DeviceHub Management Platform, APIs & Secure Remote Access

DeviceHub provides centralised visibility and lifecycle management for industrial 4G and 5G routers deployed across distributed infrastructure sites. It supports fleet-level monitoring, configuration consistency, and operational oversight without requiring on-site visits.

Secure remote access is equally important. Milesight routers support multiple VPN and tunnelling options suitable for different deployment models, including site-to-site backhaul, remote support access, and segmented management planes.

DeviceHub and VPN capabilities are used to support, not replace, customer network and security architectures.

What DeviceHub Enables

• Fleet visibility: online/offline status, uptime, signal and link-quality metrics
• Centralised monitoring and alerting for connectivity loss or degradation
• Configuration consistency for multi-site deployments
• Firmware and lifecycle management workflows (deployment dependent)
• Auditability for changes and device health reporting

APIs & Integration

DeviceHub can support integration workflows where customers require device visibility and operational data inside their own systems. API availability and scope are deployment dependent and should be confirmed for the intended use case.

• Integration of device inventory and operational status into customer dashboards or portals (where supported)
• Event and alert forwarding into NOC or monitoring systems (where supported)
• Automation hooks for provisioning and lifecycle workflows in large deployments (project dependent)

VPN & Tunnelling Options Available

Milesight routers support multiple VPN and tunnelling methods suitable for different deployment architectures:

• IPsec (Site-to-Site / Client): Standards-based encrypted tunnels for permanent site connectivity and secure backhaul
• IPsec Server: Terminates remote access connections securely for engineers and support teams
• DMVPN: Scalable hub-and-spoke VPN model for multi-site deployments (project dependent)
• OpenVPN Server / Client: Flexible remote access and site connectivity where OpenVPN is preferred
• WireGuard: Lightweight modern VPN option for efficient encrypted transport (architecture dependent)
• L2TP: Legacy VPN option used in some environments (less common in new deployments)
• PPTP: Legacy option; generally not recommended for modern security requirements
• GRE: Tunnelling method often paired with IPsec for specific routing/topology requirements
• ZeroTier (optional overlay): Useful where NAT traversal and rapid private networking is required without complex site routing

Choosing the Right Approach

The appropriate VPN or tunnelling method depends on deployment scale, security requirements, and operational constraints.

• Use IPsec for long-term infrastructure backhaul and standardised security requirements
• Use OpenVPN where existing estates already standardise on OpenVPN
• Use WireGuard where lightweight performance and modern cryptography are preferred
• Use ZeroTier for rapid deployment scenarios where overlay networking reduces setup time

Security & Segmentation

Industrial deployments should separate operational traffic from management access. Typical controls include:

• VLAN separation for OT/edge devices vs management
• Firewall policies restricting inbound access
• Certificate-based authentication where supported
• Audit logging for configuration and access events

How This Supports Real Deployments

• CCTV: secure recorder access and health monitoring
• Vending/POS: stable remote support access without exposing payment networks
• Utilities/Telemetry: secure backhaul, segmentation and predictable recovery
• Temporary sites: faster provisioning and controlled remote access

Why Connected IoT

• Focused on infrastructure-grade connectivity use cases
• Practical experience with distributed and unattended deployments
• Hardware-first approach with reliable industrial equipment
• UK and Europe focused support

Discuss Your Management & Secure Access Requirements

For related deployment guidance, see our antenna optimisation, CCTV connectivity, vending connectivity, POS and parking connectivity, smart metering and remote monitoring and telemetry pages.

If you need guidance selecting a management, integration and VPN approach for an industrial deployment, we can help specify the correct router model, access method, and operational configuration for your environment.