In a factory workshop, a PLC on a production line connects through Ethernet to an industrial router, which uplinks to a switch and then to the core network. One loose cable, a switch losing power, or a fiber optic cable cut by construction — the entire line goes offline. Monitoring screens go dark, SCADA systems disconnect, remote maintenance channels vanish, and a minute of downtime often costs far more than the network hardware itself.
Adding a cellular backup (4G/5G) to this data link is standard practice. The approach is straightforward: let the industrial router hold both a wired and a cellular path, automatically switch to cellular when the wired link fails, and revert when it recovers.
Select an industrial router that supports WAN failover, commonly referred to as an Industrial cellular router in the field. These devices typically come with dual SIM slots — one connected to the primary wired link, the other dedicated to cellular backup.
Configure failover mode as "automatic" in the router management interface. When the primary link goes down (the WAN port loses carrier or fails to ping the upstream gateway), traffic automatically switches to cellular. After recovery, traffic reverts per the configured policy. The entire switch completes within seconds, which most industrial protocols (Modbus TCP, MQTT, OPC UA) can tolerate through their brief timeout windows.
Automatic switching is just the starting point. Three configurations ensure the backup link actually works when needed.
First, verify cellular signal strength.Metal equipment is dense in factory environments, and signal obstruction is the norm. Measure signal strength (RSRP value) at the installation location before mounting. If the reading falls below -110dBm, add an external antenna. Industrial routers typically include SMA connectors, so mount the 4G or 5G antenna where the signal is strongest (exterior wall or ceiling) and route it to the router with a coaxial cable.
Second, configure link status detection.Most industrial routers support two failure detection methods: port status (checks whether the WAN port physical layer still carries signal) and ICMP ping (periodically probes an upstream gateway address, declares failure only after consecutive timeouts). Port-only detection has a flaw — a loose cable triggers failover, but in some scenarios that is exactly the condition that should trigger the backup. ICMP detection is more accurate but introduces its own risk. The practical approach combines both: port status takes priority, and three consecutive ICMP timeouts confirm the failure, balancing sensitivity with stability.
Third, set the revert policy.Should traffic return to the primary link immediately after recovery, or wait? Immediate reversion works when the primary fault is resolved (e.g., switch power restored), but on an unstable primary link it causes frequent switching back and forth (flapping), and some industrial devices are sensitive to link jitter. The reliable approach is "delayed reversion" — wait 1 to 5 minutes after recovery, confirm continuous pings succeed and the port remains stable, then switch back to primary.
Plugging in a SIM card is not enough. Data volume, security, and device reliability all need attention during deployment.
Uplink traffic for industrial monitoring is typically light — a PLC status word is a few dozen bytes, sensor data a few hundred bytes, one report per minute, totaling tens to hundreds of MB per month. Video feeds or bulk data synchronization consume significantly more. Some industrial routers support application-based traffic splitting, sending only critical data over cellular while deferring non-essential data until the wired link recovers.
The cellular backup traverses a public network, so VPN encryption (IPSec or OpenVPN) is recommended. Most industrial routers support five VPN protocols natively. After establishing an encrypted tunnel on the cellular link, data security reaches the same level as a dedicated private line. Some routers can also connect to three separate OpenVPN servers simultaneously as clients, or function as an OpenVPN server for remote maintenance access.
Factory environments feature wide temperature swings and strong electromagnetic interference. Industrial routers require wide-temperature ratings (-20°C to 70°C and above), Level 3 EMC protection (ESD, EFT, surge), and a watchdog timer to ensure continuous 7×24 operation. These are the core differentiators between industrial and consumer routers — verify each specification during selection.
Backup link requirements vary significantly by scenario. Start by looking at three dimensions: connectivity options, bandwidth needs, and security level.
For fixed workshops with wired primary and cellular backup, a 4G industrial router like the USR-G806w is a practical choice. Qualcomm chipset, free switching between wired, cellular, and Wi-Fi access, dual redundant power supply (terminal block + DC jack), hardware and software dual watchdogs, -20°C to 70°C wide temperature, and built-in five-protocol VPN. One device handles connectivity, backup, and encryption. The three Ethernet ports (1 WAN + 2 LAN) can be reconfigured as three LAN ports for local device interconnect.
For scenarios needing higher bandwidth, the USR-G816 delivers higher throughput and lower latency through its 5G link. Dual SIM cards (SIM2 optionally includes eSIM), automatic wired/cellular failover, metal housing IP30 rating, and -35°C to 75°C wide temperature. The serial port supports transparent transmission for TCP Client, TCP Server, and UDP protocols, enabling direct integration with serial-based field devices.
For edge node scenarios requiring higher bandwidth and more interfaces, the USR-G809s provides Gigabit Ethernet ports, SFP fiber ports, Wi-Fi 6 wireless coverage, with 4G and 5G variants available. Wide-voltage DC9-60V power supply and built-in GPS/BeiDou positioning module.
After deploying the backup link, run through a verification test:
Some routers also offer network anomaly alerts — device offline, weak signal, and traffic overrun can all trigger real-time email or SMS notifications. Verify alert configuration alongside the five verification steps above.
A router with failover capability, combined with proper configuration, adds a reliable safety net to industrial data links. Get the switching logic, encryption
