AirLink OS Management Tunnel

AirLink OS routers connect to the AMM using two protocols: LwM2M handles device registration, bootstrapping, and configuration, while an OpenVPN management tunnel manages event notifications and AirLink OS software upgrades.

Note: Only one OpenVPN tunnel is supported on AirLink OS routers. This tunnel is reserved for communication between the AirLink OS router and AMM. Therefore, if the router is managed by AM/AMM, customers cannot configure the OpenVPN tunnel for any other purpose.

The AirLink OS management tunnel supports the following signed AMM certificates only.

• Let’s Encrypt
• Sectigo
• GoDaddy
• DigiCert
• Entrust
• GlobalSign
• IdenTrust

It is not possible to use certificates signed by any other CA, including private CA, to secure the AOS management tunnel.

For information on how to configure an AirLink OS router, see Transitioning AirLink OS routers

The AMM waits for connections from the AirLink OS router. As long as AirLink OS router is correctly configured, it should try to connect to the AMM as soon as the router boots.

If you have enabled the AirLink OS management tunnel, but it is down due to any reason, then there is no fallback mechanism for upgrading the firmware. However if the AirLink OS management tunnel is deliberately disabled in the configuration, then the AMM will use HTTPS to upgrade the AirLink OS routers.

The Restrict Gateway Software Upgrade to Secure Channel setting is not applicable to AirLink OS routers.

Additional Information

For a list of related ports and protocols for this functionality see AirLink OS routers.