Advantech ICR-4233 LTE Advanced Industrial Router Hardware Manual

1. Product Overview

1.1 Product Introduction

The ICR-4233 router is a leading industrial router utilizing LTE Cat.6 technology, designed for the EMEA and global markets. It offers high data transfer speeds, low latency, and exceptional network reliability, making it ideal for demanding IoT applications across various industries including energy, machine building, transaction management (kiosks, lottery terminals), smart city initiatives, CCTV surveillance, and other monitoring applications.

It supports download speeds up to 300 Mbps and upload speeds up to 50 Mbps. All models include GNSS geolocation with a dedicated SMA connector. WiFi-equipped models feature dual-band WiFi 6/6E with 2x2 MU-MIMO antennas and Bluetooth V5.2 support.

The robust metal enclosure houses two SIM card slots for cellular connection redundancy, two 1Gb Ethernet ports, a USB 3.0 socket, dual switchable RS232/RS485 interfaces, four digital inputs, and two digital outputs. A microSD card slot is also available for storage expansion.

The router includes a Low Power Mode and a hardware watchdog for automated status monitoring and system restarts, with additional diagnostic functionalities for enhanced reliability. Configuration is managed via a secure web interface, providing detailed insights into settings, statuses, signal strength, and logs.

Basic features include two-factor authentication, IPv6 Dual Stack, DHCP, NAT, NAT-T, DynDNS, DNS proxy, VLAN, QoS, NTP, VRRP, SMS control, port forwarding, and connection backup. Various VPN protocols like IPSec, OpenVPN, GRE, L2TP, and PPTP ensure secure communication.

The router supports Linux scripts for automated tasks and allows up to four distinct profiles, switchable via web interface, SMS, or digital input. Router Apps enhance functionality through custom software programs, accessible on the Advantech Router Apps webpage. Firmware installation/updates can be done directly from the router web interface using an Advantech public server.

Compatibility with Advantech's WebAccess/DMP and WebAccess/VPN platforms enables extensive device management and monitoring, ensuring devices remain updated and secure.

1.2 Usage Examples

This section illustrates common scenarios for router deployment.

A diagram illustrating Cellular Internet Access. A configured router connects a local LAN to the Internet via a mobile network. The LAN is connected to the configured router via Ethernet (cable connection). The configured router connects to a mobile network (wireless connection), which then connects to the Internet. This functionality is exclusive to routers with a cellular interface.

A diagram illustrating Backup for Internet Access. A configured router connects a local LAN to the Internet. The LAN is connected to the configured router via Ethernet (cable connection). The configured router has a primary connection to the Internet via a mobile network (wireless connection) and a backup connection via Ethernet (cable connection) to other routers, which then connect to the Internet. Backup options include PPPoE, Ethernet, or WiFi.

A diagram illustrating VPN Networks Interconnection. A configured Advantech router in a local LAN establishes a secure VPN tunnel via the Internet to a remote router in another LAN. The configured router connects to the Internet using the cellular network. The local LAN connects to the configured router via Ethernet. The configured router connects to a mobile network (wireless connection), which connects to the Internet. A VPN tunnel is established over the Internet to a remote router, which connects to a remote LAN via Ethernet.

A diagram illustrating Serial Gateway functionality. An Advantech router provides Internet access to a PLC device connected serially. The PLC device, accessible over the Internet, can be controlled from a remote local network running a SCADA system. The PLC connects to the configured router via RS232/RS485 (cable connection). The configured router connects to a mobile network (wireless connection), which connects to the Internet. The Internet connects to a remote router via Ethernet, which then connects to a SCADA system in a remote LAN. This functionality requires a router with a serial interface.

1.3 Hardware Overview

This chapter describes all components of the router case.

Router Hardware Overview: Front View

The front view of the ICR-4233 router features various connectors and indicators:

1. GND Screw (M3): For proper grounding.
2. LEDs: Status LED indicators.
3. RST Button: Used to reboot the router or restore default settings.
4. PWR (2-pin terminal): Power supply socket.
5. ETH0, ETH1 (RJ45): Two 1 Gb Ethernet LAN interfaces.
6. USB (USB-A): USB 3.0 host port.
7. Serial & I/O (16-pin terminal): Two switchable RS232/RS485 interfaces, 4 digital inputs, and 2 digital outputs.
8. GNSS, ANT, DIV (SMA female): Connectors for main and diversity cellular module antennas, and one for the GNSS antenna.
9. WIFI (RP-SMA female): Connectors for WiFi antennas. The right-hand side WiFi connector can also be used for a Bluetooth antenna.

Router Hardware Overview: Rear View

The rear view of the ICR-4233 router includes:

10. Wall Clips: Included as standard accessories for wall mounting.
11. SIM Slots (Mini SIM) & microSD Slot (microSD): Two Mini SIM card slots and a microSD card slot.
12. DIN Clip: Included as standard accessories for DIN rail mounting.

1.4 Order Codes

The following table provides an overview of the router order codes and their configurations.

Order code	Configuration
ICR-4233	LTE Cat.6 cellular module, two Gb ETH, GNSS, USB 3.0, microSD card slot, two RS232/RS485 (switchable), four digital inputs, four digital outputs, two SIM readers
ICR-4233W	LTE Cat.6 cellular module, two Gb ETH, GNSS, dual-band WiFi 6/6E, USB 3.0, microSD card slot, two RS232/RS485 (switchable), four digital inputs, two digital outputs, two SIM readers

1.5 Product Revisions

The product revision history is detailed below. Revision numbers are printed on packaging and product labels. The router GUI also displays the product revision under Status → General → System Information → Product Revision.

Rev.#	Description
1.0	Initial version (revision number not printed on the labels).
1.1	On the chassis: 7 SMA holes instead of 6; refer to PCN-2024-05 for details.

1.6 Package Contents

The standard package includes the following items:

Item#	Description	Quantity
1	Router (includes wall clips and a DIN rail clip mounted on the router)	1 pc
2	2-pin terminal block for power supply (installed on the router)	1 pc
3	16-pin terminal block (installed on the router)	1 pc
4	Printed Quick Start Guide Leaflet	1 pc

1.7 Product Dimensions

All router dimensions are measured in millimeters.

A diagram showing the dimensions of the router with a wall mounting clip. The router measures approximately 142.9 mm in length, 90.3 mm in width (including clips), and 42.8 mm in height. The wall mounting clips extend the width to 102.2 mm and the length to 153.9 mm.

A diagram showing the dimensions of the router with a DIN rail clip. The router measures approximately 130 mm in length, 99.6 mm in width (including clips), and 42.8 mm in height. The DIN rail clip extends the width to 10.2 mm.

1.8 Mounting Recommendations

The router can be placed on a flat surface, wall-mounted using clips, or DIN rail mounted using the metal DIN rail clip.

For switchboard installations, the router can be mounted to the switchboard to avoid immunity examination or EMC issues as per EN 61439-1:2011 standards.

Attention: To comply with EN 61439-1:2011, follow these assembly instructions when attaching a router to a switchboard:

When using whip antennas, maintain a minimum distance of 6 cm from cables and metal surfaces to avoid interference. An external antenna used apart from the switchboard requires a lightning conductor.
When mounting on sheet steel, consider using a cable antenna.

For all cables, bundling is recommended with the following guidelines:

The combined length of the cable bundle (power supply and data cables) should not exceed 1.5 m. If data cable length exceeds 1.5 m or runs toward the switchboard, surge protectors are advisable.
Data cables must not be bundled with mains voltage cables (230 V/50 Hz or 120 V/60 Hz).
Ensure sufficient space between connectors for cable handling.
For proper router functionality, use an earth-bonding distribution frame to ground the grounding screw.

1.9 Wall Mounting

The wall mounting clips are included as a standard accessory.

The router can be affixed to a wall or other surface using the pre-assembled wall mounting clips. These clips need to be rotated as shown in the diagram. Each clip has two 5 mm diameter holes for screw placement. Refer to the dimensions section for precise mounting dimensions.

Attention: When attaching the wall mounting clips, tighten the screws with a maximum torque of 0.4 Nm.

A diagram illustrating the rotation of wall mounting clips. The clips, initially aligned with the router's body, are shown rotated outwards by 90 degrees, revealing screw holes for wall attachment.

1.10 DIN Rail Mounting

The DIN rail clip can be attached to the router for mounting onto a DIN rail compliant with 60715 standards. The default position of the clip is shown in the diagram, and it can also be rotated vertically if needed.

Attention: When attaching the clip, tighten the screws with a maximum torque of 0.4 Nm.

A diagram illustrating the default position of the DIN Rail Clip, showing it aligned with the router's base.

A diagram illustrating the process of removing the router from a DIN rail. Step 1 shows pushing down on the router to disengage the bottom part of the DIN rail clip. Step 2 shows pivoting the bottom part of the router away from the DIN rail. Step 3 shows lifting the router off the DIN rail.

1.11 Product Label

An example of the product label is shown below, displaying all printed information.

Product Label Example (ICR-4233W)

P/N: ICR-4233W
Industrial Cellular Router
9-48V ⎓ 1.5A MAX
S/N: ACZ1100123456785
MAC: 01:23:45:67:89:AB
IMEI: 123456789012345
Def. password: kuXverNRv6
Certifications: CE, UKCA, E-Mark (E8), 10R-06 14947
Manufacturer: Advantech Czech s.r.o., Sokolska 71, 56204 Usti nad Orlici, Czech Republic

2. Hardware Functionality

This section provides detailed explanations of the product's hardware components.

2.1 SIM Card Slots

The router has two SIM card slots located under a metal cover. For cellular network communication, an activated data-provisioned SIM card must be inserted. Two SIM cards can be installed simultaneously for switching features, and they can have different Access Point Names (APNs). If a SIM requires a PIN, it must be entered in the router's web interface (Administration → Unlock SIM Card).

Type of SIM card: Mini SIM (2FF) 25.0 × 15.0 × 0.76 mm.

Attention: Inserting the SIM card:

Always disconnect the router from the power supply before handling the SIM card.
Unscrew the two screws on the SIM card cover and remove the cover.
To remove an inserted SIM card, use the protrusion on the SIM card cover to gently press the SIM card into its slot until a click is heard. Release pressure, and the card will pop out.
To properly insert a SIM card, gently push the card into the designated slot until a confirming click is heard. The protrusion on the SIM card cover can be used for this task.
Replace the cover and secure it with the two screws.

A diagram illustrating SIM card insertion. It shows the internal layout with two SIM card slots (SIM1 and SIM2) and a microSD card slot. A small protrusion on the SIM card cover is indicated for pressing the SIM cards. DIP switches for RS232/RS485 mode selection are also visible.

2.2 Antennas Interfaces

The ANT and DIV SMA female connectors are for connecting the main and diversity cellular antennas. A GNSS antenna can be connected to the GNSS SMA female connector. RP-SMA female connectors labeled WIFI are for WiFi antennas on models that support WiFi.

Danger: Do not operate the router without connected cellular antennas, as reflected transmission energy can damage the equipment.

Recommended tightening moment for screwing the antenna to the SMA connector is 0.9 Nm.

2.3 Bluetooth

The WiFi connector on the right-hand side is compatible with Bluetooth antennas. The router's Bluetooth functionality integrates three main components:

Kernel Support and Drivers: Firmware-integrated kernel-level Bluetooth support and necessary drivers.
Bluetooth Router App: Leverages the BlueZ Linux Bluetooth stack for extended functionalities. It is not pre-installed and requires download and installation.
Node-RED Applications: For advanced Bluetooth functionalities, Node-RED and its Bluetooth node can be employed. Both are available for installation.

2.4 Ethernet Interfaces

The RJ45 panel socket is used for the ETH0 and ETH1 Ethernet interfaces. The pinout is described below.

A diagram showing the pinout of an RJ45 Ethernet connector, indicating pins 1 through 8.

Pin	10base-T & 100base-T	1000base-T
1	Tx+ (Transmit Data+)	BI_DA+ (BiDirectional pair A+)
2	Tx- (Transmit Data-)	BI_DA- (BiDirectional pair A-)
3	Rx+ (Receive Data+)	BI_DB+ (BiDirectional pair B+)
4	—	BI_DC+ (BiDirectional pair C+)
5	—	BI_DC- (BiDirectional pair C-)
6	Rx- (Receive Data-)	BI_DB- (BiDirectional pair B-)
7	—	BI_DD+ (BiDirectional pair D+)
8	—	BI_DD- (BiDirectional pair D-)

The isolation barrier of the Ethernet ports against the ground is 1500 V.

2.5 Power Supply

A two-pin terminal connector (pitch 3.5 mm) powers the router. The corresponding connector is included as a standard accessory.

Pin	Signal mark	Description
1	VCC(+)	Positive pole of DC supply voltage (+9 to +48 V DC)
2	GND(-)	Negative pole of DC supply voltage

A diagram illustrating the power connector pinout, showing VCC(+) and GND(-) terminals and indicating a 9-48 V DC input range.

The required power supply voltage ranges between +9 V and +48 V DC. The router has built-in protection against reversed polarity. The power source must provide sufficient energy as detailed in the consumption section of Chapter 4.1.

Danger: Grounding the router using the grounding screw eliminates reversed polarity protection. Ensure the negative pole of the DC power supply shares the same voltage reference as the grounding screw. Voltage differences may damage the router, requiring authorized service repairs.

Attention: The unit must be supplied by a power supply specified as a Limited Power Source (LPS) or CEC/NEC Class 2 source of supply.

All metal parts, including the enclosure, are interconnected with the negative pole of the power supply (common pole). If recommended for the installation environment, protect the router by properly grounding it using the grounding screw. The maximum tightening torque for the grounding screw is 1 Nm.

A diagram showing the position of the grounding screw on the router's chassis.

2.6 Low Power Mode

Attention: For applications requiring low power consumption (e.g., solar power, not 24/7 mode), it is strongly recommended to use Low Power Mode (LPM) before shutting down the entire router.

LPM is a sleep state with minimal power consumption. Details on LPM power consumption are in Chapter 4.1. The router can be awakened by a signal to the BIN1 input or after a predefined time. To enter LPM, use the lpm command; refer to the Commands and Scripts application note for more information.

2.7 I/O Port Interfaces

The I/O interface pins connect to the 16-pin terminal block panel socket. The pinout is described below.

A diagram illustrating the I/O connector pinout, showing the arrangement of 16 pins.

Pin	Signal mark	Description
14	BIN0	The first digital input
6	BIN1	The second digital input
15	BIN2	The third digital input
7	BIN3	The fourth digital input
16	BOUT0	The first digital output
8	BOUT1	The second digital output
5, 13	GND	Ground (common negative pole)

The I/O interface is not electrically isolated from the router.

The I/O user interface is designed for digital input processing and digital output control. Electrical parameters are in Chapter 4.8. The functional scheme for digital input and output connections is shown in the diagram.

A functional scheme diagram of the digital interface, showing connections for digital input (BINx) with a maximum of 48V and digital output (BOUTx) via a relay with a maximum of 48V. ESD protection is indicated for both input and output. The power source for digital input must have a common ground with the router.

2.8 Serial Interfaces

Danger: For device protection, the serial interface can only be switched when the router is powered off.

Two independently switchable serial interfaces connect to the 16-pin terminal block panel socket. Both interfaces can be independently switched to RS232 or RS485 via DIP switches under the metal SIM cover.

If a DIP switch is in the upper position, the corresponding serial interface operates as RS232.

A diagram showing DIP switch settings for RS232 mode, with switches in the upper position. It also shows the 16-pin terminal block layout for serial interfaces.

Pin	Signal mark	Description
1	RXD	Received Data
2	TXD	Transmit Data
3	RTS	Request to Send
4	CTS	Clear to Send
5	GND	Ground

Table: Connection of the first serial interface switched to RS232 mode

Pin	Signal mark	Description
9	RXD	Received Data
10	TXD	Transmit Data
11	RTS	Request to Send
12	CTS	Clear to Send
13	GND	Ground

Table: Connection of the second serial interface switched to RS232 mode

If the DIP switch is in the down position, the corresponding serial interface operates as RS485.

A diagram showing DIP switch settings for RS485 mode, with switches in the down position. It also shows the 16-pin terminal block layout for serial interfaces.

Pin	Signal mark	Description
2	D (+)	In/Out
1	D (-)	In/Out
5	GND	Ground

Table: Connection of the first serial interface switched to RS485 mode

Pin	Signal mark	Description
10	D (+)	In/Out
9	D (-)	In/Out
13	GND	Ground

Table: Connection of the second serial interface switched to RS485 mode

The serial interfaces are not electrically isolated from the router.

2.9 USB 3.0 Port

The router has one USB 3.0 host port with a USB-A type socket, supporting USB Mass Storage devices and serial converters. For integrating unsupported chips, consult the Commands and Scripts application note, specifically the chapter on How to Use an Unsupported Serial Converter Chip.

The USB port automatically disables to prevent damage during overload (excessive current). Normal operation restores after router reboot.

Mounting USB Flash Drive to the System

To access a USB flash drive from within the router's system, it must be mounted:

Execute the dmesg command to display connected devices.
Identify the USB flash drive in the output (e.g., sda: sda1).
Use the mount command to attach the drive (e.g., mount /dev/sda1 /mnt).

For detailed instructions on creating, mounting, checking, and unmounting a file system on a USB Flash Drive, refer to the application note for the Ext4 Filesystem Utilities router app.

USB 3.0 Socket Pinouts

The pinout details for the USB 3.0 socket are illustrated in the diagram and described in the table.

A diagram illustrating the USB 3.0 connector pinout, showing the arrangement of 9 pins.

Pin	Signal mark	Description
1	VBUS	5 V DC Power, 0.5 A
2	D-	USB 2.0 differential pair -
3	D+	USB 2.0 differential pair +
4	GND	Ground for power return
5	StdA_SSRX-	SuperSpeed receiver differential pair -
6	StdA_SSRX+	SuperSpeed receiver differential pair +
7	GND_DRAIN	Ground for signal return
8	StdA_SSTX-	SuperSpeed transmitter differential pair -
9	StdA_SSTX+	SuperSpeed transmitter differential pair +

2.10 MicroSD Card Reader

The microSD card reader is located under the SIM cover. It enables the router to use microSD memory cards. Technical specifications are in the table.

Technical specifications of microSD card
Supported technologies	SD, SDHC, SDXC
Supported capacity	SDHC: up to 32 GB; SDXC: from 32 GB to 512 GB
Supported microSD card filesystems	vfat, ext2, ext3, ext4

Attention: Inserting the microSD card:

To remove an inserted microSD card, use the protrusion on the SIM card cover to press the card slightly until a click is heard. Release, and it will pop out.
To insert a microSD card, push it into the slot with the correct orientation until it clicks into place. The protrusion on the SIM card cover can be used for this task.

A diagram illustrating microSD card insertion, showing the microSD card slot next to the SIM card slots under the cover.

Mounting microSD Card to the System

To access the microSD card within the router's system, it must be mounted:

Use the dmesg command to view recently connected devices.
Identify the microSD card entry (e.g., mmcblk0: p1).
To mount the card to the mnt directory, use the mount command (e.g., mount /dev/mmcblk0p1 /mnt).

For more information about commands for creating, mounting, checking, and unmounting a file system on a microSD card, refer to the application note for the Ext4 Filesystem Utilities router app.

2.11 LED Status Indication

Status LEDs on the top side provide router status information. ETH0 and ETH1 connectors on the front panel have additional LEDs for port status.

Caption	Color	State	Description
SIM1	Green	On	SIM1 is active for cellular connection.
	Red	Fast blinking	SIM1 issue (missing card or PIN not entered).
SIM2	Green	On	SIM2 is active for cellular connection.
	Red	Fast blinking	SIM2 issue (missing card or PIN not entered).
WiFi	Green	On	AP or STA started successfully.
	Green	Brief off blinks	Data transmission.
	Green	Fast blinking	AP or STA error (configuration, HW or connection).
	Green	Off	AP and STA disabled.
SIG	Green	On	Good cellular signal.
	Orange	On	Fair cellular signal.
	Red	On	Poor cellular signal.
USR	Green	—	The function of this LED is user-defined.
DAT	Green	Blinking	Cellular communication is in progress.
PWR	Green	On	The router is booting up.
	Green	Blinking	The router booted up and is ready.
	Green	Fast blinking	The router firmware is being updated.
TECH	Green	On	The active SIM uses 4G technology.
	Orange	On	The active SIM uses 3G technology.
ETH0, ETH1	Green	On	Selected 1 Gbps bit rate.
	Green	Off	Selected 100/10 Mbps bit rate.
ETH0, ETH1	Yellow	On	The network cable is connected.
	Yellow	Brief off blinks	Data transmission.
	Yellow	Off	The network cable is not connected.

2.12 Reset Functions

The RST button has multiple functions depending on the firmware platform. For more information, refer to the configuration manual [1], chapter Manual Introduction → Device → Reset.

Use a narrow screwdriver or any small tool to press the RST button.

A diagram illustrating how to reset the router, showing a screwdriver pressing the RST button on the front panel.

3. First Use

3.1 Accessories Connection

Before operating the router, ensure all necessary components are connected. Refer to Chapter 1.3 for hardware overview and Chapter 2.1 for SIM card insertion.

Attention: Do not operate the router without an antenna connected to the main antenna connector. Transmitting energy without an antenna can damage the equipment.

3.2 Router Configuration

Initial router configuration can be performed via a web browser on a PC. This interface allows for monitoring, configuration, and administration.

Connect the power supply to the router (Chapter 2.5). The router will boot and automatically establish a connection to the default Access Point Name (APN) of the inserted SIM card. Ensure your PC is configured to obtain IP settings automatically. Connect your PC's network card to the router's default LAN interface (Ethernet port ETH0). The DHCP server will assign an IP address to your PC.

To access the router's web interface, enter https://192.168.1.1 in your web browser. HTTPS protocol is mandatory for secure communication. The default user is root. Check the product label for the default password. The user will be prompted to change their password upon first login.

Consult the router Configuration Manual [1] for detailed descriptions and examples of router configuration.

Attention: For security, regularly update the router's firmware. Downgrading to an older version or uploading firmware for a different device may cause malfunction.

Attention: All routers have the WebAccess/DMP client pre-installed. The activated client periodically uploads router identifiers and configuration to the WebAccess/DMP server. See the configuration manual [1], chapter Basic Information → WebAccess/DMP Configuration, for more information.

4. Technical Parameters

4.1 Basic Parameters

Parameter		Description
Temperature range	Operating	-40°C to +75°C (-40 °F to +167°F)
	Storage	-40°C to +85°C (-40 °F to +185 °F)
Humidity	Operating	5 to 95% relative humidity non condensing
	Storage	5 to 95% relative humidity non condensing
Altitude	Operating	2000 m / 70 kPa
Degree of protection		IP30
Supply voltage		9 – 48 V DC
Battery for RTC		CR1225
Consumption for non-WiFi / WiFi version	Idle	4.2 W / 4.3 W
	Average	5.9 W / 6.8 W
	Maximum	11.6 W / 12.2 W
	LPM mode	15 mW
Dimensions of device (w/o clips)		130 x 90 x 43 mm (5.12" × 3.54" × 1.39")
DIN rail clip specification		DIN 35 mm, EN 60715
Total weight for non-WiFi / WiFi		505 g (1.11 lbs) / 515 g (1.14 lbs)

4.2 Standards and Regulations

Parameter	Description
Radio	EN 301 908-1, EN 301 908-2, EN 301 908-13, EN 303 413, EN 300 328, EN 301 893, EN 303 687
EMC	EN 301 491-1, EN 301 489-17, EN 301 489-19, EN 301 489-52, EN 610000-6-2, EN 610000-6-3, EN 55032, EN 61000-4-2, EN 61000-4-3, EN 61000-4-4, EN 61000-4-5, EN 61000-4-6
Safety	IEC 62368-1, IEC 62311
Mechanical	EN 60529, EN 60068-2-27, EN 60068-2-64
Climatic	EN 60068-2-2, EN 60068-2-1, EN 60068-2-14, EN 60068-2-78
Transportation	E-Mark (E8), homologation number: 10R - 06 14947
National	CE, UKCA compliant
Environmental	REACH, RoHS3 and WEEE compliant

4.3 Type Tests and Environmental Conditions

Phenomena	Test	Description	Test levels
ESD	EN 61000-4-2	Enclosure contact	± 6 kV (crit. A)
RF field AM modulated	EN 61000-4-3	Enclosure	20 V/m (crit. A) (80 – 1000 MHz), 10 V/m (crit. A) (1-6 GHz)
Fast transient	EN 61000-4-4	Signal ports	± 1 kV (crit. A)
		Power ports	± 2 kV (crit. A)
		Ethernet ports	± 1 kV (crit. A)
Surge	EN 61000-4-5	Ethernet ports	± 1 kV (crit. A), shielded cab.
		Power ports	± 1 kV (crit. A)
RF conducted	EN 61000-4-6	All ports	10 V/m (crit. A) (0.15-80 MHz)
Radiated emission	EN 55032	Enclosure	Class B
Conducted emission	EN 55032	Signal ports	Class B
		Power ports	Class B
		Ethernet ports	Class B
Dry heat	EN 60068-2-2	Test Bb, storage +85 °C, operation +75°C
Cold	EN 60068-2-1	Test Ab, storage -40 °C, operation -40 °C
Damp heat	EN 60068-2-78	95% rel. humidity (+40°C)
Dry heat, cyclic	EN 60068-2-30	+55 °C / +25 °C, rel. humidity 95%, 12h - 12h
Dry heat	EN 60068-2-2	Test Bb, storage +85°C, operation +75°C
Thermal shock/temp. variation	EN 60068-2-14	Test Nb, -40 °C/+75°C, 3h/3h, 2 cycles, 3 K/min
Degrees of protection provided by enclosures	EN 60529	IP30
Vibration, broad-band random	EN 60068-2-64	Spectrum A.3 cat 1, breakpoints A.6 cat 1
Shock	EN 60068-2-27	50 m/s², 11 ms, half sine, 10 in each dir.

4.4 Parameters of Cellular Module

Parameter	Description
Antenna	Connector type: SMA (ANT + DIV) Input impedance: 50 Ω VSWR: ≤ 2 Input power: > 28 dBm Antenna gain: < 3.6 dBi Antenna isolation: > 25 dB Antenna correlation coefficient: < 0.5
LTE parameters	3GPP R12 Supported modulations: 64QAM, 16QAM and QPSK (DL/UL) Supported FDD bands: B1 (2100), B3 (1800+), B5 (850), B7 (2600), B8 (900 GSM), B20 (800 DD), B28 (700 APT), B32 (1500 L-band) Supported TDD bands: B38 (TD 2600), B40 (TD 2300), B41 (120M) (TD 2500+) Bandwidth: 1.4 MHz to 20 MHz Peak bit rates: 300 Mbps (DL), 50 Mbps (UL) @ 2 × 2 MIMO Power class: Class 3 (23 dBm ± 2 dBm)
WCDMA parameters	Support 3GPP R9/DC-HSDPA/HSPA+/HSDPA/HSUPA/WCDMA Supported modulations: 64QAM, 16QAM and QPSK Supported bands: B1 (2100 MHz), B3 (1800 MHz), B5 (850 MHz), B8 (900 MHz) Peak bit rates: 42 Mbps (DL), 5.76 Mbps (UL) Power class: Class 3 (23.5 dBm ± 2 dBm)

4.5 Parameters of GNSS

Parameter	Description
GNSS Systems	GPS, GLONASS, BDS, Galileo
Antenna	Connector type: SMA Input impedance: 50 Ω Frequency range: 1559 MHz – 1609 MHz Polarization direction: right-circular or linear polarization VSWR: < 2:1 Power mode: passive antenna only Passive antenna gain: > 0 dBi
Sensitivity	Cold start: 39 dB-Hz Acquisition: -145 dBm Tracking: -156 dBm
TTFF	Cold start: 40 s Warm start: 35 s Hot start: 3 s
Static Accuracy	Nominal accuracy 3 m

4.6 Parameters of WiFi

Parameter	Description
Short Description	WiFi 6/6E 2x2 MU-MIMO
Supported Standards	IEEE 802.11ax/ac/a/b/g/n (2T2R), DBDC (Dual-band, Dual-concurrent)
Antenna Connectors	2x2 MU-MIMO
Access Point	up to 15 clients
Data Rate	up to 450 Mbps @ 2.4 GHz up to 950 Mbps @ 5 GHz up to 950 Mbps @ 6 GHz 802.11b: up to 11 Mbps 802.11a/g: up to 54 Mbps 802.11n: MCS0 15 802.11ac: MCS0 9 802.11ax: MCS0 13
Frequency Ranges	2.412 – 2.484 GHz 5.150 – 5.850 GHz 5.925 – 7.125 GHz
Spectrum Widths	20/40 MHz @ 2.4 GHz 20/40/80/160 MHz @ 5/6 GHz
Modulation	802.11b: DSSS (DBPSK, DQPSK, CCK) 802.11g: OFDM (BPSK, QPSK, 16-QAM, 64-QAM) 802.11n: OFDM (BPSK, QPSK, 16-QAM, 64-QAM) 802.11a: OFDM (BPSK, QPSK, 16-QAM, 64-QAM) 802.11ac: OFDM (BPSK, QPSK, 16-QAM, 64-QAM, 256-QAM) 802.11ax: OFDMA (BPSK, QPSK, 16-QAM, 64-QAM, 256-QAM, 1024-QAM)
Type of Device	Access point (AP) Station (STA) Multi-role (AP & STA)
Security – Standards	WPA, WPA2, WPA3, 802.1X
Security – Encryption	WEP, TKIP, AES
TX Power	max. 19 dBm @ 2.4 GHz max. 19 dBm @ 5 GHz max. 13.5 dBm @ 6 GHz

4.7 Parameters of Bluetooth

Parameter	Description
Bluetooth Standards	V5.2, V5.1, V5.0, V4.2, V4.1, V4.0LE, V3.0, V2.1+EDR
Antenna	Shared with right RP-SMA connector
Frequency Range	2.412GHz 2.484GHz
Data Rate	1 Mbps, 2 Mbps and Up to 3 Mbps
Modulation	Header: GFSK Payload 2M: π/4-DQPSK Payload 3M: 8-DPSK
Receive Sensitivity	<0.1% BR, BER at -70 dBm
Output Power	≤ +14dBm

4.8 Parameters of I/O Ports

Electrical characteristics of the digital input are in the table. Digital input status can be retrieved from the router's web interface (General Status page) or via status ports and io get commands (see Commands and Scripts application note).

Logical¹	Voltage	Current	Status²
1	3 V	0.5 mA	Off
0	5 V	0.8 mA	On
0	12 V	1.6 mA	On
0	48 V	3.4 mA	On

The maximum digital output load is 500 mA at 48 V.

4.9 Parameters of Serial Interfaces

Supported parameters of the RS232 and RS485 interfaces, configurable in Expansion Port 1 and Expansion Port 2 menu items, are in the table.

Parameter	Description
Baudrate	300, 600, 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200, 230400.
Data Bits	5, 6, 7, 8.
Parity	none, even, odd.
Stop Bits	1, 2.
Flow Control	none, hardware.

4.10 System Configuration

The main parameters of the system are listed in the table.

Parameter	Description
CPU architecture	Quad-Core ARM Cortex-A53
CPU frequency	1.6 GHz
CPU power	2.3 DMIPS/MHz
Flash memory	8 GB of eMMC 2.18 GB for Router Apps (/opt) 474 MB for customer data (/var/data) 231 MB for system extensions (/) The remaining space is reserved for the system.
RAM size	1 GB
Watchdog	HW watchdog
RTC	Battery backup RTC
TPM	Trusted Platform Module (TPM) 2.0
SIM Slots	2× SIM (Mini SIM – 2FF) 1× Chip SIM (MFF2)¹

Appendix A: Troubleshooting

Attention: If connection to the router from a PC fails, ensure the PC's network card is configured to obtain an IP address from the DHCP server (router by default). Connect the router to the PC via a switch, or start the router first, then the PC after router initialization.

Ethernet connection fails or is not establishing.

Auto negotiation can be turned off, and rate/duplex manually set on the Ethernet interface (available on "LAN Configuration" page).

Mobile WAN connection fails.

Check signal power ("Mobile WAN status" page). Weak signal may require a better or directional antenna.
Enable automatic ping from the router to check connection and restart if ping fails. This is on the "Mobile WAN Configuration" page in the "Check connection" section. "Enable + bind" ensures ping goes through Mobile WAN network interface.

Mobile WAN connection cannot be established.

Check "Mobile WAN Configuration" for APN, name, password, and IP address (can be blank).
Enter SIM card PIN on "Unlock SIM Card" page in "Administration" section.
For private APN, it is not recommended to get DNS settings from the operator.
Check "System Log" page in "Status" section for errors.

Cannot connect from the Internet to the device behind the router (NAT enabled).

The device's gateway must point to the router.

Cannot access Web server placed behind the router over NAT.

Remote HTTP access to the router must be disabled on "NAT Configuration" page.
Enable "Send all remaining incoming packets to default server" and fill in the Web server's IP address. The Web server's default gateway must be the router's IP address.

DynDNS doesn't work.

This will not work with private APN.
If the same IP address is recorded in your canonic name as a dynamically assigned address, the operator is using NAT or a firewall.
Verify NAT using ping to your server with static address and compare with router's IP address.
Verify Firewall by accessing remotely to the router's Web interface.
If the operator does not provide the DNS server address, connection to dyndns.org server is impossible. System Log messages will show: "DynDNS daemon started", "Error resolving hostname: no such file or directory", "Connect to DynDNS server failed".

L2TP or IPSec isn't establishing.

Check the "System Log" page for error messages.

IPSec tunnel establishes but communication does not run.

Probably bad routing rules are defined in connected devices, or the default gateway.

Router switched to offline mode by SMS message, but router is in online mode after reboot.

SMS messages do not change router configuration. They remain in effect only until the router is rebooted.

Serial communication is not working.

Verify router model supports serial communications and check serial communication settings in the router's configuration menu via web browser, under "Expansion Port" in "Configuration".

Is the router Cisco compatible? Can I use the Cisco configuration?

No, the router's firmware (ICR-OS) is Linux-based with BusyBox, so Cisco configuration cannot be used. However, network connections are standard-based, ensuring compatibility with Cisco or other networking devices.

FTP or SFTP does not work.

FTP works on v2 routers only. SFTP works on all routers for file transfers.
For FTP issues on v2 routers, ensure FTP is enabled: "Configuration" section, "Services", "FTP". Connect with any client on port 21 using the same web interface name and password.
For SFTP issues, ensure SSH is enabled: "Configuration" section, "Services", "SSH". Connect with any SSH client on port 22 using the same web interface name and password.

How to connect to the router's command line? (SSH, Telnet)

SSH works on all routers, Telnet on v2 routers only.
SSH is enabled by default, but can be verified in the web interface: "Configuration" section, "Services", "SSH". Connect with any SSH client on port 22 using the same web interface user and password.
Telnet on v2 routers can be enabled here: "Configuration" section, "Services", "Telnet".

Appendix B: Customer Support

Customer Support for Europe

Advantech Czech s.r.o.
Sokolska 71, 562 04, Usti nad Orlici, Czech Republic
Phone: +353 91 792444
Fax: +353 91 792445
E-mail: iiotcustomerservice@advantech.eu
Web: www.advantech.com

Customer Support for NAM

Advantech B+B SmartWorx
707 Dayton Road, Ottawa, IL 61350 USA
Phone: +1-800-346-3119 (Monday – Friday, 7 a.m. to 5:30 p.m. CST)
Fax: +1-815-433-5109
E-mail: support.iiot.ana@advantech.com
Web: www.advantech.com

Customer Support for Asia

Phone: +886-2-2792-7818 #1299 (Monday – Friday, 9 a.m. to 5:30 p.m. UTC+8)
Fax: +886-2-2794-7327
E-mail: icg.support@advantech.com.tw
Web: www.advantech.com

Appendix C: Regulatory & Safety Information

Safety Notices

Attention: Please, observe the following instructions:

The router must adhere to all relevant international and national laws, including any specific restrictions governing its use in designated applications and environments.
To prevent potential injury and appliance damage, ensure compliance with regulations by using only authorized accessories. Unauthorized modifications or use of unapproved accessories could damage the router, violate regulations, and void the warranty.
Do not attempt to open the router.
Before handling the SIM card, turn off the router and disconnect it from the power supply.

Danger: This equipment is not suitable for use in areas with children. Small children could swallow the SIM card.

Ensure the power supply does not exceed 48 V DC maximum.
Avoid exposing the router to extreme ambient conditions. Safeguard it against dust, moisture, and high temperatures.
Only deploy routers with appropriate certification and labeling in environments containing flammable or explosive materials, such as gas stations, chemical plants, or areas involving explosives. Users must observe restrictions pertaining to radio device usage in such settings.
When traveling by plane, switch off the router. Using it onboard could jeopardize flight operations, disrupt mobile networks, and potentially violate regulations. Non-compliance may result in telephone service suspension, cancellation, or legal repercussions.
Exercise heightened caution when operating the router near personal medical devices like cardiac pacemakers or hearing aids.
The router may cause interference when operated in close proximity to TV sets, radio receivers, or personal computers.
It's advisable to create a suitable backup of all critical settings stored in the device's memory.

Product Disposal Instructions

The WEEE (Waste Electrical and Electronic Equipment: 2012/19/EU) directive ensures electrical/electronic products are recycled using best available recovery techniques to minimize environmental impact. This product contains high quality materials and components which can be recycled. At end-of-life, this product MUST NOT be mixed with other commercial waste for disposal. The device contains a battery. Remove the battery before disposal. The battery needs to be disposed of separately. Check supplier terms for disposal information.

The CE and UKCA marks indicate compliance with Directive 2014/53/EU and Radio Equipment Regulations 2017 (S.I. 2017 No. 1206) respectively. The full text of the EU Declaration of Conformity is available at icr.advantech.com/eudoc.

Appendix D: Related Documents

[1] v4i Configuration Manual

Product-related documents and applications can be obtained on Engineering Portal.

	Advantech ICR-4233 LTE Advanced Industrial Router Hardware Manual The Advantech ICR-4233 is an LTE Advanced Industrial Router designed for demanding IoT applications. This hardware manual provides comprehensive details on its features, including LTE Cat.6, dual-band WiFi 6/6E, Bluetooth V5.2, GNSS, dual SIM support, Gigabit Ethernet, USB 3.0, RS232/RS485 interfaces, digital I/O, and microSD card slot. It covers installation, configuration, technical parameters, and troubleshooting for industrial environments.
	Advantech ICR-4233 LTE Advanced Industrial Router Hardware Manual The Advantech ICR-4233 is an LTE Advanced Industrial Router hardware manual, detailing its features, installation, and technical specifications. This robust router supports LTE Cat.6, dual SIM, dual-band WiFi 6/6E, GNSS, multiple interfaces (Ethernet, USB 3.0, RS232/RS485, digital I/O), and advanced network functionalities for demanding IoT and industrial applications.
	Advantech ICR-4133, ICR-4233 Industrial LTE-A Router & IoT Gateway Datasheet Comprehensive datasheet for Advantech ICR-4133 and ICR-4233 Industrial LTE-A Routers & IoT Gateways, detailing features, specifications, applications, and order codes for robust industrial connectivity solutions.
	Advantech ICR-4233 LTE Advanced Industrial Router Hardware Manual Comprehensive hardware manual for the Advantech ICR-4233 LTE Advanced Industrial Router. Details product features, connectivity options including LTE Cat.6, WiFi 6/6E, GNSS, Ethernet, USB, and serial interfaces. Covers installation, configuration, technical specifications, and troubleshooting for industrial IoT applications.
	Advantech ICR-4133, ICR-4233 Industrial LTE-A Routers & Gateways Explore the Advantech ICR-4133 and ICR-4233 industrial LTE-A routers and gateways, featuring Cat.6 cellular connectivity, quad-core CPU, Gigabit Ethernet, and robust security. Ideal for energy, smart city, and industrial IoT applications, offering advanced networking and remote management via WebAccess/DMP.
	Advantech ICR-4133 and ICR-4233 Industrial LTE-A Routers & IoT Gateways Technical Specification The Advantech ICR-4133 and ICR-4233 are industrial LTE-A routers and IoT gateways designed for robust data transfer in diverse industrial applications. Featuring LTE Cat.6 connectivity, a quad-core CPU, 1GB RAM, and multiple interfaces including Gigabit Ethernet, USB 3.0, and serial ports, these routers offer high performance, low latency, and enhanced cybersecurity with TPM 2.0. Ideal for energy, smart city, and transaction management, they support advanced networking, remote management via WebAccess/DMP, and optional WiFi 6 and Bluetooth V5.2.
	Advantech ICR-4133 and ICR-4233 Industrial LTE-A Routers & Gateways Datasheet Explore the Advantech ICR-4133 and ICR-4233 industrial cellular routers and gateways, featuring LTE Cat.6 connectivity, robust hardware, advanced networking, and cybersecurity. Ideal for diverse industrial applications, these devices offer high data transfer speeds, low latency, and remote management capabilities via WebAccess/DMP.
	ICR-3231 LTE Industrial Router User Manual - Advantech Comprehensive user manual for the Advantech ICR-3231 LTE Industrial Router, covering safety instructions, router description, design, first use, technical parameters, troubleshooting, and customer support.