Static-IP IoT SIM, standard offering for Spain
Static IPv4 as a standard product — not as an enterprise add-on reserved for fleets of 500+ SIMs. Available from the first SIM, public or private, combinable with private APN, added latency < 5 ms. For integrators who need their corporate firewall or SCADA platform to whitelist the device by address, without waiting for a sales committee.
Why iot.cards static IP is different
From the first SIM, no volume minimum
1NCE, Telefónica Tech and Wireless Logic offer static IP as an enterprise add-on: annual contract, 500-SIM minimum, sales committee. We offer it as a standard layer over any plan, contractable the same afternoon with a single SIM. The difference between validating a pilot in a week or waiting until next quarter.
Public or private per need
Public IPv4 for devices reachable from the Internet (cameras, PLCs, embedded servers) or private inside a dedicated APN for corporate infrastructure. Same plan, same portal, two modes of operation.
Combinable with private APN in the same plan
Private static IP inside a dedicated APN is the standard architecture for SCADA and retail video surveillance. It's not an enterprise upgrade: contracted as a per-SIM add-on, with no disruption to the rest of the fleet.
Added latency < 5 ms
Static-IP routing adds few hops when the SIM and GGSN sit in the same region. No proxies, no dynamic DNS, no client tunnels. For SCADA and telecontrol, added latency is negligible vs dynamic IP + DDNS.
Persistent assignment (never rotates)
The IP doesn't change on modem reboot or on IMSI switch between carriers. Lets your corporate firewall, SCADA platform or VMS whitelist the device by address with confidence the rule won't expire silently.
Firewall rules in the portal
Define inbound/outbound rules per SIM from the portal or API. Useful for restricting the device's reach to your platform without opening the whole range. Firewall event logs accessible for audit.
Cases where static IP is required, not optional
There are architectures where static IP isn't a nice-to-have but a functional requirement. The most frequent in Spain:
Inbound device access
- PLCs and industrial controllers reachable from a central platform
- IP cameras whose VMS pulls the stream (RTSP/HLS)
- Embedded servers accepting incoming connections
- Devices behind corporate firewall that whitelist by IP
Static-IP modes available
The differentiating factor vs a consumer SIM isn't the IP model, it's that on consumer you sit behind CGNAT and incoming ports are closed. iot.cards static IP is end-to-end routable, with no CGNAT and no ports blocked by default.
Technical capabilities of static IP
The static-IP layer is composed of several technical elements, contractable bundled or separately:
Full technical specification
Product spec sheet detailing modes (public/private), supported VPN types (IPSec, WireGuard, L2TP, OpenVPN), comparison with DDNS and CGNAT, technical FAQ.
View full technical specPrivate APN for private IP
For private static IP, the dedicated APN with your CIDR and IPSec/WireGuard tunnel is the standard architecture. Lets your corporate firewall treat the SIMs as its own subnet.
View private APNProvisioning API
IP assignment, change and query via REST API. Per-SIM firewall rules. HMAC-signed webhooks on IP change (to sync your inventory).
API documentationRules and diagnostic portal
Bilingual web console for day-to-day management: see IP per SIM, define firewall rules, export event logs, diagnose inbound connectivity from a portal-based test.
View management portalTypical use cases in Spain
- SCADA electricity and water smart metering
- IP cameras reachable from a centralized VMS
- Remote industrial PLCs (telecontrol)
- Embedded servers in connected machines
- SD-WAN routers with inbound traffic
- POS terminals with central system connection
- EV charging stations with inbound OCPP
- Telemetry with inbound connections (DASH7, modbus IP)
Pricing and lock-in
Static IP is billed as a per-SIM add-on, with no lock-in and no SIM minimum. Three modes per case:
Public IP add-on (pay-as-you-go)
Public static IPv4 assigned to a SIM on a pay-as-you-go plan. Ideal for pilot and cases where you need inbound from the Internet without setting up a VPN.
Private IP add-on (bundle)
Private IPv4 inside iot.cards' dedicated APN (without needing your own dedicated APN). Useful if you want isolation without managing your own APN.
Enterprise (dedicated CIDR range)
Full CIDR range inside your dedicated private APN. For large or regulated fleets where addressing must be your own and predictable.
Full pricing detail at /planes/pago-por-uso. The SIM Test Kit (5 units, €15 VAT included) ships free to Spain and lets you contract static IP from the first unit to validate integration before bulk deployment.
Frequently asked questions about static IP for IoT SIM
- Does static IP require a minimum number of SIMs?
- No. A single SIM can carry static IP as an add-on. That's precisely the difference vs enterprise competitors (1NCE, Telefónica Tech, Wireless Logic) that offer it only from 500 SIMs and with annual contract. Here you contract it the same day, in pilot, and then scale.
- Public or private IP? Which do I pick?
- Public IP if the device needs to be reachable from the Internet (camera with public VMS, PLC with external cloud platform, embedded server). Private IP if the device only communicates inside your corporate infrastructure or if the VMS is on-prem. Private requires a dedicated APN (either iot.cards' or yours); public doesn't.
- Does it work with CGNAT?
- You're not behind CGNAT on this SIM: we assign an end-to-end routable IP. That's the main operational difference vs a conventional consumer SIM, where you share a public IP with hundreds of devices and incoming ports are closed by default.
- IPv4 or IPv6?
- Static IPv4 by default. IPv6 available on demand depending on the use case and the underlying carrier network. Most IoT deployments still use IPv4 due to compatibility with legacy platforms and modems.
- Can it be combined with private APN?
- Yes, and it's the most common combination in industrial deployments: the private APN tunnels traffic to your infrastructure, and the static IPs inside that APN give each device stable addressing. Detail at /productos/apn-privado.
- Additional latency?
- Less than 5 ms in most cases. The route doesn't add significant hops when the SIM and the GGSN sit in the same region. For SCADA, telecontrol and video surveillance, added latency is irrelevant compared to the dynamic IP + DDNS alternative, which adds variable DNS resolution and periodic reconfigurations.
- Does the IP change if the SIM reboots?
- No. The IP is persistent: doesn't change on modem reboot or IMSI switch between carriers. What does change is the cell and technology (4G/5G/LTE-M), but the L3 IP stays stable.
- How is the static-IP add-on billed?
- As a fixed monthly supplement per SIM, separate from data consumption. The amount depends on the mode (public vs private) and the base plan. No lock-in: if you remove static IP, it's stripped from next month's bill.
- What sets it apart from 1NCE or Telefónica Tech enterprise offering?
- Three things: (1) availability from the first SIM, no volume minimum or committee; (2) on-demand contractable from the portal or API, no negotiation; (3) compatible with pay-as-you-go or small bundle plans, doesn't force an annual enterprise contract. If you need static IP in pilot and possibly scale to 500+ SIMs in 12 months, this saves you the upfront commercial bottleneck.
Request a static-IP SIM for your integration
We ship the SIM Test Kit (5 units, €15 VAT included, free shipping to Spain in 24–48 h) with static IP already provisioned so you can validate inbound from your platform before bulk ordering, or schedule a technical call to review your architecture and define the mode (public / private / dedicated APN).