Industrial IoT Hardware: An Australian Buying Guide

Industrial IoT means connecting machines and sensors to a network so their data can be used. For most Australian sites that means getting equipment which already exists to talk to systems that did not exist when it was installed. The hardware underneath, the switches, converters, routers and access points, is what decides whether it works.

This guide covers the five layers of an industrial network, what to buy at each one, and when a different choice makes more sense. Everything recommended here is stocked in our Sydney warehouse.

Quick picks

Layer 1: Getting data off the machine

You connect legacy equipment using a gateway that converts what the machine already speaks into Ethernet and IP. In most Australian plants that means a Modbus gateway or a serial to Ethernet converter, because the equipment communicates over RS-232, RS-422 or RS-485 rather than a network port.

This is the most common blocker we are asked about, and it is usually solvable without touching the machine itself. That matters when the equipment is under warranty or certification.

• Serial to Ethernet converters put older equipment onto the network without modifying the control system
• Modbus gateways translate Modbus RTU or ASCII into Modbus TCP, which most platforms read directly
• Remote I/O modules pick up dry contacts and analogue signals from equipment with no digital interface at all

Isolation and surge protection matter more here than anywhere else, because these devices sit closest to the machinery and its electrical noise. If you are unsure what a machine speaks, the control cabinet label usually says, and our team can identify it from a photo of the port.

Browse: Modbus gateways  |  Terminal servers  |  Remote I/O

Layer 2: Switching inside the cabinet

Once devices are on Ethernet, something has to connect them. On an industrial site that switch lives in a control cabinet, which is a very different environment from a comms room.

Recommended: Teltonika TSW200

An unmanaged industrial gigabit switch with PoE, built for DIN rail mounting. It is the straightforward choice when you need to connect several devices in one area and power them over the same cable. PoE matters more than people expect here, because it removes a separate power run to every camera, sensor and access point.

Step up to managed switching, such as the Moxa PT series, when the location carries operational technology that must be segmented from corporate traffic, or when remote fault diagnosis would save a site visit. On any site where a technician callout is expensive, managed switching usually pays for itself.

View product: Teltonika TSW200 Industrial Gigabit PoE Switch  |  Browse all industrial switches

Layer 3: Extending the link

Copper Ethernet stops being reliable beyond about 100 metres. Plant sites regularly need more than that between buildings or along a production line, and they also have electrical noise that copper is vulnerable to.

Recommended: Moxa IMC-101-M-SC

An industrial media converter that takes 10/100BaseTX copper and converts it to 100BaseFX multimode fibre over an SC connector. Rated 0 to 60 degrees Celsius and DIN rail mounted, so it sits alongside the rest of the cabinet.

Fibre carries light rather than current, so it is completely immune to the interference that motor drives, welders and switching loads put into copper runs. If you have an Ethernet link that works intermittently near heavy machinery, this is usually the fix, and it clears the distance limit at the same time.

Worth being clear that this is a media converter, not a protocol gateway. It moves Ethernet onto fibre. It does not translate Modbus or serial, which is the layer one device above.

View product: Moxa IMC-101-M-SC Industrial Media Converter  |  Browse all media converters

Layer 4: Connecting remote sites

Australian sites are often large or a long way from anywhere. A mine, a grain facility or a water utility may have assets kilometres apart with no fixed line and no practical path for cable. Industrial deployments have moved steadily away from depending entirely on the plant network towards cellular for exactly this reason.

Recommended: Robustel R1520

An industrial cellular router with dual SIM support and built-in VPN. It gives a site or an area its own connection over mobile networks rather than waiting for a fixed line to reach it.

Dual SIM is the specification that matters. A single carrier will have coverage gaps and outages somewhere across a large site or a fleet of sites. Failing over to a second carrier automatically turns cellular from a compromise into a resilient link. The VPN support matters for the same reason security does: a cellular connection puts operational equipment on a public network, and that traffic needs encrypting.

Use it for remote pump stations, silos, temporary sites, construction offices, and as a backup path anywhere a fixed line outage would stop production.

View product: Robustel R1520 Industrial Dual SIM Cellular VPN Router  |  Browse all industrial routers

Layer 5: Wireless coverage on the floor

Handhelds, scanners, tablets and autonomous equipment all need wireless. In a plant that raises a question an office network never has to answer: is the area hazardous, wet, or both.

Recommended: Aruba AP-765EX

A HazLoc-rated Wi-Fi 7 access point with IP66/67 sealing and a 2.5GbE PoE uplink. HazLoc means it is certified for hazardous locations, which are areas where flammable gases, vapours or combustible dust may be present.

This is a compliance requirement rather than a performance one. Chemical plants, fuel storage, grain handling, paint areas, mining operations and parts of food processing all fall into this category, and in those zones the alternative to a certified access point is usually no coverage at all. That in turn blocks any IoT project needing data from equipment there.

The IP66/67 rating applies more broadly. Sealed against dust and water jets, it also suits washdown areas in food and beverage production, outdoor yards and wet processing, even where hazardous certification is not required. For standard indoor plant areas that are neither hazardous nor wet, a conventional industrial access point costs considerably less and does the job.

View product: Aruba AP-765EX HazLoc Wi-Fi 7 Access Point  |  Browse all industrial access points

What to check before you order

Whatever layer you are buying at, the same four specifications separate industrial hardware from commercial hardware that will fail in a cabinet.

• Operating temperature. Look for roughly minus 40 to 75 degrees Celsius. Commercial gear is typically rated to about 40 degrees, which is below what a sealed cabinet near machinery reaches
• Fanless metal housing with an IP rating. Fan-cooled units draw dust and contaminants straight in
• DIN rail mounting and wide-range DC input, so it fits the cabinet and tolerates the spikes that motor starts put on the supply
• Protocol support where the application needs it, such as PROFINET or EtherNet/IP
• A quick test when comparing two switches: check the operating temperature range and whether it has a fan. Those two specifications alone tell you whether a unit was designed for a cabinet or a desk.

Keeping operational technology secure

Connecting operational technology to your business network creates a security problem that did not exist while the two were separate. Industrial control systems were generally designed for isolated networks, so many have limited authentication and cannot be patched on an IT schedule.

Most Australian sites handle this with segmentation rather than replacement:

• Put operational technology on its own VLAN or physical network, separated from corporate traffic
• Control what crosses between them with a firewall rather than open routing
• Use managed switches on the OT side so you can see what is connected and detect changes
• Treat remote access as a controlled, authenticated path, not a permanent open tunnel

Frequently Asked Questions(FAQ)