Industrial Routers in SCADA: Design the Remote Link Around the Control Task

What is a SCADA System

SCADA (Supervisory Control and Data Acquisition) is an automated control framework widely used in industrial settings. It enables real-time data acquisition, remote monitoring, and centralized management of field devices distributed across large areas, giving enterprises comprehensive visibility into their production processes.

A complete SCADA system consists of the following core components:

• Field instruments and actuators: Sensors, transmitters, and actuators that measure physical quantities such as temperature, pressure, flow rate, and voltage, and execute control commands.

• RTU / PLC: Intelligent field control nodes that aggregate data, execute local control logic, and transmit data upstream via communication networks.

• Communication network: The "nervous system" of a SCADA system — its stability and security directly determine overall system reliability.

• Master Terminal Unit (MTU) and SCADA server: Deployed at the control center to receive, process, and store data, and provide the HMI interface.

• Human-Machine Interface (HMI): Graphically displays real-time field status, supports alarm management, historical data queries, and trend analysis.

As industrial internet and smart manufacturing advance, modern SCADA systems are evolving from closed, siloed architectures toward open, interconnected, cloud-based designs, placing ever-higher demands on underlying communication networks. Wavetel IoT focuses on providing one-stop industrial IoT connectivity solutions for the energy, security, and manufacturing industries, serving as a key driver of this evolution.

Core Communication Challenges in SCADA Systems

Wide Distribution and Long Communication Distances

SCADA field nodes are often extremely dispersed. Power substations in a grid can span thousands of square kilometers, while oil and gas pipeline monitoring points stretch hundreds of kilometers along pipelines. Deploying traditional wired networks in remote mountains, deserts, or offshore platforms is difficult and costly, making it necessary to rely on wide-area wireless communication for stable long-distance transmission.

Complex and Unstable Network Environments

Industrial field sites are affected by geographic remoteness, electromagnetic interference, and uneven signal coverage, leading to frequent link interruptions, packet loss, and latency jitter. In SCADA scenarios with high real-time requirements, even a few seconds of communication interruption can result in data loss or failed control commands, potentially causing serious safety incidents. Achieving seamless switching and continuous connectivity across heterogeneous network environments is one of the key design challenges.

Difficulty Integrating Multi-Protocol Devices

SCADA systems contain a large number of devices from different manufacturers and eras, using diverse communication protocols such as Modbus RTU/TCP, DNP3, IEC 60870-5-101/104, IEC 61850, PROFIBUS, and OPC UA. Legacy devices typically use RS-232/RS-485 serial interfaces, while newer devices use Ethernet. This protocol diversity creates interoperability difficulties and raises system integration costs. Wavetel industrial routers vary by router model, interface and firmware; check the selected datasheet for exact protocol support and test any required conversion or interoperability with the connected device.

Growing Cybersecurity Risks

As SCADA systems open up to IP networks, cybersecurity threats have become increasingly prominent. Industrial control systems were originally designed to operate in closed environments and lack robust authentication and encryption mechanisms. Once exposed to the public internet, they become easy targets for cyberattacks, potentially causing production shutdowns, equipment damage, or public safety incidents. Building a defense-in-depth security framework is a core challenge for modern SCADA.

The Role of Industrial Routers in SCADA

Connecting Field Devices to the Control Center

Industrial routers are critical nodes linking the field layer to the control layer. On the field side, they connect directly to RTUs, PLCs, and smart instruments via serial or Ethernet interfaces, aggregating local data. On the network side, they establish communication links to the SCADA control center via 4G/5G or wired broadband, serving as the key "last-mile" access point.

Building Remote Communication Networks

Industrial routers leverage carrier cellular networks to quickly establish wide-area coverage without laying dedicated cables, significantly reducing access costs for remote sites. Acting as VPN gateways, they integrate dispersed field sites and control centers into a logically unified private network, enabling secure and reliable remote communication.

Enabling Secure Data Transmission

Industrial routers have built-in IPSec/SSL VPN encrypted tunnels, firewalls, and access control lists (ACLs). They protect industrial data with end-to-end encryption, prevent eavesdropping or tampering, and block unauthorized devices from accessing the SCADA network through identity authentication.

Supporting Multi-Protocol Industrial Communication

Industrial routers can carry IP traffic and may provide model-specific protocol functions, but serial-to-IP transport alone does not convert Modbus, DNP3 or IEC 104. Confirm the full protocol path and whether a separate gateway is needed. Wavetel's WRTOS industrial router operating system describes software capabilities that vary by router model and firmware; consult the exact product documentation for supported VPN and industrial-protocol functions.

Typical Architecture of Industrial Routers in SCADA Systems

Field Layer (RTU/PLC Access)

Sensors and actuators transmit collected physical signals to RTUs or PLCs, which handle analog-to-digital conversion and local control logic before connecting to the industrial router via serial or Ethernet interfaces. The router organizes multiple devices at the same site into a local area network for unified upstream access, avoiding the cost of configuring a separate communication module for each device.

Typical products for this type of access scenario include the WR245 industrial cellular router (supporting RS-232/RS-485 serial ports and multiple I/O channels) and the compact WR143 4G industrial router.

Network Layer (Industrial Router Communication)

Industrial routers can provide WAN connectivity for distributed sites. Dual-SIM, wired/wireless backup and multi-WAN functions depend on the router model and configuration; they may improve resilience but do not guarantee link availability.

For scenarios requiring high-bandwidth WAN connections, the WR574 or WR575 5G industrial router are recommended, while critical nodes with extremely high availability requirements can use the WR677-D dual 5G cellular industrial router with two 5G modems. Confirm the supported connection modes and failover behavior for the chosen configuration.

Control Layer (SCADA Center)

The SCADA server receives data from each site, parses and stores it, and presents it on the HMI interface for real-time monitoring by operators. The system automatically triggers alarms when anomalies are detected, and operators can issue remote control commands to field actuators via the HMI. Modern control centers also include historian databases, reporting systems, and data interfaces to ERP/MES, forming a complete industrial data chain.

Key Features of Industrial Routers

4G/5G Cellular Communication

4G and 5G can provide wireless WAN options for remote sites. In suitable networks, 5G may offer greater throughput and lower latency than LTE, but end-to-end performance depends on coverage, spectrum, network load, device and application; 1 ms is not a general site result. Dual-SIM equipment may provide alternate network access, while simultaneous use and failover time depend on the router model, configuration and carriers.

Wavetel offers a complete product lineup from 4G Cat 4 (WR143) and 4G Cat 6 (WR565) to 5G (WR574 / WR575) and dual 5G (WR677-D), covering different bandwidth and reliability needs.

VPN and Data Encryption

VPN protocol and encryption options vary by router model and firmware; verify the supported mode and negotiated algorithms. A VPN can protect traffic in transit but does not by itself establish complete end-to-end security. Wavetel WRTOS documents security features that may vary by model and release. This description does not establish IEC 62443 certification; verify any certification for the exact hardware and firmware.

Multi-Link Redundancy and Failover

Redundancy designs can include dual-SIM, wired/wireless backup or multi-WAN policies where the selected router supports them. Link-detection methods and failover behavior depend on device configuration, carrier and application; measure interruption and recovery in a site test instead of assuming a switching time or uninterrupted SCADA session.

Industrial-Grade Environmental Adaptability

Wavetel industrial routers are designed for harsh field environments and feature:

• 🌡️ Operating temperature: Check the published range for the selected model and installation conditions.

• ⚡ Input-voltage range: Confirm the selected model's rated supply range and power requirements.

• 🛡️ Ingress-protection rating: Verify the enclosure rating for the exact model and installation.

• 📳 Vibration/shock evidence: Confirm documented limits or test reports for the selected model and installation.

• 🔌 EMC evidence: Review model-specific test reports and any certification required for the installation.

For more information on industrial router hardware architecture and selection criteria, refer to Wavetel's in-depth industrial router hardware guide.

Remote Device Management (Cloud Platform)

Cloud-management platforms can provide centralized monitoring, configuration, firmware updates, fault diagnosis and remote restart where supported. They may reduce some site visits, but staffing and labor impact depend on the fleet, network coverage and operating process. For specific solution inquiries, visit the Wavetel technical support page.

Typical Application Scenarios

Power SCADA (Substation Monitoring)

Power SCADA systems commonly monitor dispersed substations and may require remote control. An industrial router can provide a network path, but support for IEC 60870-5-104 or IEC 61850 depends on the router/software, field controller and SCADA system. Verify compatible interfaces and protocol handling end to end. As distributed solar and wind power scales up, remote monitoring of renewable sites is also an important application. Wavetel provides dedicated IoT connectivity solutions for the energy and utilities sector, supporting smart grid management, real-time asset monitoring, and solar plant remote monitoring solutions.

Water Treatment SCADA Systems

Urban water supply and drainage systems include numerous pump stations, water treatment plants, and pipeline monitoring points. Industrial routers upload real-time data such as water levels, pressure, water quality, and motor status from each pump station to the water authority dispatch center, while receiving dispatch commands to remotely control pump starts/stops and valve positions, enabling dynamic pressure balancing across the network. Dual-link redundancy is especially critical here — a communication interruption could cause network pressure imbalance and service outages.

Oil and Gas Pipeline Monitoring

Pipeline monitoring stations are located every few tens of kilometers and often traverse complex terrain such as deserts, mountains, and rivers where wired communication is impractical. 4G industrial routers are the preferred solution. They must collect real-time pipeline pressure, flow, temperature, and cathodic protection potential data, and support remote control of emergency shutoff valves. The WRTOS system functions and availability vary by model and firmware. Check the selected unit's documentation for dual-SIM failover or power-loss recovery, then test those functions under the site's carrier and power conditions.

Smart Manufacturing and Device Connectivity

In smart factories, industrial routers aggregate data from PLCs, robots, CNC machines, and other production line equipment and upload it to MES or industrial cloud platforms, enabling digital management of production processes. As factories transition to flexible manufacturing, industrial wireless routers (Wi-Fi 6 or 5G) break free from the constraints of fixed wired networks, providing flexible network infrastructure for agile production lines. For more smart manufacturing applications, refer to the Wavetel industrial router product page.

Transportation and Infrastructure

Systems such as tunnel ventilation and lighting, bridge health monitoring, and traffic signal control all rely on SCADA architectures, with industrial routers connecting dispersed sensors and controllers to central management systems. Wavetel provides integrated IoT connectivity solutions for the smart city sector covering traffic management, environmental monitoring, and public safety, as well as vertical-scenario solutions such as elevator remote monitoring.

Core Value Delivered by Industrial Routers

Improved System Reliability

Mechanisms such as multi-link redundancy, automatic failover and watchdog-triggered restarts can improve link resilience, but they do not guarantee a fixed availability percentage. Actual performance depends on coverage, power, hardware, configuration and maintenance; define a measurement period and validate the system at the site.

Lower Deployment and O&M Costs

Wireless 4G access may avoid dedicated fiber trenching at some remote sites, but cost and deployment time vary by site. Compare coverage, civil works, permits, equipment, backhaul, data plans and maintenance needs for the specific installation. Centralized management may reduce some site visits, but staffing ratios and savings depend on fleet size and operating practice. For customization needs, Wavetel also provides custom R&D services, with hardware interfaces and protocol support tailored as needed.

Remote Visualization Management

When the cloud platform is deeply integrated with the SCADA system, managers can view real-time operational status of all networked devices on any terminal (PC, tablet, mobile phone). Combined with map visualization, topology diagrams, and real-time alerts, fault response time is reduced from hours to minutes.

Supporting Industrial IoT Upgrades

Industrial routers serve as an important bridge for upgrading traditional SCADA systems to IIoT. By supporting IoT standard protocols such as MQTT and HTTP, field data can be pushed directly to industrial cloud platforms and integrated with emerging technologies such as big data analytics, AI-based predictive maintenance, and digital twins, driving industrial operations from "automation" to "intelligence." Wavetel is dedicated to researching the application of 5G/6G, AI, and edge computing in the industrial internet — see their mission and vision page for details.

Industrial Router Selection Guide

Network Type (4G/5G/Wired)

Scenario	Recommended Solution
Remote areas / mobile scenarios	4G/5G industrial router with dual-SIM redundancy
Urban/campus areas with stable broadband	Wired WAN primary + 4G backup
High bandwidth / low latency requirements	5G industrial router
Critical nodes requiring extreme availability	Dual 5G redundant router

Browse the Wavetel router product catalog to filter suitable models by network type, interface configuration, and industrial protection rating.

Interface and Protocol Support

Confirm requirements based on field device types: the number of RS-232/RS-485 serial ports (for Modbus RTU or legacy RTUs), the number of Ethernet LAN ports, DI/DO digital I/O requirements, and the industrial protocols needed (Modbus TCP/RTU, DNP3, IEC 104, etc.). Refer to Wavetel's in-depth industrial router software analysis to confirm model-specific protocol support and test compatibility end to end; serial connectivity or a listed protocol does not guarantee translation, so a separate gateway or converter may still be needed.

Security Capabilities

Key evaluation criteria: supported VPN types and encryption algorithm strength (AES-256 preferred), firewall policy flexibility, ACL access control, two-factor authentication for device management interfaces, and the availability of regular security firmware updates. Industries such as power and petroleum should also verify whether the device holds IEC 62443 or other industrial cybersecurity certifications.

Industrial Protection Rating

• Indoor cabinet installation: IP30 is sufficient

• Outdoor / dusty / liquid splash environments: IP65 or higher

• Extreme cold environments (below -40°C): confirm wide-temperature specifications

• High-vibration scenarios (vehicle-mounted, construction machinery): verify relevant vibration test certifications

Platform and Management Capabilities

Key evaluation areas: device capacity, configuration templates and batch operation capabilities, alarm and notification mechanisms, log audit capabilities, and the degree of API openness. For purchasing processes and business cooperation, visit the Wavetel buying guide; for professional technical consultation, visit the Wavetel technical support page.

Future Trends: SCADA + Industrial Routers + IIoT

🔵 5G Private Networks Driving Communication Upgrades: The widespread adoption of 5G industry-specific private networks is accelerating. Ultra-low latency and ultra-high bandwidth will make demanding scenarios such as robot collaboration and remote precision control a reality. Wavetel's WR575 and WR677-D already support 5G NSA/SA dual-mode per 3GPP Rel-16, ready for future evolution.

🔵 Edge Computing Converging with SCADA: Industrial routers are evolving from pure communication devices into "communication + computing" edge nodes, performing tasks such as anomaly detection and AI inference at the field site for faster local closed-loop control and maintaining basic local control capability even during network outages.

🔵 Zero Trust Security Architecture Going Mainstream: Traditional "perimeter defense" models are no longer adequate against advanced persistent threats (APTs). Zero trust-based industrial network security architectures will become increasingly widespread, with industrial routers serving as key enforcement points for device identity authentication and continuous security monitoring.

🔵 Digital Twins Deeply Integrating with SCADA: High-frequency field data collected by industrial routers will become the foundation for building digital twin models, enabling real-time mapping of equipment health, fault prediction, and process optimization, pushing industrial operations toward greater intelligence.

🔵 Unified Platform Management Ecosystem Taking Shape: Unified industrial IoT platforms covering device management, data access, and application hosting are forming rapidly, integrating heterogeneous devices such as routers, gateways, and sensors under unified management, lowering the barrier for enterprises to build industrial internet capabilities. For Wavetel's technical direction and ecosystem development, see the company mission and vision page.

FAQ

❓ Q1: What is the fundamental difference between an industrial router and a regular enterprise router?

Industrial-router capabilities vary by model. Compare three areas: environmental adaptability (check the selected model's temperature, voltage, enclosure and vibration data); industrial protocol support (verify that interfaces and listed functions match the RTU/PLC and SCADA software); and reliability design (confirm the specific redundancy/watchdog functions and published reliability data; do not assume a higher MTBF than commercial routers). For details, visit the Wavetel industrial router product page.

❓ Q2: Is it secure enough to use 4G communications in a SCADA system?

A 4G carrier link should be protected according to the site's threat model. A VPN, firewall and access controls can reduce exposure, but a 4G + VPN setup does not by itself prove that a design meets industrial security requirements. VPN types and availability depend on the router model and firmware; verify the selected device's documentation and security configuration. See the WRTOS system overview for features documented for specific models and releases.

❓ Q3: How do industrial routers handle data during a network outage?

Some devices or applications provide store-and-forward buffering, but a router does not necessarily preserve application records during a WAN outage. Confirm which component buffers data, storage capacity, retention, timestamps and replay behavior, then test the full data path before relying on recovery.

❓ Q4: How should the total cost of ownership (TCO) of an industrial router be evaluated?

TCO should not focus solely on the purchase price. It must also consider: device MTBF (higher MTBF means lower repair costs), cloud management platform licensing fees, 4G/5G data charges, and the labor savings from reduced on-site maintenance dispatches. For further information on commercial proposals, refer to the Wavetel buying guide or contact the technical support team directly for a quote.