top of page
  • Satellite Evolution

XipLink and Nexus announce IPsec/CMPv2 interoperability to provide MNOs secure RAN optimization


XipLink, the leading provider of Radio Access Network (RAN) Optimization and TCP Acceleration that delivers an improved user experience over stressed backhaul links and Nexus, a leading provider of trusted identities for workforce and IoT, today announced interoperability with Nexus certificate management.


Strong authentication and encryption for LTE and 5G backhaul are crucial to secure the communication between eNodeB/gNodeB and security gateways. MNOs utilize Certificate Management Protocol (CMPv2) for automatic certificate enrolment, eliminating the need for manual intervention. This ensures high security, scalability, less administration and no risk of human error. Nexus Smart ID Certificate Manager has an automated process for issuing

certificates and allows full lifecycle management including device registration, certificate request authentication, certificate renewal, and revocation.


Nexus’ mature and reliable PKI platform provides the widest range of certificate issuing and management protocols

on the market. This means that any standards-based network element can get the certificates necessary to establish

the highest trust across the multi-vendor mobile network from the base stations and deep into the core network.

Using the Nexus PKI platform enables mobile network operators to increase the level of protection and security in

their networks.


The robustness and readiness of the Nexus software improves the overall availability of the LTE or 5G infrastructure and becomes an excellent tool for providing good governance and efficient security management. With XipLink supporting CMPv2 and the interoperability with Nexus Certificate Management, MNOs requiring endto-end backhaul security can take advantage of XipLink’s RAN Optimization and TCP Acceleration. The XipLink solution makes use of the DOE (Decrypt, Optimize, Encrypt) architecture to accept the encrypted tunnel from the cell site, decrypt the packets in-line, accelerate and optimize the subscriber data and finally re-encrypt the data in a tunnel to the security gateway. This ensures that the encrypted data is never exposed outside of the IPsec tunnels but allows for full RAN Optimization and TCP Acceleration.


The result is a secure trusted backhaul network that significantly reduces satellite or microwave bandwidth

consumption and boosts end subscribers throughput. The result is a dramatic improvement in access speed and

reduction in bandwidth consumption across the RAN. XipLink optimized network differentiates an MNO’s service

offering by enabling the transport of more customer traffic over a wireless link while simultaneously improving the

Quality of Experience to the downstream subscriber.

bottom of page