No, it is not possible to manually assign a global IP address directly to an IoT SIM. However, Soracom provides alternative services to achieve similar functionality depending on whether you need to identify outbound traffic or access the device remotely.
I want to identify my IoT SIM devices by their IP address
In scenarios where you need to identify traffic coming from your devices—such as configuring a server firewall to allow connections from a specific IP address—you can use a Virtual Private Gateway (VPG).
While you cannot assign a static public IP to an individual IoT SIM, you can create a VPG in your account and enable the Fixed Global IP Address option.
- How it works: When the Fixed Global IP Address option is enabled, your VPG is assigned two dedicated global IP addresses. You then attach your IoT SIMs to this VPG (via a SIM Group). Once attached, all traffic from those SIMs will exit to the internet using one of the VPG's two assigned IP addresses.
- Security: These IP addresses are unique to your VPG and are not shared with other Soracom accounts, ensuring that only your authorized devices are using the source IP address.
- Setup: You can enable the Fixed Global IP Address option directly through the User Console or via the API. Please note that additional fees apply for VPGs and the Fixed Global IP Address option.
I want to remotely access my IoT SIM devices using an IP address
If your goal is to access your device remotely (e.g., via SSH or HTTP) using an IP address, assigning a public IP directly to the SIM is not supported. Public IP addresses on cellular networks are typically dynamic and change frequently, making them unreliable for direct access.
Instead, Soracom recommends one of the following:
-
For On-Demand remote access, Soracom recommends Soracom Napter. Soracom Napter is an on-demand networking service for devices using Soracom Air for Cellular SIMs and Soracom Arc, which enables you to quickly and securely access your devices remotely. Napter allows you to perform remote maintenance, troubleshooting, or other typical remote access tasks, without setting up any relay servers or installing agent software on the device.
-
For persistent remote access from a single device to your SIM cards, Soracom recommends a combination of Type-E Virtual Private Gateway + Soracom Arc + Soracom Gate. This will allow you to create a secure WireGuard tunnel between your machine and the Soracom backend for communications.
3 For persistnet remote access from multiple devices to your SIM cards, Soracom recommends the use of a Type-F2 Virtual Private Gateway. VPG Type F2 levereages AWS Transit Gateway to simplify remote device access between Soracom's backend and your environment.