Product / Cellular Routers

CN350W-4G
4G Industrial Router

Dual-SIM 4G LTE Cat-4 connectivity, five Ethernet ports, RS232 + RS485 serial, Modbus-to-MQTT data collection and multi-protocol VPN — in a rugged metal casing built for −30 °C to 75 °C environments.

4G LTE Cat-4Dual SIM 5× EthernetRS232 + RS485 SD-WAN · WireGuard · OpenVPN · IPsec

Request a Quote Download Datasheet (PDF)

CloakNet CN350W-4G industrial 4G LTE router

Highlights at a glance

Built for industrial connectivity that can't fail

⇆

Dual-SIM failover

Two SIM slots with automatic failover keep industrial links online through carrier outages.

⌁

RS232 & RS485 built in

Direct PLC communication and Modbus TCP/RTU data collection from serial field devices.

☁

MQTT cloud reporting

Publish field telemetry to any MQTT cloud platform for remote monitoring and IoT applications.

⛨

Multi-protocol VPN

SD-WAN, WireGuard, OpenVPN, IPsec and L2TP for secure remote access to every site.

Secure industrial VPN for remote engineering

Reach NVR, IoT or PLC equipment through encrypted tunnels — SD-WAN, WireGuard, IPsec, OpenVPN or m2mCloud — from the engineering desk to the field side, without exposing the machine network.

Client/server switchable OpenVPN with 40 encryption methods
Up to 10 IPsec tunnels (IKEv1/IKEv2, DES to AES256)
SD-WAN or server-relay secure remote access

Secure industrial VPN: remote engineer accessing field PLCs through encrypted tunnels

Centralized data collection at the edge

One gateway connects NVR, IoT, PLCs, sensors, meters and drives over RS485 and Ethernet, normalizing Modbus data for upstream systems.

Modbus functions 01–06 supported
16/32/64-bit data formats: INT, UINT, HEX, Float, Long, Double (and inverse)
Compatible with mainstream global NVR, IoT and PLC brands

Centralized data collection: one gateway connects NVR, IoT & PLCs, sensors and meters

Modbus RTU to MQTT/TCP cloud reporting

Turn field data into real-time cloud monitoring. Collect from RS485 devices and publish structured telemetry to your MQTT or TCP cloud platform.

MQTT publisher, subscriber and answer modes
Modbus TCP/RTU status and control
Dashboards for device, uptime, telemetry and alerts

MQTT cloud reporting from the CN350W-4G edge gateway

Remote management, anywhere

Configure, monitor and diagnose field devices remotely through the WebUI and JSON-RPC API (NVR, IoT, PLC) — from Anywhere Office, solar stations and water pumps to weather stations and level sensors.

HTTP WebUI: status, configuration, firmware update, logs
JSON-RPC management API over HTTP
Firmware updates without losing configuration

Remote management dashboard controlling a CloakNet field gateway

Technical specifications

CN350W-4G full specifications

From the official datasheet V1.1 · 2026. Download the PDF for the complete document.

Modem

Modem module	4G (LTE) Cat-4: LTE-FDD max downlink 150 Mbps / uplink 50 Mbps; LTE-TDD max downlink 130 Mbps / uplink 30 Mbps
Status	Signal strength (RSSI), SINR, RSRP, RSRQ, BAND, IMSI, ICCID
APN	Auto APN; Custom APN
PDP	Different PDNs for multiple network access and services

Wireless

Wireless mode	IEEE 802.11b/g/n; Access Point (AP), Station (STA)
WiFi security	WPA2-PSK, WPA-PSK; AES, TKIP
SSID	SSID stealth mode
WiFi users	Up to 50 simultaneous connections

Ethernet & Network

LAN	4 × LAN ports, 10/100 Mbps, IEEE 802.3 / 802.3u, auto MDI/MDIX
WAN	1 × WAN port, 10/100 Mbps, IEEE 802.3 / 802.3u, auto MDI/MDIX
Routing	Static routing
Network protocols	TCP, UDP, IPv4, ICMP, NTP, DNS, HTTP, FTP, SSL v3, TLS 1.3, ARP, PPP, PPPoE, SSH (v1, v2), DHCP, Telnet client, MQTT
Connection monitoring	Scheduled tasks, ICMP for link inspection
DHCP	Static and dynamic IP allocation
Link backup	Modem, WiFi and WAN options, each usable as backup with automatic failover

Security

Firewall	Pre-configured rules via WebUI; Port forward; DMZ; DNAT; SNAT; MASQ
Attack prevention	DDoS prevention, IP spoofing, port scan prevention, SYN flood protection, multicast restriction, IDENT blocking
Domain filtering	Blacklist to block unwanted websites, whitelist to allow specified sites only

SD-WAN and VPN

OpenVPN	Client/server mode switchable, 40 encryption methods
WireGuard	Point-to-point encrypted tunnel
IPsec	IKEv1, IKEv2; up to 10 IPsec tunnels; 5 encryption methods (DES, 3DES, AES128, AES192, AES256)
L2TP	Client/server mode switchable
m2mCloud	TCP and UDP (routing/bridging mode); secure remote access via P2P tunneling or server-relay architecture
SD-WAN	CloakNet SD-WAN supported

Modbus TCP/RTU Master & IoT

Supported functions	01, 02, 03, 04, 05, 06
Supported data formats	16-bit: INT, UINT, HEX · 32-bit: Float, Float_Inverse, Long, Long_Inverse · 64-bit: Double, Double_Inverse
MODBUS–MQTT	MODBUS TCP/RTU status/control; MQTT publisher, MQTT subscribe, MQTT answer
Web	HTTP WebUI: status, configuration, FW update, troubleshoot, system log, kernel log
JSON-RPC	Management API over HTTP
Clouds of things	Monitoring of device data, modem data, network info, availability

Hardware & System

CPU	MT7628AN / NN
RAM	128 MB DDR2
Flash storage	16 MB SPI NOR Flash
GPS	Optional
Firmware update	Update without losing current configuration; HTTP and CFE upgrade methods
Operating system	CloakNet Router OS
Supported languages	Busybox shell, C, C++

Power

Connector	Industrial 12 V round-hole interface
Input voltage range	9 – 36 V DC, reverse polarity protection
Power consumption	< 3.5 W

Physical Interfaces

Ethernet	5 × RJ45 ports, 10/100 Mbps, IEEE 802.3 / 802.3u, auto MDI/MDIX
Serial	1 × RS232, 1 × RS485
Status LEDs	Power SYS, modem network status, modem signal strength, WiFi status, SIM1 & SIM2 detection, 4 × LAN, 1 × WAN
SIM	2 × SIM slot, 3.3 V, external SIM holder
Antennas	2 × SMA for 4G, 2 × SMA for WiFi (if GPS is selected, one SMA serves GPS and WiFi keeps 1 antenna)
Reset	Reboot / factory reset button

Physical Specification

Casing material	Metal casing
Dimensions (W × H × D)	174.00 × 97.70 × 27.00 mm (box: 262.00 × 125.00 × 85.00 mm)
Weight	544 g
Mounting	Ear-hook installation

Operating Environment & Compliance

Operating temperature	−30 °C ~ 75 °C
Operating humidity	< 95 % non-condensing
Standards	Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-52 V1.1.0; FCC 47 CFR Part 15B (2017), ANSI C63.4 (2014)
EMI immunity	ESD EN61000-4-2:2009 · RS EN 61000-4-3 · EFT EN 61000-4-4:2012 · Surge EN 61000-4-5 (AC line & Ethernet, ITU-T K21 cl. 7.1) · CS EN 61000-4-6:2009 · DIP EN 61000-4-11:2004

Radio & Bundled Antennas

RF technologies	4G, WiFi, GPS
Max RF power	25 dBm @ LTE, 15 – 30 dBm @ GPS, 20.5 dBm @ WiFi
Modem antenna	698~960 / 1710~2690 MHz, 50 Ω, gain 5 dBi, SMA male connector
WiFi antenna	2400~2500 MHz, 50 Ω, gain 3 dBi, SMA male connector

Regional Frequency Versions

VERSION_CN China, India	4G LTE-FDD: B1, B3, B5, B8 · LTE-TDD: B34, B38, B39, B40, B41 · WCDMA: B1, B5, B8 · GSM/EDGE: B3, B8
VERSION_EU Europe	4G LTE-FDD: B1, B3, B5, B7, B8, B20, B28 · LTE-TDD: B38, B40, B41 · WCDMA: B1, B5, B8 · GSM/EDGE: B3, B8
VERSION_AU Latin America, Australia, New Zealand	4G LTE-FDD: B1, B2, B3, B4, B5, B7, B8, B28, B66 · LTE-TDD: B40 · WCDMA: B1, B2, B4, B5, B8 · GSM/EDGE: B2, B3, B5, B8
VERSION_EL Europe, Asia Pacific	4G LTE-FDD: B1, B3, B5, B7, B8, B20, B28 · LTE-TDD: B38, B40, B41 · WCDMA: B1, B5, B8

Getting started

Hardware installation & what's in the box

Installation in four steps

Push the SIM button with the SIM needle, pull out the SIM holder, insert your SIM card and slide the holder back in (dual-SIM).
Attach the 4G and WiFi antennas to the SMA connectors on the device.
Connect the power adapter (9 – 36 V DC) to the 12 V round-hole socket, then plug into a power outlet.
Connect wirelessly using the SSID and password on the device label, or via Ethernet to a LAN port. Then browse to http://192.168.8.1 to open the WebUI.