Industrial Cellular Router

Overview

An industrial cellular router bridges the last-mile connectivity gap for utilities, oil/gas, manufacturing, and smart city deployments. Deployed at remote substations, cell towers, pumping stations, and traffic signals, these routers provide LTE/5G connectivity where fiber infrastructure does not exist, while maintaining compatibility with legacy SCADA systems (Modbus, RTU protocols) via isolated serial ports.

Unlike commercial broadband routers optimized for consumer features, industrial routers prioritize reliability and operability in harsh environments: extreme temperature swings (-30°C to 70°C), high electromagnetic noise (near power lines), surge events (lightning), and long power supply lead times. Each unit must operate for 5+ years on the same firmware with minimal intervention.

How it works

The Cellular Module maintains a persistent LTE connection to the carrier network, using one of two SIM cards (dual-SIM for carrier redundancy). The Industrial LTE/5G Module manages cell selection, registration, and bearer establishment; the LTE Omnidirectional Antenna pair provide diversity reception to combat fading in mountainous regions.

The CPU and Storage runs a minimal Linux distribution with a static IP address assigned by the SIM card's RADIUS server or manually configured. On boot, the router establishes a VPN tunnel back to a central operations center (SCADA master). This tunnel is persistent, if the tunnel drops, the router automatically re-establishes it within 30 seconds.

Legacy SCADA equipment (PLC, RTU, meter) connects to the router's Serial Ports (RS-232/RS-485). A field technician wires the RTU's RS-485 output to the router's RJ45 RS-485 connector. The router's Isolated RS-485 Transceiver optically isolates the RTU from the router's ground, preventing ground loop currents (common in industrial sites with long cable runs and multiple ground connections).

Modbus RTU messages from the RTU (e.g., "read voltage register") are forwarded transparently over the LTE link. The SCADA server receives them, processes them, and sends back results. The RTU never needs to know it is communicating over LTE; the router is transparent.

The Digital I/O and Relay Outputs provides 4 relay outputs and 8 digital inputs. A typical application: when the SCADA server detects a power line fault, it sends a command to energize relay output 1. The relay's contacts (rated 16A @ 250 VAC) cut power to a pump or reconnect a backup feed. DI inputs monitor equipment status: a flow meter's reed switch closure increments a counter.

All I/O is galvanically isolated from the CPU via optocouplers and isolated relay driver circuits. If a lightning strike hits the pump motor and bounces a 10 kV spike back to the RTU, the isolation barrier protects the router's CPU.

Power Supply Robustness

The Wide-Input Power Supply accepts 9–48 VDC. This accommodates:

• 12 VDC battery backup (with 30–40% voltage sag during cold-start high-current draws)
• 24 VDC utility power (common in industrial sites, tolerates ±10% line variation)
• 48 VDC PoE++ (for high-current modem applications)

A Reverse Polarity MOSFET protection MOSFET prevents damage if a field technician accidentally reverses power leads. The Transient Suppression TVS diode clamps voltage spikes from inductive load switching (pump motor contactor) to safe levels.

The 9–48V to 12V Buck-Boost is a buck-boost converter, not a simple buck. A buck converter fails if input voltage drops below the output voltage (e.g., if input falls below 12V, it cannot produce 12V output). Buck-boost topology uses a fly-back inductor to boost low input voltages, ensuring 12V regulated output even if input sags to 9V.

Extended Temperature Operation

The Thermal Management aluminum heatsink radiates 35W dissipation passively. The modem and CPU silicon are rated -40°C to 85°C (industrial extended temperature); the router itself operates -30°C to 70°C via passive heatsink cooling. In sub-zero mountain deployments, the heatsink is sufficient. In hot climates (Middle East, Australian Outback reaching 70°C), the heatsink maintains acceptable junction temperature.

Some variants add a thermoelectric cooler (TEC) for active cooling in extreme-heat deployments, but cost and reliability concerns (TEC failures) limit adoption to critical applications.

Dual-SIM Redundancy and Failover

The Dual SIM Tray tray holds two nano-SIM cards from different carriers. If AT&T coverage fails at the site, the router's GPIO expander automatically switches to Verizon SIM and re-registers with the Verizon network. This failover occurs in 30–60 seconds without human intervention, critical for utility operations where SCADA downtime costs hundreds of dollars per minute.

Dual SIM does not double bandwidth; it provides carrier redundancy only. Active-active bonding (using both carriers simultaneously) is not supported on these industrial platforms.

SCADA Integration and VPN

The router establishes a persistent IPsec VPN tunnel to the central SCADA server at boot. If the tunnel drops (carrier network issue, packet loss), the router detects timeout via keepalive heartbeat and immediately re-connects. This ensures the SCADA server always has a route to reach the field device.

Some routers support serial-to-IP gateways: SCADA commands arrive as Modbus TCP packets over IP, and the router converts them to Modbus RTU, serializing them to the physical RTU. This allows legacy RTU devices to be "IP-enabled" without modification.

Isolation and Surge Protection

Industrial environments generate frequent voltage transients. A substation control logic relay energizing a 100A 480 VAC contactor creates a 5 kV dV/dT spike on its coil. If the RTU's RS-485 shield is bonded to the same ground as the contactor return, this spike couples into the serial line.

Optical isolation on the Isolated RS-485 Transceiver breaks the galvanic connection: the RTU sees the spike, but the router's CPU is electrically isolated via an optocoupler LED/phototransistor barrier. The RTU side absorbs the transient; the CPU side remains unaffected.

Similar isolation is applied to relay outputs via opto-isolated driver ICs.

Remote Management and Monitoring

The router's management interface is accessible via SSH over the LTE WAN. Field technicians can login remotely to query router status, update firmware, or adjust configuration without a truck roll. Cellular backhaul operators can also push management commands to fleets of routers simultaneously (e.g., "route all SCADA traffic through backup VPN server if primary is down").

Log data is uploaded to cloud storage; if a router fails, the last hours of logs are available for root-cause analysis, reducing post-mortem investigation time.

Cost and Deployment

The industrial cellular router costs $500–1500 per unit, significantly more than a consumer LTE hotspot ($100), but justified by isolation, reliability, support lifespan (10+ years), and operational expense savings. A single SCADA outage can cost $1000s; the router pays for itself on first incident prevention.

Deployment is simplified by DIN-rail mounting: a technician clips the enclosure onto the standard 35 mm DIN rail inside a control cabinet, connects two Ethernet cables, power, and serial lines, and the device is online within minutes. No configuration required beyond factory provisioning (SIM APN, VPN credentials).