Rugged Industrial 5G NR VPN Gateway Optimized for Vehicle Applications
PLANET VCG-2406WP-NR is a purpose-built industrial-grade VPN security gateway designed specifically for in-vehicle networking and mission-critical mobile deployments. It integrates four Gigabit M12 X-coded Ethernet ports (including two IEEE 802.3at PoE+ ports, one configurable LAN/WAN port, and one dedicated LAN port) together with DI/DO interfaces, delivering secure and stable data transmission even under constant vibration and movement.
For reliable vehicle connectivity, the VCG-2406WP-NR supports SD-WAN, dual-WAN failover, and outbound load balancing to optimize bandwidth usage and maintain uninterrupted communication while on the move. Its rugged M12 connectors provide superior resistance against shock and vibration, and the IP50 aluminum enclosure with a wide operating temperature range from -40 to 75 °C ensures consistent performance in buses, railways, and other transportation environments.
Dual 9–54V DC redundant power inputs further guarantee continuous operation, meeting the stringent demands of vehicular and industrial deployments.
Automatic Failover between 5G NR and Gigabit WAN
The VCG-2406WP-NR integrates 5G NR connectivity with Gigabit Ethernet WAN. By supporting automatic failover between 5G NR and wired WAN interfaces, the device ensures always-on Internet connectivity. Users can flexibly assign priority for 5G NR or wired WAN, so if the primary connection fails, the backup WAN takes over instantly, maintaining uninterrupted network services.
Ultra-Fast Speed 4G/5G Network*
The VCG-2406WP-NR supports 5G NR Sub-6 GHz with downlink speeds up to 2.4Gbps and uplink up to 900Mbps, as well as LTE downlink speeds up to 1.6Gbps. This high bandwidth reduces latency and enables premium connectivity for real-time services. Multi-band compatibility with LTE FDD/TDD and WCDMA ensures flexible deployment across regions.
*The real 5G NR/4G LTE data rate is dependent on local service provider.
Dual SIM Design
To enhance reliability, the VCG-2406WP-NR is equipped with two Nano-SIM slots supporting failover and roaming. When one SIM card loses connection, the system automatically switches to the other, ensuring uninterrupted cellular service. This design provides flexible connectivity for mobile and industrial applications such as public transportation, railway systems, and logistics operations.
Built-in Multi-System GNSS for Accurate Positioning
The VCG-2406WP-NR comes with an integrated GNSS (Global Navigation Satellite System) receiver supporting GPS, GLONASS, BeiDou, Galileo, and QZSS. This ensures precise and reliable location tracking, making the gateway an ideal choice for fleet management, intelligent transportation systems, and industrial monitoring scenarios where accurate real-time positioning is essential.
Vibrationproof and Dustproof M12 Interfaces
The VCG-2406WP-NR is equipped with M12 X-coded Gigabit ports, an A-coded connector for DI/DO and alarm, and a K-coded connector for DC power input. These rugged interfaces provide secure and stable connections even under shock, vibration, dust, and temperature extremes, ensuring reliable Ethernet and I/O performance in demanding vehicular and industrial environments.
Wireless 11ax Brings Excellent Data Link Speed
The VCG-2406WP-NR adopts Wi-Fi 6 (802.11ax) technology, delivering up to 1800Mbps bandwidth with concurrent 2.4GHz and 5GHz dual-band operation. Equipped with high-power amplifiers and 2T2R antennas, it ensures reliable coverage even in complex industrial or vehicle environments. Wi-Fi 6 features such as MU-MIMO, OFDMA, Beamforming, and BSS Coloring optimize transmission efficiency, enabling smooth connectivity for multiple devices and IoT applications.
Wi-Fi Deployments and Authentication with Simplified Management
The VCG-2406WP-NR integrates a built-in AP controller, captive portal, RADIUS authentication, and DHCP server to simplify wireless network deployment. It allows enterprises and transportation systems to provide secure employee and guest Wi-Fi access without additional hardware, reducing cost and management complexity.
Built-in Unique PoE Functions for Powered Devices Management
With two IEEE 802.3at PoE+ ports, the VCG-2406WP-NR delivers up to 36W per port and a total PoE budget of 60W.It also features the following special PoE management functions.
PoE Usage Monitoring
With PoE usage monitoring, it can show the PoE loading of each port, total PoE power usage and system status, such as overload, low voltage, over voltage and high temperature. User can obtain detailed information about the real-time PoE working condition of the VCG-2406WP-NR directly.
PoE Schedule
Under the trend of energy saving worldwide and contributing to environmental protection, the VCG-2406WP-NR can effectively control the power supply besides its capability of giving high watts power. The “PoE schedule” function helps you to enable or disable PoE power feeding for each PoE port during specified time intervals and it is a powerful function to help SMBs or enterprises save power and budget. It also increases security by powering off PDs that should not be in use during non-business hours.
Scheduled Power Recycling
The VCG-2406WP-NR allows each of the connected PoE IP cameras or PoE wireless access points to reboot at a specific time each week. Therefore, it will reduce the chance of IP camera or AP crash resulting from buffer overflow.
PD Alive Check
The VCG-2406WP-NR can be configured to monitor connected PD status in real time via ping action. Once the PD stops working and responding, the VCG-2406WP-NR will resume the PoE port power and bring the PD back to work. It will greatly enhance the network reliability through the PoE port resetting the PD’s power source and reducing administrator management burden.
Ideal VPN Security Gateway Solution for Factories and Transportations
The VCG-2406WP-NR offers a full VPN feature set, including IPSec, SSL VPN, PPTP, L2TP, and GRE, with robust encryption (DES/3DES/AES) and authentication (MD5, SHA-1, SHA-256, etc.). With up to 60 VPN tunnels supported, it ensures secure remote access and private communications across industrial sites, railway systems, and vehicle networks.
Centralized Remote Control of Managed APs
The VCG-2406WP-NR supports centralized management of PLANET Smart APs through its user-friendly web GUI. It allows administrators to configure SSIDs, security settings, and radio bands for multiple APs at once. Cluster management enables bulk provisioning, firmware upgrades, and monitoring, reducing deployment effort and ensuring consistent Wi-Fi service in transportation and industrial networks.
For example, to configure multiple smart APs of the same model, the VCG-2406WP-NR allows clustering them to a managed group for unified management. According to requirements, wireless APs can be flexibly expanded or removed from a wireless AP group at any time. The AP cluster benefits bulk provision and bulk firmware upgrade through single entry point instead of having to configure settings in each of them separately.
Excellent Ability in Threat Defense
The VCG-2406WP-NR features a built-in SPI (stateful packet inspection) firewall to protect against unauthorized access. It defends against DoS/DDoS attacks, port flooding, and abnormal traffic patterns, ensuring network stability. Virtual server and DMZ functions provide flexibility for hosting internal services securely while maintaining external accessibility.
Cybersecurity Network Solution to Minimize Security Risks
The VCG-2406WP-NR integrates comprehensive cybersecurity features for network protection. With HTTPS web management, SNMP v1/v2c/v3, and secure tunneling support, administrators can monitor and manage the device securely. Its intuitive web GUI and compatibility with PLANET’s NMS controller further enhance ease of management while minimizing security risks.
Maximizing Work Efficiency with PLANET SD-WAN Gateway
With PLANET’s integrated SD-WAN technology, the VCG-2406WP-NR enhances WAN optimization across multiple connections. It intelligently routes applications through the best available path, ensuring higher efficiency and reliability. SD-WAN improves application performance, increases business productivity, and reduces IT operational costs, making it ideal for distributed industrial and vehicle networks.
Convenient and Reliable Redundant Power System
The VCG-2406WP-NR is designed with dual 9–54V DC redundant power inputs to guarantee continuous operation in vehicle and industrial deployments. With reverse polarity protection and robust electrical isolation, the device ensures system reliability even under unstable power conditions. This design provides resilience and fault tolerance for mission-critical environments.
Remote Management Solution
PLANET's Universal Network Management System (UNI-NMS) and CloudNMS app support IT staff by remotely managing all network devices and monitoring PDs' operational statuses. Thus, they're designed for both the enterprises and industries where deployments of PDs can be as remote as possible, without having to go to the actual location once a bug or faulty condition is found. With the UNI-NMS or CloudNMS app, all kinds of businesses can now be speedily and efficiently managed from one platform.
5G NR Cellular Communication Solution for Smart Transportation
PLANET VCG-2406WP-NR adopts advanced 5G NR cellular technology to enable high-speed and reliable connectivity for intelligent public transportation systems such as buses and metro/light rail. By breaking the traditional 100-meter limitation of wired RJ45 transmission, the VCG-2406WP-NR ensures seamless data communication between moving vehicles, station platforms, and the control center. To guarantee continuous service, it provides dual SIM card slots with failover protection, while supporting VLAN, VPN, Modbus, and centralized network management. With these capabilities, the VCG-2406WP-NR delivers stable, secure, and efficient wireless networking for vehicle-to-infrastructure and passenger information applications.
Highlights
Hardware
Cellular Interface
RF Interface Characteristics
Power over Ethernet
IP Routing Feature
Firewall Security
VPN Features
Networking
Others
Hardware Specifications | |
---|---|
Copper Ports | Total: 4 × 10/100/1000BASE-T Ethernet ports, M12 8-pin X-coded female connectors Port assignments: Ports 1–2: LAN ports with IEEE 802.3at PoE (PSE) Port 3: Dedicated LAN port Port 4: Configurable LAN/WAN port |
SIM Interface | 2 SIM card slots supporting Nano-SIM |
Cellular Antenna | 4 × 5 dBi gain external antennas, SMA-type connectors, for 5G NR |
Wireless Antenna | 2 × 2.4GHz and 5GHz dual-band external antennas with RP-SMA female connectors for Wi-Fi peak gain: 4.33 dBi @2.4GHz, 4.47 dBi @5GHz |
DI & DO Interfaces | 1 x M12 A-coded 5-pin male connector for DI/DO and alarm interface Pin 1 for DI and Pin 2 for DO Pin 3/4 for Alarm Pin 5 for GND |
Alarm | One relay output for port breakdown and power failure. Alarm relay current carry ability: 1A @ 24V DC |
Digital Input (DI) | One digital input (DI) Level 0: -24V~2.1V (±0.1V) Level 1: 2.1V~24V (±0.1V) Input load to 24V DC, 10mA max. |
Digital Output (DO) | One digital output (DO) Open collector to 24V DC, 100mA max. |
Power Connector | Connector type: M12 K-coded, 5-pin female Pin assignment: Pin 1: V1+ Pin 2: V1− Pin 3: V2+ Pin 4: V2− Pin PE: GND |
Number of Power Input | 2 |
Power Requirements | Input voltage: 9–54 V DC |
Power Consumption | Max.10.2 watts/34.8BTU (Power on without any connection) Max. 81 watts/276.38 BTU (Full loading) |
Enclosure | IP50 aluminum case |
Reset Button | Press < 5 seconds: System reboot Press > 5 seconds: Restore factory default settings |
Installation | Desktop Wall-mount |
Weight | 1725g |
Dimensions | 245 × 140.5 × 60 mm (W × D × H) |
LED Indicators | System P1 (Green): Power 1 status P2 (Green): Power 2 status Alarm (Red): System alarm indicator I/O (Red): Digital input/output status Ethernet Interfaces (Ports 1–4) 10/100/1000 LNK/ACT (Green): Link/activity at 10/100/1000 Mbps PoE PoE (Amber): Link/activity Wi-Fi 2.4G (Green): 2.4 GHz Wi-Fi status 5G (Green): 5 GHz Wi-Fi status Cellular SIM SIM1 (Green): SIM card 1 status SIM2 (Green): SIM card 2 status Cellular Signal Strength 4 levels (Green): Indicates signal strength (1–4 LEDs lit) |
Multi Band Supports | |
5G | NSA: n1/ 2/ 3/ 5/ 7/ 8/ 12/ 13/ 14/ 18/ 20/ 25/ 26/ 28/ 29/ 30/ 38/ 40/ 41/ 48/ 66/ 70/ 71/ 75/ 76/ 77/ 78/ 79 SA: n1/ 2/ 3/ 5/ 7/ 8/ 12/ 13/ 14/ 18/ 20/ 25/ 26/ 28/ 29/ 30/ 38/ 40/ 41/ 48/ 66/ 70/ 71/ 75/ 76/ 77/ 78/ 79 |
LTE | LTE-FDD: B1/ 2/ 3/ 4/ 5/ 7/ 8/ 12/ 13/ 14/ 17/ 18/ 19/ 20/ 25/ 26/ 28/ 29/ 30/ 32/ 66/ 71 LTE-TDD: B34/ 38/ 39/ 40/ 41/ 42/ 43/ 48 LAA: B46 |
UMTS/WCDMA | B1/ 2/ 4/ 5/ 8/ 19 |
GNSS | GPS/ GLONASS/ BDS/ Galileo/ QZSS |
Data Transmission Throughput | 5G SA Sub-6 data rate Max. 2.4 Gbps (DL) / Max. 900 Mbps (UL) 5G NSA Sub-6 data rate Max. 3.4 Gbps (DL) / Max. 550 Mbps (UL) LTE data rate Max. 1.6 Gbps (DL) / Max. 200 Mbps (UL) WCDMA data rate Max. 42 Mbps (DL) / Max. 5.76 Mbps (UL) |
Power over Ethernet | |
PoE Standard | IEEE 802.3af / 802.3at PoE+ PSE |
PoE Power Supply Type | End-span |
PoE Power Output | Per port 54V DC, 36 watts (max.) |
Power Pin Assignment | 1/2 (+), 3/6 (-) |
PoE Power Budget | 60 watts (max.) |
Max. Number of Class 4 PDs | 2 |
PoE Management | PD Alive Check Scheduled Power Recycling PoE Schedule PoE Usage Monitoring |
Wireless | |
Standard | IEEE 802.11a/n/ac/ax (5 GHz) IEEE 802.11g/b/n/ax (2.4 GHz) |
Band Mode | 2.4 GHz and 5 GHz concurrent mode |
Frequency Range | 2.4GHz FCC: 2.412~2.462GHz ETSI: 2.412GHz~2.472GHz 5GHz FCC: 5.150 – 5.850 GHz ETSI: 5.150 – 5.725 GHz |
Operating Channels | 2.4GHz FCC: Channels 1–11 ETSI: Channels 1–13 5GHz FCC Non-DFS: 36, 40, 44, 48, 149, 153, 157, 161, 165 DFS: 52, 56, 60, 64, 100, 104, 108, 112, 116, 132, 136, 140 ETSI Non-DFS: 36, 40, 44, 48 DFS: 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140 Note: 5 GHz channel availability may vary by country according to local regulations. |
Modulation Type | 802.11ax: MIMO-OFDMA (BPSK / QPSK / 16QAM / 64QAM / 256QAM, 1024QAM) 802.11ac: OFDM (BPSK / QPSK / 16QAM / 64QAM / 256QAM) 802.11a/g/n: OFDM (BPSK / QPSK / 16QAM / 64QAM) 802.11b: DSSS (DBPSK / DQPSK / CCK) |
Channel Width | 20 MHz, 40 MHz, 80 MHz |
Data Transmission Rates | Transmit: 600 Mbps* for 2.4 GHz and 1200 Mbps* for 5 GHz Receive: 600 Mbps* for 2.4 GHz and 1200 Mbps* for 5 GHz *The estimated transmission distance is based on the theory. The actual distance will vary in different environments. |
Transmission Power | 11b:23 dBm ±1.5 dBm @11Mbps 11g:20 dbm ±1.5 dBm @54Mbps 11g/n:20 dBm ±1.5 dBm @MCS7, HT20 17 dBm@MCS7,HT40 11a:19.5 dBm ±1.5 dBm @54Mbps 11a/n:19.5 dBm ±1.5 dBm @MCS7, HT20 17dBm@MCS7, HT40 11ac HT20: 20 dBm ±1.5 dBm @MCS8 11ac HT40: 17 dBm ±1.5 dBm @MCS9 11ac HT80: 14.5 dBm ±1.5 dBm @MCS9 11ax HT20: 20 dBm ±1.5 dBm @MCS9 11ax HT40: 17 dBm ±1.5 dBm @MCS9 11ax HT80: 14.5 dBm ±1.5 dBm @MCS11 |
Encryption Security | WEP: 64/128-bit encryption WPA / WPA2: TKIP / AES encryption WPA-PSK / WPA2-PSK: TKIP / AES encryption WPA3-PSK (SAE): AES encryption only 802.1X Authenticator |
Wireless Advanced | Wi-Fi Multimedia (WMM) Auto channel selection Wireless output power management MAC address filtering |
Wireless AP Management | |
Maximum Managed APs | 128 |
Maximum AP Groups | 10 |
Maximum APs per AP Group | 128 |
Wireless Encryption/Security | WEP encryption security WPA Personal / Enterprise (TKIP / AES) WPA2 Personal / Enterprise (TKIP / AES) WPA3 Personal Enterprise Class 802.1x |
AP Auto Discovery | Supports AP auto discovery |
SSID/RF Profile | Allows multiple wireless profiles creation and maintenance |
Cluster Management | Allows AP grouping for bulk provisioning and batch upgrading |
Bulk AP Provisioning | Supports bulk AP provisioning with user-defined profiles |
Bulk AP Firmware Upgrade | Supports bulk AP firmware upgrade |
Coverage Heat Map | Enables real signal coverage of managed AP reflecting on the uploaded zone maps |
Status Monitoring | Real-time traffic statistics reporting of AP and activated clients |
Graphical Statistics | Real-time and historical visibility of traffic flow [2] |
Profile Backup/Restoration | Provides SSID, radio profile backup/restoration |
SSIDs-to-VLANs Mapping | Allows to configure SSIDs-to-VLANs mapping in supported APs |
Supported Access Point Models [1] | |
Indoor AP | IAP-1800AX IAP-2400AX IAP-3600BE [2] IAP-3600BE-4PF [2] WDAP-3600BE WDAP-W3600BE WDAP-C5100BE WDAP-W3000AX WDAP-C3000AX WDAP-C7210E(V2) WDAP-C1800AX(V2) WDAP-W1800AXU WDAP-C7210E WDAP-W1200E WDAP-C7200E WDAP-W750E WNAP-C3220E WNAP-W2200UE |
Outdoor AP | WDAP-3000AX WDAP-1800AX WDAP-850AC WDAP-802AC WBS-512AC WBS-502N WBS-202N WAP-552N WAP-252N WDAP-702AC WBS-502AC WBS-500N WBS-200N WAP-500N WAP-200N |
Remarks | [1] The supported AP models may be changed after a firmware upgrade. [2] Planned via future firmware update. |
Security Service | |
Firewall Security | Cybersecurity Stateful Packet Inspection (SPI) Blocks DoS/DDoS attack |
ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323, TFTP |
NAT | Port forwarding DMZ Host UPnP |
Content Filtering | MAC filtering IP filtering Web filtering |
Bandwidth Management | Outbound load balancing Failover for dual-WAN QoS (Quality of Service) |
Networking | |
Routing Protocol | Routing: Static routing Dynamic routing: RIP, OSPF |
VLAN | 802.1q Tag-based, Port-based, Multi-VLAN |
Multicast | IGMP Proxy |
NAT Throughput | Up to 900 Mbps (test conditions TBA) |
Outbound Load Balancing | Supported algorithms: Weight |
Protocol | IPv4, IPv6, TCP/IP, UDP, ARP, HTTP, HTTPS, NTP, DNS, PLANET DDNS, PLANET Easy DDNS, DHCP, PPPoE, SNMPv1/v2c/v3, |
Key Features | HA (High Availability) Captive Portal RADIUS Server/Client AP Control |
Advanced Functions | |
VPN | IPSec / Remote Server: Net-to-Net, Host-to-Net modes GRE (Generic Routing Encapsulation) PPTP Server L2TP Server SSL VPN Server / Client (OpenVPN) |
VPN Tunnels | Up to 60 (test conditions TBA) |
VPN Throughput | Up to 108 Mbps (test conditions TBA) |
Encryption Methods | DES 3DES AES (AES-128 / AES-192 / AES-256) |
Authentication Methods | MD5 SHA-1 SHA-256 SHA-384 SHA-512 |
Management | |
Basic Management Interfaces | Web browser SNMP v1, v2c PLANET Smart Discovery utility NMS controller supported |
Secure Management Interfaces | SSHv2 TLS v1.2 SNMP v3 |
System Log | System event log |
Others | Setup wizard Dashboard System status / service monitoring Statistics Connection status Auto reboot Diagnostics |
Standards Conformance | |
Regulatory Compliance | CE, FCC, E-Mark Vehicle Compliance Ready |
Stability | IEC60068-2-32(Free fall) IEC60068-2-27(Shock) IEC60068-2-6(Vibration) |
Environment | |
Operating | Temperature: -40 ~ 75 degrees C Relative humidity: 5 ~ 90% (non-condensing) |
Storage | Temperature: -40 ~ 85 degrees C Relative humidity: 5 ~ 90% (non-condensing) |
Ordering Information | |
---|---|
VCG-2406WP-NR |
Industrial/Vehicle 5G NR Cellular Wireless Gateway with M12 PoE+ |