VPN Router MIRO-L230 world
Super-compact and inexpensive mobile router
- Very compact design
- 2x Ethernet connections
- Configurable digital in-/output
- Flexible mounting
- Extensive security functions
- VPN and routing functions
Most compact mobile router
The very compact MIRO mobile router is ideal for the flexible use of systems that require a secure Internet connection. Its dimensions make it perfect for applications where there is little space for installation. The MIRO offers all the important features that a secure mobile router needs in the smallest of spaces and at an attractive price. Ease of use, high stability and durability make the VPN router a reliable component of your remote maintenance solution.
Ethernet connections, digital input/output
Maximum security for VPN connections
The high IT security of the MIRO-L230 world is achieved through extensive monitoring and security functions, as well as a hardened operating system. This professional router operating system offers a wide range of VPN and routing functions and is easy to use. For simple remote access and updates, the mobile router can be connected to VPN solutions and central device management via Plug & Play.
A secure VPN solution for the MIRO is the DELTA LOGIC Connectivity Service, for example. This allows you to set up your remote access quickly and securely via VPN. You don't want to set up your router for our DELTA LOGIC Connectivity Service yourself? No problem. We will be happy to pre-configure your new router for you. Simply send us the completed router configuration form with your order.
| Cellular communication | |
| Frequency bands1, data rates (MIRO-L230 world) | 4G/LTE: 1 (2100 MHz, 2 (1900 MHz), 3 (1800 MHz), 4 (2100/1700 MHz), 5 (850 MHz), 7 (2600 MHz), 8 (900 MHz), 12 (700 MHz), 13 (700 MHz), 18 (850 MHz), 19 (850 MHz), 20 (800 MHz), 25 (1900 MHz), 26 (850 MHz), 28 (700 MHz), 38 (2600 MHz), 39 (1900 MHz), 40 (2300 MHz), 41 (2500 MHz) LTE Cat 4 (DL: max. 150 Mbit/s, UL: max. 50 Mbit/s) 3G/UMTS/HSPA: 1 (2100 MHz), 2 (1900 MHz), 4 (2100/1700 MHz AWS), 5 (850 MHz), 6 (800 MHz), 8 (900 MHz), 19 (800 MHz) HSDPA/HSUPA (DL: max 42 Mbit/s, UL: max 5,7 Mbit/s) 2G/GPRS/EDGE: 850, 900, 1800, 1900 MHz, GPRS/EDGE Class 12 (DL: max. 296 kbit/s, UL: max. 237 kbit/s) |
| Antenna connection | 1 x SMA female |
| SIM | Slot for 1 Mini-SIM card (2FF), locked Provider redundancy with multi-roaming SIM cards |
| Cellular status | Signal field strength, RSSI, RSCP / Ec/No, RSRP / RSRQ, Cell-ID, Location-ID |
| Hardware interfaces | |
| Ethernet ports | 2x RJ45 shielded, 10/100 Mbit/s, Full/half duplex, Auto MDI-X, 1.5 kV isolation voltage |
| Ethernet function | Assignment to IP network freely configurable per port, link-up/down detection |
| I/Os | 1 digital input or output, configurable: Input low active (contact input) or output open drain (24 V / 50 mA) |
| Displays (LEDs) | Power, WAN (Internet connection), Signal (cellular communication) |
| Network | |
| Network functions | 100 local IP networks, IP static/DHCP, TCP, UDP, IPv4, IPv6, NTP, DHCP, DNS, HTTP/S, ARP, SSH, 802.1Q VLAN incl. tags and trunk ports |
| Services | DHCP Server v4/v6 per IP network, DHCP relay, NTP server, DNS, DynDNS, IPv6 Router Advertiser |
| Routing | Static routing, routing priority, dynamic routing (OSPF, BGP, RIPv1, RIPv2, RIPng) |
| Connection check | Periodic, ping/icmp, DNS request, link up/down |
| DSL | PPPoE for external DSL modems |
| NAT/PAT | SNAT/DNAT (masquerade, netmapping, port forwarding, IP forwarding) unlimited number of rules |
| VPN | |
| DELTA LOGIC Connectivity Service | Supports VPN service for remote maintenance, remote access and M2M-communication |
| OpenVPN | Client/server, several parallel tunnels, server with up to 20 clients, tls-auth/tls-crypt, dead peer detection (DPD) |
| OpenVPN encryption | DES EDE 128, DES EDE3 192, AES 128-256 CBC/GCM, SHA 256-512 |
| IPsec | IKEv1, IKEv2 (automatic, fix), several parallel tunnels, pre-shared keys, certificates, tunnel mode, transport mode, dead peer detection (DPD) |
| IPsec encryption | DES EDE3 192, AES 128-256 CBC/GCM, SHA 256-512 DH-Group 1-31 (Diffie-Hellman 768 - 25519), ChaCha20-Poly1305 |
| GRE | GRE via IPsec, point-to-point, multipoint |
| PPTP | PPTP client/server; PAP/CHAP/MS CHAP/MS CHAP V2; MPPE 40-128 |
| Dynamic VPN | Dynamic multipoint VPN (GRE, IPsec, NHRP, OSPF, RIPv1/v2, BGP) |
| IT security | |
| Authentication | Pre-shared key, X.509 certificates, RADIUS, access rights (read, write, status) |
| Firewall/netfilter | IP filters (stateful firewall) also in VPN tunnel; packet filter: TCP, UDP, ICMP, ESP, AP, GRE; MAC filter; pre-defined firewall rules can be activated |
| Security | Booting signed firmware, HTTP/HTTPS attack prevention; response upon events: configuration change, link up/down, restart, login attempt, netfilter violation, password hashing |
| Events & Actions | |
| Event & Action Handler | Notification, alarming, diagnosis, attack detection, fault handling, operation and commissioning logic |
| Events/alarms (selection) | Change: digital input, Ethernet port, WAN chain, profile status, supply input (with MRX), cellular field strength; timer expired, firewall violation, login attempt detection, pulse sequence on digital input, counter, netfilter rule |
| Event-triggered actions (selection | Messages via e-mail, SMS (only LTE variants), SNMP traps, MCIP; switch profile, switch connection, change modem state, start timer, switch output or pulse sequence, activate firmware, reset |
| Monitoring and Management | |
| Monitoring | SNMP traps and agent, configurable system logs, remote syslog, link up/down detection, netfilter violation |
| Certificate management | EST, CRL |
| Administration | |
| Configuration | Web Interface HTTP(S) with session management, command line interface (CLI), Telnet, SSH, configuration profiles as ASCII and binary file, ample configuration profiles event-triggered, REST API |
| Diagnosis tools | Ping/icmp, tcpdump, traceroute, DNS lookup, AT commands, port mirroring |
| FW update | Incremental, failsafe, update server (HTTP, FTP, HTTPS, FTPS) |
| System time | NTP client and server, buffered real time clock |
| Help | Web interface: inline help, online help; example profiles, plausibility check, Configuration Guides |
| Supply | |
| Voltage | 12 ... 24 V DC (±20 % 9,6-28,8 V), reverse-polarity protected |
| Terminals | 3-pol. push-in terminal connectors, rigid/flexible conductors up to 1,5 mm2 |
| Power consumption | typical aprox. 1,8 W, max. 5,0 W |
| Ambient conditions | |
| Dimensions (WxDxH) | 26 x 77 x 99 mm |
| Weight | 100 g |
| Mounting | DIN rail mounting, horizontal pitch (HP) on DIN rail: Switch cabinet: 1.5 HP, depth on DIN rail 92 mm Screw mounting via holes in the housing/module |
| Operating temperature | -40...+75 °C +70 ... +75 °C: extended temperature range (refer to www.insys-icom.com/en/extended-temperature-range/) |
| Humidity | 0...95% (non-condensing) |
| IP rating | Housing: IP40 |
| Approvals & Standards | |
| Certifications | MIRO-L230: CE, UKCA, FCC part 15 class B, IC, PTCRB & IoT network certification, AT&T - NR-AM-DO, AT&T – SIM only, CCC/CQC, SRRC, NAL |
| EMV | Emission: EN 55032 Class B, EN 61000-6-3; Immunity: EN 55035 (ersetzt EN 55024), EN 61000-6-2 |
| Safety | IEC/EN 62368-1 |
| Environmental conditions | Vibration/shock as per PLC standard DIN EN 61131-2 and EN 60068-2-6, EN 60068-2-27; Temperature tests as per EN 60068-2-1, EN 60068-2-2, EN 60068-2-14, EN 60068-2-30 |
| Operating time | MTBF > 1.000.000 h (25 °C), according to SN 29500 (according to IEC 61709) |
| Data sheet ECR series | ||
| Data_sheet_MIRO.pdf | 828 KB | December 19, 2024 |
| Manual MIRO | ||
| Manual_MIRO.pdf | 1.49 MB | December 19, 2024 |
| Quick Installation Guide Router | ||
| QIG_Router_en.pdf | 1.46 MB | December 12, 2023 |
| DELTA LOGIC Connectivity Service First Steps | ||
| DLCS_First_Steps.pdf | 122 KB | January 08, 2024 |
General
I cannot reach my device via the IP 192.168.1.1.
Have you already tried https://192.168.1.1? The HTTP connection was deactivated by default with firmware version 4.4. Your device should be available via an HTTPS connection.
My device shows that LTE is online, but I have no Internet access.
If you have configured your device, set all firewall rules and no other settings are missing, make sure that you have entered the correct access point name under Interfaces/LTE.
I need to enter the SIM PUK. Where do I have to enter the PUK?
In the new UI under Administration/Debugging, in the classic UI under Help/Debugging. Please select AT command as the tool and enter your PUK and the new PIN in the following format:
AT+CPIN="PUK","NEW PIN"
Here is an example of what this could look like:
AT+CPIN="12345678","0000"
How can I create a support package?
New UI: In the menu under Status/Support package/Create support package
Classic UI: in the menu under Help/Support/Create new support package
I cannot connect to my Siemens HMI panel (KTP1500 Comfort, KTP600 Basic,... ) via VPN in the TIA Portal. Why?
1. With HMI panels only "Advanced online loading" can be used in the TIA Portal, "Advanced online connect" is basically not possible.
2. "PG/PC interface" TAP-Windows Adapter..." must be selected as interface.
3. With some HMI panels (KTP600 Basic) the "PN/IE interface" cannot be used, in these cases the "Ethernet interface" has to be used.
4. For some HMI panels (e.g. TP700 Comfort), the "Display all compatible stations" option must not be active.
OpenVPN
Where can I download the latest Open VPN client?
You can find it here: https://openvpn.net/index.php/open-source/downloads.html
My OpenVPN connection is not going online. I get the error message “UDP link local: (not bound)” ... “Inactivity timeout (-ping-restart), restarting”.
Your firewall is blocking the connection. Make sure that the connection to the VPN server via the required port is not blocked.
My OpenVPN connection is not going online. I receive the error message “Certificate not yet valid”.
This means that the date of your device is set incorrectly. Your certificate is literally not yet valid because your device time is in the past. You can set the correct date and time via Administration/Time.
My OpenVPN connection is not going online. I get the error message “TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)”.
Explanation: There is no response from the server to the client connection within 60 seconds (see timestamp of the marked entries). This results in a timeout. This can have several causes.
This is one of the most common cases. The most common cause is then point 3.
1. Incorrect destination address or destination port in the VPN client: Check whether the correct address of the VPN server and the correct port are set here.
2. No Internet connection: Check whether VPN servers or other services are pingable on the Internet.
3. Firewall blocks the connection establishment: Make sure that the connection establishment via the required port to the VPN server is not blocked.
I see the message “temporary failure in name resolution” in the OpenVPN logs. What does this mean?
This generally means a DNS error. Make sure that the DNS settings of your Insys device are correct and that DNS queries are allowed.
When I start OpenVPN, I get a blue screen error.
This behavior is possibly caused by the TIA Portal from Siemens, which is also responsible for support in this case. DELTA LOGIC has no influence here. However, experience has shown that it can help to switch off the SIMATIC Industrial Ethernet ISO protocol on the OpenVPN network adapter.
Accessory Items
