All Collections
Applications & Celona certified devices
Device Interoperability
Ethernet to private cellular gateways with NAT & Port Forwarding
Ethernet to private cellular gateways with NAT & Port Forwarding

Configuration details and interoperability with AMIT Wireless IDG500

Team Celona avatar
Written by Team Celona
Updated over a week ago

In the previous lab in this series, we created a simple client NAT configuration with the Amit Wireless IDG500-C6012 CPE connecting via CBRS to a Celona indoor access point. The basic NAT configuration does not allow for connections originating outside of the CBRS network to connect to services within the CBRS network.

In this lab, we will modify the basic NAT configuration to connect to a camera service inside the CBRS network.

  • (added) Netgear GS308 8-port gigabit ethernet switch

  • (added) Wisenet PNM-9085RQZ camera (with PoE injector)

  • Apple Macbook laptop with USB-C to ethernet converter

  • Amit Wireless IDG500-C6012 CPE

We will make the following configuration changes for a NAT topology to allow access to the camera:

  • CPE

    • DHCP IP address reservation for the camera

    • port forwarding of TCP 80 and RTSP at TCP/UDP 554 to the camera IP address

  • Celona

    • Edge context: External IP domain to corporate DHCP server

    • Device Group: add a device group to associate specific SIMs with this deployment

IDG500-C6012: Reserve a DHCP IP address for the camera

As we will be configuring port forwarding to the camera's web service and RTSP service, we should have the CPE DHCP server assign a consistent, predictable IP address to the camera. Obtain the MAC address (e.g. from a label printed on the camera) and set the IP address - in our lab we set the camera address to

IDG500-C6012: Configure port forwarding to the camera services

In the port forwarding configuration of the IDG500, we set port forwarding rules to the camera web service at TCP port 80, and RTSP at TCP/UDP port 554. Note: To setup additional cameras behind this same CPE, you can have additional unique inbound ports (e.g. 556, 557) from the corporate side of the network to connect to multiple port 554 and IP address camera combinations.

With this configuration, we can now connect to the camera from the Macbook on the same side of the network, behind the same CBRS CPE. We cannot connect to the camera from the corporate side of the network because the CPE has the Celona Edge DHCP assigned IP address of, which is unroutable from the corporate side of the network.

To remedy this, we need to configure 2 options in Celona:

  • External IP Domain

  • Device Group

Celona: (Edge context) Configure an External IP domain

The External IP Domain tells the Celona Edge to bypass its DHCP IP address assignment of CBSDs, and instead forward DHCP requests to an upstream DHCP server. In our lab, we configured the External IP address domain (the Netgear Nighthawk M1 router with AT&T SIM).

Celona: Configure a Device Group to associate SIMs

We now need to tell Celona which SIMs will be utilizing this External IP Domain. In the Device Group page, we configure a Device Group with the SIM for the IDG500.

With the IDG500 and Celona configurations complete, we now have this updated topology:

Verify the following connection methods to the camera (using a web browser for the camera web service at port 80 or RTSP at port 554):

  • From the Macbook at to

  • From the Macbook at to

  • From the Macbook at to

Did this answer your question?