Cambium Networks adds static public IP over WireGuard

Cambium Networks introduced a capability in its Network Service Edge (NSE) platform that assigned static public IPv4 addresses to customer sites over WireGuard Virtual Private Network (VPN) tunnels, enabling public IP reachability for connections using LEO Constellation (Low Earth Orbit) (LEO) satellite or LTE/5G cellular links.

The company designed the NSE for deployment inside partner data centers so Private Network operators, Managed Service Providers, Internet Service Providers (ISP), and Wireless ISPs could host a hub and deliver services to site-based NSE appliances, preserving control of the traffic path while providing Software-Defined Wide Area Network (SD-WAN) intelligence and Next-Generation Firewall (NGFW) protection at each location.

Providers implemented the approach by running an NSE hub in their data center with a pool of public IPv4 addresses and installing NSE appliances at customer edges; each spoke established an encrypted WireGuard tunnel back to the hub and received a dedicated static public IP even when the local link used a Low Earth Orbit satellite or cellular Wide Area Network (WAN) connection.

Traffic was routed through the providers data center infrastructure, giving ISPs and MSPs visibility and control, while each spoke-site NSE delivered integrated SD-WAN, NGFW, intrusion prevention, content filtering, and Quality of Service (QoS) to protect and optimize local networks.

Cambium described its model as hardware-centric and partner-hosted so providers retained ownership of customer data and network infrastructure; no Cambium-operated backbone or cloud routing was required, and orchestration and monitoring used the cnMaestro management platform for single-pane visibility across hub and spoke appliances.

“A significant number of our customers required a static public IP for remote visibility, secure access, and equipment management, but that simply wasn't possible before due to CGNAT restrictions,” said Chris Lynch, Director, Adaptive Policy Controller (APC) Solutions in the UK. “With Cambium NSE, we can now deliver that capability through secure, tunnelled public IPs, bringing business-class connectivity and control to locations operating on satellite or 5G links.” “We designed NSE for partners who want to deliver high-value services without handing over customer traffic to a third party,” said Bruce Miller, VP Enterprise Product Management, Cambium Networks. “By combining static IP overlays with SD-WAN and security at every site, our partners can deliver true enterprise-grade connectivity over LEO Satellite, LTE, or 5G WAN connections.”