Secure.
A straightforward
solution.

We have focused on the essentials so that you can network your systems easily and securely. MIRO – the compact cellular router for reliable Internet connectivity, remote maintenance and IoT.

MIRO series

MIRO router
Compact. Easy. Secure.

Variant
MIRO-L100 MIRO-L100
MIRO-L110 MIRO-L110
MIRO-L200 MIRO-L200
MIRO-L210 MIRO-L210
MIRO-L230 MIRO-L230
Ethernet 1x Ethernet 10/100BT 1x Ethernet 10/100BT 2x Ethernet 10/100BT 2x Ethernet 10/100BT 2x Ethernet 10/100BT
Cellular radio 4G/LTE 4G/LTE 4G/LTE LTE 4G/LTE
Frequency bands EMEA USA/Canada EMEA USA/Canada world-wide
SIM 1x mini SIM (2FF) 1x mini SIM (2FF) 1x mini SIM (2FF) 1x SIM 1x mini SIM (2FF)
I/O 1x DI/O (configurable) 1x DI/O (configurable) 1x DI/O (configurable) 1x DI/DO 1x DI/O (configurable)
VPN Yes Yes Yes Yes Yes

Making complexity manageable

So that many requirements become one solution you can keep under control.

Developed in Regensburg. By people who live industrial quality.

“Connectivity is no longer a single application, but an increasingly complex system. We support you in maintaining an overview and staying in control.”

Gerhard Zenger
Teamlead Frontend

The one for your industry

Sabine Bleicher
Sales INSYS icom

“Our aim is to develop products that are not only technically state-of-the-art, but above all work in our customers’ day-to-day operations – reliably, securely and for the long term.”

MIRO – Compact. Easy. Secure.

MIRO – the compact LTE cellular router for reliable industrial networking. A simple solution for secure Internet connectivity, remote maintenance and IoT.

With the MIRO, you can reliably connect your systems and machines via cellular radio. It enables secure networking even when no wired Internet access is available. With its compact design, flexible DIN-rail mounting options and easy operation, it is the ideal solution for industrial applications, remote maintenance and IoT applications. Extensive country and provider approvals allow the MIRO to be used flexibly in different markets and applications.

Security at INSYS icom level. Security by Design, NIS2 and CRA readiness, together with extensive security functions, provide reliable protection for communication.

With its robust design, an operating temperature range of -40 °C to +75 °C and low power input, it operates reliably even under demanding conditions. Depending on the variant, one or two Ethernet ports and configurable digital inputs or outputs are available. With the additional options icom Connectivity Suite – VPN (iCS) and icom Router Management (iRM), you get straightforward solutions for secure VPN connections, remote maintenance and central management of your routers – simple and reliable from a single source.

The compact hardware combines powerful routing and network functions with extensive diagnostic, monitoring and management option sright in your control cabinet. Static and dynamic routing, VLAN, NAT/PAT, IPv4/IPv6 and event-driven actions enable flexible integration into a wide range of network infrastructures.

We think a thousand steps ahead

So you can take the next one.

01

Compact design

With dimensions of 26 x 77 x 99 mm, the MIRO is particularly compact and can be used flexibly. The router is also available as a module for integration (MIROdul).

02

Flexible mounting options

In addition to DIN-rail mounting in two alignments, screw mounting on walls, mounting plates or in automatic dispensing machines is also possible.

03

Extensive security functions

Thanks to the hardened operating system icom OS, the MIRO router combines functionality with security and thus ensures stable, secure data communication.

04

Industrial quality

The MIRO impresses with an extended temperature range and independently tested resistance to vibration and shock.

05

Plug & play connection of managed services

The managed services icom Router Management (iRM) and icom Connectivity Suite – VPN (iCS) allow users to implement central device management quickly and easily.

06

Optimal price-performance ratio

With the MIRO router, companies generate recurring revenue with a small investment.

Security.
A tailored solution

With the MIRO, you rely on Security by Design – consistently developed for unmatched security.

Secure Boot & hardened OS
Protection against manipulated images. icom OS 64-bit

IEC 62443-4-1 process
Certified security development process

NIS2 & KRITIS-ready
Traceable processes for regulated environments

Cyber Resilience Act (CRA)-ready
Secure by Design and securely connected

~12 firmware releases/year
Regular security updates. No “black box”

Further links, including our Knowledge Base for users:

10+

years lifetime

5

years warranty

~12

firmware releases/year

100%

final device testing

Technical information & features

Frequency bands ¹,
data rates
MIRO-L100 /-L200
& MIROdul-L100 /-L200
4G/LTE: 1 (2100 MHz), 3 (1800 MHz), 7 (2600 MHz), 8 (900 MHz), 20 (800 MHz), 28A (700 MHz) LTE Cat 1 (DL: max. 10 Mbit/s, UL: max. 5 Mbit/s)

3G/UMTS/HSPA: 1 (2100 MHz), 8 (900 MHz) , HSDPA/HSUPA (DL: max. 42 Mbps, UL: max.5,7 Mbps) ³

2G/GPRS/EDGE: 900, 1800 MHz, GPRS/EDGE Class 12 (DL: max. 296 kbit/s, UL: max. 237 kbit/s)
Frequency bands, data rates MIRO-L110 /-L210 (North America)
4G/LTE: 2 (1900 MHz), 4 (2100/1700 MHz AWS), 12 (700 MHz)
LTE Cat 1 (DL: max. 10 Mbit/s, UL: max. 5 Mbit/s)

3G/UMTS/HSPA: 2 (1900 MHz), 4 (2100/1700 MHz AWS), 5 (850 MHz)
HSDPA/HSUPA (DL: max 42 Mbit/s, UL: max 5.7 Mbit/s) ³
Frequency bands,
data rates
MIRO-L230
(world wide frequency bands)
4G/LTE: 1 (2100 MHz, 2 (1900 MHz), 3 (1800 MHz), 4 (2100/1700 MHz), 5 (850 MHz), 7 (2600 MHz),
8 (900 MHz), 12 (700 MHz), 13 (700 MHz), 18 (850 MHz), 19 (850 MHz), 20 (800 MHz),
25 (1900 MHz), 26 (850 MHz), 28 (700 MHz), 38 (2600 MHz), 39 (1900 MHz), 40 (2300 MHz),
41 (2500 MHz)
LTE Cat 4 (DL: max. 150 Mbit/s, UL: max. 50 Mbit/s) ³

3G/UMTS/HSPA: 1 (2100 MHz), 2 (1900 MHz), 4 (2100/1700 MHz AWS), 5 (850 MHz), 6 (800 MHz),
8 (900 MHz), 19 (850 MHz)
HSDPA/HSUPA (DL: max 42 Mbit/s, UL: max 5.7 Mbit/s) ³

2G/GPRS/EDGE: 850, 900, 1800, 1900 MHz, GPRS/EDGE Class 12 (DL: max. 296 kbit/s, UL: max. 237 kbit/s)
Antenna connection 1x SMA female
SIM1 slot for Mini-SIM card (2FF);
Provider scan, provider redundancy with multi-roaming SIM cards (see section “appropriate accessories”)
Cellular StatusSignal field strength, RSSI, RSCP / Ec/No, RSRP / RSRQ, SINR, Cell-ID, Location-ID
Ethernet-portsMIRO-L1x0 / MIROdul-L1x0: 1x RJ45 shielded,
MIRO-L2x0 / MIROdul-L2x0: 2x RJ45 shielded,
10/100 Mbit/s, Full/half duplex, Auto MDI-X, 1.5 kV isolation voltage
Ethernet-functionAssignment to IP network freely configurable per port, link-up/down detection
I/Os 1 digital input or output, configurable: Input low active (contact input) or output open drain (24 V / 50 mA)
Indicators (LEDs)Power, WAN (Internet connection), Signal (cellular communication)
Network
Network functionsUp to 100 IP networks, IP static/DHCP, TCP, UDP, IPv4, IPv6, NTP, DHCP, DNS, HTTP/S, ARP, SSH, 802.1Q VLAN incl. tags and trunk ports
ServiceDHCP Server v4/v6 per IP network, DHCP relay, NTP server, DNS, DynDNS, IPv6 Router Advertiser
RoutingStatic routing, routing priority, RSTP, dynamic routing (OSPF, BGP, RIPv1, RIPv2, RIPng)
WAN redundancy/failoverSeveral WAN connections configurable also in parallel operation, fallback level for connection
breakdown (failover), event-based WAN changeover (see events)
Connection checkPeriodic, ping/icmp, DNS request, link up/down
DSLPPPoE for external DSL modems
NAT/PATSNAT/DNAT (masquerade, netmapping, port forwarding, IP forwarding) unlimited number of rules
VPN
icom Connectivity SuiteSupports VPN service for remote maintenance, remote access and M2M-communication
OpenVPNClient/server, several parallel tunnels, server with up to 20 clients, tls-auth/tls-crypt, dead peer detection (DPD)
OpenVPN encryptionDES EDE 128, DES EDE3 192, AES 128-256 CBC/GCM, SHA 256-512, ChaCha20-Poly1305
IPsecIKEv1, IKEv2 (automatic, fix), several parallel tunnels, pre-shared keys, certificates,
tunnel mode, transport mode, dead peer detection (DPD)
IPsec encryptionDES EDE3 192 Bit, AES 128-256 CBC/GCM, SHA1, MD5, SHA 256-512,
DH-Group 1-31 (Diffie-Hellman 768 - 25519), ChaCha20-Poly1305
WireGuardWireGuard VPN client/server support
GREGRE via IPsec, point-to-point, multipoint
PPTPPPTP client/server; PAP/CHAP/MS CHAP/MS CHAP V2; MPPE 40-128
Dynamic VPNDynamic multipoint VPN (GRE, IPsec, NHRP, EIGRP, OSPF, RIPv1/v2, BGP)
IT security
AuthenticationPre-shared key, X.509 certificates, RADIUS, access rights (read, write, status)
Firewall / netfilterIP filters (stateful firewall) also in VPN tunnel; packet filter: TCP, UDP, ICMP, ESP, AP, GRE; MAC filter; pre-defined firewall rules can be activated
SecurityBooting signed firmware, HTTP/HTTPS attack prevention;
response upon events: configuration change, link up/down, restart, login attempt, netfilter violation, password hashing
Event & Action-HandlerNotification, alarming, diagnosis, attack detection, fault handling, operation and commissioning logic
Events / alarms
(selection)
Change: digital input, Ethernet port, WAN chain, profile status, supply input, cellular field strength;
timer expired, firewall violation, login attempt detection, pulse sequence on digital input, counter, netfilter rule, ping/icmp
Event-triggered
actions (selection)
Messages via e-mail, SMS (only cellular variants), SNMP traps, MCIP; switch profile, switch connection, change modem state, start timer, switch output or pulse sequence, activate firmware, reset, restart container
Monitoring and Management
MonitoringSNMP traps and agent, system logs, remote syslog (RFC 5424 & 3164), link up/down detection, netfilter violation
Certificate managementEST, CRL
icom Router ManagementSupports central router management for FW updates, configuration management, connection monitoring, container updates, mass rollout, certificate management, available as public/private cloud (server) installation or onPremises
Administration
ConfigurationWeb Interface HTTP(S) with session management, command line interface (CLI), Telnet, SSH, configuration profiles as ASCII and binary file, ample configuration profiles event-triggered, REST API
Diagnosis toolsPing/icmp, tcpdump, traceroute, DNS lookup, AT commands, port mirroring
FW updateIncremental, failsafe, update server (HTTP, FTP, HTTPS, FTPS), icom Router Management
System timeNTP client and server
HelpWeb interface: inline help, online help; example profiles, Configuration Guides
Supply
Voltage12 ... 24 V DC (±20%: 9,6 … 28,8 V), protected against reverse polarity and surge/transient pulses
Terminals3-pol. push-in terminal connectors, rigid/flexible conductors up to 1,5 mm²
Power consumptionTypical approx. 1,5 W (variants -L1x0) / 1,8 W (variants -L2x0), max. 5,0 W
Ambient conditions
DimensionsMIRO: 26 x 77 x 99 mm (W x H x D)
MIROdul: approx. 17 x 70 x 82 mm (W x H x D)
WeightMIRO-L1x0 /-L2x0: 94 g / 100 g
MIROdul -L1x0 /-L2x0: 42 g / 48 g
MountingMIRO: DIN rail mounting, horizontal pitch (HP) on DIN rail:
Switch cabinet: 1.5 HP, depth on DIN rail 92 mm
Small distribution board: 4.5 HP, requires additional lateral DIN rail adapter set MIRO (accessory)
MIRO/MIRO dul: screw mounting via holes in the housing/module
Temperature-40 …. +75 °C ² (operation and storage)
Humidity0 … 95 % (non-condensing)
IP ratingHousing: IP40
Approvals & Standards
Certifications MIRO-L100: CE, UKCA
MIRO-L200: CE, UKCA, AT&T – SIM only
MIRO-L110/-L210: FCC part 15 class B, IC (ISED Canada), PTCRB & IoT network certification,
AT&T - NR-AM-DO
MIRO-L230: CE, UKCA, FCC part 15 class B, IC (ISED Canada), PTCRB & IoT network certification,
AT&T - NR-AM-DO, AT&T – SIM only, CCC/CQC, SRRC, NAL, MIC
MIROdul -L1x0/-L2x0: Approval takes place in the application, INSYS supports ⁴
Validity regions of certificationsCE, UKCA: all EU countries, Albania, Bosnia and Herzegovina, Georgia, Iceland, Liechtenstein, Moldova, Montenegro,
North Macedonia, Norway, Switzerland, Serbia, Turkey, Ukraine, United Kingdom
FCC part 15 class B: USA
IC (ISED Canada): Canada
CCC/CQC, SRRC, NAL: China
MIC: Japan
PTCRB IoT network certification: US provider certification
AT&T - NR-AM-DO: provider certification AT&T for USA & Canada
AT&T – SIM only: provider certification for AT&T “global SIM”
EMCEmission: EN 55032 class B, EN 61000-6-3; Immunity: EN 55035 (replaces EN 55024), EN 61000-6-2
SafetyIEC/EN 62368-1
Environmental
conditions
Vibration and mechanical shock tests as per DIN EN 61131-2 in accordance with EN 60068-2-6 and EN 60068-2-27;
Temperature tests as per EN 60068-2-1, EN 60068-2-2, EN 60068-2-14, EN 60068-2-30
Operating time MTBF > 1.000.000 h (25 °C), according to SN 29500 (according to IEC 61709)
Available Variants
Product nameFeaturesArt. nr.
MIRO-L100LTE cellular router, 1 Ethernet port, 1 dig. Input/Output (configurable)10022846
MIRO-L200LTE cellular router, 2 Ethernet ports, 1 dig. Input/Output (configurable)10023341
MIRO-L230 LTE cellular router (worldwide frequencies), 2 Ethernet ports, 1 dig. Input/Output (configurable)10024177
MIROdul-L100LTE cellular router module, 1 Ethernet port, 1 dig. Input/Output (configurable)10023100
MIROdul-L200LTE cellular router module, 2 Ethernet ports, 1 dig. Input/Output (configurable)10023343
MIROdul-L230 LTE cellular router module (worldwide frequencies), 2 Ethernet ports, 1 dig. Input/Output (configurable)10024706
Suitable accessories
Product nameDescriptionArt.-nr
Magnetic Antenna 4G IP65 3mMagnet mounting, height 72 mm, 3 m cable, SMA (m), ingres protection IP6510019504
Wall Antenna 4G IP67 5mWall mounting, height 220 mm, 5 m cable, SMA (m), ingres protection IP6710020596
Allround Antenna 5G/4G IP66 5mScrew or wall mounting, height 82 mm, 5 m cable, SMA (m), ingres protection IP6710022961
Roof Mount Antenna 4G IP67 3mScrew mounting, height 15 mm, 3 m cable, SMA (m), ingres protection IP67 10022309
Antenna Extension Cable 5 m SMADevice connector: SMA (f), antenna connection: SMA (m) 10015193
Antenna Extension Cable 10 m SMADevice connector: SMA (f), antenna connection: SMA (m) 10018607
Antenna Extension Cable 15 m SMADevice connector: SMA (f), antenna connection: SMA (m) 10000735
Power Supply 24V 15WPower supply unit for DIN rail, wide-range input voltage AC and DC, 15 W output power, protection against short circuit / overload / over voltage10022848
Power supply 24V 30WPower supply unit for DIN rail, wide-range input voltage AC and DC, 30 W output power, protection against short circuit / overload / over voltage10026178
Wall Power Supply 24V 25W international Power supply AC/DC with mains plug, suitable for desktop use, wide input voltage range, 25W output power, protection against short, circuit/overload/over voltage10022849
icom Connectivity Suite – VPNSupports VPN service for remote maintenance, remote access and M2M communicationvarious
icom Connectivity Suite – M2M SIMIndustrial SIM cards, multi-roaming, pooling, management portalvarious
icom Router ManagementSupports central router management for FW updates, configuration management, connection monitoring, container updates, mass rollout,various

All information about the MIRO frequency variants and design variants can be found in our Knowledge Base.

1 Please check the availability of the cellular communication frequencies in the planned operating area.
The above specified frequencies are currently used in Europe, the Middle East, Africa and partly in the Asia-Pacific region and South America.”

² +70°C … +75 °C: extended temperature range (refer to www.insys-icom.com/en/extended-temperature-range/)

³ These values concern the radio interface. Due to the 100 Mbit/s Ethernet interface and a single antenna solution, the achievable data rates are lower.

4 The MIROdul variants are integration modules without housing and therefore without approval. Since the MIRO products with approvals are internally identical, reference can be made to the MIRO approvals when approving a MIROdul application.
However, a differential assessment is necessary, which INSYS supports.

H. Tautor
Head of Sales

L. Abu Isbeih
Senior Key Account Manager

A. Wels
Vice president Project Business icom

Personal consultation directly from the manufacturer

From Regensburg, our experts support you with selection, configuration and migration. From test provision to successful operation.

Secure.
Designed as a system

MRX.neo is part of a holistic solution comprising VPN, management and services – for end-to-end security across your entire infrastructure.

MIRO – Frequently asked questions

What applications is the MIRO suitable for?

The MIRO is a compact LTE cellular router for industrial applications that require a reliable Internet or remote access connection – especially where no wired Internet connection is available.

Typical areas of application include remote maintenance and service, plant and mechanical engineering, charging infrastructure, energy technology, building automation and IoT applications. The MIRO securely connects machines, systems and their control or monitoring systems to higher-level networks or enables controlled remote access.

The MIRO is particularly practical for applications that require a compact, easy-to-integrate and reliable communication solution.

Can the MIRO also transmit operational and condition data?

Yes. The MIRO can forward data from connected systems and equipment via the existing network connection. This makes it possible, for example, to provide operational, condition or diagnostic data to higher-level monitoring, management or cloud applications.

This creates the basis for applications such as condition monitoring, energy management, fault analysis or central monitoring of distributed systems.

The MIRO handles the communication and routing tasks between the local system and the higher-level systems.

What network functions does the MIRO offer?

With its compact design, the MIRO provides extensive routing and network functions for industrial integration. These include static and dynamic routing, VLAN, NAT/PAT, and IPv4 and IPv6.

This allows the MIRO to be integrated into different network architectures and used, for example, for structured connections between machine, system, service or higher-level networks.

Depending on the variant, one or two Ethernet ports are available.

Can I use the MIRO to separate different networks from one another?

Yes. VLANs and routing functions can be used to separate different network segments in a structured way. This is useful, for example, when a separate service, diagnostic or higher-level network needs to be connected in addition to the actual system network.

Which networks are allowed to communicate with one another can be specifically configured depending on the desired architecture. This allows you to structure communication and avoid unnecessary connections.

Can the MIRO be integrated into existing network architectures?

Its routing, VLAN and NAT/PAT functions allow the MIRO to be flexibly integrated into existing OT and IT networks.

For example, the MIRO can be used as a gateway between a local system network and the cellular network. Depending on the network architecture, additional network segments can also be connected and separated from one another.

What do I use the digital input or output for?

The MIRO has a configurable digital input or output. It can be used to capture conditions from the system or trigger external events and functions.

This makes it possible, for example, to integrate operating conditions, switching signals or defined events into the communication logic of the router.

The specific function and configuration depend on the respective MIRO variant and application.

How robust is the MIRO for industrial use?

The MIRO was developed for reliable operation under demanding ambient conditions. It operates within an operating temperature range of -40 °C to +75 °C and is characterised by low power input.

The compact design and DIN-rail mounting enable space-saving integration directly in the control cabinet.

This also makes the MIRO suitable for distributed applications where little space is available and the communication hardware needs to operate continuously and reliably.

Can I also use the MIRO for many distributed systems?

Yes. The MIRO is particularly strong in decentralized systems and infrastructures. Via cellular radio, for example, many charging points, energy systems or technical building systems can be connected independently of a local Internet connection.

In combination with icom Connectivity Suite – VPN, iCS for secure VPN connections, and icom Router Management, iRM for central router management, this creates an end-to-end solution for networking, remote access and operation.

This makes it possible to centrally manage larger installations and reduce service and maintenance effort.

Get started now!

We will be happy to answer your specific questions and address your challenges.