| Mobile |
| Mobile module | 4G LTE up to 150 DL / 50 UL Mbps; 3G up to 21 DL / 5.76 UL Mbps; 2G up to 236.8 DL / 236.8 UL Kbps |
| 3GPP Release | Release 9 |
| SIM switch | 2 SIM cards; auto-switch on weak signal, data limit, SMS limit, roaming, no network, network denied,
data connection fail, SIM idle protection |
| Status | IMSI, ICCID, operator, operator state, data connection state, network type, bandwidth, connected band,
RSSI, SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, MNC |
| SMS | SMS status, SMS configuration, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS,
SMS autoreply, SMPP |
| USSD | Supports sending and reading Unstructured Supplementary Service Data (USSD) messages |
| Block / Allow list | Operator block/allow list (by country or individual operators) |
| Band management | Band lock; used band status display |
| SIM PIN code management | Set, change or disable SIM PIN |
| APN | Auto APN |
| Bridge | Direct connection (bridge) between mobile ISP and LAN device |
| Passthrough | Router assigns its mobile WAN IP address to another device on LAN |
| Wireless |
| Wireless mode | 802.11b/g/n (Wi-Fi 4); Access Point (AP), Station (STA) |
| Wi-Fi security | WPA2-Enterprise (PEAP), WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP,
auto-cipher modes, client separation, EAP-TLS with PKCS#12, disable auto-reconnect,
802.11w Protected Management Frames (PMF) |
| SSID / ESSID | SSID stealth (hide SSID) and MAC-based access control |
| Wi-Fi users | Up to 100 simultaneous connections |
| Wireless connectivity features | Wireless mesh (802.11s), fast roaming (802.11r), Radio Resource Measurement (802.11k),
BSS Transition Management (802.11v), client isolation, Hide SSID, WMM |
| Wireless MAC filter | Allowlist, blocklist |
| Wireless QR code generator | Users join the network by scanning a QR code without typing credentials |
| TravelMate | Forwards Wi-Fi hotspot landing page to a subsequent connected device |
| Ethernet |
| LAN | 2 × ETH ports (can be configured as WAN), 10/100 Mbps, IEEE 802.3 / 802.3u / 802.3az, auto MDI/MDIX |
| Network |
| Routing | Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing |
| Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE,
UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake on LAN (WOL), VXLAN |
| VoIP passthrough support | H.323 and SIP-ALG NAT helpers for correct VoIP routing |
| Connection monitoring | Ping Reboot, Wget Reboot, periodic reboot, LCP and ICMP link inspection |
| Firewall | Port forward, traffic rules, custom rules, TTL target customisation |
| Firewall status page | View firewall statistics, rules and rule counters |
| Port management | View ports, enable/disable, auto-config on/off, change link speed |
| Network topology | Visual representation of connected devices and links |
| DHCP | Static and dynamic IP allocation, DHCP relay, server configuration and status, static leases with MAC wildcards |
| QoS / Smart Queue Management (SQM) | Traffic priority by source/destination, service, protocol or port; WMM, 802.11e |
| DDNS | >77 DDNS providers supported; manual configuration for others |
| DNS over HTTPS | DNS-over-HTTPS proxy for secure DNS resolution |
| Network backup | VRRP and wired options, each usable for automatic failover |
| Hotspot | Captive portal, internal/external RADIUS, RADIUS MAC auth, SMS auth, SSO, internal/external landing page,
walled garden, user scripts, URL parameters, user groups, per-user/group limits, user management,
9 default themes plus upload/download custom themes |
| SSHFS | Mount remote file system via SSH |
| Traffic management | Real-time monitoring, wireless signal charts, traffic usage history |
| Security |
| Authentication | Pre-shared key, digital certificates, X.509, TACACS+, internal & external RADIUS,
IP and login attempt blocking, time-based login blocking, built-in random password generator |
| Firewall | Preconfigured rules via WebUI; unlimited rules via CLI; DMZ, NAT, NAT-T, NAT64 |
| Attack prevention | DDoS protection (SYN flood, SSH/HTTP/HTTPS attack prevention), port-scan protection
(SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scans) |
| VLAN | Port- and tag-based VLAN separation |
| Mobile quota control | Mobile data limit with custom period, start time, warning threshold and phone number |
| Web filter | Blacklist (block sites) and whitelist (allow only specific sites) |
| Access control | Flexible access control for SSH, Web interface, CLI and Telnet |
| Certificate Manager | Create CA, server, client, Let’s Encrypt and SCEP certificates |
| 802.1x | Port-based network access control server |
| VPN |
| OpenVPN | Multiple clients and server simultaneously; 27 encryption methods |
| OpenVPN encryption | DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192,
BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64,
AES-128-CBC/CFB/CFB1/CFB8/OFB/GCM, AES-192-CBC/CFB/CFB1/CFB8/OFB/GCM,
AES-256-CBC/CFB/CFB1/CFB8/OFB/GCM |
| IPsec | XFRM, IKEv1, IKEv2; encryption: 3DES, DES, AES128/192/256 and AES-GCM modes
(AES128GCM8/12/16, AES192GCM8/12/16, AES256GCM8/12/16) |
| GRE | GRE tunnel; GRE over IPsec support |
| PPTP, L2TP | Client and Server instances simultaneously; L2TPv3; L2TP over IPsec |
| Stunnel | Adds TLS encryption to existing clients/servers without code changes |
| DMVPN | Scalable IPsec VPN, Phase 2 & 3, dual-hub support |
| SSTP | SSTP client instance support |
| ZeroTier | ZeroTier VPN client support |
| WireGuard | WireGuard VPN client and server support |
| Tinc | Encrypted, authenticated, compressed tunnels; client & server |
| Industrial Protocols & IoT Data |
| OPC UA | Client and Server; TCP |
| MQTT Gateway | Modbus MQTT Gateway; send commands and receive MODBUS data via MQTT broker |
| MODBUS | Server and Client; TCP; custom register block requests; supports 8-bit/16-bit/32-bit INT/UINT,
float, HEX, ASCII with multiple endian options |
| Data to Server | Protocols: HTTP(S), MQTT, Azure MQTT. Extract parameters from multiple sources and send to a single server.
Custom LUA scripting supported. |
| DNP3 | Station and Outstation; TCP |
| DLMS / COSEM | DLMS client; standard protocol for utility meter data exchange; TCP |
| API | Teltonika Networks Web API (beta) – configurable endpoints to retrieve or change data |
| Monitoring & Management |
| Web UI | HTTP/HTTPS, status, configuration, firmware update, CLI, troubleshooting, event logs,
system log, kernel log, Internet status, firmware-update notifications |
| FOTA | Firmware update from server with automatic notification |
| SSH | SSH (v1, v2) |
| Email | Email status alerts for various services |
| SMS | SMS status, SMS configuration |
| Call | Reboot, status, mobile data on/off, output on/off, answer/hang-up with timer |
| TR-069 | OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly Tech, AVSystem |
| MQTT | MQTT Broker and MQTT publisher |
| SNMP | SNMP v1/v2/v3, SNMP Trap, brute-force protection |
| JSON-RPC | Management API over HTTP/HTTPS |
| RMS | Teltonika Remote Management System (RMS) support |
| IoT Platforms |
| ThingWorx | Monitor WAN type/IP, mobile operator name, signal strength, mobile network type |
| Cumulocity / Cloud of Things | Monitor device model, revision, serial, WAN type/IP, mobile cell ID, ICCID, IMEI, connection type,
operator, signal strength; includes reboot and firmware upgrade actions |
| Azure IoT Hub | Data to Server integration; Direct Methods to call RutOS API; Plug and Play with Device Provisioning Service
for zero-touch provisioning |
| AWS IoT Core | Utility to interact with AWS IoT Core; Jobs support to call device API via AWS Jobs |
| System Characteristics & Firmware |
| CPU | Mediatek, 580 MHz, MIPS 24KEc |
| RAM | 128 MB |
| Flash storage | 16 MB |
| Firmware via Web UI | Update FW from file or server, configuration profiles, configuration backup |
| FOTA | Update firmware remotely |
| RMS firmware/config | Update firmware and configuration for multiple devices at once |
| Keep settings | Firmware update without losing current configuration |
| Factory reset | Full factory reset restores all system settings (IP, PIN, user data) to defaults |
| Operating system | RutOS (OpenWrt-based Linux OS) |
| Supported languages / tools | Busybox shell, Lua, C, C++, Python; Java via Package Manager; SDK build environment |
| GPL customisation | Create custom firmware and web UI (branding, colours, logos, etc.) |
| Package Manager | Install additional software packages on the device |
| Power & PoE |
| PoE In | 1 × PoE In; 802.3af/at |
| PoE Out | 1 × PoE Out; 802.3af Alternative B |
| PoE max power | 15 W max per port (PSU-dependent) |
| Power connector | RJ45 socket (PoE) |
| Input voltage range | 42.5–57.0 VDC, reverse-polarity and surge/transient protection |
| Input voltage for PoE | 42.5–57.0 VDC, reverse-polarity and surge/transient protection |
| Power consumption | Idle: < 2.5 W / Max: < 6 W / PoE max: < 21 W |
| Physical Interfaces |
| Ethernet | 2 × RJ45 ports, 10/100 Mbps |
| Status LEDs | 3 × mobile connection type, 3 × mobile signal strength, 4 × ETH status LEDs |
| SIM | 2 × SIM slots (Mini SIM – 2FF), 1.8 V / 3 V |
| Power interface | RJ45, PoE In, 42.5 – 57.0 VDC |
| Antennas | 2 × internal antennas |
| Antenna specs | 2 × 698–960 / 1710–2690 MHz, 50 Ω, VSWR < 3, gain < 4.5 dBi, omnidirectional |
| Reset | Reboot / User default reset / Factory reset button |
| Physical Specification |
| Casing material | Plastic (PC+ASA) |
| Dimensions (W × H × D) | 110 × 49.30 × 235 mm |
| Weight | 315 g |
| Mounting options | Mounting bracket for vertical flat surface or pole mounting |
| Operating Environment |
| Operating temperature | -40 °C to 75 °C |
| Operating humidity | 10% to 90% non-condensing |
| Ingress Protection rating | IP55 |
| Regulatory & Type Approvals |
| Regulatory | CE, UKCA, CB, RCM, WEEE, EAC, UCRF |
There are no reviews yet.