Most people think of a network as something that lives in one place – a building, a factory floor, an office. But what if your devices are spread across multiple locations, and you still need them to behave as if they’re on the same local network? That’s the problem VXLAN solves. And as of ICR-OS 6.6.1, it’s now natively supported on Advantech cellular routers.

What is VXLAN, and why does it matter?

VXLAN stands for Virtual Extensible LAN. In plain terms, it’s a tunneling technology that takes Layer 2 Ethernet traffic – the kind that normally only works within a single physical network – and wraps it up so it can travel over a Layer 3 IP network, like the internet or a cellular WAN link.

Why does that distinction matter? Layer 2 connectivity means devices can discover each other automatically, share broadcasts, and run protocols that simply don’t work across routed networks. Think of things like network printers, legacy industrial controllers, or building automation systems – equipment that was designed to live on a single LAN and has no concept of routing.

With VXLAN, you can connect a machine at a remote site to your main office network as if it were plugged into the same switch – even if it’s hundreds of kilometers away, connected only via a cellular link. For engineers managing distributed infrastructure, that’s a significant capability.

How does it work under the hood?

VXLAN works by encapsulating Ethernet frames inside UDP packets. Each tunnel is identified by a VNI – a VXLAN Network Identifier – which is a 24-bit number, meaning you can run up to roughly 16 million isolated virtual networks in parallel. Compare that to traditional VLANs, which top out at 4,096 segments.

The two endpoints of a VXLAN tunnel are called VTEPs (VXLAN Tunnel Endpoints). Each router involved acts as a VTEP: it takes outgoing Ethernet frames, wraps them in a UDP packet addressed to the remote router, and sends them across the WAN. On the other end, the receiving router strips the wrapper and delivers the original Ethernet frame to the local network – as if it had never traveled anywhere.

One important note: VXLAN on its own does not encrypt traffic. If you’re deploying over a public network, it’s strongly recommended to run the VXLAN tunnel inside an encrypted VPN – IPsec or WireGuard both work well for this.

VXLAN on Advantech ICR routers

On Advantech ICR routers running ICR-OS 6.6.1, VXLAN is configured under Configuration → VXLAN. Each router supports up to four simultaneous VXLAN tunnels, which can be useful when connecting multiple remote sites independently. VXLAN is supported on all ICR models with the exception of ICR-1600, ICR-1700, and the following models: ICR-2031, ICR-2431, ICR-2531, ICR-2412, ICR-2432, ICR-2436, ICR-2437, ICR-2631, ICR-2041, ICR-2441, ICR-2501, ICR-2438, ICR-2545, ICR-2413, ICR-2452, and ICR-2452 RedCap.

The key parameters for each tunnel are:

• Local Address – the IP address of the router itself, used as the VTEP source
• Remote Address – the IP address of the remote router (VTEP peer); for secure deployments, this should be an IP within an established VPN tunnel
• VNI – the tunnel identifier (1–16777215); must match on both ends
• MTU – recommended value is 1450 bytes for a direct VXLAN connection, to account for VXLAN header overhead and avoid packet fragmentation. When running VXLAN inside a VPN tunnel (IPsec or WireGuard), additional overhead may require a lower MTU value – if you’re unsure, it’s worth consulting Advantech support for your specific setup.
• Bridged mode – when enabled, the VXLAN interface is added to the router’s local bridge, providing seamless Layer 2 connectivity; when disabled, it operates as a routed interface with its own IP address

A typical deployment connects two sites over an existing WireGuard or IPsec VPN. Both routers are configured with matching VNI values and each other’s VPN IP as the remote address. With Bridged mode enabled, devices at both sites end up on the same Layer 2 segment – broadcasts pass through, local discovery works, and legacy protocols that don’t route well behave as expected.

Connecting more than two sites

Connecting two routers with a single VXLAN tunnel is straightforward. But what if you need to bring three or more sites onto the same Layer 2 network?

The current implementation does not support multicast, which means there is no automatic way to broadcast traffic to multiple peers at once. Instead, each pair of routers must be connected with its own dedicated VXLAN tunnel – and each tunnel must use a unique VNI. A router cannot have two VXLAN tunnels sharing the same VNI.

In practice, this means a full mesh topology. If you want to connect three sites – A, B, and C – you need three tunnels: A↔B, A↔C, and B↔C, each with a different VNI. With four sites, that’s six tunnels; with five sites, ten. Since each router supports up to four simultaneous VXLAN tunnels, this limits full-mesh deployments to a maximum of five sites before additional tunnels would be needed beyond that cap.

For smaller deployments – two or three sites – this is entirely manageable and works well in practice.

Resilience: what happens when the WAN link switches?

Unlike connection-oriented tunnels that need to be actively established, a VXLAN tunnel doesn’t have a handshake or session state to maintain. It simply exists as a network interface on the router. This means that if the primary WAN link fails and the router switches to a backup cellular connection, the VXLAN tunnel continues to function on the new link without any intervention – as long as the remote address is still reachable. For deployments that rely on cellular failover, this is a meaningful advantage.

A note on security configuration

Creating a VXLAN tunnel does not automatically configure any firewall rules or routing entries. The router leaves both entirely up to the administrator. This gives you full control, but it also means that securing the tunnel – restricting which traffic can flow through it and from where – is your responsibility. At a minimum, it’s recommended to whitelist the VXLAN UDP port (default 4789) to allow traffic only from the known peer IP address, and to ensure VXLAN traffic is carried inside an encrypted VPN rather than exposed directly to the internet.

When should you use it?

VXLAN is a good fit when you need to:

• Connect remote sites to a shared Layer 2 segment without replacing existing equipment
• Support legacy industrial or building automation devices that rely on Layer 2 broadcasts
• Extend a data center network across geographically distributed nodes
• Run multiple isolated virtual networks over the same physical WAN infrastructure

It’s worth noting that VXLAN is not a replacement for a standard VPN. A VPN secures your traffic; VXLAN extends your network topology. In practice, the two work best together – VPN for encryption and authentication, VXLAN for the Layer 2 overlay on top.

Available now in ICR-OS 6.6.1

VXLAN support is available on Advantech ICR routers running ICR-OS 6.6.1. The firmware is available for download on the Firmware page.
For full configuration details, refer to the Configuration Manual.

Advantech recently showcased products at Eurosatory in Paris, one of the world's leading exhibitions for the defense and security sector. Among the highlights on the booth was a space model of our upcoming ICR-4800 - a 5G cellular router purpose-built for rail and other mission-critical applications.

Engineered for Demanding Environments

The ICR-4800 is designed to meet the EN 50155 standard for railway rolling stock electronics, ensuring reliable operation under the vibration, temperature extremes, and power fluctuations typical of railway environments. With an IP67-rated enclosure, the router is built to withstand dust, moisture, and harsh outdoor conditions without compromising performance.

Flexible 5G Connectivity

A key feature of the ICR-4800 is its support for single or dual 5G cellular radios, enabling flexible deployment options - from straightforward single-carrier connectivity to dual-radio configurations for applications requiring redundancy or higher throughput. This makes the router well suited not only for railway use cases, but also for broader Defence & Security and critical infrastructure applications where dependable connectivity is non-negotiable.

What's Next

The ICR-4800 is currently in the engineering sample phase. We look forward to sharing more details as the product moves closer to release, and to presenting it to customers exploring next-generation connectivity solutions for rail and defense applications.

Stay tuned for updates as the ICR-4800 makes its way to market.

Following the introduction of our RSS feed, we're adding another way to keep track of the latest updates from us. You can now subscribe to our newsletter and receive newly published articles from our News section directly in your inbox.

Whether it's:
✔ Product launches and updates
✔ New firmware releases
✔ Technical tutorials and how-to guides
✔ Case studies and use cases
✔ Company announcements

You'll be notified as soon as new content becomes available.

Simple, convenient, and always up to date.

👉 Subscribe today via the blue icon on our website and never miss an important update!

Accurate time is easy to overlook – until something breaks. For industrial cellular routers deployed in remote sites or critical infrastructure, a synchronized clock is a hard dependency: without it, TLS handshakes fail, VPN tunnels reject authentication due to timestamp skew, syslog data becomes useless for forensic analysis, and time desynchronization across devices can corrupt SCADA/IIoT data integrity.

Time synchronization sources

So where does a router actually get its time from? The answer depends on the hardware - most basic models may support NTP only, while cellular routers add NITZ synchronization, and models with a GNSS module can use satellite time as well.

NTP (Network Time Protocol) is the most accurate option, typically within several milliseconds. It uses a hierarchical stratum model and queries upstream servers over UDP port 123. The main limitation: if the WAN link is down, the router falls back to its local oscillator, which drifts.

Cellular network time (NITZ) is broadcast by LTE/5G base stations with typical accuracy of up to several seconds. Less precise than NTP, but available whenever a cellular connection exists – independent of WAN reachability.

GNSS-based synchronization uses satellite signals to determine time on-site without any network connectivity. Typical accuracy is around one second – sufficient for general clock correction, but not recommended for high-precision requirements.

Configuration on Advantech ICR routers

On Advantech ICR routers, all three sources are configured under Configuration → Services → NTP. The full set of options is available on the ICR-4233, which integrates both an LTE modem and a GNSS receiver.

When Synchronize clock with remote NTP server is enabled, the router queries up to three configured servers – anywhere on the network, not necessarily on the internet. Synchronize clock with cellular network uses NITZ as a fallback when no NTP server is reachable. On equipped models, Synchronize clock with GNSS adds satellite time as an additional source. Enable local NTP server turns the router into a time source for the local network – routers can be chained, though each hop adds a stratum level and reduces precision. For full configuration details, refer to the Configuration Manual.

How are multiple sources prioritized?

When more than one synchronization source is enabled, the router does not simply follow a fixed priority order. Instead, it evaluates source quality continuously using the stratum system: GNSS time is treated as stratum 10, cellular network time (NITZ) as stratum 11, and any remote NTP server carries its own stratum inherited from upstream. Lower stratum generally means higher quality – but stability matters too. An intermittent GNSS signal at stratum 10 may be considered less reliable than a consistent NITZ source at stratum 11. The router's internal algorithms weigh both stratum and signal regularity when selecting the active time source.

Most router models also include a battery-backed real-time clock, which preserves the last known time across restarts. After a reboot, the router immediately serves the stored time to local clients and updates it once synchronization with an external source is re-established.

Recommended deployment approach

Use remote NTP as the primary time source, with NITZ as a fallback during WAN unavailability. GNSS is an option where internet connectivity is unavailable altogether, but for high-precision requirements a reachable NTP server is always preferred. Monitoring NTP peer reachability, stratum, and offset should be part of standard device health checks.

Since then, the world has changed dramatically - technology, markets, and the way we work. But some things don't change: the drive to keep improving, the relationships we've built, and the belief that the best chapter is still ahead.

We celebrate 43 years of Advantech. A good moment to look back - and an even better one to look forward.

To our colleagues, clients, and partners - thank you for being part of this journey. We're just getting started. 🚀

Nobody wants to be the last to know when something goes wrong. Especially with their routers. That's why we created Video Tutorial #7 – and this time it's all about setting up alerts in WebAccess/DMP.

Learn how to stay on top of what matters – connection drops, power supply issues, signal loss, or any custom event you care about.

Watch it now:

🔹 WebAccess/DMP portal
🔹 YouTube channel

We are pleased to announce the release of version 7.0.23 of the Zabbix Agent Router App. This update brings our router monitoring solution up to date with the latest upstream release from Zabbix.

What does it do?
Zabbix is a mature, open-source monitoring solution that proactively tracks the health, performance, and availability of your network devices. With this Router App, Zabbix Agent runs directly on your routers, collecting key metrics such as CPU load, memory usage, interface traffic, and system uptime. It solves the common problem of “blind spots” in network infrastructure – instead of waiting for a failure to be reported, you get real-time visibility, early warnings about potential issues, and historical data for capacity planning. In short, it helps you keep your network reliable, understand its behavior, and troubleshoot problems before they impact your users.

For the full list of changes, please refer to the official Zabbix release notes:
🔗 https://www.zabbix.com/rn/rn7.0.23

Get the new version
The new version of RouterApp is available for download now.
https://icr.advantech.com/products/software/user-modules#zabbix-agent

The latest ICR-OS release is here. Version 6.6.1 brings a focused set of stability fixes and incremental enhancements to Advantech cellular routers. As with all new releases, routers leaving our production line will come pre-installed with this firmware.

What Changed?

1. VXLAN Tunnel Support Introduced: Create isolated Layer 2 networks that span multiple sites using VXLAN tunnels. This enables seamless connectivity between geographically distributed offices or data centers, allowing devices on separate physical networks to communicate as if they were on the same local network.

2. Dynamic DNS Functionality Extended: Added support for RFC 2136 DDNS and HTTPS transport to the Dynamic DNS. RFC 2136 enables secure, standards-compliant DNS record updates directly from the device, while HTTPS transport ensures these updates are encrypted in transit.

3. LLDP Service Implemented: Automatically discover neighboring network devices with the new Link-Layer Discovery Protocol service. LLDP makes it easier to map and document your network topology, speeds up troubleshooting by identifying connected devices and their capabilities, and improves interoperability with switches, routers, and other infrastructure from any vendor.

4. Web Administration User Experience Improved: Moved Factory Reset to its own page, widened firewall address fields for full IPv4/IPv6 display, added WAN IP and IPv6 addresses for backup routes and moved the Connections list link to the main menu.

5. IPsec Tunnel Configuration and Stability Updated: Modified Key Lifetime to strictly control rekeying and IKE Lifetime to strictly control reauthentication, and resolved a stability issue with IPsec tunnels using multiple subnets when Separate Child SA for Each Subnet is enabled.

6. GNSS SNMP Reporting: Fixed an issue with GNSS data not reporting correctly via SNMP.

7. MBIM on ICR-4261: Fixed MBIM communication failure with the RM520N-GL module.

More Details?

For a full breakdown of the advancements and changes in this release, we encourage you to review the official Release Notes.

Ready to update?

The firmware is available on the Firmware and Router Models pages, or can be downloaded directly to the router from Advantech's public server. For version-specific compatibility details, see the Firmware Compatibility Chart.

Managing site security across large, remote areas is tough — especially when real-time video streaming is critical for incident response and theft prevention.

With the ICR-1745 5G NR Gateway and WebAccess/DMP, construction sites can transmit HD or 4K video from multiple IP cameras reliably and securely. Low latency, high uplink speeds, VPN support, and automatic recovery ensure uninterrupted monitoring — even in harsh environments.

🔒 Secure communication
📡 Stable real-time video transmission
☁️ Centralized device management via WebAccess/DMP

👉 Learn more: https://www.advantech.com/en/resources/case-study/high-quality-ip-surveillance

#5G #IPSecurity #Surveillance #IndustrialIoT #RemoteMonitoring #EdgeConnectivity #ICR1745 #Advantech #WebAccessDMP #ConstructionTech

Like everybody, you probably wondered how to display Router Position on the map in WebAccess/DMP and we are happy to announce that you can watch a video explaining this functionality right now!

Learn how to easily display your router's position on the map using WebAccess/DMP — our central device management platform.

You can watch it on:

🔹 WebAccess/DMP portal
🔹 YouTube channel

We launched the ICR-1745 a few weeks back - and we wanted to remind you a video we created to show you what this 5G NR industrial gateway is all about.

What you'll see in the video:
•Hardware overview
•Software side – ICR-OS, WebAccess/DMP
•Typical applications and use cases

Check out the original launch announcement here:
🔗 https://icr.advantech.com/blog/detail/icr-1745-5g-nr-industrial-connectivity-gateway

And watch the full video introduction here:
🎥 https://icr.advantech.com/icr-1700-video

See what the ICR-1745 can do! 

Legacy serial networks can’t keep up with modern grid demands. That’s why we powered a European energy distributor’s rollout with ICR-2431 routers and WebAccess/DMP.

🛡️ Secure IPsec tunnels, certificate management, private APNs
🔄 Built-in conversion from IEC 60870-5-101 to 104
📡 Centralized deployment, remote diagnostics and REST API with WebAccess/DMP

👉 Read the full case study and see how the network went from brittle to future-ready: Connectivity for Energy Distribution

We're excited to share a video overview of WebAccess/DMP 3.4.0 a release focused on making device management at scale even easier, more secure, and more operationally transparent.

This update brings Role-Based Access Control (RBAC) for more granular permissions, Service Accounts as dedicated API-only users for cleaner automation, and command history in the UI to simplify troubleshooting. We've also made it possible to move devices between companies without losing configuration history, introduced Company Contacts to separate notification recipients from user accounts, and added several quality-of-life improvements to streamline daily workflows.

It's a step forward in control, clarity, and operational maturity.

👇 Watch the video to see what's new 

on  WebAccess/DMP Microsite or on Youtube

In this webinar, you’ll learn how secure and robust industrial 5G connectivity can help your business unlock data value and improve operations.

In today’s increasingly connected world, remote industrial islands are being brought together. Once air-gapped, these environments are now pooling and concentrating valuable operational data to drive greater efficiency and deeper insight. Secure connectivity sits at the very core of this transformation.

We’ll cover:

You can also find the previous on-demand and register to upcoming webinar in 2026 by following this link: https://us02web.zoom.us/webinar/register/2017719262446/WN_CeD64McNQOC7i_kLtqGcGg#/registration

ICR-1745 introduces reliable 5G NR connectivity for real-time, mission-critical industrial deployments.

Designed to connect IP devices and legacy serial buses directly to 5G networks, the ICR-1745 delivers ultra-low latency, high reliability, and long-term flexibility for modern industrial M2M and IoT use cases.

Key highlights:
✅ 5G NR for low-latency, real-time communication
✅ 5× Gigabit Ethernet + DI/DO + RS232 & RS485
✅ Secure VPN tunneling with multiple protocols
✅ Built-in diagnostics, watchdog, and auto-recovery
✅ Open Linux platform (ICR-OS) for custom apps in C/C++ or scripts
✅ WebAccess/DMP for secure cloud-based provisioning and fleet management

A compact, cost-effective gateway engineered for scalable industrial deployments - from environmental monitoring to smart vending and surveillance.

See the ICR-1700 Introduction video

Not everyone wants another newsletter in their inbox or another notification on their phone. If you prefer a cleaner, more controlled way to follow updates, RSS is still one of the most efficient tools available.

That’s why we’ve created a dedicated guide explaining how to subscribe to our updates via RSS and what options you have across different platforms and tools.

On the new page, you’ll find:

• A clear explanation of what RSS is (and why it’s still relevant)
• Direct access to our RSS feed
• Practical tips on how to use RSS readers across devices
• Guidance for integrating RSS into tools like Microsoft Teams or other workflow platforms

If you want updates on your terms — without algorithms, without noise — RSS is the way to go.

👉 Explore the full guide here

The APN^[1] helps the mobile network decide which slice to use. The SIM card specifies which slices a device is allowed to use, and the user selects an APN. When the device connects to the mobile network, the network determines which permitted slices are available at the current location and routes the traffic through a PDU session associated with the selected slice.

Multiple approaches can be used depending on customer needs. However, at the moment, Advantech routers can connect via one APN at a time (Single Slice option).

Single Slice

A single APN can be used on our 5G routers now, with the mobile network assigning the traffic to a specific slice. Each device can be configured to use a different slice. But just one slice at a time.

Version 3.4.0 focuses on making WebAccess/DMP easier to manage at scale, with stronger access control, better operational transparency, and cleaner workflows for both people and automation. Developed by Advantech, this release continues to move the platform toward more robust operation.

A major step forward is the introduction of Role-Based Access Control (RBAC), which simplifies how permissions are managed while also enabling more granular access rules where needed. This helps reduce over-privileged accounts and makes responsibility boundaries clearer across teams and companies.

Operational visibility has also improved with command history directly in the UI, making it easier to track what was scheduled on devices, what succeeded, and why something failed when synchronization doesn’t go as planned. This extends much-needed transparency to day-to-day device management and troubleshooting.

For automation and integrations, Service Accounts are now a dedicated, API-only user type, providing a cleaner and more secure separation between human users and scripts. This establishes a clearer long-term model for integrations and automated workflows and prepares the ground for tightening script access in future releases.

Managing larger or changing organizations is now even easier thanks to the ability to move devices between companies while preserving their monitoring history and desired configuration. At the same time, Company Contacts introduce a more flexible way to handle notifications by separating security, billing, and operations recipients from user accounts instead of tying everything to admin users.

Finally, several quality-of-life improvements - such as clearer indicators for unsupported or outdated application versions and smoother navigation in paginated tables - round out a release focused on control, clarity, and operational maturity.

We’ve just published our 6th training video, titled “Display Router Position on Map”

With this release, there are now 6 training videos available, covering the basics of working with the system. The first five focus on core topics, and this latest one expands the series with a practical, real-world use case.

Think of these first 6 videos as a foundation - whether you’re new to WebAccess/DMP or just need a quick refresher.

After a short pause in production, we’re getting back to creating new training content. New videos are already in production and will be added step by step, so you can look forward to more practical guides and examples.

You can find the existing training videos here:

🔹 WebAccess/DMP portal
🔹 YouTube channel
 

Are you looking to seamlessly connect your industrial devices, PLCs, and machines to SCADA, MES, cloud platforms, or databases -even in remote or challenging environments?

Introducing ICR-3241-EL, designed specifically for the North American market. This proven combination automates data transmission, bridges multiple industrial protocols, and ensures secure, reliable communication across your operation - wherever you deploy it.

Key Features:

Multi-Protocol Conversion:
Effortlessly convert and bridge protocols such as OPC UA, Modbus, BACnet, IEC-61850, CANbus, and more, enabling interoperability between diverse industrial devices and systems.

Cellular Connectivity & Data Acquisition:
The ICR-3241-EL delivers LTE Cat.4 performance (up to 150 Mbps down / 50 Mbps up), and a rugged industrial design. It supports over 200 PLC and I/O drivers, standard protocol drivers, and custom user-defined tags—ensuring reliable, always-on connectivity in demanding environments across North America.

Cloud & Database Integration:
Connect edge devices directly to leading cloud platforms such as Azure, AWS, Cumulocity IoT, and MindSphere, as well as to databases, enabling real-time analytics and monitoring without additional gateways.

Data Logging & Processing:
Import tags, log time-stamped data, and trigger alarms for abnormal conditions via SMS or email—without manual scripting or configuration overhead.

Security First:
Protect your data with whitelisting, SSL encryption, authenticated data handling, and OpenVPN support—maintaining secure communication even over public cellular networks.

OpenAPI Support:
Enable programmatic access and straightforward integration with your existing software applications and workflows.

Why EdgeLink with ICR-3241-EL?

Simplifies industrial automation and IIoT deployments at the edge, including remote and hard-to-reach locations

Improves interoperability and scalability through broad protocol support and reliable cellular connectivity

Reduces integration complexity and total cost by combining protocol conversion, edge data processing, and secure networking in a single device

🔗 Ready to unlock the full potential of your industrial network?

Discover how EdgeLink with ICR-3241-EL helps streamline data flow and accelerate IIoT deployments across North America.

#IIoT #EdgeComputing #ProtocolConversion #IndustrialRouter #EdgeLink #ICR3241 #NAM #SmartFactory #Advantech

We have updated our NIS2 Compliance Statement to reflect our current regulatory and security status under the EU NIS2 Directive.

Our organization falls under NIS2 in the lower obligations regime, classified within the manufacturing sector (CZ-NACE 26). We are registered as a regulated entity in the NÚKIB Portal, as required by Czech NIS2 implementation.

Cybersecurity governance is explicitly assigned to executive management, in line with NIS2 accountability requirements.

We are certified according to ISO/IEC 27001, and our Information Security Management System already fulfills applicable NIS2 requirements. NIS2 compliance is therefore part of our operational security framework, not a future commitment.

The updated NIS2 Compliance Statement reflects this status.

⛽ Secure Connectivity for Gas Distribution
Maintaining reliable communication across gas distribution stations is critical - and failures can be costly.

With ICR‑2834 LTE routers and WebAccess/DMP, gas utility operators get secure, redundant connections to PLCs and dataloggers, supporting Modbus RTU/TCP. Fully cross-linked topology ensures continuous operation, while centralized management makes monitoring and updates easy.

💡 Protect infrastructure, reduce downtime, and scale your network efficiently.

👉 Learn more: https://icr.advantech.com/solutions/secure-connectivity-for-gas-distribution-stations

#IndustrialIoT #GasDistribution #SecureConnectivity #LTE #ICR2834 #WebAccessDMP #SCADA #RedundantNetwork #Advantech

Detailed Changelog

For a full breakdown of the advancements and changes in this release, we encourage you to review the official Release Notes.

Major Enhancements

1. ETH0 Configuration Expanded: Extended configuration options for the switched ETH0 port on ICR-25xx/26xx and ICR-44xx. Switched routers now support per-port enable control, individual Media Type selection, and VLAN Filtering for restricting traffic to specific VLANs.

2. Quick Setup Workflow Introduced: A Quick Setup page is now shown after first login to guide users through initial configuration.

3. Main Menu Consolidated: Various main menu items have been consolidated. Most notably the Peripheral Ports configuration, central System settings, and Manage SIM commands have been moved inder a single menu item.

4. Router App Features Integrated: Functionality from several Router Apps has been integrated into the firmware:

• GPS: Geolocation and GNSS are now built into the firmware, including SNMP reporting and a new GNSS Configuration page.
• Event Notificator: A new Events Configuration page centralizes event-driven actions.
• Daily Reboot: Reboot Schedule feature has been added.
• IO Control and USR LED Management: Digital input events can trigger SMS actions, with variable support and an Inputs/Outputs Configuration page.
• PLMN Whitelist: Mobile WAN Operator selection now directly supports PLMN whitelisting.

5. WiFi Country Selection Structure Changed: WiFi Country selection is now managed on a dedicated page with a single setting for all WiFi APs and STAs. After changing the country, users should review HW Mode, Bandwidth, and Channel, as some options may be disabled. During upgrade, differing AP and STA country settings are unified, which may require reconfiguring radio parameters. Users should re-apply their WiFi AP settings and verify that WiFi STAs can still connect.

6. Default Forwarding Rule Revised: Added Input Interface and Output Interface selection to Firewall Configuration. The default forwarding rule in Firewall Configuration has then been revised to match all traffic with Input Interface in LAN.

7. IPsec Subnet Capacity Increased: Several configuration menus were consolidated and refined, including an expanded IPsec Tunnel Configuration that now supports up to 10 subnets with unused entries hidden automatically.

8. Legacy Configuration Restore Removed: Support for restoring configuration files from firmware versions older than 6.2.0 has been removed.

Important Note

This firmware version is not intended for mass deployment. Given the significant changes introduced in this release, extensive testing is strongly recommended prior to deploying it in a production environment.

Availability

The new firmware can be downloaded directly to the router from Advantech's public server, or manually from the Firmware or Router Models pages. For specific firmware versions and compatibility details, please refer to the Firmware Compatibility Chart document.

🔧 Remote Maintenance Made Simple

Managing industrial air compressors across Europe and North America can be costly and slow — until you enable secure remote access.

With ICR‑4271 LTE routers and WebAccess/DMP, technicians can monitor performance, perform diagnostics, and apply predictive maintenance without visiting sites. Zero Touch Deployment ensures quick setup, while secure VPN connections protect your infrastructure.

💡 Reduce downtime, cut costs, and streamline maintenance — globally.

👉 Learn more: https://icr.advantech.com/solutions/remote-access-for-maintenance-of-industrial-compressors

#IndustrialIoT #RemoteMaintenance #EdgeComputing #LTE #VPN #PredictiveMaintenance #Advantech #WebAccessDMP #ICR4271

Industrial connectivity requirements are becoming more demanding every day. From remote monitoring to secure data transmission, companies need networking solutions that are reliable, flexible, and easy to manage.

The ICR-2545 global industrial cellular router is Advantech’s answer to these needs—combining rugged hardware, dependable LTE connectivity, and an open Linux-based environment to support modern Industrial IoT deployments.

Fast LTE Performance

The ICR-2545 provides LTE Category 4 connectivity with download speeds up to 150 Mbps and upload speeds up to 50 Mbps, offering ample bandwidth for applications such as remote monitoring, telemetry, or data collection.

Flexible Connectivity Options

The router is available in two variants:

• ICR-2545W with Wi-Fi 802.11 a/b/g/n/ac 
• ICR-2545G with GNSS support for positioning 

With four Ethernet ports (three switched + one independent), each configurable as LAN or WAN, the ICR-2545 adapts easily to diverse network setups.

Secure and Reliable Operation

To maintain stable and safe operation, the router includes:

• Automatic link monitoring and reconnection
• Hardware watchdog
• Support for a wide range of VPN technologies (IPsec, OpenVPN, WireGuard, L2TP, etc.)
• Firewall, filtering options, and encrypted management access

Open Platform for Custom Applications

Powered by ICR-OS, a Linux-based system, the router allows developers to build custom applications using Python, C, C++, or dedicated Router Apps. This makes it ideal for protocol conversion, automation logic, or integration with IoT services.

Streamlined Cloud Management

With WebAccess/DMP, operators can securely provision, monitor, and maintain their entire fleet of routers through a centralized cloud platform. This simplifies remote troubleshooting, ensures configuration consistency, and enables large-scale rollouts.

Industrial IoT and smart infrastructure are evolving fast, and staying ahead requires connectivity that’s not only fast and secure, but also built for what's next. That’s why Advantech is proud to introduce the ICR-2452 — an industrial-grade 5G RedCap router designed to meet the demands of modern industrial networks while ensuring long-term viability in the 5G era.

What is 5G RedCap — and Why Should You Care?

5G RedCap (Reduced Capability) is a streamlined version of 5G aimed at devices that don’t need ultra-high bandwidth, but still require low latency, high reliability, and energy-efficient performance.
In other words, it’s perfect for:

• Industrial automation
• Smart city infrastructure
• Remote asset monitoring
• Energy and utility networks

The ICR-2452 supports 5G RedCap in Standalone (SA) mode, with automatic fallback to LTE where 5G is unavailable. That means you can deploy now and seamlessly transition into full 5G as coverage expands.

More about 5G RedCap can be found on our page. 

Key Features at a Glance

✅ 5G RedCap (SA) + LTE fallback – up to 223 Mbps download / 123 Mbps upload
✅ Dual Ethernet ports (LAN/WAN), RS232, RS485, Digital I/O (1 DI / 1 DO)
✅ Optional Wi-Fi (802.11 a/b/g/n/ac) and GNSS for location-based use cases
✅ Open Linux platform – develop your own apps in Python or C/C++
✅ Full support for Router Apps, including protocol conversions and cloud integration (e.g., Azure, Cumulocity)
✅ WebAccess/DMP – a cloud-based platform for device monitoring, remote updates, and mass deployment

5G-Ready. Deployable Today.

The ICR-2452 isn’t just another cellular router — it’s a gateway to next-generation industrial connectivity. It delivers the performance, security, and flexibility that modern systems demand. Whether you’re a system integrator, OEM, or infrastructure operator, the ICR-2452 is your industrial networking workhorse — ready for today and built for tomorrow..

As the smart manufacturing revolution accelerates, reliable, high-speed network connectivity has become the backbone for industrial automation, utilities, and IIoT deployments. Advantech’s new ICR-4172 and ICR-4272 routers address this need with robust 5G connectivity, exceptional edge performance, and flexible industrial integration.

Why Choose Industrial 5G?

With ultra-fast speeds and ultra-low latency, 5G enables real-time control, seamless data transfer, and responsive automation across facilities. Advantech’s ICR series empowers industries to:

• Enable remote asset monitoring and control
• Support smart factories and distributed operations
• Future-proof networks for emerging IIoT applications

Both models feature an embedded 5G module by Telit, ensuring trusted connectivity and long-term reliability.

Robust Hardware for Demanding Environments

Both ICR-4172 and ICR-4272 are powered by a 1.6GHz processor, 1GB RAM, and 2.9GB application storage. This combination enables strong edge computing capabilities—ensuring data can be processed locally for speed and efficiency.

• Dual Gigabit Ethernet ports: Reliable, high-speed wired networking
• Dual SIM support: Network redundancy and failover
• USB 3.0 & GNSS receiver: Enhanced connectivity options
• Optional WiFi 6 (2x2 MIMO) & Bluetooth V5.2: Wireless flexibility

In addition, the routers deliver global coverage with certifications for Europe and North America (NAM), ensuring seamless deployment and compliance across key industrial markets.

Built for Security & Easy Management

Protection of critical assets is paramount. Both routers feature TPM 2.0 hardware security and a tamper button, ensuring safe deployment in sensitive environments. With WebAccess/DMP cloud management, users can easily configure, monitor and update entire fleets—streamlining mass deployments and ongoing maintenance.

Two Models, Tailored to Your Needs

• ICR-4172: Compact solution for modern applications not requiring serial or digital I/O.
• ICR-4272: Adds RS232/RS485 and digital I/O—ideal for connecting legacy and automation equipment.

Unlock Next-Level Industrial Connectivity

The ICR-4172 and ICR-4272 routers combine 5G performance, industrial-grade reliability, and cloud-ready management—empowering smart factories, utilities, and critical infrastructure to drive operational excellence.

Embrace the future of industrial networking with Advantech ICR-series 5G routers—built for real industrial transformation.

🚦 Smarter Cities Start with Smarter Traffic

Urban congestion isn’t just a nuisance — it’s lost time, higher emissions, and lower quality of life.

Our Intelligent Traffic Management solution powered by ICR‑4461 and WebAccess/DMP shows how reliable connectivity can transform the way cities move.

✅ High availability through fiber + 5G backup
🔐 Secure, encrypted communication between all nodes
🖥️ Centralized monitoring and management with WebAccess/DMP
⚡ Scalable for future expansion

👉 See how it works in practice: https://icr.advantech.com/solutions/intelligent-traffic-management

#SmartCities #TrafficManagement #Connectivity #5G #EdgeComputing #Advantech #WebAccessDMP

We are pleased to announce that our new wired LAN router, the ICR-2701-S1, extends the S1 Secure Router line.

Industrial networks increasingly rely on secure and stable connectivity. To meet these needs in more compact deployments, Advantech has extended its Secure S1 Router series with the ICR-2701-S1 — a LAN router designed for basic industrial applications that still require compliance with IEC 62443-4-2 SL1.

This model builds on the proven ICR-2701 platform, bringing core S1 security features such as TPM 2.0, secure boot, and a hardened firmware branch to the most compact device in the lineup. It is a practical choice for sites that need trusted connectivity but do not require the full performance of higher-tier routers.

ICR-2701-S1 complements models ICR-2734-S1 and ICR-2834-S1, which include cellular modules and offer more advanced connectivity options. This way, users can choose the right device for their specific security and performance requirements — while staying within a single, unified S1 ecosystem.

Key security features:

• TPM 2.0 for device integrity verification
• Secure boot and firmware integrity checks
• Hardened OS with dedicated security updates
• Compliance with IEC 62443-4-2 SL1

Like other S1 models, ICR-2701-S1 is fully compatible with Advantech’s router ecosystem, providing a consistent configuration and management experience across product tiers.

We’re excited to announce that our North American cellular routers — ICR-2041, ICR-2441, ICR-4172, ICR-4272, SmartFlex SR310, and ICR-4461 — have achieved NEMA TS2 compliance, a benchmark widely recognized in the U.S. traffic control and transportation industry. This certification isn’t just a label; it’s proof our hardware meets some of the most demanding standards for reliability, safety, and environmental resilience.

What Is NEMA TS2?

NEMA (National Electrical Manufacturers Association) created the TS2 standard to ensure that traffic-control and intelligent transportation systems (ITS) equipment can handle real-world conditions. TS2 defines electrical, mechanical, and environmental requirements — including surge protection, temperature extremes, vibration resistance, and fail-safe operation. Devices certified under this standard are built to perform reliably at intersections, on highways, and in harsh outdoor environments.

Why It Matters for You

Routers compliant with NEMA TS2 are designed to keep critical communications running without interruption. This means more consistent uptime for transportation networks, safer roadside installations, and less maintenance over the long term. In short, NEMA TS2 compliance signals that a device can survive and function under the same demanding conditions as certified traffic controllers, sensors, and cabinets.

How We Achieved It

Our engineering team subjected our routers to extensive testing to meet TS2’s environmental, electrical, and operational benchmarks. As a result, our devices now meet the same reliability and safety criteria trusted by transportation authorities across North America.

The Bottom Line

Whether you’re deploying routers in roadside cabinets, smart-city infrastructure, or other mission-critical environments, NEMA TS2 compliance offers added confidence. It shows our routers are ready for the toughest conditions — and for the future of intelligent transportation systems.