What Is a Cellular Gateway?
At most remote oilfield and pipeline sites there is no wired internet - the link back to SCADA rides a cellular network. A cellular gateway is the industrial router that provides that link. This guide explains what a cellular gateway does, how it differs from a consumer hotspot, and where it fits in a remote monitoring architecture.
Cellular Gateway in one line: A cellular gateway is an industrial router with an embedded 4G/5G modem and a SIM that connects field devices - RTUs, PLCs, flow computers - to a SCADA system over a mobile carrier network, giving a remote site an IP connection where no wired line exists.
What a Cellular Gateway Does
A cellular gateway sits between the local instruments at a site and the wider network. On its LAN side it offers Ethernet, serial (RS-232/RS-485), and sometimes digital I/O so it can talk to whatever is on the pad - a flow computer, an RTU, a PLC. On its WAN side it uses a cellular modem and SIM to reach the carrier, obtaining an IP address and routing the site's traffic to the SCADA host in a data center or cloud.
Unlike a consumer hotspot, an industrial cellular gateway is built for the field: wide operating temperatures, DC power (often solar and battery), surge protection, a watchdog that reboots the radio if the link stalls, and remote management so a technician never has to drive out to reset it. Many also add a local firewall, VPN client, and multiple SIMs for carrier failover.
Gateway vs Modem vs Router
The terms overlap in practice. A cellular modem is just the radio - the component that turns data into an RF signal on the carrier's spectrum. A cellular gateway (or cellular router) is a modem plus a router: it adds LAN ports, NAT, firewalling, VPN, and management around that radio so multiple downstream devices can share one connection. If you only need to connect a single serial device, a bare modem may do; if you have several devices and want a managed, secure link, you want a gateway.
Because carriers place most cellular data connections behind carrier-grade NAT, the site rarely gets a public, inbound-reachable IP. That shapes the whole design: gateways are usually configured for outbound-only connections or a VPN, and the SCADA platform polls or receives data rather than the head end dialing into the site.
Selection Criteria That Matter in the Field
Spec sheets for industrial gateways blur together; these are the criteria that actually separate candidates for an unmanned site:
- Carrier certification and band support for the networks that genuinely cover the site, verified by a signal survey rather than a coverage map.
- Operating temperature range matched to the enclosure environment, since the gateway usually lives in an unconditioned box.
- A DC input range wide enough for the site's solar and battery bus, with documented idle and transmit power draw for the power budget.
- The serial and Ethernet port mix the site's devices need, including RS-485 if legacy instruments will land on it.
- Hazardous-area rating where the mounting location's area classification requires one.
- Dual-SIM failover, a hardware watchdog, and remote management, because every truck roll the gateway prevents pays for it again.
The last line deserves the most weight. At a manned facility a hung router is an annoyance; at a site three hours out, it is a day of lost visibility and a drive. Recovery features - watchdogs, scheduled reboots, out-of-band reset - are what make a gateway an unattended device rather than a device that usually works.
Surveying Signal Before Mounting
Bars on a phone are not a survey. The metrics that predict a stable link are the modem's reported reference-signal measurements, RSRP and RSRQ, read at the exact mounting position and antenna height that will actually be used, ideally at different times of day since cell loading changes. What counts as adequate depends on band and technology, so record the readings and compare them against the modem vendor's guidance rather than a remembered rule of thumb.
The survey decides the antenna strategy: whether a small omnidirectional antenna suffices or the site needs an elevated directional antenna aimed at a distant cell. Cable length matters as much as antenna choice, because coax loss quietly eats the gain a bigger antenna provides. A methodical walk-through of the whole exercise is in how to survey cellular signal before mounting a gateway.
A Symbolic Power Budget
At a solar-powered site the gateway is often the largest continuous load, so it belongs at the top of the power worksheet. Written symbolically: if the gateway draws average power P continuously, daily consumption is P multiplied by 24 hours. The solar array must replace that energy during the worst month's sun window, and the battery must carry the load through D days of autonomy, needing usable capacity of at least (P times 24 times D) divided by the bus voltage V in amp-hours, derated for temperature and depth of discharge per the battery datasheet.
Every input is site- and device-specific, and one interaction is easy to miss: transmit power depends on signal quality, so poor coverage quietly raises average draw because the radio works harder. That coupling between the RF survey and the energy math is a common reason winter outages hit the sites with the worst signal first. A structured template lives under the solar power budget for an RTU, and the same worksheet covers the gateway line item.
Frequently Asked Questions
What is the difference between a cellular gateway and a cellular modem?
A cellular modem is only the radio that connects to the carrier. A cellular gateway wraps that modem in a router - adding LAN ports, NAT, a firewall, VPN, and remote management - so several field devices can share one secure connection to SCADA.
Do I need a static IP or a private APN for a cellular gateway?
Not for outbound-only monitoring. Because carriers use carrier-grade NAT, most gateways cannot be reached inbound on a public IP anyway. A private APN or VPN is used when you need the gateway addressable from the head end or want traffic kept off the public internet.
How does a cellular gateway connect remote sites to Merobix?
The gateway gives the site an IP path to the internet, and Merobix reads the device behind it - a flow computer or RTU over Modbus, DNP3, or IEC 60870, or data published over MQTT - so a cloud SCADA can monitor the pad with no server on site.
How should a cellular gateway be secured?
Treat it as the site's network perimeter: change default credentials, disable unused services and inbound ports, keep the firewall default-deny, use a VPN or private APN when the head end must reach inward, and keep firmware current through remote management. Outbound-only architectures shrink the attack surface further, since nothing on the internet can initiate a connection to the site.
What happens when the carrier link drops?
A well-configured gateway detects the stall with a link watchdog, resets the radio, and fails over to its second SIM if the first carrier stays down. Field devices keep logging locally through the outage, and the SCADA host can backfill the gap when the link returns provided the devices and protocol support buffered or historical data - something worth proving during commissioning rather than during the first real outage.
Sources and verification
This page references the protocol specifications published by the organizations below. Editions, product capabilities, and documentation change over time - confirm current requirements and specifications directly with the source.
- Modbus Application Protocol Specification - Modbus Organization
- Overview of DNP3 (IEEE Std 1815) - DNP Users Group
- MQTT Version 5.0 (OASIS Standard) - OASIS (v5.0, 2019)
Merobix is not affiliated with, endorsed by, or sponsored by these organizations; their names are used only to identify the standards and products discussed.
Automation services
Need help turning this into a working system?
Merobix integrates SCADA, programs Allen-Bradley and Siemens PLCs, and designs and fabricates industrial control panels.
Meeting requests are reviewed before confirmation.