IoT and M2M connectivity with Instaroute industrial routers
Connect PLCs, RTUs, meters and cameras over 4G or 5G. Instaroute routers speak Modbus, DNP3, IEC 104 and MQTT, over an encrypted VPN to your control centre.
Key facts
- Industrial protocols
- Modbus RTU/ASCII/TCP gateway, DNP3, IEC 60870-5-101/104, MQTT; RS232/RS485 serial DTU over TCP or UDP
- Cellular
- 4G LTE Cat 4/6 (IR1100 series); 5G SA/NSA sub-6 GHz (IRX100 series); dual-SIM arbitration by signal, latency or data usage
- Form factors
- Desktop/wall and DIN-rail, IP30 (DIN-rail: IR11004GS, IR1180DM with GPS, IR1190DMG Gigabit, IRX100-5Gv2); outdoor pole or mast, IP65 (IR1105-ODU-4G, IRX1160-ODU-5G)
- VPN
- IPsec IKEv2 with hybrid post-quantum key exchange (ML-KEM, FIPS 203), OpenVPN, GRE/DMVPN, out-of-band management (OOBM)
- Management
- Up to 100,000 devices per deployment; flat per-device pricing, no data metering; works with no public IP
- Certifications
- IEC 62443, TEC MTCTE, CE, RoHS. TEC MTCTE certificate 244903206 (IoT Gateway, valid to March 2035) covers every model here except the IRX100-5Gv2
Wireless edge IoT with Instaroute
How Instaroute routers connect field devices over 4G and 5G and bring them under one console, in under two minutes.
Built for what utility and industrial tenders ask for
Your tender lists the modem requirements line by line. Indian DISCOM and utility specifications, such as the PFC RT-DAS model technical specification, set clear requirements for the modem or router at each substation or field device. Here is how Instaroute maps to them.
| Typical specification line | Instaroute |
|---|---|
| Data concentration on IEC 60870-5-101/104 and Modbus | IEC 60870-5-101/104 and DNP3; Modbus RTU/ASCII/TCP gateway; RS232/RS485 serial DTU over TCP or UDP |
| Encrypted SSL/VPN over public 4G, forming a private VPN with the front end | IPsec IKEv2, OpenVPN, GRE/DMVPN into your control centre; zone firewall on the device |
| SNMP | SNMP v2c/v3, plus TR-069 |
| Automatic start-up after power restoration, no manual intervention | On request |
| Remote configuration, diagnostics and firmware download | Central configuration, browser SSH, device web UI, ping, traceroute and link SLA checks; signed firmware with canary rollout and rollback |
| Industrial-grade 4G with fallback | LTE Cat 4 or Cat 6; dual SIM with automatic arbitration; dual-module options; IP30 indoor and IP65 outdoor units |
Where it fits
- Power distribution: FRTU and RTU backhaul for distribution automation, feeder monitoring and substation and RMU telemetry over IEC 101 or DNP3.
- Renewables and energy: remote site connectivity for solar, wind, battery storage, EV charging and fuel-retail locations.
- Smart meters and DCUs: cellular backhaul for automatic meter reading and data concentrator units.
- PLC and machine connectivity: remote monitoring and maintenance for OEM machines and water or pumping stations.
- CCTV and surveillance: 4G/5G uplinks for camera sites without fixed lines, with SD-LAN to reach cameras behind the router.
- Vehicles and mobile assets: GPS on the IR1180DM for tracking and location-aware alarms.
How it works
- Order devices and import serials. You upload a CSV of serial numbers to Instaroute SDWAN Lite 2.0. Each device picks up its configuration on first power-on (zero-touch).
- Configure once, push to thousands. You work across about 20 configuration domains (WAN, SIM policy, VPN, firewall, serial and protocol settings). You see a CLI preview before every push.
- Connect to your SCADA or cloud. Build IPsec or OpenVPN tunnels to your control centre, or publish MQTT to your platform.
- Reach devices behind the router. SD-LAN and the InstaAccess client (SSL VPN, IPsec VPN or ZTNA) let your engineers reach a PLC or RTU behind the router for maintenance. The device is never exposed to the internet.
- Watch and act. 23 alarm metrics and 15 ready-made rules cover signal, data usage, link state and device health. Out-of-band device management works even where your SIM has no public IP.
- Update safely. Roll firmware to a small canary group first, then to your fleet, with rollback. Every firmware image is signed.
What management costs, and what it does not
Many cloud management platforms for industrial routers charge per device per month and meter remote-access data. With SDWAN Lite 2.0 you pay a flat per-device price with no data metering. You can run it Nexapp-hosted in India or self-hosted on your own servers. That matters if you run a utility or critical infrastructure and must keep control of your operational data.
Indian M2M SIMs and telecom rules
In India, new M2M connections use 13-digit M2M numbers. DoT permits embedded SIMs with single or multiple profiles. Notified telecom equipment sold in India needs a valid MTCTE certificate. Instaroute is designed and supported in India, with a 24×7 NOC in Pune and field teams across the country. Each of your SIMs gets its own APN configuration, PIN lock and per-modem keepalive. You can control the device by SMS.
Security for operational technology
Industrial networks are now targets, and your field devices sit on public cellular networks. Instaroute protects them with a zone firewall, encrypted VPN, SNMPv3, signed firmware and a product certified to IEC 62443. Every tunnel uses hybrid post-quantum key exchange (ML-KEM, NIST FIPS 203). Firmware and configuration are post-quantum signed. That matters when your assets stay in the field for a decade or more. Their data must stay confidential long after it is sent.
Related guides
Frequently asked questions
Does Instaroute support IEC 60870-5-104, Modbus, DNP3 and MQTT?
Yes. Instaroute supports DNP3, IEC 60870-5-101/104 and MQTT publishing, and acts as a Modbus RTU/ASCII/TCP gateway.
RS232/RS485 serial ports carry your legacy devices to a modern host over TCP or UDP.
Can it create a private VPN to our SCADA master?
Yes. Build IPsec IKEv2, OpenVPN or GRE/DMVPN tunnels from every field router to your control centre, with a zone firewall on the device.
Tunnels use hybrid post-quantum key exchange.
Does it work with 13-digit M2M SIMs, private APN and e-SIM?
Each of your SIMs has its own APN configuration and PIN lock.
Dual-SIM arbitration can switch between operators by signal, latency or data usage.
What does device management cost?
You pay a flat per-device price for SDWAN Lite 2.0, with no data metering.
You can run it Nexapp-hosted in India or self-hosted. Ask us for an INR quote for your device count.
What operating temperature and ingress rating do the routers have?
Outdoor models IR1105-ODU-4G and IRX1160-ODU-5G are IP65-rated.
Desktop/wall and DIN-rail models are IP30-rated.
Is Instaroute MTCTE-certified?
Yes, as an IoT Gateway under TEC MTCTE certificate 244903206, valid to March 2035.
It covers the IR11004GS, IR11004GSW, IR11004GD, IR11004GDW, IR1180DM, IR1190DMG, IR1105-ODU-4G, IRX100-5G and IRX1160-ODU-5G, but not the IRX100-5Gv2. You can check it on the public MTCTE portal.
Tell us your protocol, site count and SIM plan, and we will size the right router.
24×7 NOC in Pune · 75,000+ devices deployed · 400+ enterprise and banking customers since 2014.