8 Gateway Remote Operations and Maintenance

8.1 Remote O&M Overview

8.1.1 Introduction to Gateway Remote O&M

The IMX93-GW8016 gateway has a built-in VPN remote O&M feature that allows technical support personnel to access the gateway Web interface, SSH terminal and ChirpStack NS interface through an encrypted tunnel for remote troubleshooting and configuration without on-site presence.

8.1.2 Remote O&M Architecture and Workflow

graph TB subgraph "Customer Site" GW["IMX93-GW8016<br/>gateway"] LOCAL["Local Admin<br/>PC/Mobile"] end subgraph "VPN Tunnel" VPN["Encrypted VPN Tunnel<br/>WireGuard/OpenVPN<br/>AES-256"] end subgraph "Tech Support Center" SUPPORT["Support Engineer<br/>Remote Access Terminal"] end subgraph "Management Interface" WEB["Web management interface<br/>OpenWrt Luci"] SSH["SSH Terminal<br/>CLI Access"] CHIRPSTACK_UI["chirpstack UI<br/>Device Management"] end %% Connections LOCAL -->|LAN/WiFi| GW GW <-->|VPN connection| VPN VPN <-->|Secure tunnel| SUPPORT SUPPORT -.->|via VPN| WEB SUPPORT -.->|via VPN| SSH SUPPORT -.->|via VPN| CHIRPSTACK_UI %% Styles classDef gateway fill:#e3f2fd,stroke:#0d47a1,stroke-width:2px classDef user fill:#e8f5e9,stroke:#1b5e20,stroke-width:2px classDef vpn fill:#fff3e0,stroke:#e65100,stroke-width:3px classDef support fill:#fce4ec,stroke:#880e4f,stroke-width:2px classDef ui fill:#f3e5f5,stroke:#4a148c,stroke-width:2px class GW gateway class LOCAL user class VPN vpn class SUPPORT support class WEB,SSH,CHIRPSTACK_UI ui

8.2 Remote Assistance Feature

When a gateway issue requires technical support, the customer can authorize a VPN access code to allow the Winext support team to connect remotely for diagnosis and repair. All traffic is encrypted and the channel can be closed at any time.

Access path: System → Remote Assistance. Enter the authorization code provided by support staff and click Apply to establish a temporary remote access tunnel.

8.3 Opening the VPN Remote Tunnel

  1. Log in to the gateway Web management interface
  2. Navigate to SystemRemote Assistance
  3. Enter the authorization code provided by technical support in the "VPN Authorization Code" field
  4. Click Apply and wait for the VPN connection to be established
  5. Once the VPN status shows online, the technician can access the gateway through the VPN tunnel

8.4 Closing the VPN Remote Tunnel

Once the support session is complete, click Close on the Remote Assistance page or reboot the gateway to automatically disconnect the VPN tunnel.