Modbus RTU to Modbus TCP conversion is performed by a dedicated fieldbus gateway that translates Modbus RTU/ASCII frames carried on RS-232 or RS-485 serial links into Modbus TCP packets (typically Modbus Application Protocol over TCP port 502) carried on 10/100 Mb Ethernet, allowing legacy serial devices to communicate with modern SCADA, HMI, and PLC masters without replacing either side of the network [S1][S2].
The most widely deployed gateway classes are single-port serial-to-Ethernet converters, multi-port protocol gateways with up to 16 or 32 serial nodes, and modular DIN-rail units with built-in alarm and data-mapping logic. Price points for a basic bi-directional converter start at roughly $49 (PUSR USR-TCP232-410s) [S3], and managed industrial gateways from RTA, Moxa, and Phoenix Contact land in the $400 to $1,035 band depending on serial-port count and certifications [S4][S7].
Function and Protocol Boundaries
A Modbus RTU to Modbus TCP protocol gateway sits on the IP network as a Modbus TCP client or server and proxies requests to a Modbus RTU master or slave on the serial side, encapsulating each RTU ADU inside a TCP transaction and re-adding the 7-byte MBAP header that replaces the RTU address/CRC fields [S1][S6].
The conversion is purely a transport-layer function: the Modbus Application Protocol (function codes 1–16, 43, etc.) is unchanged, so the same coil, holding-register, and input-register maps used in RTU appear 1:1 in TCP. Gateways from AutomationDirect, Moxa, Antaira, and RTA explicitly support both RTU master-to-TCP client and RTU slave-to-TCP server roles, and most handle ASCII as a configuration option alongside RTU [S2][S4][S5].
Typical serial-side physical interfaces are RS-232 (point-to-point, typically up to 15 m / 50 ft at 115.2 kb/s) and RS-485 (multi-drop 2-wire or 4-wire, commonly up to 32 unit loads, 1,200 m at reduced baud). Industrial gateway products also expose RS-422 (Phoenix Contact GW MODBUS TCP/RTU 1E/2DB9 ships with one RJ45 Ethernet port and dual DB9 serial ports, configurable for RS-232, RS-422, or RS-485) [S7], giving a single device the flexibility to bridge several older instruments with different electrical layers.
Selection Criteria: Port Count, Mode, and Certifications
Selection reduces to five hard criteria: serial port count, master/slave mode, Ethernet speed, power input, and hazardous-area / EMC certifications, in that order. Moxa's Modbus TCP gateway family, for example, is explicitly aimed at "configuration, troubleshooting, and conversion" of RTU/ASCII/TCP traffic with auto-detection of baud rate, parity, and stop bits [S1].
Port count is the most common decision point: a 1-port PUSR USR-TCP232-410s handles a single RS-232 or RS-485 drop at $49 with bi-directional conversion and edge-computing support [S3], while the RTA 460MSMRS at $896.72 to $1,035 (SKU 460MSMRS-NNA1-D) carries one RS-232/RS-485 port on a 5-pin screw terminal plus an Ethernet RJ45, with CE and UL listed and a 5-year hardware warranty [S4]. For plants migrating larger serial estates, multi-port gateways from Moxa (MGate series) and Antaira scale to 4, 8, 16, or 32 serial nodes per chassis [S1][S5].
Operating mode (master vs slave) and the direction of proxy are the next decision. RTA markets the 460MSMRS specifically to "easily connect a Modbus TCP/IP Client to a Modbus RTU Master" [S4], whereas Phoenix Contact's GW MODBUS TCP/RTU supports both serial client and serial server devices on the same hardware [S7]. Most gateways also expose configuration rules for up to 9 user accounts with access-tier separation, set-points for change-of-state and limit alarms, and unlimited firmware upgrades for the life of the unit (RTA 460 series) [S4].
Selection checklist (concrete, ranked by frequency of specification):
1. Serial electrical interface: RS-232 only, RS-485 only, or selectable RS-232/422/485 (Phoenix Contact GW MODBUS TCP/RTU, Antaira Modbus Gateway) [S5][S7].
2. Number of simultaneous TCP masters/slaves: 1, 4, 16, or 32 Modbus TCP connections per serial port, with independent polling timeouts.
3. Isolation: 2.5 kV or 3 kV serial/Ethernet/power isolation for plant-floor noise immunity (typical on Moxa MGate and Antaira industrial units) [S1][S5].
4. Operating temperature: 0 to 60 °C commercial, -40 to 75 °C industrial; conformal coating optional for condensing environments (Antaira) [S5].
5. Certifications: CE, UL, FCC, ATEX/IECEx zone 2, IEC 61850-3, EN 50155 (rail), Class I Div 2 (North America hazardous), DNV (marine) [S4][S5].
Comparison of Main Gateway Types

Three physical product classes cover the vast majority of plant-floor Modbus RTU/TCP bridge requirements. A line-by-line comparison on five decision criteria: [S5]
Single-port serial-to-Ethernet converter (e.g. PUSR USR-TCP232-410s, Phoenix Contact GW MODBUS TCP/RTU): low cost ($49 to roughly $300), 1 RS-232 or RS-485 port, 1 Ethernet port, 10/100 Mb, master or slave selectable, edge computing / scripting on higher-end units. Best fit: 1–5 instruments, lab benches, light-industrial retrofits, OEM skid integration [S3][S7].
Multi-port industrial protocol gateway (Moxa MGate, Antaira Modbus Gateway, RTA 460 series): mid to high cost ($400 to $1,500+), 2 to 32 serial ports, dual Ethernet or ring redundancy on top models, DIN-rail or panel mount, -40 to 75 °C, ATEX/IECEx options. Best fit: SCADA aggregation, substation RTU networks, water/wastewater lift stations [S1][S4][S5].
Cellular / routing protocol gateway (Cisco IR1101 with Modbus serial module, Robustel dual-SIM routers): adds LTE/5G uplink, IPsec VPN, and protocol translation in one box; used for remote tanks, pipelines, irrigation, and any site without fixed Ethernet. Sits one tier above the wired protocol gateway in capability and price [S6][S8].
On raw capability per dollar, the single-port converter wins. On ports-per-cubic-inch, the multi-port gateway wins. On connectivity-richness and remote-site support, the cellular gateway is the only option. For hazardous-area Class I Div 2 or ATEX zone 2 deployments, Moxa MGate, Antaira, and the higher-tier RTA products carry the relevant certifications out of the box [S1][S4][S5].
Typical Use Cases and Configuration Patterns
Brownfield SCADA migration is the dominant use case: a water utility replacing a leased line with Ethernet keeps existing RTU radios and flow meters wired to RS-485 trunks, and drops one multi-port Modbus gateway at each well site to expose the registers to the central SCADA over the cellular/Ethernet uplink. Moxa, RTA, and Phoenix Contact publish reference configurations of this shape [S1][S4][S7].
PLC-to-SCADA bridging is the second pattern. A Modicon M340 PLC with a Modbus RTU slave port and a Wonderware/Ignition SCADA expecting Modbus TCP masters are connected through a Moxa MGate or Antaira gateway in slave-to-server mode, often with a small register-mapping script to align word order and byte-swap conventions [S1][S5].
OEM skid integration is a third, where machine builders ship a panel with a Modbus RTU master (frequency drives, weigh scales, pressure transmitter clusters, flow meter banks) and need a single Ethernet drop to the plant network. A PUSR-class single-port converter or a Phoenix Contact GW MODBUS TCP/RTU at the panel boundary gives the skid an RJ45 uplink and keeps the OEM's serial wiring untouched [S3][S7].
Substation and rail signalling is the fourth. IEC 61850-3 and EN 50155 certified gateways (Antaira, Moxa MGate) are specified where the device must survive substation EMI and rail shock/vibration. The same gateways also expose DNP3, IEC 61850, or PROFINET on the IP side, so a single box can act as a multi-protocol front-end for a pressure sensor cluster or a tank gauging system [S5].
Limitations, Failure Modes, and Sourcing

Modbus RTU/TCP conversion does not magically improve latency or determinism. Each TCP request waits for an RTU transaction on the serial side, so a gateway polling 32 RTU slaves at 9600 baud sees a worst-case round trip in the multi-second range; 115.2 kb/s and reduced node counts are the standard mitigations. Industrial gateways specify response-timeout and inter-character-timeout values that must be tuned longer than the serial master's worst-case scan time, otherwise dropped frames masquerade as "gateway" faults [S4][S6].
Electrical-layer mis-specification is the most common field failure: RS-485 termination missing on long trunks, RS-422 used where RS-485 multi-drop was expected, and shared DC grounds between serial and Ethernet shields. Moxa, Antaira, and Phoenix Contact products expose switchable biasing, termination, and 2.5 kV to 3 kV isolation to address these exact faults [S1][S5][S7].
Security is the second failure mode. Modbus TCP on port 502 with no authentication is the legacy default, and gateways now ship with IP allow-lists, RADIUS/TACACS+, and IEC 62443 conformance (Moxa explicitly markets "Secure Remote Access" and "Network Security Appliance" alongside its protocol gateways) [S1]. Specifying a gateway without these features on a publicly reachable IP is a known plant-floor vulnerability.
For sourcing and standards, the Modbus Application Protocol Specification (Modbus Organization, current revision) and the Modbus Messaging on TCP/IP Implementation Guide (MBAP header, port 502) are the governing references. IEEE and IEC 61850-3 / EN 50155 apply to rail and substation deployments. Hazardous-area deployments pull ATEX 2014/34/EU (EU) or Class I Div 2 / Class I Zone 2 (North America) from the gateway datasheet. The 5-year hardware warranty on the RTA 460 series and the unlimited firmware upgrade commitment are also useful sourcing filters when comparing lifetime cost [S4].
For related reference reading, see our MCC spare and space unit sizing guide, which covers parallel selection logic for substation hardware provisions, and our MCC section width vs starter bucket count sizing reference, which addresses the same cabinet-pack density questions that come up when a Modbus gateway is mounted inside a motor-control lineup.
Also watch for IEEE 802.3cg Single-Pair Ethernet (10BASE-T1L) appearing as an option port on multi-protocol gateways, which would let a 1-wire SPE industrial valve actuator be bridged into Modbus TCP without a separate RS-485 trunk.