| WAN | 1 x WAN port 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
|---|
| LAN | 3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
|---|
| Routing | Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy based routing |
|---|
| Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake On Lan (WOL) |
|---|
| VoIP passthrough support | H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
|---|
| Connection monitoring | Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection |
|---|
| Firewall | Port forward, traffic rules, custom rules |
|---|
| DHCP | Static and dynamic IP allocation, DHCP Relay |
|---|
| QoS / Smart Queue Management (SQM) | Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
|---|
| DDNS | Supported >25 service providers, others can be configured manually |
|---|
| Network backup | VRRP, Wired options, each of which can be used as an automatic Failover |
|---|
| Load balancing | Balance Internet traffic over multiple WAN connections |
|---|
| SSHFS | Possibility to mount remote file system via SSH protocol |
|---|
| Authentication | Pre-shared key, digital certificates, X.509 certificates, TACACS+, Radius, IP & Login attempts block |
|---|
| Firewall | Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T |
|---|
| Attack prevention | DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
|---|
| VLAN | Port and tag-based VLAN separation |
|---|
| WEB filter | Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only |
|---|
| Access control | Flexible access control of TCP, UDP, ICMP packets, MAC address filter |
|---|
| OpenVPN | Multiple clients and a server can run simultaneously, 27 encryption methods |
|---|
| OpenVPN Encryption | DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192,BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256 |
|---|
| IPsec | IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16) |
|---|
| GRE | GRE tunnel, GRE tunnel over IPsec support |
|---|
| PPTP, L2TP | Client/Server instances can run simultaneously, L2TPv3, L2TP over IPsec support |
|---|
| Stunnel | Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code |
|---|
| DMVPN | Method of building scalable IPsec VPNs |
|---|
| SSTP | SSTP client instance support |
|---|
| ZeroTier | ZeroTier VPN client support |
|---|
| WireGuard | WireGuard VPN client and server support |
|---|
| Tinc | Tinc offers encryption, authentication and compression in it's tunnels. Client and server support. |
|---|
| ID range | Respond to one ID in range [1;255] or any |
|---|
| Allow Remote Access | Allow access through WAN |
|---|
| Custom registers | MODBUS TCP custom register block requests, which read/write to a file inside the router, and can be used to extend MODBUS TCP Slave functionality |
|---|
| Supported functions | 01, 02, 03, 04, 05, 06, 15, 16 |
|---|
| Supported data formats | 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC) |
|---|
| Protocol | HTTP(S), MQTT, Azure MQTT, Kinesis |
|---|
| MQTT Gateway | Allows sending commands and receiving data from MODBUS Master through MQTT broker |
|---|
| Supported modes | TCP Master, DNP3 Outstation |
|---|
| WEB UI | HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log |
|---|
| FOTA | Firmware update from server, automatic notification |
|---|
| SSH | SSH (v1, v2) |
|---|
| TR-069 | OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem |
|---|
| MQTT | MQTT Broker, MQTT publisher |
|---|
| SNMP | SNMP (v1, v2, v3), SNMP Trap |
|---|
| JSON-RPC | Management API over HTTP/HTTPS |
|---|
| MODBUS | MODBUS TCP status/control |
|---|
| RMS | Teltonika Remote Management System (RMS) |
|---|
| Cloud of Things | Allows monitoring of: Device data, Mobile data, Network info, Availability |
|---|
| ThingWorx | Allows monitoring of: WAN Type, WAN IP |
|---|
| Cumulocity | Allows monitoring of: Device Model, Revision and Serial Number, WAN Type and IP |
|---|
| Azure IoT Hub | Can send device IP, Number of bytes send/received, Temperature, PIN count to Azure IoT Hub server |
|---|
| CPU | Quad-core ARM Cortex A7, 717 MHz |
|---|
| RAM | 256 MB, DDR3 |
|---|
| FLASH storage | 256 MB, SPI Flash |
|---|
| WEB UI | Update FW from file, check FW on server, configuration profiles, configuration backup |
|---|
| FOTA | Update FW |
|---|
| RMS | Update FW/configuration for multiple devices at once |
|---|
| Keep settings | Update FW without losing current configuration |
|---|
| Operating system | RutOS (OpenWrt based Linux OS) |
|---|
| Supported languages | Busybox shell, Lua, C, C++ |
|---|
| Development tools | SDK package with build environment provided |
|---|
| Data rate | USB 2.0 |
|---|
| Applications | Samba share, USB-to-serial |
|---|
| External devices | Possibility to connect external HDD, flash drive, additional modem, printer, USB-serial adapter |
|---|
| Storage formats | FAT, FAT32, exFAT, NTFS (read-only), ext2, ext3, ext4 |
|---|
| Input | 1 x Digital Input, 0 - 6 V detected as logic low, 8 - 30 V detected as logic high |
|---|
| Output | 1 x Digital Output, Open collector output, max output 30 V, 300 mA |
|---|
| Events | Email, RMS |
|---|
| I/O juggler | Allows to set certain I/O conditions to initiate event |
|---|
| Connector | 4-pin industrial DC power socket |
|---|
| Input voltage range | 9 - 50 VDC, reverse polarity protection, voltage surge/transient protection |
|---|
| PoE (passive) | Possibility to power up through LAN1 port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards, Mode B, 9 - 30 VDC |
|---|
| Power consumption | 6 W Max |
|---|
| Ethernet | 4 x RJ45 ports, 10/100/1000 Mbps |
|---|
| I/O’s | 1 x Digital Input, 1 x Digital Output on 4-pin power connector |
|---|
| Status LEDs | 8 x LAN status LEDs, 1 x Power LED |
|---|
| Power | 1 x 4-pin power connector |
|---|
| USB | 1 x USB A port for external devices |
|---|
| Reset | Reboot/User default reset/Factory reset button |
|---|
| Other | 1 x Grounding screw |
|---|
| Casing material | Aluminum housing |
|---|
| Dimensions (W x H x D) | 115 x 32.2 x 95.2 mm |
|---|
| Weight | 345 g |
|---|
| Mounting options | DIN rail, flat surface placement |
|---|
| Operating temperature | -40 °C to 75 °C |
|---|
| Operating humidity | 10% to 90% non-condensing |
|---|
| Ingress Protection Rating | IP30 |
|---|
| Regulatory | CE, RoHS, REACH |
|---|
| Standards | EN 55032:2015, EN 55035:2017 |
|---|
| ESD | EN 61000-4-2:2009 |
|---|
| RS | EN 61000-4-3:2006 + A1:2008 + A2:2010 |
|---|
| EFT | EN 61000-4-4:2012 |
|---|
| Surge protection | EN 61000-4-5:2014 |
|---|
| CS | EN 61000-4-6:2014 |
|---|
| DIP | EN 61000-4-11:2004 |
|---|
| Standards | IEC 62368-1:2014 EN 62368-1:2014+A11:2017 |
|---|
