MOXN
The multi-operator exchange behind Celona Neutral Host
Bring carrier coverage indoors on a single private network - no DAS to build, no per-operator negotiations to run.
Solution Brief Technical DocWhat is neutral host ?
A neutral host network uses your private 4G/5G infrastructure to carry certified public-carrier service on subscribers' own SIMs - more coverage and capacity on shared infrastructure, without each operator building its own RAN. Celona delivers this as a turnkey, cloud-first alternative to complex DAS and booster deployments.
What is MOXN ?
Celona MOXN is a cloud-based, multi-site, multi-customer exchange that securely tunnels traffic between the Celona 5G LAN and each MNO core - turning a private CBRS network into a multi-operator neutral host. No new hardware: same APs, same LAN, one management plane..
Fully managed service
Accelerate time to value. Celona handles operator site intake, bring-up, and Day-N performance management and reporting.
End-to-end integrated solution
For both enterprise and MNO, with secure end-to-end connectivity between subscriber and operator using industry best practices.
Cloud-hosted MOXN
The first multi-site, multi-customer, cloud-native exchange offered as-a-service — no additional hardware appliances, no DMZ access, no on-premises equipment.
Multi-purpose network
Justify the investment and accelerate ROI. Run private and public services on one infrastructure.
Flexible pricing and deployment
Lower barrier to entry. Add neutral host to private wireless, or run neutral host only.
Public operator voice, data, E911, and WEA
Meets regulatory requirements for reliable public cellular. Better guest and employee experience.
One channel, many networks
MOCN advertises multiple MNO and private networks on one CBRS channel — no separate per-operator frequencies.
Shared infrastructure
A single access point and antenna infrastructure is shared across up to 5 public networks plus 1 private network.
Segmented and secure
Private traffic routes to the enterprise LAN; MNO traffic travels in per-operator IPsec tunnels, segmented at the MOCN gateway and delivered to each operator core.
Data separation
Private network traffic is logically segregated from public MNO traffic across the corporate LAN, protecting sensitive subscriber data.
Components
Celona Indoor Access Points
Broadcasts private and public carrier networks with capacity for up to five public networks plus one private.
Celona Edge OS
Converged 4G/5G core services, intelligent spectrum management, and a full IP stack into enterprise LANs.
Celona MOXN
Cloud-based gateway establishing the secure tunnel between the Celona 5G LAN and MNO core(s).
Orchestrator AI
Orchestrator AI is the agentic operations plane for private wireless and Neutral Host.
Security
IKEv2 and IPsec
Standards-compliant IKEv2 and IPsec tunnel configuration.
Dual termination
Independent IPsec tunnels on the enterprise and operator sides, so neither domain's keys or trust extend into the other.
Certificate handling
Internal and external IPsec certificate handling.
Cloud-based HSM
Cloud-based HSM for managing encryption keys.
4G/5G Multimode AP 20 for Neutral Host
AP 20
Indoor 4G/5G multimode access point. Runs LTE neutral host today, with hardware ready for 5G neutral host as operators enable it - no replacement required.
