edge-router-ot-it-divide-problem.jp

How an Industrial Edge Router Connects to PLC & CNC

Written by: Robert Liao

|

Published on

|

Time to read 7 min

Author: Robert Liao, Technical Support Engineer

Robert Liao is an IoT Technical Support Engineer at Robustel with hands-on experience in industrial networking and edge connectivity. Certified as a Networking Engineer, he specializes in helping customers deploy, configure, and troubleshoot IIoT solutions in real-world environments. In addition to delivering expert training and support, Robert provides tailored solutions based on customer needs—ensuring reliable, scalable, and efficient system performance across a wide range of industrial applications.

Summary

Connecting your factory floor PLCs and CNCs to the cloud is the key to Industry 4.0, but it's a major challenge. Your machines speak OT protocols (like Modbus/S7), not IT protocols (like MQTT). This guide explains how a modern industrial edge router solves this. It acts as an all-in-one "translator" and "guard"—a true IoT Gateway. A smart edge router provides both secure 4G/5G WAN connectivity and the local protocol conversion needed for secure ot/it connectivity.

Key Takeaways

The Problem: Your PLCs and CNCs are "data silos." They speak legacy protocols (Modbus, S7, etc.) and cannot securely connect to the cloud.

The Solution: A modern industrial edge router is a hybrid device that combines the functions of a secure router and an IoT Gateway.

Dual Function: 1) It's a secure edge router that provides a firewall and VPN-secured 4G/5G WAN link. 2) It's an IoT Gateway that translates OT protocols (Modbus, S7, EtherNet/IP) into IT-friendly MQTT.

The "One-Box" Advantage: This edge router solution is simpler, more secure, and has a lower TCO than the "old way" of using a separate PC, middleware (like Kepware), and a basic router.

How an Industrial Edge Router Connects Your Factory Floor (PLC & CNC)

If you're in manufacturing, your factory floor is filled with valuable data locked inside PLCs and CNC machines. You know you need that data for OEE, predictive maintenance, and remote monitoring. But there's a huge wall between your machines (Operational Technology, or OT) and your data platforms (Information Technology, or IT).

Your PLC speaks Modbus. Your cloud speaks MQTT. How do you bridge this gap?

You might think you need a complex, multi-vendor solution with middleware, industrial PCs, and a separate router. Not anymore. The answer is a single, powerful device: the modern industrial edge router. Let's explore how this one device solves both your connectivity and your translation problems.

The Problem: Your PLC is an "Offline" Data Silo

The core challenge of ot/it connectivity is that the two worlds were never designed to talk.

  • OT Network (The Factory): Your PLCs (Siemens, Rockwell) and CNCs (FANUC) are built for real-time reliability. They use old-school industrial protocols like Modbus, S7, and EtherNet/IP. They are "trusting" and have almost no modern security.
  • IT Network (The Cloud): Your servers (AWS, Azure, SCADA) are built for data and scalability. They speak modern protocols like MQTT, HTTP, and OPC UA, and they live on the internet, a "zero-trust" environment.

A standard IT edge router (like your office router) only knows how to route IP packets. It has no idea what Modbus is. It sees your PLC's data as gibberish. This is why you need a specialized industrial edge router.

The Solution: The "One-Box" Edge Router + IoT Gateway

A modern industrial edge router is a hybrid device. It's a "smart" edge router that has evolved to include the full capabilities of an IoT Gateway.

This single device performs two critical functions simultaneously.

Function 1: The IoT Gateway Job (The "Translator")

This is the "OT" part of the job. This edge router speaks the language of the factory.

  • Protocol Conversion: It has the physical ports (like RS485/RS232) and the software drivers to connect directly to your PLCs and CNCs.
  • Data Standardization: It "polls" the PLC for data (e.g., Modbus register 40001) and translates that cryptic number into a clean, IT-friendly format (like JSON with context: {"tag": "MotorSpeed", "value": 1800, "unit": "RPM"}).
  • Cloud Publishing: The edge router then publishes this clean data using MQTT or OPC UA, the standard languages of the cloud. This is the core of connect plc to cloud.

Function 2: The Secure Edge Router Job (The "Guard")

This is the "IT" part of the job. While the edge router is translating data, it's also being your secure border checkpoint.

  • Firewall & Segmentation: The edge router is the firewall. It isolates your entire machine network (OT) from the corporate IT LAN. It blocks all incoming traffic, making your PLCs invisible to ransomware or malware on the IT network.
  • Secure Cellular WAN: This edge router uses a high-reliability 4G or 5g edge router connection to bypass the (often insecure) factory guest Wi-Fi. This creates a private, secure "air gap" for your machine data.
  • VPN Tunneling: It automatically encrypts all outbound MQTT traffic inside a secure VPN tunnel, ensuring your production data is unreadable in transit.

A diagram showing the OT/IT divide, where PLCs (Modbus/S7) cannot communicate with IT cloud platforms (MQTT), a problem an industrial edge router solves.


A Practical Example: Connecting a Siemens S7 PLC with an Edge Router

Let's make this real. You have a Siemens S7-1200 PLC that you want to connect to cloud.

  • The Old Way (Complex): You'd buy a PC, install Windows, buy a $2,000+ OPC server license (like Kepware), configure it, and then plug that PC into a basic router. It's expensive, complex, and now you have a Windows PC to patch and maintain.
  • The Modern Edge Router Way (Simple):
    1. Hardware: You install one edge computing router . You connect its Ethernet port to the PLC.
    2. PLC Prep: In your TIA Portal, you enable "PUT/GET" access and disable "optimized block access" on the data blocks you want to read. (This is a 2-minute "insider" step).
    3. Edge Router Config: In the edge router's web GUI, you use the "Edge2Cloud Pro" app. You add a new S7 device, enter the PLC's IP, and map your tags (e.g., DB10,W2 = "CycleCount").
    4. Cloud Config: You enter your MQTT broker's address and topic (e.g., factory/line1/plc).
    5. Done. Your edge router is now securely polling your PLC and streaming clean data to your cloud platform.

Why This Edge Router Approach is Better (The Business Case)

This "one-box" solution isn't just neater; it's a fundamentally better business model.

1. It Slashes TCO & Complexity

This is the biggest win. The edge router is the industrial PC. It is the protocol converter. It is the router. You've eliminated 2-3 pieces of hardware and one very expensive software license. Your TCO (Total Cost of Ownership) is a fraction of the old way, and you have one reliable, solid-state industrial edge router to manage, not a fragile Windows PC.

2. It Enables Secure Remote Access (The "Truck Roll" Killer)

This is the ROI superpower. The sameindustrial edge router that's collecting your data also connects to Add One Product: RCMS (Robustel Cloud Manager Service).

  • The Problem: Your CNC in another state is down. You have to fly an engineer out ($5,000 cost).
  • The Edge Router Solution: Your engineer opens their laptop, logs into RCMS, and activates RobustVPN. They are now securely "tunneled" through the edge router and can remotely access the PLC/CNC with their programming software (like TIA Portal or Studio 5000).
  • The Result: You just saved $5,000 and fixed the machine in 30 minutes. This edge router just paid for itself 10 times over.

An architecture diagram showing how a single industrial edge router acts as an IoT gateway, providing both data (MQTT) and secure remote access (VPN) for PLCs and CNCs.


Conclusion: Your Edge Router is Your Factory's Data Hub

Stop thinking of your factory floor and your cloud as two separate worlds. The modern industrial edge router is the secure, intelligent bridge that unifies them. It's no longer just a "router" for connecting to the internet; it's the all-in-one edge router solution for:

  • Connecting your PLCs and CNCs.
  • Translating their data.
  • Securing your entire OT network.
  • Enabling remote service.

This edge router is the first and most important step to building a truly smart, connected, and secure factory.


A diagram comparing the complex, high-cost TCO of a PC-based middleware stack to the simple, low-TCO solution of a single industrial edge router for PLC connectivity.


Frequently Asked Questions (FAQ)

Q1: What protocols does this industrial edge router support?

A1: A true industrial edge router (like the Robustel EG-series) supports all major protocols, including Modbus RTU, Modbus TCP, Siemens S7, EtherNet/IP (Allen-Bradley), OPC UA, and more, making it a universal translator for connect plc to cloud tasks.

Q2: Is this edge router solution secure?

A2: Yes. It's far more secure than any other method. The edge router acts as an OT security firewall, isolating the PLCs. All remote access is on-demand, authenticated, and encrypted via RCMS. Plus, a cellular edge router can use 4G/5G to completely bypass the corporate IT network, creating a true "air gap" for data.

Q3: Can one edge router connect to multiple PLCs and CNCs?

A3: Absolutely. A single, powerful edge computing router (like the EG5120) can simultaneously poll dozens of different devices (PLCs, CNCs, power meters) on its LAN, each with its own protocol, and aggregate all that data into one clean, unified MQTT stream for the cloud. This single edge router becomes the data hub for your entire line.