IR11004GD Dual-SIM 4G Router for ATMs
Dual-SIM 4G LTE router for ATMs and unattended BFSI sites, where multi-operator failover matters most.
- 4G LTE Cat 4 or Cat 6
- Single module
- 2.4 GHz 802.11 b/g/n
- 5-port 10/100 combo Ethernet
- Desktop or wall
- IP30
IR11004GD specifications
| Firmware | NexappOS |
|---|---|
| Cellular | 4G LTE Cat 4 or Cat 6 |
| Cellular modules | Single |
| SIM slots | 2 |
| Ethernet | 5-port 10/100 combo |
| Wi-Fi | 2.4 GHz 802.11 b/g/n |
| RS232 / RS485 | RS232 and RS485 |
| Mounting | Desktop or wall |
| Ingress protection | IP30 |
Operating temperature, power input, dimensions and antennas are in the IR11004GD datasheet. Download Datasheet
What every Instaroute router does
WAN resilience
Dual-SIM arbitration by signal, latency or data usage (on dual-SIM models); any-port WAN; link backup, switch and load balance with health checks; IPv6 dual-stack
VPN
IPsec IKEv1/v2 (AES-GCM, SHA-2, DH groups 14–16), OpenVPN, L2TP, GRE/mGRE/IPIP, DMVPN, EoIP, out-of-band management (OOBM)
Security
Zone firewall, ACL, MAC filter and NAT; SPI and DoS protection; domain filter; RADIUS and TACACS+ login
Industrial protocols
Modbus RTU/ASCII/TCP gateway, DNP3, IEC 60870-5-101/104, MQTT data publisher; serial DTU over TCP or UDP on models with RS232/RS485 ports
Management protocols
Web UI, CLI, SSH, SNMP v2c/v3, TR-069, syslog
Fleet management
Instaroute Lite Series: managed from Instaroute SDWAN Lite 2.0, with zero-touch provisioning, canary firmware rollout with rollback, alarms and browser SSH; flat per-device pricing, no data metering; hosted in India or self-hosted. Enterprise X Series: managed from the Nexapp Controller (SD-WAN Enterprise).
Protects IPsec tunnels against future quantum attacks
Hybrid post-quantum key exchange (classical + ML-KEM, NIST FIPS 203) on IPsec IKEv2 tunnels; ML-DSA (FIPS 204) authentication; post-quantum-signed firmware and configuration. Protects against harvest-now, decrypt-later. Post-quantum mode is on by default
How Nexapp post-quantum protection worksCertified for Indian networks and industry
- TEC MTCTE
- IEC 62443
- CE
- RoHS
TEC MTCTE certificate 244903206 (valid to March 2035) covers IR11004GS, IR11004GSW, IR11004GD, IR11004GDW, IR1180DM, IR1190DMG, IR1105-ODU-4G, IRX100-5G and IRX1160-ODU-5G; not IRX100-5Gv2 or the Enterprise X Series.
Certificates and tender documentsSupport
24×7 NOC in Pune; country-wide field operations; one SLA across hardware, firmware and platform. Warranty and RMA terms: coming soon
- 75,000+ devices deployed
- 400+ enterprise and banking customers
- in production since 2014
- 2,500 ATM sites moved from VSAT to dual-LTE
Where the IR11004GD fits
- ATM and cash-recycler connectivity (VSAT replacement)
- Offsite ATMs and bank kiosks
- CCTV at branches
Related models
Compare all 10 modelsFrequently asked questions
Where can I install the IR11004GD?
Mounting: Desktop or wall.
Ingress protection: IP30. It is built for indoor cabinets and racks.
Does the IR11004GD support dual SIM?
Yes. It has 2 SIM slots and one cellular module shared by both SIMs.
It chooses between SIMs by signal, latency or data usage.
Does the IR11004GD have Wi-Fi and serial ports?
Wi-Fi: 2.4 GHz 802.11 b/g/n, and RS232 and RS485 serial ports for Modbus RTU and other field devices.
Which Instaroute router should I use for an ATM?
Most ATM estates use a dual-SIM 4G router from the IR1100 series.
Choose the dual-module IR11004GDW if you want both operators live at once, for faster failover. We have moved 2,500 ATM sites from VSAT to dual-LTE using this approach.
How does dual-SIM failover work?
NexappOS monitors both SIMs and picks the active one by signal strength, latency or data usage.
If your primary link degrades, traffic moves to the second operator automatically. Dual-module models keep both links up at the same time and can load-balance across them.
Are Instaroute routers TEC MTCTE certified?
Nine of the ten cellular models are.
TEC MTCTE certificate 244903206, valid to March 2035, covers the IR11004GS, IR11004GSW, IR11004GD, IR11004GDW, IR1180DM, IR1190DMG, IR1105-ODU-4G, IRX100-5G and IRX1160-ODU-5G. It does not cover the IRX100-5Gv2 or the IRX400 to IRX5000 edges. You can check it on the public MTCTE portal.
Do the routers support SCADA and industrial protocols?
Yes. NexappOS provides a Modbus RTU/ASCII/TCP gateway, DNP3, IEC 60870-5-101/104 and MQTT, over RS232/RS485 or Ethernet.
The DIN-rail IR1180DM and IR1190DMG are built for your panels and substations.
Should I choose 4G or 5G?
Choose 4G for ATMs, POS, meters and telemetry, where coverage and reliability matter most.
Choose 5G (IRX100) for CCTV, busy branches and bandwidth-heavy sites. The IRX100 supports both 5G SA and NSA networks on sub-6 GHz bands.
Are the VPN tunnels quantum-safe?
Instaroute IPsec IKEv2 tunnels use hybrid post-quantum key exchange (classical + ML-KEM, NIST FIPS 203).
You also get ML-DSA authentication and post-quantum-signed firmware. This protects your traffic against harvest-now, decrypt-later attacks. See post-quantum cryptography for algorithms and versions.
How do I manage hundreds or thousands of routers?
Manage Lite Series routers from Instaroute SDWAN Lite 2.0, hosted by Nexapp in India or self-hosted in your data centre.
It handles zero-touch provisioning, firmware rollout, alarms and remote access. You pay a flat per-device price, with no data metering. You manage Enterprise X Series edges from the Nexapp Controller.
What warranty and support do I get?
Our 24×7 NOC in Pune and country-wide field operations back every router.
One SLA covers hardware, firmware and platform. Warranty and RMA terms: coming soon.
Get a quote for the IR11004GD
Tell us your sites and use case, and we'll recommend a model and send an INR quote.