When a cellular gateway at a well site connects to the network, the carrier has to decide where that data goes - straight to the public internet, or into a private network you control. The setting that decides this is the APN. This guide explains what an Access Point Name is and why it matters for SCADA telemetry.
APN in one line: An APN (Access Point Name) is the configuration string a cellular device uses to tell the carrier which gateway to route its data through, effectively selecting the network the SIM connects to - the public internet on a standard APN, or a private, customer-controlled network on a private APN.
Every cellular data SIM is provisioned with one or more APNs. When the modem attaches to the network and requests a data session, it names an APN. The carrier's core network uses that name to pick the packet gateway (the PGW in LTE, or GGSN on older networks) that handles the session - assigning an IP address and defining what the device can reach. In effect the APN is the door the SIM's traffic walks through to leave the cellular network.
A public APN drops the device onto the open internet, usually behind carrier-grade NAT with a dynamic, private-range IP. A private APN routes the SIM's traffic instead into a dedicated network - reached over a VPN, MPLS, or direct interconnect to your data center - so the field devices never touch the public internet.
For a fleet of remote RTUs and flow computers, a private APN is a common design. It keeps telemetry traffic on a network the operator controls, gives every SIM a predictable IP range (which simplifies polling and firewalling), and can make devices addressable from the head end without exposing them to the internet. It also lets the operator apply a single security policy across the whole fleet rather than trusting each site's local firewall.
That said, a private APN is not a substitute for encryption or authentication - it controls routing, not the confidentiality of the payload. Many operators pair a private APN with an outbound-only, encrypted connection so the two layers reinforce each other. Merobix reads the field devices behind either arrangement over Modbus, DNP3, or MQTT, whichever the site provides.
A public APN puts the SIM on the open internet, typically behind carrier NAT with a dynamic IP. A private APN routes the SIM's traffic into a dedicated, customer-controlled network reached over VPN or a direct carrier interconnect, keeping telemetry off the public internet.
No. An APN only decides how the carrier routes the data session; it does not encrypt the payload. A private APN reduces exposure by keeping traffic off the public internet, but you still want transport encryption and device authentication on top of it.
The APN is configured on the cellular gateway or modem, usually alongside any SIM username and password the carrier supplies. Correct APN settings are one of the first things to check when a new SIM fails to get a data connection.
This page references the protocol specifications published by the organizations below. Editions, product capabilities, and documentation change over time - confirm current requirements and specifications directly with the source.
Last reviewed: July 27, 2026. Merobix is not affiliated with, endorsed by, or sponsored by these organizations; their names are used only to identify the standards and products discussed.
Merobix reads your field devices into a cloud SCADA - the real thing behind these terms, live in days from any browser.