When you onboard a device, a WireGuard management tunnel is automatically created using port 51820 and all management traffic flows across the tunnel.
You can establish site-to-site WireGuard tunnels across CPEs and split tunneling between management traffic and control traffic.
Inseego devices such as the FX2000e and S2000e that are used for work from home scenarios do not support dynamic routing protocols (BGP), which means that static routes are required for tunnels to those devices. OpenWRT-based devices, like FG2000e and V2000/CBR that are used for small office/home office scenarios support dynamic routing protocols (BGP).