Discover the Depths of "Extending Router Functionality"

Our comprehensive Extending Router Functionality application note is your essential guide to unlocking your Advantech router's full potential. It's packed with in-depth information and practical examples on:

• Shell Scripting: Automate tasks and manage router operations.
• Python Power: Utilize Python for complex automation and data processing.
• Router Apps: Develop and deploy self-contained software packages (C/C++, Python, shell).
• Controlling Router Peripherals: Master GPIOs, USB devices, and user-configurable LEDs.
• Understanding Constraints: Navigate S1 router specifics, memory management, and performance.

• Custom Firmware Compilation: Modify and recompile OS components for ultimate control.

• Special Router Configuration Options: Fine-tune router behaviors with advanced settings.

This guide is your key to making the most of your router's capabilities.

New Public Router App Repository Launched

Secondly, we've launched our new public Git repository. It’s a growing collection of example applications with source code to aid your development.

Our first example is GNU nano, a user-friendly command-line text editor. It demonstrates creating a Router App that wraps an open-source utility. Find the nano-7.2.tar.gz package in packages/nano/.

Visit the repository RouterApps, explore the nano example, and "watch" for future additions. We believe these resources will significantly empower your router projects.

Detailed Changelog

For a full breakdown of the advancements and changes in this release, we encourage you to review the official Release Notes.

Major Enhancements

1. Cellular Synchronization with Date and Time Added: Added possibility to synchronize date and time with the cellular network.

2. Cellular Communication Log Added: Added logging of AT, QMI and MBIM communication with the cellular module.

3. WireGuard Tunnel Subnets Capacity Modified: Increased the maximum number of Remote subnets in the WireGuard tunnel configuration from 4 to 32.

4. Added New Ciphers to IPsec Tunnel Configuration: Upgraded strongSwan to version 6.0.1 and added new ciphers to the IPsec tunnel configuration.

5. OpenSSH Upgraded: Upgraded OpenSSH to version 10.0. This fixes several minor security vulnerabilities and a temporary connection rejection after a previous session expired unauthenticated.

6. ICR-27/2800 Cellular Lock-up Fix: Fixed cellular module lock-up on ICR-27/2800 occurring after a failed connection reconfiguration.

7. Follow STA Radio Settings Option Fixed: Fixed availability of the Follow STA Radio Settings option in the WiFi AP Configuration on ICR-41/4200.

Availability

The new firmware can be downloaded directly to the router from Advantech's public server, or manually from the Firmware or Router Models pages. For specific firmware versions and compatibility details, please refer to the Firmware Compatibility Chart document.

In today’s world of increasing cyber threats, protecting industrial networks has never been more critical. That’s why Advantech has introduced the S1 Router series—a new generation of cellular routers designed with security at their core.

The S1 Routers are built to deliver enhanced protection for industrial applications that require compliance with key security standards, such as IEC 62443-4-2 SL1 and more. Thanks to features like secure boot and integrity checks, these routers ensure that your network infrastructure remains secure from unauthorized access or tampering.

Unlike standard routers, S1 Routers run on ICR-OS S1, a hardened Linux-based operating system with a dedicated firmware branch. This approach limits unnecessary flexibility in favor of greater security and system integrity, while still offering the convenience of web-based configuration.

Key benefits of S1 Routers:

    🔒 Security compliance for critical infrastructure
    🔒 Robust protection with secure boot, integrity checks, and hardened OS
    🔒 Regular security updates via a dedicated firmware branch
    🔒 Available on selected router models (look for “-S1” in the part number)

S1 Routers are an ideal choice for industries that need to meet strict security regulations or that operate in environments where cybersecurity resilience is non-negotiable. With continuous updates and proven compliance, they help future-proof your network while giving you confidence in your security posture.

➡️ Want to learn more about how Advantech’s Secure Routers can protect your operations? Read more here.

Details can be found in Release Notes, which are available here.

With 5× Gigabit ports, RS232/RS485, digital I/Os, and optional Wi-Fi 5 or GNSS, the ICR-1645 offers flexible integration. It runs ICR-OS, supports Router Apps, and enables seamless remote management with VPN via WebAccess/DMP.

Why the Restructure?

To address hardware limitations on certain routers, we’ve reimagined our Python Router Apps into two distinct versions:

1. Python 3 Lite (formerly "Python 3")

• Lightweight, minimal footprint: Ideal for routers with constrained resources.
• Limited feature set: Excludes pip, removes UNICODE character functions, and uses a pure-Python hashlib for compatibility.
• Best for: Basic scripting and automation tasks where minimal resource usage is critical.

2. Python 3 (formerly "Python 3 with pip")

• Full-featured powerhouse: Retains all the capabilities power users need.
• Includes: pip for package management, native hashlib for faster cryptography, full UNICODE support, and venv for virtual environments.
• Best for: Advanced scripting, dependency-driven projects, and applications requiring robust performance.

What’s Changed for Existing Users?

• If you previously used Python 3 (without pip), you’ll now use Python 3 Lite—optimized for lightweight operation.
• The Python 3 with pip app has been renamed to Python 3, offering the full standard installation.

Python 3.12: What’s New Under the Hood

While the app restructuring is the star of this update, the upgrade to Python 3.12 brings its own set of enhancements:

• F-strings & Type Syntax: Improved readability and static typing support.

• Interpreter Optimizations: A unique per-interpreter GIL and low-impact monitoring boost multitasking efficiency.

• Library Upgrades: Enhanced os, pathlib, and sqlite3 modules for smoother integration.

• Security: Stronger hashing algorithms (SHA1, SHA3, MD5) via the HACL* project.

These updates future-proof your router’s capabilities while aligning with modern Python development practices. For a complete list of improvements and features, visit the official Python 3.12 documentation.

Availability

Both restructured apps are now available:

• Python 3 Lite: For basic scripting on resource-limited routers.
• Python 3: For advanced users needing pip, UNICODE, and native performance.

Download them directly from your router via Advantech’s public server or manually from the Router App page.

Managing large networks of cellular routers remotely has always been a challenge—until now. WebAccess/DMP is a powerful, flexible, and secure platform that simplifies remote network management, ensuring seamless monitoring, configuration, and security from anywhere.

With WebAccess/DMP, you can:
✅ Create a digital twin of each router for real-time visibility
✅ Set up custom dashboards to monitor performance and receive instant alerts
✅ Organize routers by company and manage user access with strong authentication
✅ Ensure security with two-factor authentication and encryption

Introducing VPN Management: Secure Connections, Zero Hassle

We’re taking remote network management a step further with our new VPN Management feature. Setting up secure connections between routers and devices across different networks has never been easier—no tedious manual configuration required.

🔹 Automated Setup – Define your network, assign routers, and let WebAccess/DMP handle the rest
🔹 Built-in WireGuard VPN – Enjoy fast, encrypted connections for industrial and remote networks
🔹 Zero-Touch Configuration – Deploy and manage routers effortlessly
🔹 Direct Router Access for Troubleshooting – Resolve issues without complex workarounds
🔹 Cloud or On-Premises Deployment – Flexibility to fit your needs

And here’s the game-changer: instant access to devices behind your routers through a secure proxy link. No complicated network settings—just open your browser and connect.

With WebAccess/DMP’s VPN Management, security meets simplicity, making it easier than ever to keep remote equipment connected and running smoothly. This functionality replaces WebAccess/VPN, which is becoming EOL (PhaseOut link).
 

🚀 Ready to experience the future of remote network management? Try it now!

Also, learn how to:

- Automate router configurations for seamless and secure network connectivity
- Leverage WireGuard VPN for high-speed, lightweight, and reliable security
- Support flexible deployment and VPN for secure remote access

Don't wait to register-get started today!
Want to learn more about WebAccess/DMP?

This cellular router is designed specifically for the German and Austrian markets, featuring a modified set of frequency bands tailored to local requirements. Like the rest of the ICR-2437 series, it primarily operates on the 450MHz spectrum, ensuring reliable connectivity for critical applications. The ICR-2437-DE is built to deliver robust and secure wireless communication, making it an ideal solution for the industrial, utility, and transportation sectors.

Detailed Changelog

For a full breakdown of the advancements and changes in this release, we encourage you to review the official Release Notes.

Major Enhancements

1. WireGuard Tunnel Subnets Capacity: Increased the maximum number of Remote subnets in the WireGuard tunnel configuration from 4 to 32.

2. NTP Time Sync Error Resolved: Fixed failure of the Set Date and Time operation when invoked via Query NTP server in firmware 6.5.2.

3. General Status Page Modified: Modified System Information on the General Status page to display the Product Type by default and the Hardware UUID only when More Information is requested.

4. OpenSSH Upgraded: Upgraded OpenSSH to version 10.0. This fixes several minor security vulnerabilities and a temporary connection rejection after a previous session expired unauthenticated.

5. Cellular Communication Log: Added logging of AT, QMI and MBIM communication with the cellular module. To enable, check Enable debugging in the Mobile WAN Configuration and then increase Minimum Severity in the Syslog Configuration to Debug.

6. Terminfo Database for Router Apps: Added terminfo database file for easier integration of screen-oriented router apps, such as Midnight Commander or Lynx.

Availability

The new firmware can be downloaded directly to the router from Advantech's public server, or manually from the Firmware or Router Models pages. For specific firmware versions and compatibility details, please refer to the Firmware Compatibility Chart document.

• Version 10.2.1 has PIM-SM functionality incorporated.   
• PIM-SM integration makes our Router App Protocol PIM-SM obsolete and so Protocol PIM-SM Router App will no longer be maintained or supported in the future.

New features in version 10.2.1:

• Support for CISCO password authentication in NHRP
• Implement BGP-wide configuration for graceful restart
• Implement neighbor x remote-as auto for BGP
• Implement bgp dual-as for BGP
• Add bgp ipv6-auto-ra command

and many more. Whole list can be found on FRRouting site. 

This Router App is used to gain a more accurate location via NTRIP protocol.“  

Version 1.3.0 is a major update, bringing important fixes, improvements, and new features. Here are the key highlights:

Changed NTRIP username and password from mandatory to optional
Previously, users were required to enter a username and password for all NTRIP connections. With this update, authentication is now optional, allowing connections to open-access NTRIP servers without needing credentials.

Changed source table browser (show both mountpoint and identifier)
The source table browser now provides more detailed information by displaying both the mountpoint name and its corresponding identifier, making it easier to select the correct data source.

Increased maximum number of source table lines to 1000
The limit of source table lines was raised to 1 000, improving usability for users accessing larger NTRIP networks with many available sources.

Added option to set router app as source and target device
Users can now configure the router app to function as both an NTRIP source and a target device, enabling more flexible routing and data forwarding options.

Added option to set minimum interval of sending NMEA GGA messages to server (default 5s)
A new setting allows users to define how frequently NMEA GGA messages are sent to the NTRIP server. This helps optimize bandwidth usage and ensures compliance with server requirements.

Added information about selected mountpoint
The app now displays details about the currently selected mountpoint, providing better visibility into the active data source.

Added status of NTRIP client
A new status display provides real-time feedback on the NTRIP client's connection state, making it easier to diagnose issues and monitor performance.

Router App handles IP address assignation for devices according to their MAC OUI.

Version 1.3.0 now supports IPv4 address ranges, allowing you to assign multiple IP addresses to a single MAC OUI without needing to specify each address - MAC OUI pair separately. 

Detailed Changelog

For a full breakdown of the advancements and changes in this release, we encourage you to review the official Release Notes.

Major Enhancements

1. Minimum Severity Syslog Configuration: The Minimum Severity setting has been added to the Syslog service configuration across all platforms.

2. USB Ports Disabling: The ability to disable USB ports has been extended to all platforms for enhanced security.

3. Postinstall Scripts: Support for postinstall scripts has been added to RouterApps. These scripts can now be executed after a RouterApp is installed or during the first startup of a RouterApp following an update.

Important Note

This firmware version is not intended for mass deployment. Given the significant changes introduced in this release, extensive testing is strongly recommended prior to deploying it in a production environment.

Availability

The new firmware can be downloaded directly to the router from Advantech's public server, or manually from the Firmware or Router Models pages. For specific firmware versions and compatibility details, please refer to the Firmware Compatibility Chart document.

Detailed Changelog

For a full breakdown of the advancements and changes in this release, we encourage you to review the official Release Notes.

Major Enhancements

1. VLAN Tagging: Added support for VLAN tagging (IEEE 802.1Q), enabling better network segmentation.

2. Sites Blocking: New configuration options under the Firewall section allow for the blocking of specific sites.

3. Secondary DNS Server: Added configuration support for a secondary DNS server for Ethernet, Mobile WAN, PPPoE, and WiFi Station.

4. NTP Configuration: Enhanced NTP configuration options for more precise time synchronization.

5. Syslog Configuration: Additional options for Syslog configuration, providing greater control over system logging.

6. Password Requirements:

• Default user passwords and passwords set by the admin are expired by default and must be changed
  upon first login.
• The required password complexity has been increased.
• Password fields now include visibility toggles and complexity indicators.

7. User Management: Configuration pages for user management have been redesigned for better usability.

8. WiFi Improvements: WiFi reliability has been enhanced.

9. Default Services Setting: The firewall is now enabled by default, while SNMP is disabled by default.

10. Document Restructuring: The Commands and Scripts document has been discontinued. It has been replaced by two new documents titled Command Line Interface and Extending Router Functionality.

Important Note

This firmware version is not intended for mass deployment. Given the significant changes introduced in this release, extensive testing is strongly recommended prior to deploying it in a production environment.

Availability

The new firmware can be downloaded directly to the router from Advantech's public server, or manually from the Firmware or Router Models pages. For specific firmware versions and compatibility details, please refer to the Firmware Compatibility Chart document.

Please see the list of models below.

ICR-2431G – model for EMEA region with GNSS receiver

ICR-2438 – model for JAPAN region
ICR-2438W – model for JAPAN region with WiFi

ICR-2441W – model for NAM region with WiFi
ICR-2441G – model for NAM region with GNSS receiver

ICR-2501 – LAN model, GLOBAL
ICR-2501W - LAN model, GLOBAL, with WiFi

The industrial cellular routers ICR-2000/2400/2500/2600 are designed for wireless communication in mobile networks that utilize traditional cellular technologies.

The primary purpose of these routers is to support Category 4 (Cat.4) services on the LTE cellular network. The peak downlink data rate for Category 4 is approximately 150 Mbps. The routers are equipped with up to four Ethernet ports, and digital I/O connectivity (1x DI, 1x DO). Optional built-in WiFi 802.11 ac/a/b/g/n with AP, Client, and Multirole modes or optional integrated GNSS functionality is available.

Details can be found in Release Notes, which are available here.

To achieve the highest standards in cybersecurity and data protection, we are committed to complying with the European Union Directive on network and information systems (NIS2 Directive) by 2025 and obtaining ISO27001 certification. The official statement, along with related key areas, is available at NIS2 Compliance Statement document.

To fully enjoy the features and improvements of WebAccess/DMP 3.1.0, please ensure that your client is upgraded to version 3.1.0.

Additionally, please be aware that the WebAccess/DMP 2.x.x version will be discontinued by the end of this year. We strongly recommend migrating your devices to the 3.x.x version.

We are excited to announce that our routers have received FirstNet certification, underscoring our commitment to providing reliable communication solutions for first responders and public safety personnel. FirstNet, built with AT&T, prioritizes the connectivity needs of emergency services.

The certification is newly valid for the routers ICR-4461-1ND, ICR-4461S-1ND, ICR-4461W3-1ND, and ICR-4461W3S-1ND. 

FirstNet certification holds significant importance within the USA. The FirstNet mission is to deploy, operate, maintain, and improve the nation's first high-speed, nationwide wireless broadband network dedicated to public safety. This reliable, highly secure, interoperable, and innovative communications platform will provide 21st-century tools to public safety agencies and first responders, enabling them to receive information quickly and make faster, more informed decisions.

This video series has been created to provide you with valuable insights and step-by-step instructions, making it easier for you to leverage the full potential of WebAccess/DMP.

Detailed Changelog

To dive into the specifics of what's new and improved, we highly recommend reviewing the Release Notes. They provide a thorough overview of the advancements and modifications introduced in this update.

Major Enhancements

• Added jq Command: Support for better JSON file manipulation.
• SSH Port Configuration: The default listening SSH port can now be configured.
• WiFi Connectivity Issues: Fixed issues for the ICR-3200 platform.
• RTC Menu: Updated to be more user-friendly and straightforward.
• Security Updates: Various updates and fixes to enhance security.
• Additional Enhancements: This update also encompasses various fixes and improvements that refine the existing features of Advantech routers.

Important Note

Given the extensive updates introduced in the 6.4.0 firmware, we strongly recommend thorough testing before deploying the new firmware in live environments, especially when upgrading from version 6.3.x.

Download Now

Ready to upgrade? This firmware version is available for download on the Firmware page or the Router Models page. Additionally, with the new feature introduced in firmware 6.4.0, you can conveniently install the latest firmware directly through the router's GUI.

For model-specific firmware version details, please refer to the Firmware Compatibility Chart document.

We are pleased to announce the release of the new version of the Event Notificator Router App, now with added SMS notification support. This Router App is an essential utility designed to enhance the management of network systems by facilitating the efficient transmission of notifications related to a variety of system events. Key events monitored include changes in system configuration, password updates, and unsuccessful login attempts. The inclusion of SMS notifications ensures that users can receive urgent updates directly on their mobile devices, providing a reliable method to maintain system security and integrity.

Notification Methods

• Email: Notifications can be sent directly to specified email addresses, ensuring timely awareness of critical system events.
• SNMP Traps: Utilizes Simple Network Management Protocol (SNMP) traps to alert designated recipients about specific events, enhancing the integration with network management systems.
• SMS Messages: With the introduction of version 2.1.0, the app now supports SMS notifications, providing an additional, reliable method to deliver urgent alerts directly to recipients' mobile devices.

Availability

This application is readily available for download and installation from the Router Apps page. Users are encouraged to utilize this app to maintain optimal awareness of system integrity and security.

For comprehensive guidance on configuring and using the Event Notificator Router App, please refer to the documentation provided on the link above or contact our support team for personalized assistance.

Detailed Changelog

To dive into the specifics of what's new and improved, we highly recommend reviewing the Release Notes. They provide a thorough overview of the advancements and modifications introduced in this update.

Major Enhancements

• WiFi Module Insights: The WiFi Status page now includes additional details about the WiFi module, enhancing transparency and control over wireless networking.
• USB Port Management: For enhanced security, we've introduced the ability to disable the external USB port on ICR-4400 platforms.
• Expanded Command Toolkit: The firmware now includes the less, net-snmptrap, and net-snmpinform commands, broadening the scope of device management and monitoring.
• Updated Firmware Changelog: The changelog file has been renamed from version.txt to CHANGELOG.md and converted to Markdown format, aligning with the Keep a Changelog guidelines.
• Software Package Updates: Key updates to the dnsmasq and zlib software packages, ensuring up-to-date security and performance.
• Additional Enhancements: This update also encompasses various fixes and improvements that refine the existing features of Advantech routers.

Important Note

Given the extensive updates introduced in the 6.4.0 firmware, we strongly recommend thorough testing before deploying the new firmware in live environments, especially when upgrading from version 6.3.x.

Download Now

Ready to upgrade? This firmware version is available for download on the Firmware page or the Router Models page. Additionally, with the new feature introduced in firmware 6.4.0, you can conveniently install the latest firmware directly through the router's GUI.

For model-specific firmware version details, please refer to the Firmware Compatibility Chart document.

Detailed Changelog

To dive into the specifics of what's new and improved, we highly recommend reviewing the Release Notes. They provide a thorough overview of the advancements and modifications introduced in this update.

Major Enhancements

• SNMP Custom Field Enhancement: This enhancement adds greater flexibility to SNMP configurations, allowing users to store and manage extra information for effective network management and monitoring.
• Resolved Firmware Auto-update Issue: We've addressed a bug that caused firmware auto-update processes to crash, ensuring smoother and more reliable updates.

Get the Update

This new firmware version is readily available for download on both the Firmware page and the Router Models page.

For model-specific firmware version details, please refer to the Firmware Compatibility Chart document.

Advantech is thrilled to unveil a new version of ICR-OS, the proprietary firmware developed for Advantech routers. This update heralds a host of new features and enhancements designed to bolster the functionality and security of our routers.

Detailed Changelog

For a comprehensive understanding of the advancements and modifications, we recommend consulting the Release Notes.

Major Enhancements

1. Linux Kernel Update: Upgraded to version 6.1 to incorporate critical updates and essential modifications.
2. Router Apps Online Installation:A groundbreaking addition that simplifies the process of installing Router Apps directly onto the device.
3. WiFi Scan Display Improvements: Enhanced display clarity and simplified WiFi station connection process.
4. Online Firmware Update: Facilitates direct online firmware updates.
5. Passwordless Console Login:Enables SSH login to the router without a password, utilizing SSH public keys.
6. OpenVPN Upgrade: Updated to version 2.6.6, offering improvements in security, performance, and features. Refer to the warning message below.
7. OpenSSL Upgrade: Updated to version 3.0, refer to the warning message below.
8. CPU & Memory Usage Information: Real-time CPU and memory usage stats are now visible on the router's web interface.
9. WiFi AP Radio Settings Adjustment: Allows the WiFi AP to align its radio settings with the connected foreign AP.
10. SIP ALG Support: Implements support for SIP Application-Layer Gateway.
11. Additional Improvements: Includes numerous fixes and enhancements to augment existing features.
12. Security Fixes and Updates: Security vulnerabilities have been fixed and software components have been updated for enhanced security.

Important Notes

Please be aware that this firmware version is not intended for mass production. Given the substantial changes introduced, comprehensive testing of the new firmware is strongly recommended before its deployment in a production environment.

Compatibility issues between OpenVPN versions 2.6 and 2.4, as well as OpenSSL versions 1.1 and 3.0, should be noted. Certain features in OpenVPN 2.6 are deprecated and slated for removal in future releases, potentially leading to compatibility challenges. Users are encouraged to steer clear of these deprecated features. For further details and advice, consult the Configuration Manual.

Availability

• This firmware version can be downloaded from the Firmware page or the Router Models page.
• For details on firmware versions specific to individual router models, please consult the Firmware Compatibility Chart document.

A new firmware version, dedicated to the v2 product line, has been released.

Detailed Changelog

For a comprehensive understanding of the advancements and modifications, we recommend consulting the Release Notes.

Major Enhancements

1. CPU & Memory Usage Information: The router's web interface now displays real-time CPU and memory usage statistics, offering immediate insights into system performance.
2. RTC Settings for GUI: Introduces a user-friendly feature for synchronizing the router's clock with the web browser, ensuring accurate time settings.
3. WiFi AP Radio Settings Adjustment: Enables the WiFi Access Point to dynamically adjust its radio settings to match those of the connected foreign AP, enhancing compatibility and performance.
4. SIP ALG Support: Adds support for SIP Application-Layer Gateway, improving VoIP communication by facilitating smoother traversal of SIP packets through the router.
5. Additional Improvements: Incorporates various other fixes and enhancements to further refine existing features and functionalities.
6. Security Fixes: Addresses security vulnerabilities across different severity levels, bolstering the router's defense against potential threats.

Availability

• This  firmware version can be downloaded from the Firmware page or the Router Models page.
• For details on firmware versions specific to individual router models, please consult the Firmware Compatibility Chart document.

Details can be found in Release Notes, which are available here.

Discontinued support applies to the following Router Apps: Protocol BGP, Protocol IS-IS, Protocol OSPF, and Protocol RIP. If you have been using any of these applications, please switch to the Router App named FRR, which provides the functionality of all the deprecated applications.