Instaroute industrial 4G and 5G routers
Industrial 4G and 5G routers for ATMs, branches, utilities, CCTV and IoT sites. Ten cellular models on one operating system, with multi-WAN failover and post-quantum IPsec.
Key facts
- Range
- Two lines: the Instaroute Lite Series (IR1100 4G LTE Cat 4/6 routers and the 4G outdoor ODU) and the Enterprise X Series (IRX100 5G, the 5G outdoor ODU, and IRX400 to IRX5000 SD-WAN Enterprise edges)
- Firmware
- NexappOS on every model: one feature set, one upgrade process
- WAN resilience
- Dual-SIM arbitration by signal, latency or data usage; any-port WAN; link backup, switch and load balance with health checks
- Industrial protocols
- Modbus RTU/ASCII/TCP gateway, DNP3, IEC 60870-5-101/104, MQTT, RS232/RS485 serial DTU
- Product certifications
- TEC MTCTE · IEC 62443 · CE · RoHS. TEC MTCTE certificate 244903206 (valid to March 2035) covers nine of the ten cellular models, all except the IRX100-5Gv2
- Scale
- 75,000+ devices deployed · 400+ enterprise and banking customers · in production since 2014
- Management
- Lite Series: Instaroute SDWAN Lite 2.0 (flat per-device pricing, no data metering, hosted in India or self-hosted). Enterprise X Series: Nexapp Controller
Showing 10 of 10 models
Instaroute Lite Series
Instaroute 4G routers for ATMs, branches, stores and IoT/M2M sites, managed at scale from Instaroute SDWAN Lite 2.0.
About SDWAN Lite 2.0IR11004GS
Entry-level 4G LTE router for telemetry, meters and small sites that need a reliable cellular link managed from one console.
- 4G LTE Cat 4 or Cat 6
- Single module
- 2.4 GHz 802.11 b/g/n
- 1 LAN + 1 WAN, 10/100 Ethernet
- DIN-rail or wall
- IP30
IR11004GSW
4G LTE router for small branches and stores that need local Wi-Fi and a cellular link from one box.
- 4G LTE Cat 4 or Cat 6
- Single module
- 2.4 GHz 802.11 b/g/n
- 5-port 10/100 combo Ethernet
- Desktop or wall
- IP30
IR11004GD
Dual-SIM 4G LTE router for ATMs and unattended BFSI sites, where multi-operator failover matters most.
- 4G LTE Cat 4 or Cat 6
- Single module
- 2.4 GHz 802.11 b/g/n
- 5-port 10/100 combo Ethernet
- Desktop or wall
- IP30
IR11004GDW
Dual-module 4G LTE router that keeps two operators live at the same time, for sites that cannot wait for a SIM switch-over.
- 4G LTE Cat 4 or Cat 6
- Dual module
- 2.4 GHz 802.11 b/g/n
- 5-port 10/100 combo Ethernet
- Desktop or wall
- IP30
IR1180DM
DIN-rail 4G LTE router with GPS for control panels, substations and field assets that need location or time data.
- 4G LTE Cat 4 or Cat 6
- Single module
- 2.4 GHz 802.11 b/g/n
- 5-port 10/100 combo Ethernet
- GPS
- DIN-rail
- IP30
IR1190DMG
Gigabit 4G LTE router for DIN-rail or wall mounting, for plants and cabinets with busy wired networks and no need for Wi-Fi.
- 4G LTE Cat 4 or Cat 6
- Single module
- 5-port Gigabit combo Ethernet
- DIN-rail or wall
- IP30
IR1105-ODU-4G
Outdoor IP65 4G LTE unit that mounts on a pole or mast where the signal is strongest, for basements, shielded kiosks and rural sites.
- 4G LTE Cat 4 or Cat 6
- Single module
- Wi-Fi
- 1 PoE LAN + 1 WAN Ethernet
- Outdoor, pole or mast
- IP65
Enterprise X Series
SD-WAN Enterprise edges managed from the Nexapp Controller, from the IRX100 5G edge to the IRX5000.
About SD-WAN EnterpriseIRX100-5G
5G SA/NSA router with Wi-Fi 6 for branches and sites that need high bandwidth over cellular.
- 5G SA/NSA, sub-6 GHz
- Single module
- Wi-Fi 6, dual-band concurrent (AX3000-class)
- 5-port Gigabit combo Ethernet
- Desktop or wall
- IP30
IRX100-5Gv2
5G SA/NSA router with Wi-Fi 6, available with one or two cellular modules, so critical sites can run two operators at once.
- 5G SA/NSA, sub-6 GHz
- Single or dual module
- Wi-Fi 6, dual-band concurrent (AX3000-class)
- 5-port Gigabit combo Ethernet
- Desktop or DIN-rail
- IP30
IRX1160-ODU-5G
Outdoor IP65 5G SA/NSA unit that mounts on a pole or mast close to the best 5G signal and feeds equipment indoors.
- 5G SA/NSA, sub-6 GHz
- Single module
- Wi-Fi
- 1 PoE LAN + 1 WAN Ethernet
- Outdoor, pole or mast
- IP65
- Enterprise X Series
IRX400
SD-WAN Enterprise edge managed from the Nexapp Controller. Specifications on request.
- Enterprise X Series
IRX600
SD-WAN Enterprise edge managed from the Nexapp Controller. Specifications on request.
- Enterprise X Series
IRX800
SD-WAN Enterprise edge managed from the Nexapp Controller. Specifications on request.
- Enterprise X Series
IRX1500
SD-WAN Enterprise edge managed from the Nexapp Controller. Specifications on request.
- Enterprise X Series
IRX2000
SD-WAN Enterprise edge managed from the Nexapp Controller. Specifications on request.
- Enterprise X Series
IRX5000
SD-WAN Enterprise edge managed from the Nexapp Controller. Specifications on request.
Model comparison
| Model | Series | Cellular | Cellular modules | SIM slots | Ethernet | Wi-Fi | RS232 / RS485 | GPS | Mounting |
|---|---|---|---|---|---|---|---|---|---|
| IR11004GS | IR1100 | 4G LTE Cat 4 or Cat 6 | Single | 1 | 1 LAN + 1 WAN, 10/100 | 2.4 GHz 802.11 b/g/n | RS232 and RS485 | — | DIN-rail or wall, IP30 |
| IR11004GSW | IR1100 | 4G LTE Cat 4 or Cat 6 | Single | 1 | 5-port 10/100 combo | 2.4 GHz 802.11 b/g/n | RS232 and RS485 | — | Desktop or wall, IP30 |
| IR11004GD | IR1100 | 4G LTE Cat 4 or Cat 6 | Single | 2 | 5-port 10/100 combo | 2.4 GHz 802.11 b/g/n | RS232 and RS485 | — | Desktop or wall, IP30 |
| IR11004GDW | IR1100 | 4G LTE Cat 4 or Cat 6 | Dual | 2 | 5-port 10/100 combo | 2.4 GHz 802.11 b/g/n | RS232 and RS485 | — | Desktop or wall, IP30 |
| IR1180DM | IR1100 | 4G LTE Cat 4 or Cat 6 | Single | 2 | 5-port 10/100 combo | 2.4 GHz 802.11 b/g/n | RS232 and RS485 | Yes | DIN-rail, IP30 |
| IR1190DMG | IR1100 | 4G LTE Cat 4 or Cat 6 | Single | 2 | 5-port Gigabit combo | No | RS232 and RS485 | — | DIN-rail or wall, IP30 |
| IR1105-ODU-4G | IR1100 (outdoor) | 4G LTE Cat 4 or Cat 6 | Single | 2 | 1 PoE LAN + 1 WAN | Yes | No | — | Outdoor, pole or mast, IP65 |
| IRX100-5G | IRX100 | 5G SA/NSA, sub-6 GHz | Single | 2 | 5-port Gigabit combo | Wi-Fi 6, dual-band concurrent (AX3000-class) | RS232 and RS485 (up to 3 ports) | — | Desktop or wall, IP30 |
| IRX100-5Gv2 | IRX100 | 5G SA/NSA, sub-6 GHz | Single or dual | 2 | 5-port Gigabit combo | Wi-Fi 6, dual-band concurrent (AX3000-class) | RS232 and RS485 (up to 3 ports) | — | Desktop or DIN-rail, IP30 |
| IRX1160-ODU-5G | IRX100 (outdoor) | 5G SA/NSA, sub-6 GHz | Single | 1 | 1 PoE LAN + 1 WAN | Yes | No | — | Outdoor, pole or mast, IP65 |
4G models use LTE Cat 4 or Cat 6. On 5-port combo models, any port can serve as WAN or LAN. The IRX100 5G models have up to three RS232/RS485 ports.
Every model runs NexappOS. Feature availability varies by model and NexappOS release, and serial protocols need a serial port. On the 5G platform, you also get packet capture, flow export, iperf3 throughput tests, DPI-based classification, geo-blocking and 802.1X on the LAN switch. Each model's datasheet lists operating temperature, power input, dimensions and antenna details. You can request it.
Two lines, one operating system
You should not need a new skill set for every site type. Instaroute routers come in two lines. The Instaroute Lite Series covers your 4G sites at scale, and you manage it from Instaroute SDWAN Lite 2.0. The Enterprise X Series runs from the IRX100 5G edge up to the IRX5000. You manage it from the Nexapp Controller as part of SD-WAN Enterprise. Every model runs NexappOS.
Instaroute Lite Series
IR1100 series: 4G LTE for branches, ATMs and industrial sites. The IR1100 line covers most cellular WAN jobs in India. You choose LTE Cat 4 or Cat 6, single or dual SIM, and single- or dual-module options. Most models have 2.4 GHz Wi-Fi, five 10/100 combo ports (any port can be WAN or LAN) and RS232/RS485. The DIN-rail IR1180DM adds GPS. The IR1190DMG is a wired-only Gigabit model for your cabinets and panels.
Enterprise X Series
IRX100 series: 5G for high-bandwidth sites. The IRX100 routers support 5G standalone and non-standalone modes on sub-6 GHz bands. They add Gigabit Ethernet and dual-band concurrent Wi-Fi 6. Use them where 4G is your bottleneck: busy branches, CCTV aggregation, temporary sites and primary 5G links. The IRX100-5Gv2 comes with one or two cellular modules, for desktop or DIN-rail mounting.
IRX400, IRX600, IRX800, IRX1500, IRX2000 and IRX5000: SD-WAN Enterprise edges. You manage these X Series models from the Nexapp Controller as part of SD-WAN Enterprise. Datasheets are available on request.
Outdoor 4G and 5G routers (ODU): the modem goes where the signal is. The IR1105-ODU-4G (Instaroute Lite Series) and IRX1160-ODU-5G (Enterprise X Series) are IP65-rated. You mount them on a pole or mast, close to the best signal. Each has one PoE LAN port and one WAN port to reach your equipment indoors. They suit basements, shielded kiosks, rural sites and anywhere your indoor signal is weak.
What every Instaroute router does
- Keeps your site online. On dual-SIM models, arbitration picks the SIM by signal strength, latency or data usage, so two operators back each other up. Any port can be a WAN port. Your links can run as backup, switch-over or load-balanced, gated on health checks rather than link state alone.
- Connects securely. You get IPsec IKEv1/v2 (AES-GCM, SHA-2, DH groups 14–16), OpenVPN, L2TP, GRE/mGRE, DMVPN tunnels and out-of-band management (OOBM). A zone-based firewall, SPI and DoS protection run on the router.
- Speaks the plant's language. A Modbus RTU/ASCII/TCP gateway, DNP3, IEC 60870-5-101/104 and an MQTT data publisher work over RS232/RS485 or Ethernet. Your RTUs, PLCs, meters and SCADA masters connect without extra gateways.
- Fits your NMS. SNMP v2c/v3, TR-069 and syslog work with your existing monitoring and ACS systems.
- Protects IPsec tunnels against future quantum attacks. Hybrid post-quantum key exchange (classical + ML-KEM, NIST FIPS 203) on IPsec IKEv2 tunnels protects you against harvest-now, decrypt-later attacks. ML-DSA (FIPS 204) authentication and post-quantum-signed firmware and configuration complete the chain. Post-quantum mode is on by default.
How to choose
- 4G or 5G? Choose 4G (IR1100) for ATMs, POS, meters and telemetry, where reliability matters more than speed. Choose 5G (IRX100) for video, busy branches or sites that need fibre-like bandwidth over cellular.
- One module or two? A dual-module router (IR11004GDW, IRX100-5Gv2 dual) keeps both operators' connections live at the same time. That cuts your failover time and lets you load-balance across operators. A single module with dual SIM is enough when a short switch-over is acceptable. The IR11004GS, IR11004GSW and IRX1160-ODU-5G have one SIM slot.
- Wi-Fi or wired? Most models include Wi-Fi: 2.4 GHz on the 4G models and Wi-Fi 6 on the 5G models. In control cabinets, Wi-Fi adds attack surface, so use the wired-only IR1190DMG.
- Where will it sit? Use DIN-rail models (IR11004GS, IR1180DM, IR1190DMG, IRX100-5Gv2) in panels and substations. Use the IR1180DM where you need GPS location or time. Use an outdoor ODU where your indoor signal is weak.
- Serial devices? Every indoor model has RS232/RS485. The outdoor ODU units have no serial port.
| Use case | Start with |
|---|---|
| ATM and cash-recycler connectivity (VSAT replacement) | IR11004GD or IR11004GDW |
| Bank and retail branch, POS backup | IR11004GSW, IR11004GDW or IRX100-5Gv2 |
| Substations, RTUs, feeder automation (IEC 104, DNP3, Modbus) | IR1180DM or IR1190DMG |
| CCTV and smart-city cameras | IRX100-5G or IRX100-5Gv2 |
| Smart-meter DCU and EV-charger backhaul | IR11004GS or IR1180DM |
| Weak-signal, basement or rural sites | IR1105-ODU-4G or IRX1160-ODU-5G |
Use cases and proof
ATMs and BFSI. When an ATM loses its only link, it stops serving customers. We moved 2,500 ATM sites from VSAT to dual-LTE, with zero-touch provisioning from day one. The result was more than double the bandwidth, direct cloud connectivity and higher uptime. Instaroute routers cover what your bank RFP asks of the router. That includes SNMPv3, IPsec with SHA-2 and DH groups 14–16, APN configuration and SIM PIN lock. It also includes per-SIM RSRP, RSRQ, SINR and CSQ telemetry with signal-quality alarms.
Utilities and industrial IoT. IEC 60870-5-101/104, DNP3 and the Modbus gateway let one router backhaul your RTUs, FRTUs and PLCs to the SCADA master over a private VPN.
Enterprise retail and branches. Zero-touch provisioning puts your new store online without a network engineer on site. Dual-SIM keeps billing running when the wired link fails.
Nexapp customers include Wipro, Jio, BSNL, NABARD, India1 ATM, Siemens Gamesa, KFC, Pizza Hut, Nayara Energy, Blinkit and ReNew Power.
Certifications
| Certification | What it covers |
|---|---|
| TEC MTCTE | Mandatory Indian certification for notified telecom equipment. Certificate 244903206, valid to 23 March 2035, covers IR11004GS, IR11004GSW, IR11004GD, IR11004GDW, IR1180DM, IR1190DMG, IR1105-ODU-4G, IRX100-5G and IRX1160-ODU-5G; not the IRX100-5Gv2 or IRX400 to IRX5000 |
| IEC 62443 | Industrial network cybersecurity standard |
| CE | European conformity marking |
| RoHS | Restriction of hazardous substances |
Nexapp also holds ISO 9001:2015, ISO 14001:2015, ISO/IEC 20000-1:2018 and ISO/IEC 27001:2022 at company level. You will find certificates and local-content declarations for tenders on the Trust & compliance page.
Manage the fleet from one console
Once you run hundreds of routers, site visits become your biggest cost. Instaroute Lite Series routers connect to Instaroute SDWAN Lite 2.0. You get zero-touch provisioning, canary firmware rollout with rollback, alarms and browser SSH, for up to 100,000 devices per deployment. You pay a flat price per device, with no data metering. You manage Enterprise X Series edges from the Nexapp Controller as part of SD-WAN Enterprise. When a site needs full SD-WAN, it moves up to the Controller on the same NexappOS. Start with one router. Grow to full SASE.
Where to buy
You can buy direct from us, or through our system-integrator and telecom partners. For tenders, we supply OEM authorisation (MAF) to partners. We quote pricing in INR by model and volume.
Sales: 1800 210 9991 · WhatsApp +91 75583 53535 · sales@nexapp.co.in
Related guides
Frequently asked questions
Which Instaroute router should I use for an ATM?
Most ATM estates use a dual-SIM 4G router from the IR1100 series.
Choose the dual-module IR11004GDW if you want both operators live at once, for faster failover. We have moved 2,500 ATM sites from VSAT to dual-LTE using this approach.
How does dual-SIM failover work?
NexappOS monitors both SIMs and picks the active one by signal strength, latency or data usage.
If your primary link degrades, traffic moves to the second operator automatically. Dual-module models keep both links up at the same time and can load-balance across them.
Are Instaroute routers TEC MTCTE certified?
Nine of the ten cellular models are.
TEC MTCTE certificate 244903206, valid to March 2035, covers the IR11004GS, IR11004GSW, IR11004GD, IR11004GDW, IR1180DM, IR1190DMG, IR1105-ODU-4G, IRX100-5G and IRX1160-ODU-5G. It does not cover the IRX100-5Gv2 or the IRX400 to IRX5000 edges. You can check it on the public MTCTE portal.
Do the routers support SCADA and industrial protocols?
Yes. NexappOS provides a Modbus RTU/ASCII/TCP gateway, DNP3, IEC 60870-5-101/104 and MQTT, over RS232/RS485 or Ethernet.
The DIN-rail IR1180DM and IR1190DMG are built for your panels and substations.
Should I choose 4G or 5G?
Choose 4G for ATMs, POS, meters and telemetry, where coverage and reliability matter most.
Choose 5G (IRX100) for CCTV, busy branches and bandwidth-heavy sites. The IRX100 supports both 5G SA and NSA networks on sub-6 GHz bands.
Are the VPN tunnels quantum-safe?
Instaroute IPsec IKEv2 tunnels use hybrid post-quantum key exchange (classical + ML-KEM, NIST FIPS 203).
You also get ML-DSA authentication and post-quantum-signed firmware. This protects your traffic against harvest-now, decrypt-later attacks. See post-quantum cryptography for algorithms and versions.
How do I manage hundreds or thousands of routers?
Manage Lite Series routers from Instaroute SDWAN Lite 2.0, hosted by Nexapp in India or self-hosted in your data centre.
It handles zero-touch provisioning, firmware rollout, alarms and remote access. You pay a flat per-device price, with no data metering. You manage Enterprise X Series edges from the Nexapp Controller.
What warranty and support do I get?
Our 24×7 NOC in Pune and country-wide field operations back every router.
One SLA covers hardware, firmware and platform. Warranty and RMA terms: coming soon.
Tell us your sites and use case, and we'll recommend a model and send an INR quote.
24×7 NOC in Pune · 75,000+ devices deployed · 400+ enterprise and banking customers since 2014.