Why do you need remote access in your industrial facility?
Remote access to automation systems has shifted from a luxury to an operational necessity. Companies that rely on on-site support to resolve PLC or HMI incidents face high costs: travel expenses, slow response times and prolonged production stoppages that could have been avoided.
An industrial remote connection kit based on the RU901 router allows engineers to connect securely to the plant network from any location, as if they were physically in front of the electrical cabinet.
What is the RU901 router?
The RU901 is an industrial router from the Teltonika Networks family, designed specifically for remote maintenance and remote access applications in industrial environments. Its key features include:
- 4G LTE Cat 6 connectivity with support for European bands, ideal for installations without fibre infrastructure or in remote locations.
- Dual SIM with automatic failover to ensure connection availability.
- Built-in VPN compatible with OpenVPN, IPsec and WireGuard, providing end-to-end encrypted tunnels.
- Industrial firewall with configurable access rules by IP, port and protocol.
- LAN Ethernet port for direct connection to the PLC network or cabinet switch.
- DIN rail enclosure for mounting in electrical cabinets, with an extended operating temperature range (−40 °C to +75 °C).
- RMS (Remote Management System): Teltonika's cloud platform for centralised management of all routers in the fleet.
Components of the remote connection kit
The complete remote maintenance kit with the RU901 includes the following elements:
- RU901 industrial router with high-gain external 4G antennas
- 24 VDC DIN rail power supply
- Industrial SIM card (or ready for the customer's own SIM)
- Shielded CAT6 Ethernet cable for plant network connection
- RMS (Remote Management System) licence for remote management
- Configuration and commissioning guide
- Bluemation technical support for initial configuration
Connection architecture: how it works
The RU901 establishes an encrypted VPN tunnel between the plant network and the remote engineer. The communication flow is as follows:
- The RU901 installed in the cabinet connects to the Internet via the 4G network (or via the WAN port if fibre is available).
- The router establishes a permanent VPN tunnel with the customer's VPN server or with Teltonika's RMS platform.
- The remote engineer connects using a VPN client installed on their laptop or desktop.
- Once inside the tunnel, the engineer has direct visibility of the plant network: they can connect to the PLC with TIA Portal, access the HMI via remote desktop or consult SCADA data.
- The RU901 firewall ensures that only authorised IPs and necessary ports are accessible, without exposing the industrial network directly to the Internet.
Common use cases
| Use case | Without remote access | With RU901 |
|---|---|---|
| Urgent alarm resolution | 2–4 h (travel time) | <15 min (remote connection) |
| PLC parameter update | On-site visit required | From the office in minutes |
| PLC program backup | Only during scheduled maintenance | Scheduled and automatic |
| Real-time monitoring | Limited to control room | From any device |
| OEM manufacturer support | Costly on-site visit | Controlled vendor access |
Security: the most important aspect
Cybersecurity in OT environments is a legitimate and priority concern. The RU901 addresses this challenge with several layers of protection:
- AES-256 encryption on all VPN tunnels, both OpenVPN and WireGuard.
- Two-factor authentication (2FA) for access to the RMS portal.
- Network segmentation: the router can be configured so that remote access only reaches specific devices on the plant network, with no visibility of the rest.
- Access logging: complete log of all connections with user, source IP, time and duration.
- On-demand access: the option to activate the VPN only when needed, via a digital input or a physical push button in the cabinet.
Compatibility with leading PLCs and HMIs
The RU901 kit is compatible with virtually any device operating on standard industrial Ethernet networks:
- Siemens: S7-1200, S7-1500, S7-300/400, ET 200SP, KTP/TP HMI panels
- Beckhoff: the entire CX and EK range with TwinCAT 3
- Rockwell: ControlLogix, CompactLogix, PanelView
- Schneider Electric: Modicon M340, M580, Harmony HMI
- Weintek, Proface, Maple Systems and any HMI with web or VNC access
- SCADA systems with remote desktop access (RDP, VNC)
Installation and commissioning
Installing the RU901 kit is straightforward and does not require stopping production:
- Mount the router on the DIN rail inside the electrical cabinet.
- Connect the 24 VDC power supply and external antennas.
- Insert the SIM card and connect the Ethernet cable to the plant network or existing switch.
- Configure the VPN tunnel and firewall rules (estimated duration: 1–2 hours with our support).
- Verify the remote connection from the customer's premises or from Bluemation.
At Bluemation we supply and install the complete kit, including security configuration and training so your team can manage access independently. If you want to improve your incident response capability and reduce travel costs, contact us for more information.