Complete private cellular for campus
Private Cellular
Your own licensed mobile network across a site. Rover designs it, supplies the core and the radios, runs the SIM estate, enrols the devices, and operates the result. Users get coverage that behaves like a carrier network, and you get a network where you decide who attaches and what they reach.
What a complete solution includes
Five parts, one contract
Spectrum and core
A 5G standalone core with your own network identity, so devices attach to your network rather than roaming onto whatever is strongest. Spectrum strategy is part of the design, not an assumption left to the customer.
Coverage design
A site survey drives radio placement across buildings, yards, and the gaps between them. Disaggregated gNB over the wired backbone for the main footprint, with CPE extensions filling shadowed areas.
SIM and identity
SIM-based authentication with the SIM estate managed as an asset: issue, bind, rotate, revoke. A device without an authorised SIM is not a device on the network.
Device enrolment
Handsets and endpoints arrive enrolled and configured: private network profile, private APN, roaming and manual carrier selection off, and policy applied before the device reaches a user.
Operations
Monitoring, policy changes, and SIM lifecycle handled as a service, reporting into the same plane as Rover routers, switches, and gateways. A NOC staffed 24 × 7 × 365 stands behind it.
Isolation
Keeping devices on your network and off everyone else's
Building a private network is the easy half. The harder question is what stops a device wandering onto a commercial carrier the moment it leaves a good coverage spot. Rover treats that as two tiers of assurance, and is direct about what each one is worth.
Standard isolation
- Network
- Private MCC/MNC, private APN enforcement, preferred PLMN configuration
- Attachment
- Roaming disabled, manual carrier selection disabled, carrier profile restrictions
- Identity
- SIM-based authentication, SIM change detection, SIM allow-listing
- Device
- Dedicated device mode, application allow-listing, side-loading and developer options disabled
- Reach
- Always-on VPN, geofencing, remote lock and wipe
- Honest limit
- Enforcement sits in the operating system and the management layer. The modem still performs the RF scanning any commercial handset performs. This is a hardened commercial deployment, not a restricted radio platform.
Radio-layer isolation
- Approach
- Moves enforcement out of the operating system and into the carrier and radio layer
- Bands
- Approved LTE and 5G NR bands only, commercial carrier bands disabled
- Databases
- Restricted PLMN, roaming, and APN databases in the carrier configuration
- Result
- Less dependence on management-enforced restrictions, and a smaller attack surface
- Availability
- Requires OEM and carrier customisation, scoped per programme. Ask before assuming a given handset supports it.
Choosing between the two
Private Cellular or RapidSTACK Campus
Private Cellular
- Shape
- A permanent network for a site, delivered and operated end to end
- Pick it when
- Private cellular is the point: coverage, device fleet, SIM estate, and isolation policy across a campus
- Includes
- Survey, core, radios, SIM lifecycle, device enrolment, operations
RapidSTACK Campus
- Shape
- A kit that extends private 5G across a site alongside Wi-Fi and wired access
- Pick it when
- You need multi-access connectivity quickly, or the same platform to follow you into a vehicle or the field
- Includes
- The gateway, radios, and CPE extensions in the RapidSTACK platform
They share a policy plane, so a site can start with one and grow into the other without a rebuild.