Perle IRG5140+ Cellular LTE Router

The Perle IRG5140+ LTE Router has the most comprehensive set of features, functionality, and performance to provide primary or failover back-up connectivity to remote infrastructure and assets. This DIN Rail mountable, rugged, high-performance Cellular Router, with dual-SIM slots, is easily deployed with no need for training because of the intuitive web GUI. For advanced admin scrips, CLI commands are also available.

The IRG5140+ LTE Router provides fast and reliable network connectivity where wired options are impossible to deploy or require a backup. This is crucial for enabling a wide range of applications while ensuring the highest degree of security to protect the integrity of critical services. Reduce the cost of downtime and service calls, and bringing distributed sites online faster. With support for Data, SMS, Voice, and Video, the IRG5140+ and can be integrated into any enterprise cloud, building, industrial, or mobile location network infrastructure.

• Building and process automation controllers, Internet of Things (IoT)
• Smart grid assets (meters, switches, controllers), Telco infrastructure controllers
• SCADA, Distribution management systems, Remote data loggers, flow meters, sensing equipment
• Digital signage, ATMs, POS, Kiosks, Temporary "pop-up” stores
• Video surveillance, Mobile hotspots
• Fleet management, GPS/GNSS Location tracking, Taxis, vehicle area networking (VAN)
• Transit systems, Buses, Metro Subways, Railways

Cellular Band Operation Certified Worldwide over 4G LTE, DC-HSPA+, HSPA+, HSPA, and UMTS (WCDMA)

The Perle IRG5140+ Router is LTE-A PRO CAT12 with 600Mbps downlink and 150Mbps uplink speeds. 24x LTE Bands and 9x UMTS/WCDMA Bands are support for extensive carrier compatibility.

An Edge Router with Enterprise-Grade Routing Capabilities

The IRG5140+ router has all the of the advance routing functionality found in the most advanced enterprise routers. Extensive protocol routing support means it can be easily deployed in hierarchical or large mesh network structures. A fast CPU and lots of memory ensure the router can handle a consistent and heavy workload all day long.

• RIP, RIPv2, RIPng, OSPFv1/2/3, BGP-4
• When BGP peering with multiple ISPs, the IRG5140 delivers carrier-grade routing performance that is capable of handling the full internet routing table
• IPv4 & IPv6
• OpenVPN & IPSec VPN
• DHCP & DHCPv6
• IP Passthrough for deployments requiring the router to operate in Gateway or Bridge mode
• Route between any interface (LTE, Ethernet, or USB)
• Reduce unwanted network traffic by creating collision and/or broadcast domains

Integrated Zone-Based Policy Firewall

The IRG5140 built-in firewall offers intuitive policies for multiple-interface routers to protect inside networks from unauthorized access by users on an outside network. The firewall also protects inside networks from each other, for example, by keeping a human resources network separate from a user network. If there are network resources that need to be available to an outside user, such as a web or FTP server, these resources can be placed on a separate network behind the firewall, in a demilitarized zone (DMZ). The firewall will allow limited access to the DMZ, but because the DMZ only includes the public servers, any attacks there will not affect the inside network. The firewall controls when inside users access outside networks (for example, access to the Internet), by allowing only certain addresses out, by requiring authentication or authorization, or by coordinating with an external URL filtering server. A deny-all (blacklist) policy can be used to prohibit traffic between firewall security zones until an explicit policy is applied to allow desirable traffic. Router ports are assigned to zones and firewall inspection policies are applied to traffic moving between the zones. Firewall inter-zone policies come with considerable flexibility and granularity so that different firewall inspection policies can be applied to the same router port.

Enhanced Security with 2 Factor Authentication

With multiple concurrent VPN sessions and 2 Factor Authentication, the IRG5140+ LTE Router enables secure communications to multiple back-end systems.

• Remote authentication (RADIUS, TACACS+) management, integrates with enterprise-grade systems to control access to devices in the field.
• Software image CRC control protects the software upgrade process against unwanted software corruption and malware
• High-speed OpenVPN, IP Security (IPsec), Triple Data Encryption Standard (3DES), and Advanced Encryption Standard (AES) encryption for data privacy over the Internet.
• Intrusion prevention enforces security policies in a large enterprise or service provider networks.

GPS / Global Navigation Satellite System (GNSS) Included

GPS and GNSS (Galileo, Glonass, and Beidou) are included by default in the IRG5140+ Router. This enables real-time location tracking of remote assets. Also, you can get real-time network clock updates in the router, or any attached equipment, for accurate time-stamp usage in time-sensitive applications.

Cutting-edge design certified for a wide range of deployment scenarios

High-performance components and features enable customers to take advantage of broadband network speeds while running secure concurrent data, voice, and video services. The IRG5140+ router has high MTBF rates because it is developed with certified high-end components to provide superior reliability and uninterrupted operation.

Primary or failover back-up connectivity	Perle is the only company to offer LTE edge routers with all of the enterprise-grade features and protocols needed to be a fully functional primary or failover back-up LTE Router. If the main network connection goes down for any reason, the Perle IRG5140+ router provides an always-on, cost-effective redundant connection. The relatively low cost of LTE for branch continuity means a greater return on investment and scalability for multiple locations. Simply put, an IRG5140 LTE Router ensures maximum uptime, cost-effective scalability, and ease of deployment and management with limited IT resources.
Compact light-weight design	Deploy in many different environments where space, heat dissipation, and low power consumption are critical factors. The native DIN-Rail mounting bracket ensures easy installation.
Rugged Environment Certifications	Corrosion resistant metal case with an IP20 ingress protection rating Shock and vibration resistance certified to MIL-STD-810G, SAE J1455 & EN 61373 Hazloc per IECEx/IECx, ATEX, & ANSI/ISA Class 1 Div 2 -40°C to +70°C operating temperature
Railway Deployment	The Perle IRG5140 LTE Router is fully approved and certified for Railway rolling stock application deployments. It is perfectly suited for installation directly in the train or subway cabin, or the enclosures found in metro tunnels and alongside rail tracks. European Certifications EN50155 & EN50121 International Certifications IEC60571 & IEC62236 Cellular tower connectivity can be established and maintained at up to 100 meters per second (360km/224mi per hour)

Dual-SIM LTE Failover for true Business Continuity

The Perle IRG5140+ Router comes with redundant SIM slots to ensure reliable network connectivity and cellular multihoming support in LTE and HSPA-based networks. This is particularly useful:

• When the primary carrier contract data cap has been exceeded, the IRG5140 will automatically switch over to a back-up data plan.
• When the IRG5140 is deployed in a mobile environment long-distance roaming can be enabled and used.
• When there is a lack of coverage, or carrier network failure, the IRG5140 will automatically switch over to a back-up carrier.

More Features and Benefits

WAN Connectivity

LTE and 10/100/1000 Ethernet

Central Management Configuration

The IRG5140+ Router uses PerleView, a web-based server configuration tool that simplifies setup and deployment. Centralized management capabilities give network managers visibility and control over network configurations at remote sites. Other Perle IRG5140+ management capabilities include: Fast Setup - Available when the router is in factory default (initial) configuration Web Manager - Available using a browser CLI - Command Line Interface SNMP - Using a Network Management System No ongoing monthly or yearly licensing fees

Software Feature Set: IRG5140 Cellular LTE Routers

All features and functionality are included in the base price of the product. There are no additional costs or fees.

Functionality
Gateway (IP Passthrough Bridging), Switching, Routing
Routing Protocols
IPv4/IPv6, Static Routing, RIP/RIPNg, NAT, OSPFv3, BGP-4, IPv6 Encapsulations (GRE, 6in4), Port Routing
IP Applications
DDNS, DNS Proxy / Spoofing, relay, client, Opt. 82,
NTP & SNTP (versions 1, 2, 3, 4) with support from GPS, GNSS & Network Carrier timing
DHCP / DHCPv6 server & BOOTP for automated network-based setup
VLAN & VPN
VLAN, IPSec, OpenVPN, VPN Failover (16 concurrent VPN tunnels)
GPS & GNSS Reports
GPS for tracking equipment over RS232, USB, and Ethernet
NMEA 0183 v3.0, TAIP, CSV
Firewall & Security
Built in Zone-Based Policy Firewall
Access Control Lists (list & ranges & time)
Filter based on MAC Address, IP, Port, Protocol, User
AAA, Radius, TACACS+
802.1x
Certificate Support (X.509)
Port Forwarding
BGP Communities
Security Features
Security via remote authentication (Radius and TACACS+)
Trusted host filtering (IP filtering), allowing only those hosts that have been configured in the host table access to the router.
Idle LTE port timers, which close a connection that has not been active for a specified period of time
Ability to disable services (for example, Telnet, TruePort, Syslog, SNMP, Modbus, HTTP) for additional security
Ability to individually disable network services that won¡¯t be used by the SSH client/server connections (SSH 1 and SSH 2)
Logging via syslog
Ability to disable Ping responses
Ability to setup Access Lists (ACL¡¯s) to restrict traffic
Ability to set up firewalls to restrict incoming and outgoing packets
SSH client/server connections (SSH 1 and SSH 2)
SSL/TLS client/server data encryption (TLSv1/1.1/1.2 and SSLv2)
Ability to setup Virtual Private Networks (VPNs)
Wireless Security; WEP, WPA2-PSK & Enterprise (EAP, PEAP, LEAP), 802.11i
Wireless cellular security using PAP or CHAP authentication
Dynamic DNS with DYNDNS.org
Domain Name Server (DNS) support
Email alert notification
SSH connections (supported ciphers are Blowfish, 3DES, AES-CBC, AES-CTR, AES-GMC, CAST, Arcfour and ChaCha20-Poly1305)
SSL/TLS connections
RIP authentication (via password or MD5)
OSPF
2F Authentication
Management Access Control
SNMPv3
DMZ
FIPS 140-2
Secure HTTP/HTTPS/FTP/Telnet Authentication Proxy
Logging, Reporting & Alerts
Sys Log, Event Type, Report Type, Alerts & Monitoring, Triggers Status Screen Report, Data Usage, Diagnostic
Management
PerleVIEW Management, WEB (HTTP/HTTPS), SNMPv1/v2/v3, SMS Control, Load Balancing, CLI, Login Banner, E-mail, Ping, Telnet, FTP, Connection on Demand
Automatic check for software updates.
Software updates available over FTP, HTTP, HTTPS, SCP, SFTP, and TFTP
I/O Capabilities
One I/O configurable as digital input or Pulse Counter
One normally open (NO) relay contact

Hardware Specifications: IRG5140 Cellular LTE Routers

Products can be purchased with or without antennas and with or without power cords. All functionality is included in the base price of the product. Additional accessories are sold separately.

Cellular
LTE	LTE-A PRO CAT12. 600Mbps downlink and 150Mbps uplink speeds
Frequency Bands Data & SMS Operation over: 4G LTE with fallback networks DC-HSPA+ / HSPA+ / HSPA / UMTS (WCDMA)	4G/LTE Bands (24) 2100(B1), 1900(B2), 1800(B3), AWS(B4), 850(B5), 2600(B7), 900(B8), 1800(B9), 700(B12), 700(B13), 850(B18), 850(B19), 800(B20), 850(B26), 700(B28), 700(B29), 2300(B30), 1500(B32), TDD B41, TDD B42, TDD B43, TDD B46, CBRS B48, 1700(B66) 3G HSPA/HSPA+ Bands (9) 2100(B1), 1900(B2), 1800(B3), AWS(B4), 850(B5), 800(B6), 900(B8), 1700(B9), 850(B19) Public Safety Bands Bands 26, 28
Cellular Antenna	Frequency Range: 704-902-928-960/1427.9-1575.42/1710-2170/2400-2480-2690MHz Gain: 3 dBi Impedance: 50 ohm Voltage Standing Wave Ratio: <3.0 (typical) Radiation: Omni-Directional Connector: SMA Male (Swivel) Dimensions: 135.6 x 20.1 mm / 5.34 x 0.8 in
SIM	Dual Mini-SIM 15 x 25mm (or 2FF )
GPS / GNSS
GPS / GNSS	Wide-band GNSS: 1559-1606 MHz GPS: 1575.42 MHz / GLONASS: 1602 MHz / BeiDou: 1561.098 MHz / Galileo: 1575.42 MHz / QZSS: 1575.42 MHz Simultaneous tracking: Up to 30 channels Active GNSS antenna support Reports: NMEA 0183 V3.0, TAIP
GPS / GNSS Passive Antenna	GNSS Applications: GPS, Glonass, Galileo, Beidou Frequency Range: 1561MHz~1606 MHz Gain: 4 dBi (typical) Impedance: 50 Ohm Voltage Standing Wave Ratio: 2.0 (typical) Polarization: RHCP SMA (M) straight Dimensions: 41.9 x 47.3 x 16.3 mm / 1.65 x 1.86 x 0.64 in RG-174 Cable Lenght: 5 m / 16.4 ft
10/100/1000 Mbps Ethernet RJ45 Copper
Ports	4 x 10/100/1000 Ethernet RJ45 Copper
Speed	Software selectable 10/100/1000 Ethernet, Auto Software selectable Half/Full/Auto duplex
Ethernet Isolation	1.5Kv Magnetic
Standards	IEEE 802.3 for 10Base-T, IEEE 802.3u for 100Base-TX and 100Base-FX, IEEE 802.3ab for 1000Base-T, IEEE 802.3x for Flow Control
Processing Type	Store and Forward
MAC Address Table Size	8K
VLAN ID range	1 to 4000
USB
USB-C	1 x USB 3.2 Type-C with a transfer rate up to 5Gbps Configurable for Ethernet over USB
Power Connector
Two Digital Inputs	Type 3 isolated Digital Input & Pulse Counting VDC: 0 for ¡Ü 1V, 1 for ¡Ý 2.7V
One Alarm Relay	Normally Open (NO) dry contact: 1A @ 24VDC
Platform Specifications
Microprocessor	Dual Core ARM 1.2GHz
RAM	1GB DDR4
Flash	4GB MMC
LED Indicators	Power 1: indicates power status
	Power 2: indicates power status
	WWAN: indicates Wireless Wide Area Network status
	GNSS: indicates Global Navigation Systems for GPS, Galileo, Glonas and Beidou status
	VPN: indicates VPN presence (for Router Models: IRG5520x & IRG5540x only)
	Internet: indicates Internet connectivity
Environmental Specifications	Operating Temperature: -40¡ãC to 70¡ãC / -40¡ãF to 158¡ãF
	Storage Temperature: -40¡ãC to 85¡ãC / -40¡ãF to 185¡ãF
	Operating Humidity: 0% to 95% non-condensing
	Storage Humidity: 0% to 95% non-condensing
	Operating Altitude: 3048 m / 10,000 ft
	Cooling: EN 60068-2-1
	Dry heat: EN 60068-2-2
	Damp: EN 60068-2-30
	MTBF: > 287,215 hours (Calculation model based on MIL-HDBK-217-FN2 @ 30¡ãC/86¡ãF)
	Heat Output (BTU/HR)
Enclosure	Aluminium
Mounting	DIN Rail (Mounts to standard 35 mm DIN rail in accordance with DIN EN 60175 vertically or horizontally) Panel / wall mount attachement bracket is optional
Ingress Protection Rating	IP20
Power
Power Input	12/24/48 VDC Nominal (9.6 to 60 VDC Range) Dual Input
Power Connector	8-Pin Removable Terminal Block: 4-Pins for power 4-Pins for Alarm Relay and Digital Input
Power/Current Consumption	Standby (no activity / all ports shutdown): 3.9mA / 46.8mW Idle Mode (connected/no Activity): 0.30A / 3.620W Typical Use (connected/with Activity): 0.33A / 3.98W
Power Line Protection	Surge: 8KV (EN61000-4-5 common mode), 2KV (EN61000-4-5 differential and common modes)
Reverse polarity protection	YES
Weight & Dimensions
Product Weight & Dimensions	Weight: 0.38kg / 0.84lbs
	Dimensions: 120 x 90 x 45 mm / 4.72 x 3.54 x 1.77 in
Shipping Weight & Dimensions	Weight (with Antenna): 0.61kg / 1.35lbs Weight (without Antenna): 0.58kg / 1.28lbs
	Dimensions: 195 x 170 x 70 mm / 7.67 x 6.70 x 2.75 in
Regulatory Approvals
Shock & Vibration	MIL-STD-810G (Shock: test method 516.6. Operational Vibration: test method 514.6)
	EN 61373 (Shock, Vibration long-life / functional-random)
Hazloc	IECEx/IECx, ATEX Class 1 Zone 2, Directive 2014/34/EU
	ANSI/ISA 12.12.01, Class 1 Division 2 Groups A-D, ISA 12.12.01-2015
Railway	EN 50155: 2017 Clause 4.3.6
	EN 50121-1: 2017
	EN 50121-3-2: 2016
	EN 50121-4: 2016
	IEC 60571:2012 For Clause 12.2.8 & 12.2.9
	IEC 62236-1: 2018
	IEC 62236-3-2: 2008
	IEC 62236-4: 2018
Emissions	FCC 47 Part 15 Subpart B, Class A
	ICES-003 Issue 6 Class A (Canada)
	ANSI C63.4 Class A (Radio-Noise Emissions from Low-Voltage Electrical and Electronic Equipment in the Range of 9 kHz to 40 GHz)
	EN61000-3-2: 2014 (Limits for Harmonic Current Emissions)
	EN61000-3-3: 2013 (Limits of Voltage Fluctuations and Flicker)
	CISPR 32:2015/EN 55032:2015 Class A (Electromagnetic compatibility of multimedia equipment - Emission requirements)
	EN61000-6-4 (Emissions for industrial environments)
Immunity	CISPR 35:2016/EN 55035:2017 (IR)
	EN 61000-4-2:2009 (ESD) +/-8 kV (Contact and Air) Operating mode: powered on
	EN 61000-4-3: 2006 + A1:2007 + A2:2010(RS)
	EN 61000-4-4:2012 (EFT) 2 KV (Criteria A)
	EN 61000-4-5:2014+AMD1:2017 (Surge) 2KV (line to earth), 1.5KV (line to line)
	EN 61000-4-6: 2013 (CS)
	EN 61000-4-8: 2009 (PFMF)
	EN 61000-4-9: 2016 (PMF)
	EN 61000-4-11: 2004 + A1:2017
	EN 61000-4-16
	EN 61000-6-4: 2007 + A1: 2011
Electrical Safety	UL 61010-1 and UL 61010-2-201, IEC 61010-1:2010+AMD1:2016, IEC 61010-2-201:2017 (includes CB)
	UL/ULC/EN 62368-1, IEC 62368-1:2018 (includes CB)
	CAN/CSA C22.2 No. 62368-1-14, IEC 62368-1:2018
Cellular / Radio Standards	EN 301 489-1 (V2.1.1:2017-02), ETSI EN 301 489-1 V2.1.1 (2017-02)
	EN 301 489-17 (V3.2.0:2017-03), ETSI EN 301 489-17 V3.1.1 (2017-02)
	EN 301 489-19 (V2.1.1:2019)
	EN 301 908-1 v11.1.7:2018-12, ETSI EN 301 908-1 V7.1.1 (2015-03) (Radiated emissions RF control and monitoring)
	EN 301 908-2 v11.1.2:2017-08, ETSI EN 301 908-2 V11.1.2 (2017-08) (RF conducted)
	EN 301 908-13 v11.1.2:2017-07, ETSI EN 301 908-13 V11.1.2 (2017-07) (RF Conducted)
	EN 62311:2019, IEC 62311 Ed. 1.0 b:2007 (Human exposure restrictions for radio frequency electromagnetic fields)
Cellular/Telecom Regulatory Approvals	FCC/ICES, RED, PTCRB/CTIA, CE
Carrier Certifications	Verizon, AT&T
Environmental Specifications	Reach, RoHS3 and WEEE Compliant
Other
ECCN	5A992
HTSUS Number	8517.62.0050