The provider of networking solutions, both wireless and wired, Cambium Networks, has announced a new feature in its Network Service Edge (NSE) security and SD-WAN platformwhich allows service providers to assign static public IP addresses through WireGuard VPN tunnels.
This new function, therefore, offers a solution to the problem posed by the non-availability of public IPs in low Earth orbit (LEO) satellite connections, as well as in 4G and 5G mobile Internet. It allows private network operators, managed service providers (MSPS), Internet service providers (ISPs) and wireless Internet providers (WISPs) to deploy NSE in their data centers, as well as deliver services directly to customer sites that also have NSE.
With this architecture, partners have complete traffic control with enterprise-grade performance, SD-WAN intelligence, and firewall protection at every location. To implement the solution, providers deploy the NSE as a hub in their data centers, with a pool of public IPv4 addresses.
Each customer site installs the NSE at the edge of its location. From there an encrypted WireGuard tunnel is created back to the hub. Through such a tunnel, the client’s NSE receives a dedicated static public IP address, even when connected behind a LEO satellite or mobile WAN.
Traffic is routed through the provider’s data center infrastructure, giving ISPs and MSPs complete visibility and control. In addition, each NSE deployed on site offers integrated SD-WAN, next-generation firewall, intrusion prevention, content filtering and QoS functions, in order to protect and optimize local networks.
The combination of static IPs and edge security allows expanded use cases for satellite-connected networks and mobile WAN networks. Thus, remote offices and points of sale on LEO or LTE/5G satellites get stable IP addresses for VPN, VoIP and cloud access. Additionally, it makes it easy to host sensors and controllers behind secure, publicly accessible endpoints in IO and industrial deployments.
In the case of networks in the health, energy and education sectors, they ensure remote management and constant compliance with regulations and policies. Even over wireless WAN networks. As for regional MSPs and IPSs, thanks to this combination they can offer differentiated service levels of static IP with built-in SD-WAN resilience.
Cambium’s hardware-centric, partner-hosted model ensures that providers maintain both ownership of their customers’ data and network infrastructure. Does not require backbone or cloud routing operated by Cambium. All orchestration and monitoring is done through the cnMaestro management platform, with full visibility of hubs and NSE at each site.
