Westermo Merlin 4407 - IEC 61850-3 Industrial Cellular Router
LTE Cat-4, 4xETH, 2xRS232/485, GNSS, 9-60VDC, TPM module
The Merlin 4407 is a compact industrial cellular router engineered for direct deployment in medium-voltage power substations and railway environments. It consolidates multiple local protocols (IEC 60870-5-104, IEC 61850, Modbus RTU/TCP, DNP3) into a single secure LTE connection while maintaining full compliance with IEC 61850-3 Class 1 and EN 50121-4 standards.
Built using industrial-grade components and redundant design practices, the Merlin 4407 achieves a 1.6 million hour MTBF—demonstrating proven reliability for demanding utility and railway environments. The device operates across -40 to +70°C and features integrated cybersecurity architecture with Trusted Platform Module (TPM) hardware, Secure Boot verification, and industry-standard encryption protocols. Unlike models with integrated RTU capabilities, the 4407 focuses on network consolidation and SCADA protocol bridging, reducing system complexity for utilities with simpler local control requirements.
Key Features
- Direct Substation and Trackside Deployment
- IEC 61850-3 Class 1 compliance for medium-voltage substations
- EN 50121-4 approval for railway trackside applications
- Isolated power supply prevents transient faults and ground loops from affecting the control network
- Multi-Protocol Network Consolidation
- Bridges legacy SCADA devices (IEC 60870-5-101, IEC 60870-5-104, Modbus RTU, DNP3) and modern systems (IEC 61850) through a single outbound connection
- Native protocol conversion and gateway functionality reduce field wiring and simplify integration architecture
- Industrial-Grade Security
- Trusted Platform Module (TPM) secures cryptographic keys independent of system firmware
- Secure Boot prevents unauthorized software modification
- 802.1X authentication, IPSec encryption, and stateful firewall as standard
- Streamlined Form Factor
- Compact design (50 x 102 x 100 mm) suited for tight enclosure spaces while maintaining full industrial capability
Typical Applications
- Power Utilities & Substations
- Medium-voltage substation automation and remote monitoring
- SCADA connectivity for distributed renewable resources and grid management
- Railway & Trackside Infrastructure
- Trackside signaling and control systems with EN 50121-4 compliance
- Remote monitoring of railway infrastructure in areas lacking fixed broadband connectivity
- Industrial Applications
- Remote facility monitoring, distributed infrastructure connectivity
Technical Specifications
| Specification |
Value |
| Standards Compliance |
IEC 61850-3 Class 1, EN 50121-4, EN 62368-1 |
| Cellular Connectivity |
LTE Cat-4 (EMEA: 900/1800 2G, B1/B8 3G, B1/B3/B7/B8/B20/B28 LTE) |
| Network Interfaces |
4 × 10/100 Mbit/s Ethernet (RJ45) |
| Power Input |
9.6–60 VDC isolated, 5 W typical, 200 ms hold-up time |
| Protocol Support (SCADA) |
IEC 60870-5-104, IEC 60870-5-101, IEC 61850, Modbus RTU/TCP, DNP3, MQTT |
| Serial Interfaces |
2 configurable ports (RS-232/RS-485 and RS-232/Digital Input) |
| Operating Environment |
-40 to +70°C, 5–95% relative humidity, IP40 ingress protection |
| MTBF & Warranty |
1,600,000 hours (Telcordia), 5-year warranty |
Security Architecture
- Trusted Platform Module (TPM) stores and protects cryptographic keys independent of system firmware
- Secure Boot verifies and authorizes only manufacturer-signed software, preventing unauthorized modifications
- IPSec VPN with IKEv2, X.509 certificates, AES-256, and SHA-512 for encrypted site-to-site connectivity
- 802.1X authentication and stateful inspection firewall for network access control
- MQTT protocol translation enables secure communication with cloud-based monitoring systems
Certifications & Standards
- IEC 61850-3 Class 1 (Power Utility Substation Automation)
- EN 50121-4 (Railway Signalling and Telecommunications)
- EN 62368-1 (Safety – Communication Technology)
- EN/IEC 61000-6-2 (Industrial EMC Immunity), EN/IEC 61000-6-4 (Industrial Emissions)