Westermo Merlin 4400 Industrial Cellular Router

Key Features

• Secure by Design: Features Secure Boot for authentic software, a Trusted Platform Module (TPM) for encryption keys, and a cybersecurity suite including 802.1X, VPN encryption, and dynamic firewall.
• Versatile LTE Router: Ideal for public utility, industrial, and railway applications. Offers "zero touch" deployment for large-scale installations.
• Multi-Service Connectivity: Supports LTE, Ethernet, RS-232/485, and digital input.
• Industrial Protocol Conversion: Acts as a gateway and protocol converter for SCADA systems. Compliant with IEC 61850-3 for medium voltage substations and EN 50121-4 for railway infrastructure.
• Robust and Resilient: Features isolated power supply for transient protection, dual SIM card support, a wide voltage input range (9.6 to 60 VDC), and an extended temperature range.

Product Description

The Westermo Merlin 4400 series of versatile cellular routers are engineered from the ground up to provide the highest level of cybersecurity, encompassing both hardware and software. An tamper-proof chip secures cryptographic keys, while Secure Boot ensures the unit boots with only Westermo-approved and signed software. A comprehensive suite of cybersecurity tools is available as standard, including high-security VPN, stateful inspection firewall, user authentication, and 802.1x, offering robust protection for local and remote data transmission.

The system includes two existing ports. One can be configured as an RS-232 serial port or a digital input for dry contact. The second port is a serial port configurable as either RS-232 or RS-485. These serial ports simplify applications requiring modem migration to an IP infrastructure. The industrial protocol gateway enables multiple devices using different protocols to be accessed via a common protocol interface.

The Merlin 4400, like all Merlin devices, is compatible with the "zero touch" deployment software, Activator. This ensures configurations are generated and deployed from a central server, reducing configuration errors and increasing efficiency during project installation.

This compact unit is suitable for space-constrained environments. It boasts a high Mean Time Between Failures (MTBF), a wide temperature range, and a power supply that ensures the Merlin can meet the demands of industrial applications, intelligent networks, and railway systems.

Specifications

Dimensional Plan

Dimensions (W x H x D): 50 x 102 x 100 mm

Enclosure: All-metal

Weight: 500 g

Power Parameters

Operating Voltage: 9.6 to 60 VDC

Power Consumption: 5 W

Hold-up Time: 200 ms

Environment

Operating Temperature: -40 to +70°C

Storage and Transport Temperature: -50 to +85°C

Protection: IP40

Operating Humidity: 5 to 95% relative humidity

Interface

Ethernet: 4 x 10/100 Mbit/s, Ethernet TX, RJ45

Mobile: LTE Cat. 4; optional LTE Cat-M1/NB1

GNSS: GPS, BeiDou, Galileo

SIM Cards: 2 x Mini-SIM (2FF) slots, covered by a metal plate

Antenna Connectors: 3 x SMA compatible connectors

Console: USB Type C (router acts as a peripheral)

Serial: Two serial ports. One configurable as RS-232 or digital input. Second serial port configurable as RS-232/RS-485.

MTBF Hours

Telcordia: 1,600,000 hours

Certifications and Approvals

EMC

• EN/IEC 61000-6-2: Industrial environments immunity
• EN/IEC 61000-6-4: Industrial environments emission
• EN 50121-4: Railway applications and signalling and telecommunication equipment (pending)
• IEC 61850-3: Communication networks and systems for power utility automation - Part 3: General requirements

Safety

• EN 62368-1: Safety of communication technologies
• UL 62368-1

North American Standards/Approvals

FCC, PTCRB, AT&T, T-Mobile. Pending: Verizon.

Software Features (License Required)

Administration

Web interface (HTTPS), SMS administration, Command Line Interface (CLI) via console, SSHv2, TFTP, SNMPv1/v2c/3, Secure Copy (SCP), flexible alarm and event system, port monitoring.

Monitoring

Built-in diagnostics and packet tracing, event logging, SNMP traps, Syslog.

IP Routing

IPv4 and IPv6, IPSec/L2TPv3/GRE/OpenVPN client/server, DMVPN, DHCP, DynDNS, NAT, NAT Traversal, NTP Client, VLAN support, packet filtering, port forwarding, BFD, BGPv4, OSPF, RIP (v1 and v2), SNMP v1/v2/v3, TLS 1.2, 802.1x authentication, IEC104, QoS, VRRP, VRF.

VPN IPSec

IKE version 2, X.509 certificates, ECC, SHA2_512 support, AES_CBC (256), PFS, SCEP, DH_8192.

SCADA Protocol Conversion

I/O control from SCADA master, IEC 60870-5-104, IEC 60870-5-101, IEC 61850, Modbus RTU, Modbus TCP, Modbus RTU to TCP conversion, DNP3, serial to Ethernet, MQTT protocol translation.

RTU Functionality

I/O monitoring and control from SCADA master, protocol conversion, basic PLC functions (API).

Mobile Frequency Bands

Warranty

Validity: 5 years

Part Numbers

Accessories

• PS-60: Power supply, DIN rail mounting, input voltage: 100 to 240 VAC, 50 to 60 Hz or 110 to 250 VDC.
• 1211-2210: Westermo auxiliary serial adapter cable RJ-45/D-sub, 50 cm length.

Note: Antennas are not included.