Secure.
A tailored solution.

Wi-Fi: What’s the difference between Access Point and Client mode – and when should I use 2.4 GHz or 5 GHz?

Depending on the application, WiFi can serve different purposes in the MRX.neo.

As an Access Point, it provides direct local access to the router, for example during commissioning, diagnostics, or service. As a Client, the MRX.neo connects to an existing WiFi network and uses it as its uplink.

As for frequency selection, 2.4 GHz is the preferred choice when range and compatibility are the priority. 5 GHz is recommended when higher performance and less congested channels are more important. Since WiFi is configured for a specific use case, only one frequency band or operating mode can be active at a time.

Dual SIM in the MRX.neo: How does DSSS ensure reliable cellular connectivity?

Dual SIM enables highly reliable cellular connectivity by using two SIM cards within a clearly defined failover concept. With Dual SIM Single Standby (DSSS), only one SIM is actively connected, while the second SIM remains on standby.

If the primary connection fails or no longer meets predefined requirements, the router automatically switches to the secondary SIM. This increases the availability of the cellular connection without introducing the complexity of parallel cellular links. DSSS therefore means redundancy and automatic failover, rather than load balancing or active-active operation.

Which SIM strategy is best for the MRX.neo – maximum availability or cost optimization?

The ideal SIM strategy depends on whether your priority is maximum availability or compliance with cost and policy requirements. For high availability, we generally recommend using Provider A as the primary SIM and Provider B as the backup SIM.

When cost optimization or internal policies are more important, a lower-cost primary data plan combined with a robust backup plan may be the better choice. For industrial applications, we recommend using M2M SIM cards, as they are specifically designed for long-term operation and demanding environments.

When does it make sense to segment IT, OT, and service networks with the MRX.neo?

Network segmentation using VLANs and managed switch functionality is beneficial whenever the MRX.neo needs to separate different network domains — for example IT, OT, service access, or dedicated camera, diagnostic, or process networks.

The benefits are twofold: segmentation improves network visibility while also enhancing security by clearly separating traffic, user roles, and access rights.

This is particularly valuable in applications involving multiple users, different permission levels, or higher network traffic.

When are RS-485 and RS-232 still useful with the MRX.neo?

RS-485 and RS-232 remain highly relevant whenever existing field devices, sensors, or legacy equipment communicate via serial interfaces. This is especially true for legacy installations and retrofit projects where existing infrastructure is intended to remain in operation.

The practical advantage is the straightforward integration of serial devices, for example through Serial over IP or by using the router as a Modbus RTU-to-TCP gateway. This allows the MRX.neo to combine modern routing capabilities with proven OT connectivity.

Secure Boot in the MRX.neo: What role does it play in secure operation?

Secure Boot strengthens the platform’s chain of trust by protecting the device’s startup process. The MRX.neo only boots with approved and digitally signed INSYS firmware, while the entire boot sequence is cryptographically verified. This significantly reduces the risk of unauthorized or manipulated software being executed.

It is important to understand that Secure Boot is an additional security layer rather than a replacement for secure configuration, network segmentation, access control, or organizational cybersecurity processes. Today, routers running icom OS already accept only digitally signed firmware. Secure Boot extends this protection to the entire startup process, including the bootloader.

Containers / LXC in the MRX.neo: Which edge applications can be implemented directly on the platform?

With containers (LXC), the MRX.neo becomes a local platform for edge applications such as protocol gateways, data logging, edge analytics, or customer-specific logic.

This enables data and protocols to be processed directly on the device, reducing the need for additional IPC hardware in many applications.

Another advantage is operation in the field: In combination with INSYS icom Router Management (iRM), applications can be deployed, managed, and updated in a targeted way. The main limitations apply to applications requiring very high computing power – for example due to inefficient implementation or extremely high performance requirements.

MRX.neo specific

4G, 5G SA, and 5G NSA: What do these terms mean?

• 4G is the established cellular standard and remains a very good and often fully sufficient solution for many applications such as remote maintenance, monitoring, and telemetry.
• 5G NSA (Non-Stand-Alone) uses 5G radio technology but still relies on existing 4G infrastructure within the network architecture.
• 5G SA (Stand-Alone) is the full 5G implementation based on a dedicated 5G architecture. For your application, the abbreviation itself is less important than understanding what your location actually supports and which requirements your application has regarding data rates, availability, and future readiness.

With the MRcard MSI.5G, the following theoretical maximum data rates at the radio interface are possible:

• 5G NSA: up to 3.4 Gbit/s downlink / 0.46 Gbit/s uplink
• 5G SA: up to 2.5 Gbit/s downlink / 0.90 Gbit/s uplink
• 4G (LTE Cat 19): up to 1.6 Gbit/s downlink / 211 Mbit/s uplink

In practice, however, the achievable performance always depends on additional factors such as network availability, provider, tariff, antenna concept, installation conditions, and actual coverage at the location. If 4G reliably meets your requirements, there is not automatically a need to move to 5G. However, if higher data rates, increased future readiness, or generally higher demands on the cellular connection are required, 5G is the right choice.

How can I find out whether my tariff, provider, and location support 5G – and what requirements apply to the router and antennas?

Whether 5G can be used effectively in your application mainly depends on four factors:

1. Your location must have actual 5G coverage – not only according to the network map, but under real installation conditions
2. Your tariff and SIM card must have 5G enabled
3. The router must support the required 5G standards and frequency bands
4. The antenna concept must match the requirements of the application

Especially when it comes to antennas, a closer look is worthwhile:

For full 5G performance and maximum throughput, you should generally plan for four antennas. This is particularly important when high data rates, challenging radio conditions, or maximum connection stability are required.

For simpler applications, two antennas may be sufficient, although usually with limitations regarding performance and available reserves.

The number and quality of antennas therefore have a direct impact on how much of the theoretically available 5G performance can actually be achieved at the installation site.

For industrial applications, we generally recommend using M2M SIM cards, as they are designed for long-term operation and increased reliability.