CM520-56X V4.0 — Two-port industrial cellular gateway
Source filename V4.0 | 22 May 2026 · Technical review edition · PDF
CM520-56
A two-port industrial cellular gateway. Ethernet interfaces can operate as two LAN ports or one WAN plus one LAN port, with RS232 and an optional RS485 configuration.

Product photography. Open full image ↗
Options vary by model, hardware revision and firmware.
| Ethernet | 2 × 10/100 Mbps Ethernet ports |
|---|---|
| Serial interface | 1 × RS232; RS485 available as an ordering option |
| DC input | 6–32 V DC |
| Operating temperature | −35 to +75 °C |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 1-2
| CM520-56F | cellular: 2G/3G/4G; Modem: 1 x 4G; SIM slots: 1 |
|---|---|
| CM520-56FS-GC | cellular: 2G/3G/4G/5G; Modem: 1 x 5G; SIM slots: 1 |
| CM520-56FB | cellular: 2G/3G/4G; Modem: 1 x 4G; SIM slots: 2 |
| CM520-56FBS-GC | cellular: 2G/3G/4G/5G; Modem: 1 x 5G; SIM slots: 2 |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 1-2
| Interfaces | Ethernet and terminal block; RS232; optional RS485. |
|---|---|
| Variant scope | 4G/5G and one/two SIM slots depend on the model row. All listed models use one cellular module; dual SIM does not establish two concurrent modem links. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 4, 7-8
| Ethernet | 2 x 10/100 Mbps Base-T; IEEE 802-3 / 802-2 as printed; 1.5 kV isolation. |
|---|---|
| WAN / LAN | Default two LAN ports; configurable as one WAN plus one LAN, or two LAN ports. WAN is switchable to LAN. These are two physical ports, not three. |
| Serial | 1 RS232, optionally configured as RS485; specify when ordering. Data bits: 7/8; stop bits: 1/2; parity: none/odd/even; 300-4000000 bit/s; no, hardware or software flow control. |
| Cellular antenna | SMA female, 50 ohm; optional 3/5/10/15 m leads. |
| Positioning, optional | GPS and BeiDou. |
| SIM/UIM | Full-size push-type card interface, 1.8/3/5 V, 15 kV ESD protection; slot count depends on model. |
| Power | Standard round power socket. |
| Indicators | POWER, ONLINE and WIFI. |
| RESET | Restore factory defaults. |
| Wi-Fi source contradiction | The Wi-Fi antenna row lists SMA female, 50 ohm, but explicitly states THIS SERIES DOES NOT SUPPORT WI-FI. The later generic Wi-Fi table is retained as conflicting source information, not verified device capability. |
| RTC | Source says built-in real-time-clock circuit, followed by NOT SUPPORTED. Do not advertise RTC as supported. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| Network access | APN / VPDN |
|---|---|
| Authentication | CHAP / PAP / MS-CHAP / MS-CHAPv2 |
| Radio system | See cellular radio specifications. |
| LAN protocols | ARP / Ethernet |
| IP applications | Ping, traceroute, DHCP server/relay/client, DNS relay, DDNS, Telnet, SSH, HTTPS, TFTP, FTP and SFTP. |
| Routing | Static and dynamic routes. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| Firewall | Stateful packet inspection (SPI), denial-of-service (DoS) protection, multicast/Ping filtering and access-control lists (ACL). IP/MAC combined access authentication. |
|---|---|
| Address translation | NAT, PAT, DMZ, port mapping and virtual servers. |
| Users / AAA | User privilege levels; local authentication, RADIUS, TACACS+ and LDAP. |
| Data security | CA support, including automatic application; SM1/SM2/SM3/SM4 algorithms. |
| Backup | VRRP, interface backup and optional dual-SIM backup; depends on ordered model. |
| Link monitoring | Heartbeat checks and automatic reconnection. |
| Watchdog | Operating self-check and fault self-recovery. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| WLAN | Marked optional in the software-table heading; confirm ordered configuration. |
|---|---|
| Configuration | Local or remote HTTPS, Telnet and SSH. |
| "Upgrade method" source row | The source actually lists local/remote log output and log retention after power loss. Heading/content mismatch: Confirmation required. |
| SMS, optional | Status inquiry, configuration and restart. |
| On-demand dialing | Data-triggered or SMS-triggered connection; scheduled online/offline operation. |
| Management | SNMP. |
| Development / platforms, optional | Python custom development; AWS, Tencent Cloud, power-industry platforms, Alibaba Cloud; central and batch management. |
| Industrial protocols, optional | Modbus TCP, Modbus RTU, EtherNet/IP and Modbus TCP Slave. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| Optional WLAN | IEEE 802.11ac/a/b/g/n; open-system/shared-key/WPA/WPA2 authentication; WEP/TKIP/AES encryption. Detailed Wi-Fi table lists only b/g/n: Confirmation required. |
|---|---|
| WLAN modes | AP and Client; detailed table also lists repeater. |
| DM / diagnostics | Centralized management and batch configuration; Ping, traceroute and Sniffer packet capture. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| Data security | CA support, including automatic application ; SM1/SM2/SM3/SM4 cryptographic algorithms. |
|---|---|
| VPN | IPsec, L2TP, PPTP, GRE, N2N, L2TP over IPsec, GRE over IPsec, EOIP and OpenVPN. |
| Hardware encryption | State Grid, China Southern Power Grid and Chinese commercial-cryptography encryption support, . Exact algorithms, modules and approvals require confirmation. |
| Bandwidth aggregation | Two-SIM and three-SIM bandwidth aggregation are claimed in the software table. Hardware and service prerequisites are unspecified; this is not inferred from a single-modem dual-SIM selection row. Confirmation required. |
| Link health | Online maintenance, heartbeat detection and automatic reconnection. |
| Management | SNMP. |
| DHCP / translation | DHCP server/client; SNAT/DNAT port mapping; DMZ. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| Transport | 5G/4G/3G; Ethernet-to-cellular; Ethernet-to-Wi-Fi; serial/RS485-to-cellular, Wi-Fi and Ethernet. |
|---|---|
| Transparent services | DTU and MQTT transparent transfer; APN/VPDN; VXLAN. |
| Link backup | Wired/cellular mutual backup; Wi-Fi/cellular primary/backup. |
| Health checks | Online maintenance and DTU LAN-client heartbeat packets. |
| Radio restrictions | Cellular frequency locking and SIM locking, as named in source. |
| Wi-Fi access | Client-count limits and client isolation. |
| Multiple SSIDs | Up to four Wi-Fi names, each with an independent MAC address. |
| Identity / controls | MAC and serial-number persistence; access restrictions; port alarms. |
| Positioning | BeiDou-only, GPS-only or combined GPS/BeiDou, optional. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| Three-link backup | Wired, Wi-Fi and cellular links as mutual primary/backup. |
|---|---|
| IP traffic splitting | Distribute flows by source/destination IP across network links, servers or paths to reduce congestion and improve utilization/stability. |
| Wi-Fi diagnostics | Client signal-strength monitoring. |
| Session records | Online/offline timestamps for wired, cellular and Wi-Fi users. |
| TF security | Software encryption for TF cards. Physical TF-slot availability depends on hardware. |
| Product customization | Customer-customized product log and model identifier, as written; whether log means logo Confirmation required. |
| Central platform | Remote parameters, OTA, remote multimedia updates (music/video/advertising), allow/block lists, traffic and online statistics, radio-system statistics, SMS/WeChat/Wi-Fi authentication, traffic and speed controls, time limits, Internet-behavior controls, Wi-Fi probe and multi-level user management. Backend/platform scope requires configuration review. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 5-7
| Development / clouds | Python custom development; Amazon AWS, Alibaba Cloud, Tencent Cloud and power-industry platforms. |
|---|---|
| Industrial protocols | Modbus TCP; Modbus TCP/RTU conversion; Modbus RTU; EtherNet/IP; Modbus TCP Slave; MQTT; Ntrip Client and Ntrip Server. |
| Power-industry protocols | 101/104, 645, 61850 and TR-069, as written; no unspecified editions or conformity inferred. |
| Environmental protocol | HJ212-2005/2017. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 8-9
| Wireless module | Industrial-grade module. |
|---|---|
| 5G SA/NSA bands | n1/n2/n3/n5/n7/n8/n20/n28/n41/n66/n71/n77/n78/n79 |
| TDD frequency group | LTE TDD: 2600/2300 MHz; UMTS: 2100/900 MHz; GSM: 850/900/1800/1900 MHz; UMTS Rx diversity: 2100/900 MHz. |
| FDD frequency group | LTE FDD: 2600/2100/1800/DD800 MHz (DD800 reproduced as printed); UMTS and UMTS Rx diversity: 2100/900 MHz. |
| Radio schemes | NR/LTE/UMTS/HSPA+/HSDPA/HSUPA/WCDMA/EDGE/GSM |
| 5G NR rate | DL 3.4 Gbps / UL 350 Mbps. Modem theoretical figures, not Ethernet throughput. |
| TDD rates | LTE TDD: DL 68 Mbps / UL 17 Mbps; DC-HSPA+: DL 42 Mb/s (Category 24); HSPA+: DL 28 Mb/s (Category 18); HSDPA: DL 14.4 Mb/s (Category 8); HSUPA+: DL 5.76 Mb/s (Category 6), as printed; WCDMA CS: UL/DL 64 kbps; WCDMA PS: UL/DL 384 kbps. |
| FDD rates | LTE FDD: DL 100 Mbps / UL 50 Mbps; other DC-HSPA+, HSPA+, HSDPA, HSUPA+ and WCDMA values are the same as the TDD table. |
| Transmit power | LTE: 23 dBm; WCDMA/HSDPA: 24 dBm. |
| Receiver sensitivity | <-109 dBm |
| module functions | Data, voice, SMS and fax; actual hardware/firmware applicability Confirmation required. |
| Power private network | 1.8 GHz power-industry private-network bands and integrated public/private modules. |
| Overseas options | The source claims broad international coverage; specify country and required bands so an appropriate optional modem can be selected. No universal band or certification claim is inferred. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 8-9
| Module | Integrated chipset Wi-Fi module. |
|---|---|
| Standards / rates | Source lists 802.11 a/b/g/n, rates 6/9/12/18/24/36/48/54 Mbps and maximum 300 Mbps. This table conflicts with the explicit statement that this series has no Wi-Fi. |
| Encryption | WEP, WPA and WPA2; hardware security engines listed as 802.11i 4.0, TKIP, AES and CCMP. |
| Modes | AP and repeater. |
| Coverage claim | Source claims up to 150 m outdoors without obstructions. Not verified device capability because the hardware table says no Wi-Fi. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 9-11
| CPU | 680 MHz in hardware table; 650 MHz in industrial-design list. Both are retained: Confirmation required. |
|---|---|
| Flash | 128 Mbit, expandable; reliability section states up to 256 Mbit. |
| SDRAM | 1 Gbit, described as expandable. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 9-11
| DC input | Standard 7-32 V DC; optional 7-60 V DC. Reverse-polarity, overvoltage and overcurrent protection. Design section instead lists 6-32 V. Confirm the exact supplied variant before applying voltage. |
|---|---|
| Standard supply | 9 V DC / 1.33 A; model-dependent, subject to actual shipment. |
| Communication current | Average 390 mA at 9 V DC; network-registration peak 1.0 A at +9 V DC. |
| Standby | Average <200 mA at +9 V DC. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 9-11
| Operating temperature | -35 to +75 °C |
|---|---|
| Extended operation | -40 to +80 °C |
| Storage | -40 to +85 °C |
| Humidity | 95%, non-condensing. |
| Enclosure | Metal; shielding, isolated enclosure/system, lightning-protection design and IP30. |
| Body | 92.6 x 91.4 x 24.4 mm, excluding antennas and mounting hardware. |
| Package | 350 x 215 x 88 mm |
| Weight | 0.271 kg, excluding antennas and mounting hardware. |
| Shock / vibration / drop | IEC 60068-2-27 / IEC 60068-2-6 / IEC 60068-2-32 |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 9-11
Certification scope and test conditions depend on the selected model. Request the applicable documentation.
| ESD | EN 61000-4-2, level 3 |
|---|---|
| Radiated electric field | EN 61000-4-3, level 3 |
| Electrical fast transient | EN 61000-4-4, level 3 |
| Surge | EN 61000-4-5, level 3 |
| Conducted disturbances | EN 61000-4-6, level 3 |
| Power-frequency magnetic field | EN 61000-4-8; horizontal/vertical 400 A/m (level 3), . Confirmation required. |
CM520-56X V4.0 — Two-port industrial cellular gateway · Source filename V4.0 | 22 May 2026 · Source pp. 9-11
Certification scope and test conditions depend on the selected model. Request the applicable documentation.
| Domestic | Ministry of Public Security certificate; MIIT network-access permit; CRCC; Ministry of Housing and Urban-Rural Development interoperability certificate; CCC; radio-committee certificate; EMC; high/low-temperature testing. |
|---|---|
| International | CE, FCC, E-mark, CB, RoHS and Japan TELEC. |
| Scope | Certificate identifiers, current validity and exact model/module scope Confirmation required. |
System connectivity
See how CM520-56 fits into your installation.
Illustrative connection architecture. External equipment and customer software are shown for context. Interfaces and options vary by configuration.
Source filename V4.0 | 22 May 2026 · Technical review edition · PDF