
A single-site office needs a controller in the same box as its firewall. A multi-site retailer needs policy that follows the branch. A campus or a carrier network needs client mobility across thousands of APs and VLANs, with authentication and forwarding that never centralize into a bottleneck. These are not three sizes of the same requirement — they are three different architectures.
The industry's usual answer is three different product lines, three firmware trees and three operations teams. Ours is one access point that speaks to all of them.
An IDL access point discovers and attaches to whichever control plane it finds, and an administrator can redeploy it to a different one at any time. No separate firmware image, no re-flash to a different product line, no change to the code running on the box. The AP you bought for a branch office can be redeployed into a campus fabric on Monday and into a carrier network on Friday.
Wi-Fi features are usually written against a silicon vendor's driver, which is why most vendors end up with a separate firmware tree per chipset and features that land on one platform months before another.
IDL splits the wireless stack in two. An upper MAC layer holds the feature set — roaming, policy, security, radio resource management — and knows nothing about silicon. Beneath it, a thin abstraction layer maps that feature set onto each vendor's driver.
A feature is written once, above the line, and appears on every platform at the same time. Adding a new chipset means writing one adapter, not re-implementing a product.
This is also what makes the second software line cheap to carry: the same separation that lets one firmware span three silicon vendors is what lets an IDL access point ship a TIP OpenWiFi image as an alternative to our own — see OpenWiFi · Dual-Image AP.
A universal access point solves the device side. It does not, on its own, stop an operator from running four consoles: one for the carrier network, one for the campus estate, one for the branches and one for whatever the home team deployed. NMP is the single management plane over all of it — the access points, the switches, the gateways, the controllers and the home routers, in every scenario they are deployed into.
The full NMP feature list is in the software capabilities section below, and the product entry is on the products page.
| Segment | Users | Access points | Typical control plane |
|---|---|---|---|
| Home | 1–9 | 1–8 | miniAC + AP, or a standalone router |
| Micro business | 10–100 | 1–8 | Cloud + smart AP, no on-premise controller |
| Small business | 100–200 | 1–16 | Cloud + miniAC + AP |
| Mid and large enterprise | 200–1,000 | 16–1,000 | Cloud + dedicated AC + AP |
| Carrier | >1,000 | >1,000 | Cloud + dedicated AC + AP |
| Smart city | >1,000 | >1,000 | MSG + AP + switching |
Indicative sizing. Density, roaming behaviour and authentication method move these boundaries more than raw client count does — talk to us with a floor plan rather than a headcount.
What follows is the shipping feature set at each layer. Items marked roadmap are in development and are called out rather than blended in — if a capability decides your tender, ask us for its current status in writing.
Runs on the access point itself, in every deployment model.
Controller, security and routing converged into the gateway at a single site or branch. This is the software behind SD-Edge and SD-Branch.
The dedicated control plane, shipped as an x86 appliance, a virtual system or from the cloud — the same software in all three forms. This is the software behind SD-Access.
One view over every control plane below it, and an open API surface so the network becomes something your own systems can drive.
Most vendors ask a customer to settle both questions at procurement, then charge them in hardware when the answer changes. We would rather sell the hardware once and let the answers keep moving.
Deployment references, capability status in writing, and access to an evaluation unit are available on request. Tell us the scale and the control plane you have in mind.
Talk to our team