INDUSTRIAL WIRELESS ACCESS POINT

The DAP140 is an industrial wireless access point from Teltonika with passive PoE input that improves Wi-Fi coverage and performance in industrial environments. Equipped with Wi-Fi 4 with Wi-Fi Mesh and Fast Roaming as well as two RJ45 ports and support for up to 50 simultaneous connections, this wireless access point is an essential part of maintaining a reliable connection. An integrated DIN rail mount, a 3-pin power connector and an industrial-grade aluminium housing make the DAP140 the ideal access point for industrial applications.

Wireless
– Wireless mode: IEEE 802.11b/g/n (Wi-Fi 4), Access Point (AP), Client (STA), Mesh (802.11s), Multi AP
– Wi-Fi security: WPA-PSK, WPA2-PSK, WPA3-SAE, WPA-EAP, OWE, WPA2-EAP, WPA3-EAP
– SSID/ESSID: SSID stealth mode and access control based on MAC address
– Wi-Fi users: Up to 50 simultaneous connections
– Wireless mesh/roaming: Fast roaming (802.11r), radio resource metering (802.11k), BSS transition management (802.11v), client isolation, SSID hiding, WMM
– Wireless MAC filter: Allowlist, Blocklist
– Wireless QR code generator: Once scanned, a user automatically enters your network without having to enter any login information
– TravelMate: Forwarding of the Wi-Fi hotspot landing page to a subsequently connected device

Ethernet
– LAN: 2 x LAN ports, 10/100 Mbit/s, compliance with standards IEEE 802.3, IEEE 802.3u, 802.3az, supports Auto-MDI/MDIX-Crossover

Network
– Routing: Static routing, dynamic routing (RIP, OSPF, EIGRP, BGP, NHRP), policy-based routing, routing rules
– Network protocols: TCP, UDP, IPv4, IPv6, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SNMP, MQTT, Wake On Lan (WOL)
– VoIP passthrough support: H.323- and SIP-alg protocol NAT helpers that enable the correct routing of VoIP packets
– Connection monitoring: Ping reboot, Wget reboot, periodic reboot, LCP and ICMP for link inspection
– Firewall: Port forwarding, traffic rules, user-defined rules
– Firewall status page: Display all firewall statistics, rules and rule counters
– Ports management: display device ports, activate and deactivate individual ports, switch autoconfiguration on and off, change transmission speed, etc.
– Network topology: Visual representation of your network showing which devices are connected to which other devices
– DHCP: Static and dynamic IP assignment, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
– QoS / Smart Queue Management (SQM): Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
– DDNS: Supports >25 service providers, others can be configured manually
– DNS over HTTPS: DNS over HTTPS proxy enables secure DNS resolution by forwarding DNS requests over HTTPS
– Network backup: Wi-Fi WAN, VRRP, wired options, any of which can be used as automatic failover
– Load balancing: Balancing Internet traffic over multiple WAN connections
– Hotspot 2.0: Hotspot 2.0 is a Wi-Fi standard that enables seamless, secure and automatic connection to trusted wireless networks
– SSHFS: Ability to mount a remote file system via the SSH protocol
– VRF support: Initial support for virtual routing and forwarding (VRF)
– Traffic management: Real-time monitoring, wireless signal graphs, traffic usage history

Security
– Authentication
Pre-shared key, digital certificates, X.509 certificates, TACACS+, internal and external RADIUS user authentication, IP and blocking of login attempts, time-based login blocking, built-in random password generator
– Firewall
Preconfigured firewall rules can be activated via WebUI, Unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
– Attack prevention
DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
– VLAN: Port and tag-based VLAN separation
– WEB filter: Blacklist to block unwanted websites, whitelist to specify only permitted websites
– Access control: Flexible access control of SSH, web interface, CLI and Telnet
– SSL certificate creation: Let’s Encrypt and SCEP certificate creation methods
– 802.1x: Port-based network access control server

VPN
– OpenVPN; Multiple clients and a server can run simultaneously, 27 encryption methods
– OpenVPN encryption
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
– IPsec
XFRM, IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
– GRE: GRE tunnels, GRE tunnels via IPsec support
– PPTP, L2TP: Client/server instances can run simultaneously, L2TPv3, L2TP via IPsec support
– Stunnel: Proxy for adding TLS encryption functions to existing clients and servers without changes to the programme code
– DMVPN: Method for building scalable IPsec VPNs, support for phase 2 and phase 3 as well as dual hub
– SSTP: Support for SSTP client instances
– ZeroTier: ZeroTier VPN client support
– WireGuard: WireGuard VPN client and server support
– Tinc: Tinc provides encryption, authentication and compression in its tunnels. Client and server support.
– Tailscale: Tailscale offers speed, stability and simplicity over traditional VPNs. Encrypted point-to-point connections using the WireGuard open source protocol

OPC UA
– Supported modes: Client, Server
– Supported connection types: TCP
– MODBUS: Supported mode
– Server, Client: Supported connection types

TCP
– User defined registers: MODBUS TCP user defined register block requests that can read/write a file within the router and be used to extend MODBUS TCP client functionality
– Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII
DATA TO SERVER: Protocol HTTP(S), MQTT, Azure MQTT:
-Data to server: Extract parameters from multiple sources and different protocols and send all parameters to a single server; custom LUA scripting so that scripts can use the router’s data-to-server function

MQTTGateway
– Modbus MQTT Gateway: Enables sending commands and receiving data from MODBUS servers via MQTT broker

DNP3
– Supported modes: station, outstation
– Supported connection: TCP

DLMS
– DLMS support: DLMS – Standard protocol for exchanging meter data
– Supported modes: client
– Supported connection types: TCP
– COSEM: Enables scanning of meter COSEM objects for automatic detection and configuration

Monitoring & Management
– WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshooting, multiple event log servers, availability notifications for firmware updates, event log, system log, kernel log, internet status
– FOTA: Firmware update from server, automatic notification
– SSH: SSH (v1, v2)
– Email: Email notification of the status of various services
– TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
– MQTT: MQTT broker, MQTT publisher
– SNMP: SNMP (v1, v2, v3), SNMP trap, protection against brute force
– JSON-RPC: Management API via HTTP/HTTPS
– MODBUS: MODBUS TCP status/control
– RMS: Teltonika Remote Management System (RMS)

IoT platforms
– ThingWorx: Utility for interacting with the Thingworx cloud platform
– Cumulocity – Cloud of Things: Enables monitoring of: Device model, revision and serial number, WAN type and IP. Features reboot and firmware upgrade actions
– Azure IoT Hub: Can be configured with Data to Server to send all available parameters to the cloud. Supports direct methods that allow RutOS API calls to be executed on the IoT Hub. Also features plug-and-play integration with the Device Provisioning Service, which enables zero-touch device provisioning for IoT Hubs
– AWS IoT Core: Utility to interact with the AWS cloud platform. Support of jobs: Calling the device API via the AWS Jobs functionality

System features
– CPU: Mediatek, 580 MHz, MIPS 24KEc
– RAM: 128 MB, DDR2
– FLASH memory: 16 MB serial NOR flash

Firmware / configuration
– WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup
– FOTA: Update FW
– RMS: Update FW/configuration for multiple devices at once
– Maintain settings: Update FW without losing the current configuration
– Reset factory settings: A full factory reset restores all system settings, including IP address, PIN and user data, to the manufacturer’s default configuration

FIRMWARECUSTOMISATION
– Operating system: RutOS (OpenWrt based Linux OS)
– Supported languages: Busybox shell (ash), Lua 5.1, C, C++
– Development tools: SDK package with build environment is provided
– GPL customisation: You can create your own custom firmware and website application by changing colours, logos and other elements in our firmware to suit your needs or those of your customers
– Package Manager: Package Manager is a service that allows additional software to be installed on the device

Power
– Connection: 3-pin pluggable terminal block
– Input voltage range: 9-30 VDC, reverse polarity protection, overvoltage protection >31 VDC 10us max
– PoE (passive): Passive PoE via free pairs. Power supply option via LAN2 port, not compatible with IEEE802.3af, 802.3at and 802.3bt, mode B, 9 – 30 VDC
– Power consumption: Idle: < 1 W / Max: < 2 W

Physical interfaces
– Ethernet: 2 x RJ45 ports, 10/100 Mbps
– Status LEDs: 2 x LAN type LED, 1 x power LED
– Power supply: 1 x 3-pin power connector
– Antennas: 1 x RP-SMA for Wi-Fi
– Reset: restart/user default reset/factory reset button
– Miscellaneous: 1 x grounding screw

Physical specification
– Housing material: aluminium housing
– Dimensions (W x H x D): 113.10 x 25 x 68.6 mm
– Weight: 142.3 g
– Mounting options: Integrated DIN rail bracket; wall mounting and flat surface (additional kit required)

Operating environment
– Operating temperature: -40 °C to 75 °C
– Operating humidity: 10 % to 90 % non-condensing
– Protection class
– IP30: Approvals and type approvals
– Approvals: CE, UKCA, CB