Modernizing Remote Water Pump Stations with the Mofiu SG100

When a regional water utility embarked on a program to modernize a dozen remote pump and pressure‑regulation stations, the challenge was clear: unify heterogeneous legacy devices, improve visibility and control, and harden cyber resilience—without the luxury of fiber drops or persistent on‑site maintenance. The solution centered on a secure, cellular‑first architecture built around Mofiu’s SG100 industrial 4G router.

The SG100’s hardware design aligned naturally with the utility’s field constraints. Dual SIM for carrier redundancy minimized downtime in valleys where single‑operator coverage was inconsistent. A wide 9–48 VDC input allowed direct connection to existing DC rails inside control panels, while the ‑40 to 75°C operating envelope ensured dependable performance across alpine winters and midsummer heat. Electrical interfaces were pivotal: two Ethernet ports for PLC and RTU backbones, RS‑232 for older flow computers, RS‑485 for multi‑drop sensor buses, a digital input for cabinet‑door tamper detection, and a digital output for failsafe interlocks. Secure boot anchored firmware integrity from power‑on, closing a longstanding gap in the utility’s risk register.

At the application layer, the SG100 became the bridge between a mixed‑protocol field and a standards‑based SCADA core. Protocol conversion profiles were created to translate IEC‑101 on the serial leg into IEC‑104 over IP for the SCADA master, and to normalize DNP3 telemetry from third‑party RTUs into the same routable domain. This avoided costly controller swaps while delivering a common supervisory picture. On the transport side, the SG100’s VPN feature set—OpenVPN and IPsec—was employed in a dual‑tunnel design: IPsec for deterministic, policy‑based routing of control traffic, and OpenVPN for maintenance sessions and engineering access. The result was cryptographic segmentation with clear trust boundaries and minimal operational friction.

The link strategy combined primary 4G WAN with dual‑SIM failover and a deterministic watchdog that monitored both packet loss and SCADA application keep‑alives. When jitter exceeded thresholds or an APN experienced brownouts, the SG100 executed a hitless switchover, preserving session continuity at the PLC and HMI layers. Local logic tied the digital input to an alarm map; any door open outside maintenance windows triggered a discrete event to the SCADA historian and pulsed the digital output to drive a beacon for field crews—simple, visible assurance that cybersecurity and physical security were working in concert.

Deployment was deliberately incremental. Technicians staged configurations offline, then used the SG100’s secure bootstrap to validate image signatures before field installation. Cutovers were executed in maintenance windows; the two Ethernet ports simplified insertion between existing switches and controllers without re‑IPing devices. Acceptance tests verified end‑to‑end protocol translation, RTU time sync integrity, and VPN cryptography across both cellular carriers.

The impact was immediate and measurable. Mean time to repair for communication incidents fell by over 60%, driven by resilient connectivity and precise fault isolation. The historian captured higher‑fidelity data thanks to stable IEC‑104 sessions, enabling better pump scheduling and energy optimization. Cyber posture matured: secure boot eliminated unauthorized firmware risk, and mutually authenticated VPNs reduced the attack surface. Meanwhile, the SG100’s industrial temperature and power range eliminated prior seasonal deratings and ad‑hoc power conditioners.

Lessons from the project underscore a modern SCADA principle: progress does not require rip‑and‑replace. By combining robust physical design—wide voltage, extended temperature, serial and Ethernet breadth—with disciplined security primitives and pragmatic protocol conversion, the SG100 transformed a fragmented field domain into a coherent, supervised system. The utility achieved resilient, standards‑aligned operations on a cellular backbone, with a roadmap ready for future expansions in telemetry density and control sophistication.

About Mofiu

Mofiu is a premier innovator in industrial wireless communications, dedicated to delivering mission-critical connectivity solutions that power the world’s most demanding environments. With a steadfast commitment to safety, reliability, and engineering excellence, Mofiu designs and manufactures robust wireless devices that enable seamless data exchange across electricity, utilities, energy infrastructure, transportation networks, and smart industrial systems etc.

Mofiu - Secure connectivity, uncompromised performance.