Product overview
What the RouDem is
Section titled “What the RouDem is”The RouDem is a 5G router with a motorised directional antenna. Instead of a fixed antenna, the unit works out where the best cell tower is and turns its antenna towards it. It keeps doing so as conditions change, so a site or a vehicle with poor coverage from an ordinary router gets a stable connection.
A RouDem unit consists of:
- an outdoor enclosure with the directional antenna, the motor that turns it, a compass and a GPS receiver,
- a 5G cellular module with one or more SIM slots (and eSIM support),
- an embedded router running MiWire’s firmware, with a wired LAN port and Wi-Fi for the equipment behind it.
Intended purpose
Section titled “Intended purpose”The RouDem provides internet connectivity over a mobile network to the equipment on its LAN. It is sold for:
- fixed installations where cable or fibre is not available, and
- vehicles and vessels that move between coverage areas.
It is a managed product: MiWire operates the SIM and data plans, monitors the connection, and keeps the firmware up to date as part of the service. The customer manages the local network side (Wi-Fi name and password, LAN addressing, firewall rules) through the unit’s web interface.
The RouDem is not intended to be exposed directly to the internet as a server, to be used as a VPN concentrator, or to be operated with firmware other than MiWire’s.
Security environment
Section titled “Security environment”The unit is designed on these assumptions:
- It sits at the edge of the customer’s LAN. The web interface, DNS and DHCP are only offered on the LAN. Nothing listens for connections on the cellular side; the firewall rejects inbound traffic from the mobile network. See Services and ports.
- MiWire administers the unit remotely. Firmware updates, connection statistics and support access go over outbound, encrypted connections from the unit to MiWire’s services, each authenticated with a certificate that is unique to the unit. See Communications.
- The customer administrator is a local administrator. The
adminlogin on the web interface can change the local network settings and switch off optional services, but cannot change the settings that keep the unit secure and manageable. See Services page. - Physical access is trusted. The unit’s enclosure and the LAN port are assumed to be in a place the customer controls. On-site service by MiWire uses the LAN port.
If the unit is installed in a different environment, for example on a network shared with untrusted parties, treat the LAN side as you would any other router’s LAN: change the passwords from the label, and restrict who can reach the unit’s LAN address.
Where to find more
Section titled “Where to find more”- Identification: manufacturer, model, hardware and firmware naming.
- Firmware updates: how the unit stays up to date.
- Reporting vulnerabilities: how to tell MiWire about a security problem.
- Support policy: how long the product receives security updates.