Aerflex Network Prerequisites - Firewall Configuration and AP subnets

Celona Access Points, Cloud core and Celona Orchestrator must communicate over the existing enterprise LAN/WAN infrastructure to enable zero-touch provisioning and cloud-based management of the Private Wireless network. For seamless Day 0 & Day N operations of the Celona Private Wireless network, enterprise firewalls must be configured to allow specific discovery, management, provisioning, and troubleshooting functions.

Please refer to the following tables for detailed firewall configurations to allow communication between Celona AP, Cloud core, and Orchestrator.

Celona Access Points (APs) make use of dedicated internal dataplane subnets as part of establishing secure tunnels and enabling end-to-end traffic handling between the AP and the Celona Aerflex cluster. These subnets are used strictly for internal AP functions and must remain unblocked within the local network.

The following subnet ranges are used internally by the AP:

Do NOT use these subnet ranges anywhere in your network

To avoid conflicts with Celona AP operation, these subnet ranges must not be used for:

If these subnets exist anywhere in the customer environment, AP onboarding and dataplane tunnel establishment will fail or behave unpredictably.