CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications
Source V1.1 | filename date 20260522 · Technical review edition · PDF
CM520-61
A cellular CPE series with dual Wi-Fi functions and gigabit Ethernet connectivity. The official interface specification lists a WAN port, four LAN ports and an RS232 connection.

Product photography. Open full image ↗
Options vary by model, hardware revision and firmware.
| WAN | 1 × Gigabit WAN port |
|---|---|
| LAN | 4 × Gigabit LAN ports |
| Serial interface | 1 × RS232 |
| DC input | 6–32 V DC |
Vehicle power protection, installation and certification requirements must be matched to the project. Placement in this category is not an automotive certification claim.
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source p. 2
| CM520-61F | Cellular: 4G; Modems: 1; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: No |
|---|---|
| CM520-61FS | Cellular: 5G; Modems: 1; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: No |
| CM520-62F | Cellular: 4G; Modems: 1; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: No |
| CM520-62FS | Cellular: 5G; Modems: 1; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: No |
| CM520-63F | Cellular: 4G; Modems: 1; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: No |
| CM520-63FS | Cellular: 5G; Modems: 1; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: No |
| CM520-64F | Cellular: 4G; Modems: 1; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: Yes |
| CM520-64FS | Cellular: 5G; Modems: 1; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: Yes |
| CM520-65F | Cellular: 4G; Modems: 1; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: Yes |
| CM520-65FS | Cellular: 5G; Modems: 1; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: Yes |
| CM520-66F | Cellular: 4G; Modems: 1; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: Yes |
| CM520-66FS | Cellular: 5G; Modems: 1; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: Yes |
| CM520-67F | Cellular: 4G; Modems: 2; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: No |
| CM520-67FS | Cellular: 5G; Modems: 2; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: No |
| CM520-68F | Cellular: 4G; Modems: 2; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: Yes |
| CM520-68FS | Cellular: 5G; Modems: 2; Wi-Fi bands: 2.4 / 5.8 GHz; GPS / BeiDou: Yes |
| CM520-69F | Cellular: 4G; Modems: 2; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: No |
| CM520-69FS | Cellular: 5G; Modems: 2; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: No |
| CM520-6AF | Cellular: 4G; Modems: 2; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: No |
| CM520-6AFS | Cellular: 5G; Modems: 2; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: No |
| CM520-6BF | Cellular: 4G; Modems: 2; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: Yes |
| CM520-6BFS | Cellular: 5G; Modems: 2; Wi-Fi bands: 2.4 GHz; GPS / BeiDou: Yes |
| CM520-6CF | Cellular: 4G; Modems: 2; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: Yes |
| CM520-6CFS | Cellular: 5G; Modems: 2; Wi-Fi bands: 5.8 GHz; GPS / BeiDou: Yes |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 7-8
| Network access | APN / VPDN |
|---|---|
| Authentication | CHAP / PAP / MS-CHAP / MS-CHAPv2 |
| Radio system | See cellular radio specifications. |
| LAN protocols | ARP / Ethernet |
| IP applications | Ping, traceroute, DHCP server/relay/client, DNS relay, DDNS, Telnet, SSH, HTTPS, TFTP, FTP and SFTP. |
| Routing | Static and dynamic routes. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 7-8
| Firewall | Stateful packet inspection (SPI), denial-of-service (DoS) protection, multicast/Ping filtering and access-control lists (ACL). |
|---|---|
| Address translation | NAT, PAT, DMZ, port mapping and virtual servers. |
| Users / AAA | User privilege levels; local authentication, RADIUS, TACACS+ and LDAP. |
| Data security | IPsec VPN, OpenVPN and CA support, including automatic application . |
| Backup | VRRP, interface backup and dual-SIM backup. |
| Link monitoring | Heartbeat checks and automatic reconnection. |
| Watchdog | Operating self-check and fault self-recovery. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 7-8
| Standards | IEEE 802.11ac/a/b/g/n |
|---|---|
| Security | Open system, shared key, WPA/WPA2 authentication; WEP/TKIP/AES encryption. |
| Modes | AP and client. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 7-8
| Configuration | Local or remote HTTPS, Telnet and SSH. |
|---|---|
| "Upgrade method" source row | The source actually lists local/remote log output and log retention after power loss. Heading/content mismatch: Confirmation required. |
| SMS, optional | Status inquiry, configuration and restart. |
| On-demand dialing | Data-triggered or SMS-triggered connection; scheduled online/offline operation. |
| Management | SNMP |
| Development / platforms, optional | Python custom development; Amazon AWS; Tencent Cloud; power-industry cloud platforms; Alibaba Cloud and other IoT cloud platforms; centralized management and batch configuration. |
| Industrial protocols, optional | Modbus TCP, Modbus RTU, EtherNet/IP and Modbus TCP Slave. |
| DM | Centralized management and batch configuration. |
| Diagnostics | Ping, traceroute and sniffer packet capture. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 9-11
| Module | Industrial-grade cellular module. |
|---|---|
| 5G NR SA/NSA bands | n1/n2/n3/n5/n7/n8/n20/n28/n41/n66/n71/n77/n78/n79 |
| TDD frequency group | LTE TDD: 2600/2300 MHz; UMTS: 2100/900 MHz; GSM: 850/900/1800/1900 MHz; UMTS receive diversity: 2100/900 MHz. |
| FDD frequency group | LTE FDD: 2600/2100/1800/DD800 MHz, retaining the source DD800 notation; UMTS and receive diversity: 2100/900 MHz. |
| Radio schemes | NR/LTE/UMTS/HSPA+/HSDPA/HSUPA/WCDMA/EDGE/GSM |
| 5G NR rates | DL 3.4 Gbps / UL 350 Mbps |
| TDD table rates | LTE TDD: DL 68 Mbps / UL 17 Mbps; DC-HSPA+: DL 42 Mb/s (Category 24); HSPA+: DL 28 Mb/s (Category 18); HSDPA: DL 14.4 Mb/s (Category 8); HSUPA+: DL 5.76 Mb/s (Category 6), as printed; WCDMA CS: UL/DL 64 kbps; WCDMA PS: UL/DL 384 kbps. |
| FDD table rates | LTE FDD: DL 100 Mbps / UL 50 Mbps; DC-HSPA+, HSPA+, HSDPA, HSUPA+ and WCDMA entries are the same as in the TDD table. |
| Transmit power | LTE 23 dBm; WCDMA/HSDPA 24 dBm. |
| Receiver sensitivity | <-109 dBm |
| Module functions | Data, voice, SMS and fax, as listed; confirm ordered modem and network support. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 9-11
| Modules | 802.11b/g/n: dual-band 3 x 3 MIMO, 450 Mbps; 802.11ac: dual-band 3 x 3 MIMO, 1.3 Gbps, as described in the source. Exact radio architecture depends on variant. |
|---|---|
| Frequency | 802.11b/g/n: 2.412-2.472 GHz, 13 channels (3 non-overlapping); 802.11a/n: 5.180-5.825 GHz. |
| Transmit power | 23 dBm for the complete device, . |
| MTBF | >=20,000 hours |
| Client capacity | 150 simultaneous users on a single band; 254 on dual bands. The separate capacity table says 100 associations per frequency: Confirmation required. |
| Security | 64/128-bit WEP; WPA-PSK/WPA2-PSK; TKIP and CCMP/AES. |
| Range | Up to 150 m outdoors in an unobstructed open area, a source claim without test conditions. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 9-11
| Module | Industrial GPS / BeiDou module; available according to model. |
|---|---|
| Receiver | 50 channels; L1; 1.023 MHz chip rate and C/A code. SBAS: WAAS, EGNOS, MSAS; stated GALILEO compatibility. |
| Position accuracy | Position: 2.5 m CPE; SBAS: 2.0 m CPE, exactly as printed. The CPE accuracy abbreviation Confirmation required. |
| Velocity / heading accuracy | <0.01 m/s (high speed); <0.01 degree heading (50% at 30 m/s), . |
| Time accuracy | 1 microsecond, synchronized to GPS time. |
| Acquisition | Cold start: 27 s; assisted start: <3 s; hot start: <1 s. |
| Data format | NMEA-1083 and SiRD binary, as printed; terminology Confirmation required. |
| Input | NMEA / SiRF binary: altitude, position, date and time. |
| Output | NMEA-0183 / SiRF binary: GGA, GSA, GSV, RMC, VTG, GLL. |
| Pulse output | 1 pps, accuracy +/-1 microsecond. |
| Navigation update | 5 Hz |
| Sensitivity | Tracking -162 dBm; cold start -147 dBm; hot start -156 dBm. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 11-12
| CPU | Industrial ARM processor; 1.4 GHz (dual core) main frequency and 733 MHz (dual core) secondary frequency, as written. |
|---|---|
| MMU | CPU memory-management unit. |
| Flash | 512 Mbit NOR Flash. |
| DDR3 | 32-bit DDR3, 4-16 Gbit. |
| TF storage | Expandable up to 512G, . |
| SSD | Expandable up to 2T, . |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 11-12
| Input | 7-32 V DC in the power table; 6-32 V in the design section. Confirmation required. Reverse-polarity, overvoltage and overcurrent protection. |
|---|---|
| Standard supply | 12 V DC / 2 A. |
| Communication current | Dual-modem / dual-Wi-Fi reference: average 500 mA at 12 V DC; registration peak 700 mA at 12 V DC. |
| Standby | Dual-modem / dual-Wi-Fi reference: average <450 mA at 12 V DC. |
| Other supply systems | 110 V train supply, vehicle supply or 220 V adapter supply. The overview marks train supply as customized; do not connect these voltages directly to the low-voltage input. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 11-12
| Table entries | MAC 1000; ARP 1000; routing 256; NAT sessions 20000. |
|---|---|
| Wireless associations | 100 per frequency; separate Wi-Fi table says 150 single-band clients. Confirmation required. |
| Concurrent users | 254 |
| Routing throughput | 90 Mbps without NAT; 70 Mbps with NAT. These values are not interchangeable with port or cellular link rates. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 12-13
| Operating | -35 to +75 °C |
|---|---|
| Extended operating | -40 to +80 °C |
| Storage | -40 to +85 °C |
| Relative humidity | 95%, non-condensing. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 12-13
Certification scope and test conditions depend on the selected model. Request the applicable documentation.
| Electrostatic discharge | EN 61000-4-2, level 3 |
|---|---|
| Radiated electric field | EN 61000-4-3, level 3 |
| Electrical fast transients | EN 61000-4-4, level 3 |
| Surge | EN 61000-4-5, level 3 |
| Conducted disturbances | EN 61000-4-6, level 3 |
| Power-frequency magnetic field | EN 61000-4-8; horizontal/vertical 400 A/m, level 3, as printed. Test-level consistency Confirmation required. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 12-13
| Enclosure | Metal; shielding and interference resistance; enclosure/system isolation; lightning-protection design; power-safety requirements; IP30 in the physical table, versus IP31 in the reliability section. |
|---|---|
| Body | 228 mm wide x 35 mm high x 144 mm deep; excludes antennas and mounting hardware. |
| Weight | 1.02 kg |
| Shock / vibration / drop | IEC 60068-2-27 / IEC 60068-2-6 / IEC 60068-2-32. |
CM520-6XX Series — Vehicle cellular and Wi-Fi router — technical specifications · Source V1.1 | filename date 20260522 · Source pp. 12-13
Certification scope and test conditions depend on the selected model. Request the applicable documentation.
| Domestic | MIIT network-access permit; CCC; EMC; Ministry of Railways CRCC; Mo'er high/low-temperature testing. |
|---|---|
| International | CE, FCC, E-mark, RoHS. |
| Scope | Source statements only; certificate identifiers, validity and specific variant coverage Confirmation required. |
System connectivity
See how CM520-61 fits into your installation.
Illustrative connection architecture. External equipment and customer software are shown for context. Interfaces and options vary by configuration.
Source V1.1 | filename date 20260522 · Technical review edition · PDF
Source manual V1.2 | source date 2020-01-22 (as printed) · Technical review edition · PDF