--- title: Supernetting date: 2026-06-23T15:53:00+10:00 author: Pepper Marketing canonical_url: "https://celona.io/supernetting" section: Site Content --- # **Supernetting** ## Visibility for every device behind a 5G gateway Devices behind a 5G gateway keep their own IP identity on the enterprise network, so each one can be seen, reached, and secured individually. [ Technical Doc ](https://docs.celona.io/en/articles/8660555-enabling-intelligent-5g-lan-routing-for-devices-behind-cellular-gateways-routers-using-supernetting) 1. [ Home ](https://celona.io/) 2. Technologies 3. Supernetting / Overview The Problem ### NAT turns cellular gateway into its island Non-5G devices - PLCs, cameras, robots, laptops - use 5G gateways to connect to Celona Orion. Each gateway NATs into its own subnet and DHCP scope. Across hundreds of routers, visibility into these endpoints is lost - and a sprawl of subnets piles up to manage. The Solution ### **Supernetting: One Route, Full Visibility** Supernetting shifts routing off the gateways and onto the Celona Edge. Turn NAT off, relay DHCP and DNS upstream, and the Edge auto-discovers every router and endpoint, mapping each IP to the right 5G interface. Per-router subnets collapse into one supernet, so the corporate LAN reaches any device with a single route to the Edge — full OT/IT visibility, no per-gateway NAT to reconcile. / Key differentiators ![Icon attributes network visibility ink 512](https://celona.io/volumes/images/Icons/Attributes/Standard/512/icon_attributes_network_visibility_ink_512.png) ### End-to-end device visibility Endpoints behind 5G mobile routers become individually reachable from the corporate LAN. **Benefit:** monitor, manage, and secure every OT/IT device directly - no blind spots behind NAT. ![Icon platform diff wireless aware ip routing ink 512](https://celona.io/volumes/images/Icons/Platform/Differentiators/Standard/512/icon_platform_diff_wireless_aware_ip_routing_ink_512.png) ### One supernet instead of subnet sprawl Consolidate the many per-router subnets and DHCP scopes into a single supernet at the Edge. **Benefit:** far less to configure and track as you scale to dozens or hundreds of gateways. ![Icon ai devices iot gateway ink 512](https://celona.io/volumes/images/Icons/AI-and-Connected-Devices/Standard/512/icon_ai_devices_iot_gateway_ink_512.png) ### No NAT on the gateways The Edge does the routing; mobile routers simply route and relay DHCP upstream. **Benefit:** removes the NAT islands that hide devices and complicate troubleshooting. ![Icon attributes converged ink 512](https://celona.io/volumes/images/Icons/Attributes/Standard/512/icon_attributes_converged_ink_512.png) ### Native enterprise integration Everything maps to standard VLANs, DHCP, and a single static route to the Edge. **Benefit:** fits your existing routing, IPAM, and security model - no forklift. ![Icon attributes orchestration ink 512](https://celona.io/volumes/images/Icons/Attributes/Standard/512/icon_attributes_orchestration_ink_512.png) ### Template-driven, per device group Supernetting is an Advanced Network Config template applied to the mobile-router device group. **Benefit:** consistent, repeatable rollout across sites from the Orchestrator. [ Advanced Network Configuration ](https://docs.celona.io/en/articles/7976769-advanced-network-configuration) / Architecture ![Celona ip domain visibility diagram transparent](https://celona.io/volumes/images/_2400x972_letterbox_center-center_70_none_ffffff/46770/celona-ip-domain-visibility-diagram-transparent.webp) ## **5G LAN Flexible routing architecture** Supernetting builds on Celona’s two Network Domain modes; choosing the right one is about how much visibility a deployment needs. **Internal Network Domain** NAT Mode The Celona Edge acts as a Layer 3 router with source NAT and runs DHCP/DNS for the private network, so every cellular device sits behind a single IP on the corporate LAN. Ideal for rapid standups where nothing on the LAN needs to reach in - but the devices themselves are not reachable from the corporate LAN. **External Network Domain** Routing Mode The Edge forwards cellular traffic into one or more VLANs so private-cellular devices join the corporate LAN directly, with DHCP/DNS managed on the LAN. Natively-connected devices - a smartphone, a mobile gateway - are now visible and reachable, but anything wired behind a mobile gateway (a tablet, a PLC, a camera) is still hidden. **External Network Domain** \+ Supernetting This is where the endpoints behind the routers become first-class citizens. Disable NAT on the mobile routers so they route rather than translate, relay DHCP/DNS upstream to the Edge, and the Edge auto-discovers each router and its endpoints. The corporate LAN is given one route to the consolidated device subnet - the supernet - pointing at the Edge; the Edge maps each endpoint IP to the 5G interface of the router it lives behind. / Use cases Where Supernetting fits: ![Img aerconnect usecase forklift computers 01](https://celona.io/volumes/images/Content/Platform/AerConnect/_1100x1100_crop_center-center_75_none/40352/img_aerconnect-usecase_forklift-computers-01.webp) ### Fleet & vehicle connectivity Connect every wired device in the vehicle — cameras, telematics, mobile data terminals — behind a single in-vehicle router, then reach each one directly from the LAN. ![Img plc machinery plcswitchboard 01](https://celona.io/volumes/images/Content/Solutions/Use-Cases/PLC-and-Machinery/_1100x1100_crop_center-center_75_none/41357/img_plc-machinery-plcswitchboard-01.webp) ### Manufacturing & OT Bring PLCs, HMIs, and machine-vision endpoints behind ruggedized gateways onto the enterprise network, with full visibility and clean IT/OT separation. [ Explore ](https://celona.io/manufacturing) ![Img mining saddle rd solar pole antenna saddle Rd](https://celona.io/volumes/images/Content/Platform/Products/Split-RAN/_1100x1100_crop_center-center_75_none/37267/img_mining_saddle-rd-solar-pole-antenna_saddleRd.webp) ### Outdoor & wide-area sites Onboard fixed and mobile OT behind gateways across a large site, with no subnet required per gateway — built for mining, ports, and logistics yards. [ Explore ](https://celona.io/mining) ![Img securitycameras hero dockyardcameraantennadusk ai 01](https://celona.io/volumes/images/Content/Solutions/Use-Cases/Security-Cameras/_1100x1100_crop_center-center_75_none/24665/img_securitycameras_hero_dockyardcameraantennadusk_ai_01.webp) ### Video surveillance & IoT fleets Put cameras and sensors behind routers as individually addressable, fully monitorable endpoints — at any scale. [ Explore ](https://celona.io/security-cameras) / Resources [ ![Resource default product documentation](https://celona.io/volumes/images/Resource-Defaults/_800x450_crop_center-center_75_none/47333/resource-default-product-documentation.webp) Product Documentation NEW ### Solution Brief: AerLoc One identity, one security model across every radio, security built into the converged wireless fabric. Aug 2026 ](https://celona.io/resources/solution-brief-aerloc) [ ![Resource default product documentation](https://celona.io/volumes/images/Resource-Defaults/_800x450_crop_center-center_75_none/47333/resource-default-product-documentation.webp) Product Documentation NEW ### Solution Brief: Robotics OEM Give any robot or edge AI device intelligent, multi-network wireless - without building a wireless team. Manufacturing · Aug 2026 ](https://celona.io/resources/solution-brief-robotics-oem) [ ![Resource default product documentation](https://celona.io/volumes/images/Resource-Defaults/_800x450_crop_center-center_75_none/47333/resource-default-product-documentation.webp) Product Documentation NEW ### Solution Brief: Orchestrator AI Unify private 5G, Wi-Fi, public cellular and satellite into one agentic operations fabric - where engineers and AI agents work side by side. Aug 2026 ](https://celona.io/resources/solution-brief-orchestrator-ai) [Access all Resources ](https://celona.io/resources) / Get started ## Get started with Celona [ Contact us ](https://celona.io/contact-us)