Aventura, Florida · serving clients across the United States (305) 404-9404Toll-free (800) 767-8566Emergency? Get a call within 1 hour
Manufacturing, automotive supplier Illustrative engagement

Robots that stop dropping off the network: private 5G on CBRS spectrum for a Tier-1 auto plant

A Tier-1 automotive supplier in the Midwest, a leader in its segment.

Scale
~600,000 sq ft plant, ~18 radio units (replacing ~212 Wi-Fi access points), ~40 AMRs, ~400 machine sensors, ~24 vision cameras
Engagement
Survey, pilot and plant-wide rollout over 10 months, then managed operations

The challenge

The plant's Wi-Fi could not keep up with the machines that now ran on it. Autonomous mobile robots lost their session when they roamed between access points, especially near steel presses and racking, and each dropout stopped a robot until a person recovered it. Only a fraction of the CNC spindles had vibration sensors because running Ethernet to each machine was slow and costly. Final inspection relied on sampling, and production devices shared radio infrastructure with corporate ones, which the board no longer accepted.

A supplier of axle shafts and gear sets lives on thin margins and strict customer rules: traceable safety-critical parts, falling defect rates and no late shipments. This plant had added autonomous mobile robots, wireless sensors and inspection cameras faster than its Wi-Fi could carry them. Robots dropped their session between access points, mostly near the big steel presses, and every dropout stopped a machine until someone walked over to recover it.

Adding access points never fixed it. Metal structures, welding equipment and more than a kilometer of aisles left gaps that a denser Wi-Fi layout only moved around. After comparing a Wi-Fi 6E upgrade with private cellular, we chose private 5G in the CBRS band. The spectrum is shared under 47 CFR Part 96: a Spectrum Access System authorizes and manages use of the band, and the plant operates on General Authorized Access, so there is no license to buy. Mobility is built into cellular, which is exactly what a roaming robot needs.

The design is edge first. Robot fleet management, local breakout and vision inference run on a compute rack inside the plant, so the line keeps moving if the internet link fails. Every device authenticates with a SIM or eSIM tied to an inventory record, and a lost or retired device is revoked in seconds. Separate quality-of-service profiles keep robot control low latency while inspection video takes the bandwidth. The production network sits in its own zone, apart from corporate devices, with logged flows out.

We started with a survey and a one-hall pilot, measuring before and after so leadership could see the difference before funding the rest. Rollout then covered the whole plant, and industrial 5G gateways brought the older robots along without replacing them. Two radio units moved after the pilot to clear the shadows behind the presses. The maintenance team did not trust predictive alerts at first, so the models ran in shadow mode for weeks, showing predictions next to actual failures, until the alerts earned their place in the work-order system.

The number the plant manager watches is the weekly count of robot connectivity stoppages: about 41 a week on Wi-Fi, about 2 a week on private 5G, and roughly 30 operator hours a week of robot recovery handed back to production. The floor that needed about 212 Wi-Fi access points now runs on 18 radio units, which is a good deal less to survey, power, patch and replace. For fairness, a well-tuned Wi-Fi network can hand a client between access points in about 40 milliseconds when 802.11r, k and v are all in use, but that depends on every client supporting them, and older industrial devices often do not. Cellular makes mobility a property of the network instead of a feature each device must bring. The use cases the business cared about now sit on top: reliable robot hand-offs, sensors on far more spindles, vision inspection of every part instead of a sample, and traceability that ties a serial number to its machine, tool and inspection images. The figures are modeled and the engagement is illustrative. What carries over is the method: lead with downtime and quality rather than with 5G, pilot with a baseline, plan for legacy devices and keep the plant able to run on its own.

What our team delivered

  • A radio survey and propagation model of the whole plant, including the shadows behind the large presses, before a single radio was bought
  • Private LTE/5G in the CBRS band (3.55 to 3.7 GHz), with the Spectrum Access System coordinating use under 47 CFR Part 96 and the plant running on General Authorized Access spectrum
  • A partner-provided private 5G core, with SIM- or eSIM-based identity for every robot, sensor, camera and handheld, tied to an inventory record and revocable in seconds
  • Quality-of-service profiles by traffic class: low latency for robot control, high uplink for inspection video, and low priority for sensor telemetry
  • An on-site edge compute rack with local breakout, so robot fleet management and vision inference keep running if the internet link fails
  • Industrial 5G gateways for the older robots and machines with no cellular modem, instead of replacing them
  • OT and IT separated into their own zones, with controlled, logged flows to business systems and the cloud
  • Predictive-maintenance models run in shadow mode for weeks, showing predicted failures beside real ones, before any alert became a work order

Result

Robots roam between radio cells without dropping their session, so robot connectivity stoppages fell from about 41 a week on Wi-Fi to about 2 on private 5G, and roughly 30 operator hours a week went back to production. Most spindles now report vibration and temperature, final inspection looks at every part instead of a sample, and a new production asset joins the network in an hour instead of days. The figures in this case are modeled, not measured, and the board's segmentation requirement is met by design.

Private 5G across a plant floor

Radios on the shared 3.55 to 3.7 GHz CBRS band connect robots, cameras and sensors. A Spectrum Access System grants the channels, a partner-provided 5G core and a local user plane keep traffic on site, and edge compute runs vision and machine learning in milliseconds. The cloud gets only what it needs.

Private 5G across a plant floorMobile robots, inspection cameras and sensors connect over private 5G to two radio units that act as CBRS devices on the 3.55 to 3.7 GHz band, NR band n48. The radios register with a cloud Spectrum Access System, which grants General Authorized Access or Priority Access channels and can tell them to move when an incumbent such as Navy radar is detected. On site, a user plane function breaks traffic out locally to an edge compute node running vision inspection and machine learning, and a partner-provided 5G core controls the user plane. Only selected data goes on to the cloud. On a loop, a robot hands over from radio 1 to radio 2 without losing its session, and the SAS moves the radios to another channel. DEVICESAMRsmobile robotsCamerasinspectionSensorsvibrationRANRadio 1gNB · CBSDRadio 2gNB · CBSDPLANT EDGEUPFlocal breakoutEdge / MECvision + ML5G corepartner-providedCloudtraining · BISASspectrum grantsgrant + heartbeatincumbent: move channel5G handoverCBRS 3.55–3.7 GHz · NR band n48GAA + PAL tiers47 CFR Part 96Partner-provided 5G core · local breakoutControl and vision stay on site

Robots that stop dropping offline

Weekly connectivity stoppages of the autonomous mobile robots (AMRs) in one plant, before and after moving the floor from Wi-Fi to a private 5G network on CBRS spectrum. Robots now hand over between radio cells without losing their session; about 30 operator hours a week that went into recovering stuck robots are freed. Illustrative case figures.

Robots that stop dropping offlineTwo bars of weekly AMR connectivity stoppages. Before, on Wi-Fi with 212 access points: 41. After, on private 5G with 18 radio units: 2. About 30 operator hours a week are freed.AMR connectivity stoppages per week01020304041Before: Wi-Fi212 access points to maintain2After: private 5G18 radio units95% fewerabout 30 operator hoursa week freed

Separate by region and by business unit

Each business unit lives in its own VRF and VLAN in every region, so a problem in retail cannot reach finance. Traffic between units has to pass a firewall that denies by default and allows only what is written down.

Separate by region and by business unitA grid with three regions, Americas, EMEA and APAC, and three business units, Finance, Retail and R&D. Each cell is a separate VRF with its own VLAN and VNI. Each business unit has one overlay running across its three regional cells, shown as a row. On the right a firewall zone enforces a zero-trust policy that denies by default. A red packet from Retail trying to reach Finance is blocked at the firewall. A teal packet from R&D to the shared DNS and identity services is allowed. AMERICASEMEAAPACFinanceVRF fin · VLAN 110VNI 10110VRF fin · VLAN 110VNI 10110VRF fin · VLAN 110VNI 10110RetailVRF retail · VLAN 120VNI 10120VRF retail · VLAN 120VNI 10120VRF retail · VLAN 120VNI 10120R&DVRF rnd · VLAN 130VNI 10130VRF rnd · VLAN 130VNI 10130VRF rnd · VLAN 130VNI 10130Firewallzoneszero trustdeny bydefaultSharedDNS · IdPdenyallowVRF · L3 isolationVLAN to VNI · L2Default-deny policyEVPN-VXLAN fabricWireGuard + IPsec WANLogs to one SIEM

Roaming without dropping the call

Time from leaving one access point to the first data frame on the next, split by phase. A full WPA2/WPA3‑Enterprise re-authentication repeats the 802.1X exchange; 802.11r (Fast BSS Transition) reuses cached keys, 802.11k (neighbour reports) removes the blind scan, and 802.11v (BSS transition management) lets the network steer the client. Illustrative figures.

Roaming without dropping the callStacked horizontal bars of handoff time in milliseconds. Full re-authentication 580: scan 180, authentication and association 10, 802.1X 350, four-way handshake 40. PMK caching 230. 802.11r only 200. 802.11r with k and v 40, under the 50 millisecond voice target.Handoff time by roaming method (ms)Channel scanAuth + association802.1X / EAP4-way handshake0100200300400500600ms50 ms: a voice call does not noticeFull re-authenticationno roaming aids580 msPMK caching / OKCkeys reused, still scans230 ms802.11r onlyfast transition, still scans200 ms802.11r + k + vtargeted scan, fast transition40 msIllustrative: scan 20 to 250 ms depending on channel count; EAP depends on the RADIUS round trip.

Frequently asked questions

Direct answers to the questions we hear most. Something else on your mind?

Send us a message
Why use private 5G on CBRS instead of better Wi-Fi?

Wi-Fi is a good fit for offices and many factories. Private 5G on CBRS is built for mobility and for managed quality of service, so robots can move between radio cells without dropping their session and traffic classes get guaranteed treatment. Many plants run both, each where it fits. We survey the plant before recommending either.

What is CBRS and does the plant need a license?

CBRS is the Citizens Broadband Radio Service, the 3.55 to 3.7 GHz band governed by 47 CFR Part 96. A Spectrum Access System coordinates users. General Authorized Access spectrum needs no spectrum license, while Priority Access Licenses were sold at auction by county. Which option fits depends on your location, so we check the local picture first.

Does the network keep working if the internet link fails?

Yes, for the functions designed to. Local breakout and an on-site edge rack keep robot fleet management and vision inference running without the internet. Cloud reporting resumes when the link returns. We test this by pulling the uplink during commissioning and again in scheduled drills.

How do you keep production and corporate traffic separate?

Production devices get their own SIM or eSIM identities and their own network zones, apart from corporate Wi-Fi. Flows to business systems and the cloud pass through controlled, logged paths. Each device is tied to an inventory record and can be revoked in seconds, which supports the plant segmentation requirement.

Do you know if your company is safe?

Speak with a security engineer today. The first assessment call is free and confidential.

CallFree assessment