ICR-OS is an operating system tailored for Advantech Cellular Routers. Based on Linux Kernel combines the simplicity of a web-based configuration with the flexibility of an open platform that allows the development of custom configuration scripts and RouterApps. More details here.
ICR-OS is available in two versions: the standard version, described on this page, and the Secure S1 version, detailed on the Secure S1 Cellular Routers page.
ICR-OS provides to the router operator a user-friendly web GUI interface for complete router configuration and displays selected communication parameters. A web GUI interface is logically segmented into categories that lead engineers to hit a required point in the shortest possible time.
Overview functionality of ICR-OS
| Category | Description |
|---|---|
| SW Customization | Router App |
| Application Development | **Open Linux, *Python, BASH, C/C++ |
| Industrial Protocols and IoT | *Modbus RTU/TCP gateway, *IEC 60870-5-101 to 104 gateway, *DF1, *DNP3, *MQTT, *LWM2M |
| Networking Features and Protocols | DHCP, NAT/PAT, SSH, VRRP, PPPoE, SNMP, SMTP, Dynamic DNS client, DNS proxy, VLAN, QoS, *DMVPN, NTP Client/Server, *Routing protocols RIP, BGP, OSPF, IS-IS, NHRP, Backup Routes, Port Forwarding, Host Port Routing, Ethernet Bridging, Load Balancing, IPv6 Dual Stack |
| Security | HTTPS, SSH, SFTP, DMZ, Firewall (IP Filtering, MAC address filtering, Inbound and outbound Port filtering) VPN Tunneling – WireGuard, OpenVPN, *EasyVPN, IPsec with IKEv1 and IKEv2, GRE, L2TP, PPTP Authentication – RADIUS, TACACS+, 2FA, *SCEP **Encryption – DES, 3DES, AES, RSA, MD5, SHA S1 Routers only: Compliance with IEC 62443-4-2 SL1 (level 1), Secure Boot, Encrypted firmware image, Read-only filesystem, Integrity check, Advanced Intrusion Detection Environment (AIDE) |
| Firmware Management | Automatic firmware updates – server, locally via LAN or remotely via WAN Over-the-Air cellular module firmware updates |
| Diagnostic/Log | Status – Signal Strength, Data Usage One CLICK report – Current Configuration, Factory Identification, Routing Table Log – System Log, Reboot Log, Kernel Log Remote Diagnostics (via SSH) |
| Event Engine | **StartUp script & Up/Down script (Own rules based on Digital Inputs, Network Parameters, Data Usage, Timer, Power, Device Temperature) Report Types: SMS, *email, *SNMP Trap, *Event notificator |
| Configuration | Web server, SSH, Four configuration switchable profiles, Automatic configuration update from server, Backup & Restore configuration |
| Advanced Software Tools | WebAccess/DMP - Remote Device Provisioning, Monitoring, VPN & Management Platform |
* Functionality is available with installed Router App
** Functionality may be limited for S1 Router (ICR-2734A01-S1, ICR-2734WA01-S1)
Check out ICR-OS released firmware versions for specific router models here.
A complete overview of available functionalities is possible to find here.
Monitoring and Security
ICR-OS serves also as a gate for router integration into additional monitoring software platform – WebAccess/DMP. WebAccess/DMP is a powerful, flexible, and secure platform for managing routers remotely. Monitor, configure, and troubleshoot without on-site visits. The new VPN Management makes secure connections effortless—no manual setup needed. With WireGuard VPN and a secure proxy link, you get instant access to devices behind routers—right from your browser.
Introduction to various remote monitoring protocols and tools that can be used for remote monitoring of Advantech cellular routers based on ICR-OS is available here.
As an all-time more important issue of cybersecurity, ICR-OS reflects this demand, and security experts describe guidelines for securing an Advantech cellular router and keeping it secure during installation, configuration, operation, maintenance, and decommissioning. It includes best practices and tools recommendations – security guidelines available here.
Even a step beyond the router security guidelines goes PCI DSS Compliance Considerations for ICR-OS presenting guidance for configuration and assessment of Advantech cellular routers within the cardholder data environment for reaching the PCI DSS compliance.
RouterApps, Scripting, Development
As said before ICR-OS offers space for ready-to-use software RouterApps downloadable and administrable through web GUI that leaving the standard firmware core untouched and safe for smooth operation. Finished RouterApps can be freely downloaded from the Advantech website. They offer Modbus conversion, VPN modules, Node-RED nodes, Sleep mode configuration, IEC101 to IEC104 protocol conversion, dynamic protocol OSPF/BGP/RIP configuration options, Zabbix monitoring integration, and many more. This RouterApp concept represents a very lightweight and effective tailor-made solution for users designing and deploying their own applications.
Outside of RouterApps and standard router configuration, ICR-OS offers advanced options for Extending Routers Functionality. Also developing RouterApps is allowed for experienced users and we provide step-by-step guidelines on that in our Development pages. Look through the tips and necessary descriptions at Development and give power to your creativity.
