A challenge-response test used to determine whether the user is a human or an automated bot. reCAPTCHA, a variant helps protect login and registration interfaces from automated abuse by requiring Onyx Portal users to perform tasks that are easy for humans but difficult for machines.
Category A CBSD
<30 dBm/10 MHz CBSD – Low-power CBSD with transmit power under 30 dBm per 10 MHz; suitable for indoor or limited-range deployments.
Category B CBSD
<47 dBm/10 MHz CBSD – High-power CBSD capable of up to 47 dBm per 10 MHz; typically used for wide-area or outdoor coverage.
CBRS
Citizens Broadband Radio Service – A shared spectrum band (3550–3700 MHz) in the U.S., used for private 4G and 5G networks.
CBRS-NID
CBRS Network ID – A unique identifier used to distinguish private networks operating within the CBRS band. In GXC deployments, the CBRS-NID is typically configured in APs and other CBSDs to associate them with the correct network instance, enabling SAS registration, policy enforcement, and operational segmentation.
CBSD
Citizens Broadband Radio Service Device – A device authorized under FCC rules to transmit in the CBRS band (3550–3700 MHz). In GXC networks, CBSDs include both BTS-CBSDs (acting as fixed base stations) and CPE-CBSDs (fixed end-user devices). All CBSDs must register with the SAS and comply with dynamic frequency coordination requirements to prevent interference and ensure regulatory compliance.
CBSD Installation Parameters
CBSD Operational Parameters
Radio operating settings submitted to the SAS, such as frequency range, bandwidth, and transmit power.
CBSD Registered State
CBSD Registration Request
Cell
A defined coverage area within a mobile network served by one or more RUs. In GXC deployments, a cell may include multiple RUs operating under a single DU, especially in Shared Cell configurations, enabling seamless coverage and mobility.
Cell ID
A unique identifier assigned to each Cell in a mobile network. UE use the Cell ID to distinguish between different cells for registration, handovers, and mobility management. In GXC’s Shared Cell architecture, all RUs within a shared deployment share the same Cell ID to eliminate intra-site handovers.
Center Frequency
The frequency at the midpoint of a radio channel or spectrum allocation.
Channel
A defined range of radio frequencies used for wireless communication.
CLI
Command-Line Interface – A text-based interface used to configure, monitor, and manage the Onyx Edge. Accessible via SSH, the CLI complements the GUI-based Onyx Portal and is used in scenarios requiring direct system access.
Client Certificate
A digital certificate used to authenticate a device or application when establishing a secure connection.
Core
The central part of a cellular network that manages subscriber authentication, mobility, session establishment, policy control, and routing of user traffic between the RAN and external networks. In GXC deployments, the core is hosted on the Onyx Edge and is provided by the EPC for LTE networks and the 5G Core for 5G networks.
C-Plane
Control Plane – The signaling layer of the network that manages session establishment, mobility, handovers, and authentication between the core and UE. In GXC deployments, the C-Plane is handled by the CU and the core functions hosted on the Onyx Edge, ensuring reliable network coordination and policy enforcement.
CPE
Customer Premise Equipment – On-site network equipment, such as routers and modems, that connect end users to the provider’s core or access network.
CPE-CBSD
Fixed CBSD that functions as a non-mobile UE, typically with higher transmit power than standard End-User Devices (EUDs) and therefore exceeding EUD power limits.
CPI
Certified Professional Installer – A technician certified under FCC requirements to register CBSDs with the SAS. The CPI is responsible for providing accurate deployment data such as device location, antenna height, gain, and installation parameters to ensure regulatory compliance in CBRS networks. GXC deployments rely on CPI-verified installations for SAS approval and operation.
CPRI
Common Public Radio Interface – Legacy interface standard for connecting baseband units to RUs. Largely replaced by eCPRI in 5G deployments for better bandwidth and latency performance.
CSV
Comma-Separated Values – A plain-text file format in which each line represents a data record with comma-separated values—widely used by Onyx Portal for data import/export.
CU
Central Unit – A higher-layer 5G RAN component that handles control and user plane functions such as RRC, mobility management, session control, and data forwarding. Integrated into the Onyx Edge, the CU works in tandem with the DU to deliver scalable, low-latency private 5G services.
CU-CP
Central Unit-Control Plane – In 5G networks, the control plane component of the CU, responsible for managing RRC, signaling, handovers, mobility, and session establishment.
Customer
An end-user organization using a GXC Onyx Private Cellular Network for its enterprise connectivity needs. Customers can manage their network directly via the Onyx Portal or work with a GXC Partner for managed services.
CU-UP
Central Unit-User Plane – In 5G networks, the user plane component of the CU responsible for forwarding user data traffic, packet routing, QoS enforcement, and buffering.
D
DAS
Distributed Antenna System – A network of spatially separated antennas connected to a common signal source, designed to improve wireless coverage within large or complex environments. In GXC deployments, DAS supports both passive and active configurations, enabling shared infrastructure for public and private cellular services using filters, diplexers, and SAS-registered RUs.
Dashboard
A real-time display in the Onyx Portal that presents network-level metrics and operational status for traffic, equipment, and subscribers.
dBi
Decibels Relative to Isotropic Radiator – A unit of measurement for antenna gain relative to a theoretical isotropic radiator that radiates power equally in all directions. Higher dBi values indicate more directional antennas.
dBm
Decibel-milliwatts – Unit of power relative to 1 milliwatt. In wireless networks, dBm is used to express signal strength, transmit power, and receiver sensitivity. For example, a signal strength of -50 dBm is stronger than -80 dBm.
DC
Dual Carrier – An AP transmission mode in which an AP simultaneously transmits on two frequency carriers, improving throughput and reliability.
Default Network
The currently selected network instance in the Onyx Portal that determines which data is displayed across all Onyx Portal screens.
Default Network Selector
An Onyx Portal interface element that allows users to choose the default network to operate in.
DHE
Diffie–Hellman Ephemeral – A key exchange protocol using temporary keys for each session, ensuring forward secrecy in TLS communications.
DHCP
Dynamic Host Configuration Protocol – A network management protocol that automatically assigns IP addresses and other configuration parameters—such as subnet mask, gateway—to UE on a network, enabling them to communicate effectively.
DL
Downlink – Transmission from network to UE.
DNS
Domain Name System – Internet system that resolves domain names to IP addresses.
DP
Domain Proxy – An Onyx Portal module that handles communication with the SAS on behalf of CBSDs for dynamic frequency management.
DU
Distributed Unit – A lower-layer 5G RAN component responsible for real-time baseband processing functions including MAC and physical layer operations. Integrated into the Onyx Edge, the DU connects to multiple RUs over the fronthaul interface. It works in tandem with the CU as part of GXC’s disaggregated RAN architecture.
E
EARFCN
E-UTRA Absolute Radio Frequency Channel Number – Identifies LTE radio carriers with a specific frequency.
ECDHE
Elliptic Curve Diffie–Hellman Ephemeral – A key exchange method that provides forward secrecy for TLS sessions by generating temporary keys based on elliptic curve cryptography.
eCPRI
Enhanced Common Public Radio Interface – An improved version of CPRI with better performance for 5G fronthaul.
EEA2
EPS Encryption Algorithm 2 – An LTE confidentiality algorithm based on AES in counter mode, used for OTA encryption.
EIA2
EPS Integrity Algorithm 2 – An LTE integrity algorithm based on AES, used to ensure the authenticity of signaling messages.
EIRP
Effective Isotropic Radiated Power – The total radio power transmitted by an antenna, including antenna gain and accounting for transmission losses.
eNB / eNodeB
EPC
Evolved Packet Core – The LTE Core network architecture used to manage data, mobility, authentication, and session control. It includes the MME, SGW, PGW, and HSS functions. In GXC deployments, the EPC is integrated into the Onyx Edge as part of the LTE Core, enabling secure, localized, and scalable private LTE network operations.
ESC
Environmental Sensing Capability - A network of sensors used in the CBRS band to detect incumbent federal radar activity and notify the SAS when spectrum protection is required.
eSIM
Embedded SIM – A programmable SIM chip embedded directly into a UE, eliminating the need for a physical SIM card slot. It supports remote provisioning and simplifies UE deployment, particularly in IoT and enterprise environments.
eSync
Edge Synchronization Module – A GXC module that provides timing services such as GPS-based synchronization, PTP Grandmaster functionality, and SyncE output. It ensures accurate time and phase alignment for 4G/5G networks when Onyx Edge or FHMs require an external synchronization source.
Ethernet Backhaul
A network connection that transports traffic between access network equipment and the core network using Ethernet.
EUTRA
Event
A system-recorded occurrence that reflects a change or activity within the network—such as an equipment status update, configuration change, or user action. Events provide an audit trail and operational visibility for diagnostics and historical review.
F
F1
F1 Interface – In 5G networks, the F1 interface connects the DU and CU within a gNodeB. In GXC deployments, both DU and CU functions are integrated within the Onyx Edge, and the F1 interface is implemented internally to support the split RAN architecture and efficient coordination between radio and control functions.
FCAPS
Fault, Configuration, Accounting, Performance, Security – A framework for network management functionality.
FCC
Federal Communications Commission – The U.S. regulatory authority that governs spectrum allocation, device certification, and telecommunications compliance, including rules for CBRS and private 5G deployments.
FCC ID
A unique identifier assigned by the FCC to certify that a wireless device complies with regulatory standards for radio frequency transmission and electromagnetic emissions.
FHM
Fronthaul Multiplexer – GXC 5G equipment that aggregates and synchronizes fronthaul signals between the Onyx Edge and multiple RUs. It enables Shared Cell functionality by virtualizing multiple RUs into a single cell, supporting extended coverage and efficient spectrum usage.
Fiber Uplink
A fiber-optic network connection used to provide high-speed connectivity between network devices.
Floor Plan Calibration
An Onyx Portal feature that allows you to map the latitude and longitude coordinates of each floor in a venue and visualize it on a map.
Fronthaul
In a split 5G architecture, the low-latency, time-sensitive link between the DU and the RU. GXC uses O-RAN 7.2x-compliant interfaces over fiber to transport radio data between these components.
FQDN
Fully Qualified Domain Name – Complete domain name including hostname and domain (e.g., server.example.com).
Free Running
A timing fallback mode used when an Onyx Edge or AP loses its primary synchronization source. In this mode, the equipment maintains its last known timing reference autonomously, which may lead to drift over time.
FSM
Finite State Machine – Indicates the current operational state of an AP, helping administrators assess readiness, faults, or provisioning status.
FWA
Fixed-Wireless Access – Provides broadband Internet using wireless connections instead of fiber or DSL.
G
G100
GXC 4G indoor AP equipment.
G101
GXC 4G indoor AP equipment.
G105
GXC 5G indoor AP equipment.
G227
GXC 5G indoor AP equipment.
G229
GXC 4G indoor low-power AP equipment.
G238-n78H
GXC 5G outdoor high-power band n78 AP equipment.
G243-n48
GXC 5G outdoor band n48 AP equipment.
G243-n78H
GXC 5G outdoor high-power band n78 AP equipment.
G249
GXC 4G outdoor AP equipment.
G430
GXC 5G indoor AP equipment.
G443
GXC 5G outdoor AP equipment.
G501
GXC 4G outdoor high-power AP equipment.
G505
GXC 5G outdoor high-power AP equipment.
G509-n28
GXC 5G outdoor band n28 AP equipment.
G509-n41
GXC 5G outdoor band n41 AP equipment.
GAA
General Authorized Access - The lowest-priority CBRS access tier that permits shared use of available spectrum without acquiring a Priority Access License.
GCM
Galois/Counter Mode – An AES encryption mode that combines counter mode encryption with Galois field authentication, providing both confidentiality and integrity.
gNB / gNodeB
Next Generation Node B – The 5G base station that provides radio access to UE, manages control signaling, and interfaces with the 5G Core network. In GXC deployments, the gNodeB includes the DU and CU, and operates in conjunction with the Onyx Edge.
GNSS
Global Navigation Satellite System - A satellite-based positioning system used to provide location and timing information.
GM01
GXC 4G GM01 Mesh Node equipment.
GM02
GXC 4G GM02 Mesh Node equipment.
GM03
GXC 5G GM03 Mesh Node equipment.
GPS
Global Positioning System – A satellite-based system used in GXC deployments to deliver precise timing and location information. GPS timing is critical for synchronizing TDD operations, via components such as the Onyx Edge or FHM.
GPS Antenna
A receiver antenna that captures GPS satellite signals to provide accurate timing and location information. In GXC APs, it ensures synchronization for TDD and ensures coordination across the RAN.
Grant
An authorization issued by the SAS that permits a CBSD to transmit on specific frequencies under defined operating conditions.
Grant Request
GXC Partner
An organization authorized to deploy, manage, or resell GXC’s private cellular solutions, often collaborating on implementation, support, and customer success.
GXC Root
The top-level administrative account used by GXC to manage the Onyx Portal.
H
HA
High Availability – A redundancy architecture designed to ensure service continuity in Onyx Edge failure scenarios using Onyx Edge Pools.
HAAT
Height Above Average Terrain - The height of an antenna relative to the average elevation of the surrounding terrain.
Handover
The process of transferring an active session or connection from one cell to another as a UE moves.
Handover Hysteresis
The signal strength difference (in dB) that a neighboring cell must exceed over the current serving cell before initiating handover. Used to prevent rapid switching between cells when signal levels fluctuate, ensuring stable connections and reducing unnecessary network overhead.
Heartbeat
A periodic message exchanged with the SAS to maintain an active grant and authorization to transmit.
HMAC
Hash-Based Message Authentication Code – A mechanism combining a cryptographic hash (e.g., SHA-256) with a secret key to verify data integrity and authenticity.
HSS
Home Subscriber Server – Stores subscriber profiles and performs authentication in LTE.
I
ICCID
Integrated Circuit Card Identifier – A unique identifier assigned to each SIM card or eSIM profile, used primarily for inventory and provisioning management.
IdP
Identity Provider – A trusted third-party service that manages user authentication and identity. It validates credentials during SSO and provides user attributes to the Onyx Portal for RBAC.
IMEI
International Mobile Equipment Identity – A globally unique number used to identify a UE on a cellular network.
IMDSv2
Instance Metadata Service version 2 – An updated version of AWS metadata service that enhances security by requiring session-oriented requests with tokens to access instance metadata. IMDSv2 mitigates common metadata-related attacks and protects sensitive data, such as IAM credentials, on cloud instances.
IMSI
International Mobile Subscriber Identity – A unique identifier assigned to a subscriber’s SIM or eSIM profile. It is used by the mobile network to authenticate the subscriber, manage sessions, and enforce access control for the associated UE.
Interference
Unwanted radio signals that degrade or disrupt wireless communications.
IoT
Internet of Things – Network of physical devices connected via the Internet, enabling data exchange and automation.
IP
Internet Protocol – Network protocol for routing packets between devices.
IPSec
Internet Protocol Security – A protocol suite for securing IP communications by authenticating and encrypting IP traffic. In GXC’s 4G networks, APs and Onyx Edge can be configured to support IPSec for enhanced security.
ISO
International Organization for Standardization - ISO image – A disk image file format used to package and install Onyx Edge software.
K
KPI
Key Performance Indicator – A measurable metric used to evaluate the performance of networks, equipment, etc. against defined objectives.
L
LAN
Local Area Network – A local network connecting computers and equipment.
LCI
Local Configuration Interface – The web interface hosted on AP equipment used for local configuration tasks including uploading certificates and enabling IPSec, etc.
LTE
Long-Term Evolution – 4G mobile communication standard developed by 3GPP. In GXC deployments, LTE supports OnGo-based private networks operating in the U.S. within the CBRS band (3550–3700 MHz).
LTE Core
GXC’s integrated 4G LTE Core, based on the EPC architecture, includes the MME, SGW, PGW, and HSS functions. It manages mobility, authentication, session handling, and traffic routing within GXC’s private LTE deployments. The LTE Core is embedded in the Onyx Edge, enabling secure and localized network operation.
M
MAC Address
Media Access Control Address – Hardware address uniquely identifying a network interface.
MCC
Mobile Country Code – A three-digit numeric code used to identify the country of a mobile subscriber within cellular networks. It is part of the IMSI and works in conjunction with MNC to uniquely identify a mobile operator. MCC values are defined by International Telecommunication Union Telecommunication Standardization Sector (ITU-T) and are essential for roaming, network selection, and regulatory compliance.
Mesh
A GXC networking configuration where Mesh Nodes wirelessly relay traffic between APs or between an AP and the Onyx Edge. Mesh is used to extend coverage in areas without wired backhaul and provides resilient, self-healing connectivity in challenging environments.
Mesh Node
GXC equipment that wirelessly relays traffic between APs or to the Onyx Edge, expanding network coverage in locations where cabling is impractical, such as remote or obstructed areas.
MFA
Multi-Factor Authentication – An Onyx Portal security feature that requires users to authenticate with two credentials, their Onyx Portal password and a TOTP generated by an authenticator app like the Google Authenticator or Microsoft Authenticator.
MFA Backup Code
Codes generated during MFA setup that can be used instead of TOTPs. Each code is single-use only and expires after it is used. MFA Backup Code are critical for access recovery.
MFA Secret
A cryptographic key stored in an authenticator app to generate TOTPs. If a user loses access to their MFA device or backup codes, the MFA secret must be reset to regain access to the Onyx Portal.
MHz
Megahertz – Frequency unit equal to one million hertz.
MILENAGE
A set of cryptographic algorithms used within the SIM-based authentication process in mobile networks, supporting the AKA mechanism. MILENAGE defines functions for authentication, key generation, and data integrity checks, helping to ensure that SIM credentials are securely validated.
MIMO
Multiple Input, Multiple Output – A wireless technology that uses multiple antennas at both the transmitter and receiver to improve data throughput and signal reliability. GXC APs support MIMO for enhanced 4G/5G performance.
MME
Mobility Management Entity – The LTE Core function responsible for handling signaling related to mobility and security for UE.
MNC
Mobile Network Code – A two- or three-digit code used in combination with the MCC to uniquely identify a mobile network operator within a country. Together, MCC and MNC form the PLMN identifier, which is essential for network selection, roaming, and SIM provisioning.
MNO
Mobile Network Operator – Company providing wireless communications services.
M-Plane
Management Plane – Handles configuration, software updates, fault management, and monitoring for APs, RUs, and DUs. In GXC networks, the M-Plane operates through protocols like TR-069 and O-RAN M-Plane interfaces, integrated into the Onyx Platform to support remote lifecycle management and diagnostics.
MSIN
Mobile Subscriber Identifier – Part of IMSI that uniquely identifies a subscriber within a network.
mTLS
Mutual Transport Layer Security – An extension of TLS where both the client and server present and verify digital certificates to authenticate each other. mTLS provides strong, bidirectional authentication and encrypted communication, frequently used in securing APIs, service-to-service communications, and orchestrated deployments.
Multi-APN-VLAN Mode
A specialized Onyx Edge deployment mode allowing traffic separation using VLANs per APN. Enables fine-grained control over traffic segmentation across applications. Also referred to as the Bridge mode.
Multiplexing
A technique for sending multiple data streams over a single channel. In mobile networks, it includes time (TDM), frequency (FDM), and code (CDM) multiplexing.
Multi-Step Registration
A CBSD registration workflow in which installation parameters and operational parameters are submitted through separate systems before registration is completed.
N
N6
N6 Interface – In 5G networks, the N6 interface connects the UPF on the Onyx Edge to external data networks, such as the Internet or private enterprise LANs. It serves as the 5G equivalent of the SGi interface in 4G, routing outbound user-plane traffic from the 5G Core to external destinations.
NaaS
Network-as-a-Service – GXC’s model of delivering private mobile networks as a service, including orchestration, monitoring, and lifecycle management.
NAS
Non-Access Stratum – In 4G and 5G networks, NAS is a signaling protocol layer between the UE and the core network. It handles key control plane functions such as authentication, mobility management, and session setup. In GXC deployments, NAS signaling is processed by the MME in 4G and by AMF in 5G, both hosted on the Onyx Edge.
NAT
Network Address Translation – A method that maps private IP addresses to public IP addresses for outbound traffic. NAT enables multiple devices on a private network to share a single public IP, conserves address space, and enhances security by obscuring internal network details.
NAT Mode
A network configuration mode in which Onyx Edge performs NAT for user traffic. This allows UE to access external networks using the Onyx Edge’s IP address while preserving internal IP schemes. NAT mode simplifies integration into existing enterprise networks by avoiding routing conflicts and enabling secure, outbound-only communication without requiring external IPs for each device.
NEA1
NR Encryption Algorithm 1 – A 5G confidentiality algorithm based on SNOW 3G, used for OTA encryption.
NEA2
NR Encryption Algorithm 2 – A 5G confidentiality algorithm based on AES in counter mode, used for OTA encryption.
NEA3
NR Encryption Algorithm 3 – A 5G confidentiality algorithm based on the ZUC (Zu Chongzhi) stream cipher, used for OTA encryption.
Neighbor Cell Table
A table maintained by APs containing detailed information (cell ID, PCI, RSRP, etc.) about neighboring cells used for handover decisions.
Neighbor Frequency Table
A table maintained by APs listing frequencies UE should measure for detecting neighbor cells; populated based on SAS grants.
NETCONF
Network Configuration Protocol – Used in Onyx solution for secure management of 5G RUs and FHMs via M-Plane interfaces.
Ng
Ng Interface – In GXC 5G networks, the Ng interface connects gNodeBs to the 5G Core hosted on the Onyx Edge. It includes both N2 (control plane) and N3 (user plane) interfaces for managing UE sessions, signaling, and data forwarding.
NIA3
NR Integrity Algorithm 3 – A 5G integrity algorithm based on the ZUC stream cipher, ensuring the authenticity of signaling messages.
NOC
Network Operations Center – Centralized location for monitoring and managing networks.
Notifications Panel
Displays Onyx Portal broadcast announcements, such as planned downtime and scheduled upgrades. Accessible via the Notifications icon in the Onyx Portal header.
NR
New Radio – The radio access technology used in 5G networks. NR enables higher throughput, lower latency, and more efficient spectrum use compared to LTE, supporting a wide range of use cases from enhanced mobile broadband to ultra-reliable low-latency communication.
O
Onyx Edge
A core component of the GXC solution that integrates core network and RAN functions to enable communication between APs and external networks. In 5G networks, it can be deployed in either Onyx Edge Core+NR (standard deployment) or Onyx Edge Core Only models.
Onyx Edge Core Only
A 5G deployment model in which the Onyx Edge functions exclusively as the 5G Core, while the gNodeB (DU and CU) is hosted externally by a third-party vendor. This mode is primarily intended for integration with non-GXC RAN components and is offered with limited support.
Onyx Edge Core+NR
The standard 5G deployment model in which a single Onyx Edge hosts both the 5G Core and the gNodeB (comprising DU and CU). It enables end-to-end control, ultra-low latency, and local breakout—ideal for standalone, high-performance private networks in enterprise environments.
Onyx Edge On-Premises
A 4G and 5G deployment mode where the Onyx Edge runs locally at the enterprise site. This mode ensures low latency, localized data processing, and supports mission-critical applications that require high reliability and data sovereignty.
Onyx Edge Pool
A logical grouping of Onyx Edge in a network for redundancy and scalability. Pools simplify management and load balancing across Onyx Edge.
Onyx ES2
GXC 4G ONYX-ES2 Ruggedized Onyx Edge server.
Onyx ES4
GXC 4G ONYX-ES4 Onyx Edge server.
Onyx ES7
GXC 5G ONYX-ES7 Onyx Edge server.
Onyx ES8
GXC 5G ONYX-ES8 Outdoor Onyx Edge server.
Onyx Orchestrator
GXC’s centralized platform for lifecycle management and automation of equipment. It enables remote provisioning, software upgrades, configuration management, performance monitoring, and fault management across multiple deployments, ensuring scalable and consistent operations.
Onyx Portal
A cloud-native, GUI-based interface used by GXC, GXC partners, and customers to monitor and manage GXC-deployed private cellular networks.
Onyx Platform
The GXC private cellular networking platform, consisting of the Onyx Portal, Onyx Edge, radio access components, and supporting services.
O-RAN
Open Radio Access Network – An industry initiative and architecture framework that promotes open, interoperable, and intelligent RAN interfaces and disaggregated network components.
OTA
Over-the-Air – Refers to wireless communication between UE and the network. In GXC deployments, OTA commonly describes encryption and integrity protection of 4G/5G signaling and user traffic.
P
PAL
Priority Access License – A licensed CBRS spectrum access tier that provides priority rights to specific frequency channels within a geographic area.
PCI
Physical Cell Identity – A unique identifier used by LTE and 5G Cells to distinguish neighboring cells during radio operations.
PDN
Packet Data Network – An external network (e.g., Internet or corporate LAN) that UE connect to.
PGW
PDN Gateway / Packet Data Network Gateway – The LTE Core function that routes user traffic to external data networks.
PKI
Public Key Infrastructure – Framework used to manage digital certificates and encryption keys.
PLMN
Public Land Mobile Network Identifier – A unique identifier for a mobile network operator, composed of an MCC and an MNC. The PLMN identifies the network that a subscriber is connected to and is used for network selection, roaming, and authentication in both public and private cellular deployments (e.g., GXC-assigned PLMN IDs).
PoE
Power over Ethernet - A technology that delivers electrical power and network connectivity over a single Ethernet cable.
POI
PRB
Physical Resource Block – The smallest unit of resource allocation in 4G/5G radio scheduling, representing a specific time-frequency slot that the network assigns to a subscriber/UE for uplink or downlink transmission.
Private 4G / Private 5G
A cellular network deployed for exclusive use by an enterprise or organization. Built on 3GPP 4G or 5G technology, it uses licensed or shared spectrum (such as CBRS) to deliver secure, high-performance connectivity.
Provisioning Server
A backend service in GXC’s architecture responsible for initializing and configuring Onyx Edge and Mesh Node equipment during onboarding. It automates tasks such as device registration to ensure secure and consistent deployment across GXC networks.
PSD
Power Spectral Density - The amount of transmitted power distributed across a unit of bandwidth, typically expressed in dBm/MHz.
PSS
Primary Synchronization Signal - A synchronization signal used by UE to detect and synchronize with a cellular network.
PTP
Precision Time Protocol – IEEE 1588 protocol for time synchronization over networks.
Q
QAM
Quadrature Amplitude Modulation – A modulation method that encodes data by varying signal amplitude and phase. In GXC’s networks, higher-order QAM (e.g., 64-QAM, 256-QAM) improves spectral efficiency and data throughput, enabling faster wireless performance under good signal conditions.
QoS
Quality of Service – Network mechanisms to manage traffic performance and prioritization based on application or subscriber.
R
RAN
Radio Access Network – The radio portion of the mobile network that connects UE to the core network through radio access infrastructure.
RBAC
Role-Based Access Control – A security model that restricts system access based on user roles. In the Onyx Portal, RBAC ensures that administrators, partners, and customers only access functions and data appropriate to their assigned role.
reCAPTCHA
A Google security service that helps prevent automated brute-force login attempts while allowing access for real users. It appears on the Onyx Portal login screen only after a failed login attempt.
RF
Radio Frequency – The range of electromagnetic frequencies used for wireless communication and signal transmission.
RRC
Radio Resource Control – A protocol in the RAN that manages connection setup, mobility, and resource allocation between UE and the network.
RRH
Remote Radio Head – A radio transmitter unit used in DAS systems.
RSA
Rivest–Shamir–Adleman – An asymmetric encryption algorithm used for secure key exchange, digital signatures, and TLS certificate authentication in GXC networks.
RSRP
Reference Signal Received Power – Measures the power level of LTE reference signals.
RSRQ
Reference Signal Received Quality – Measures LTE signal quality including interference and signal strength.
RSSI
Received Signal Strength Indicator – Measures total received power including signal and interference.
RU
Radio Unit – In 5G networks, the RU handles RF functions as part of a disaggregated RAN architecture—e.g., GXC G505. In GXC documentation, the RU may also be referred to as AP.
S
S1
S1 Interface – In GXC 4G networks, the S1 interface connects APs to the LTE Core hosted on the Onyx Edge. It includes S1-MME (control plane) and S1-U (user plane) sub-interfaces for forwarding user data, enabling complete connectivity between UE and the core network.
SA
Standalone – A 5G network deployment model where 5G radios operate alongside a native 5G Core, without relying on legacy 4G infrastructure. GXC’s 5G deployments use the SA model to enable advanced features such as ultra-low latency, network slicing, and full control plane/user plane separation.
SAS
Spectrum Access System – A cloud-based service that dynamically manages spectrum assignments in the CBRS band, ensuring interference protection and regulatory compliance.
SAS User ID
A unique identifier assigned by a SAS provider to an organization or deployment owner for CBRS operations.
SC
Single Carrier – An AP transmission mode in which an AP uses a single frequency carrier to transmit data. It is typically used in simpler or lower-throughput deployments and is supported in both 4G and 5G networks.
Sector
A coverage area served by a directional antenna or radio cell.
SFP
Small Form-factor Pluggable - A compact, hot-swappable transceiver module used for network connectivity over fiber or copper media.
SFP+
Enhanced Small Form-factor Pluggable - A higher-speed version of the SFP transceiver module commonly used for 10 Gbps network connections.
SGi
SGi Interface – In 4G networks, the SGi interface connects the PGW (hosted on the Onyx Edge) to external IP networks such as the Internet or enterprise LAN. It carries outbound user plane traffic from the LTE Core and is typically mapped to a physical interface (e.g., eth0).
SGW
Serving Gateway – The LTE Core function that routes and forwards user data packets between the eNodeB and PGW.
Shared Cell
A 5G deployment model in which multiple RUs operate under a single DU with a unified cell ID. In GXC’s architecture, this eliminates intra-site handovers, reduces signaling overhead, and ensures seamless mobility and consistent performance across large or complex environments such as warehouses and factories.
SIM
Subscriber Identity Module – A physical smart card inserted into a UE to authenticate and identify the subscriber on a mobile network. It stores credentials such as the IMSI and encryption keys used during network access. Also, see eSIM.
SLO
Single Log Out – When users log out from the Onyx Portal using SSO, they are simultaneously logged out from all other integrated applications within their organization’s SSO environment.
SLA
Service Level Agreement – Contract defining performance metrics between a service provider and customer.
Slot Pattern
A time-domain configuration in 5G TDD that defines the arrangement of downlink, uplink, and flexible symbols within a slot. Similar to SSF in LTE, slot patterns impact latency, throughput, and UL/DL switching behavior.
SMA Connector
SubMiniature Version A Connector – A threaded RF connector used to attach external antennas (e.g., GPS or LTE) to network equipment. Common in GXC APs and timing modules.
SMF
Session Management Function – The 5G Core function handling session establishment, modification, and teardown.
SNOW
SNOW 3G - A 3GPP stream cipher algorithm used in LTE for confidentiality and integrity protection of signaling and user data.
SOC 2
A compliance framework developed by the American Institute of Certified Public Accountants (AICPA) that verifies an organization’s security, availability, processing integrity, confidentiality, and privacy controls.
SOC 2 Type I certification confirms that GXC’s security controls are properly designed and implemented at a specific point in time, demonstrating our commitment to protecting customer data.
Spectrum Analyzer
An Onyx Portal feature that visualizes uplink and downlink RF power characteristics for monitoring and troubleshooting radio performance.
Spectrum Inquiry
S-Plane
Synchronization Plane – Provides timing and synchronization across distributed RAN components to maintain aligned transmissions. GXC supports synchronization through PTP and other timing mechanisms critical for interference-free operations, especially in shared and adjacent cell deployments.
SSF
Special Subframe Configuration – A timing pattern used in TDD LTE systems to define the guard period between uplink and downlink slots. It affects latency and throughput performance.
SSH
Secure Shell – Protocol for secure remote access to the Onyx Edge.
SSO
Single Sign-On – An authentication method that allows users to log in once and gain access to multiple applications in their organization’s SSO environment, including the Onyx Portal, without needing to re-authenticate. GXC supports SSO via integration with customer IdPs.
SUCI
Subscription Concealed Identifier – A privacy-enhancing identifier used in 5G networks to protect the SUPI when transmitted over the air. The SUCI is a cryptographically generated, temporary identifier derived from the SUPI, preventing interception and tracking by unauthorized parties.
SUPI
Subscription Permanent Identifier – A unique, permanent identifier assigned to a mobile subscriber, typically based on the IMSI. In 5G, the SUPI remains protected and is never directly transmitted in clear text; instead, it is concealed using SUCI.
Subscriber
An end user/UE authorized to access the network using a GXC-issued SIM or eSIM. Subscribers are managed through the Onyx Portal and associated with policies and identities for secure connectivity.
SyncE
Synchronous Ethernet – A timing protocol used in mobile networks to distribute frequency synchronization over Ethernet links. In GXC systems, SyncE helps maintain precise timing between Onyx Edge and connected RUs, supporting TDD alignment and fronthaul stability.
Synchronization Source
The source used by network equipment to obtain timing and frequency synchronization.
T
TAC
Tracking Area Code – Identifies a specific tracking area within a network.
TAI
Tracking Area Identity – Uniquely identifies a tracking area used in mobility management.
TAU
Tracking Area Update – Procedure for updating UE’s location within a new tracking area.
TDD
Time Division Duplex – A transmission method that separates uplink and downlink signals by allocating them alternating time slots on the same frequency channel.
TFT
Traffic Flow Template – Defines filters for bearer traffic matching.
Timing Reference
A clock or synchronization signal used to maintain accurate network timing.
TLS
Transport Layer Security – In 4G and 5G networks, TLS secures communication channels between GXC components by encrypting and authenticating management and signaling traffic. It is used across interfaces such as those between the Onyx Portal, Onyx Edge, and APs to ensure secure configuration, control, and data integrity.
TOTP
Time-Based One-Time Password – A temporary, automatically generated numeric password used for MFA, generated via apps like Google Authenticator or Microsoft Authenticator.
TR-069
Technical Report 069 / CPE WAN Management Protocol (CWMP) – A broadband device management protocol defined by the Broadband Forum that enables remote configuration, monitoring, and firmware updates of CPE. In GXC networks, TR-069 is used to manage 4G APs, simplifying provisioning and lifecycle operations through secure, centralized control.
TTT
Time to Trigger – The duration that a qualifying signal condition must persist before initiating a handover, preventing unnecessary switching due to brief fluctuations.
Transport Layer
The time-synchronized, high-speed communication infrastructure that connects the Onyx Edge to distributed RUs. Built on protocols such as IEEE 1588v2 PTP and SyncE, the transport layer enables deterministic performance and precise coordination in 4G/5G fronthaul networks.
U
UDM
Unified Data Management – The 5G Core network function responsible for managing subscriber-related data and supporting authentication and subscription management.
UE
User Equipment – An end-user device authorized to access the network using a SIM or eSIM, such as a smartphone, tablet, or IoT sensor.
Upgrade Group
A logical grouping of Onyx Edge, AP, or Mesh Node equipment at the network level, used to manage coordinated software upgrades or rollbacks.
UL
Uplink – Data transmission direction from UE to network.
UPF
User Plane Function – The 5G Core network function responsible for forwarding user data packets between the RAN and external data networks, including applying traffic handling and QoS policies.
Upstream IdP User
An Onyx Portal user authenticated via an external IdP. A corresponding user account is created within the Onyx Portal to provide fallback access in cases where the IdP fails to release required SSO attributes.
U-Plane
User Plane – The data layer of the network responsible for carrying user traffic (e.g., application data and internet access). Managed by the UPF in 5G or by SGW/PGW in LTE, the User Plane in GXC systems is optimized for low-latency, high-throughput delivery and is embedded within the Onyx Edge for localized traffic handling.
Uu
Uu Interface – In 4G and 5G networks, the Uu interface is the radio interface between the UE and the base station (eNodeB in 4G or gNodeB in 5G). It carries both control and user plane traffic over the air and is the primary link for access connectivity.
V
Venue
A logical location in the Onyx Portal representing a real-world location (e.g., warehouse, factory) where APs are deployed. A venue can be assigned floor plans and used for floor calibration.
VLAN
Virtual LAN – Logical segmentation of a physical network into multiple broadcast domains. Also, see Multi-APN-VLAN Mode.
W
WAF
Web Application Firewall – A security solution that protects web applications by filtering and monitoring HTTP/HTTPS traffic between a web application and the Internet. WAFs help block common attacks such as cross-site scripting (XSS), Structured Query Language (SQL) injection, and other "Open Worldwide Application Security Project" (OWASP) Top 10 vulnerabilities.
Last updated
Was this helpful?