Wireless
– Wireless mode: IEEE 802.11b/g/n (Wi-Fi 4), Access Point (AP), Client (STA), Mesh (802.11s), Multi AP
– Wi-Fi security: WPA-PSK, WPA2-PSK, WPA3-SAE, WPA-EAP, OWE, WPA2-EAP, WPA3-EAP
– SSID/ESSID: ESSID stealth mode
– Wi-Fi user: Up to 50 simultaneous connections
– Wireless connectivity features: Wireless Mesh (802.11s), Fast Roaming (802.11r), Relayd, BSS Transition Management (802.11v), Radio Resource Metering (802.11k)
– Wireless MAC filter: Allowlist, Blocklist
– Wireless QR code generator: Once scanned, a user automatically enters your network without having to enter any login information
– TravelMate: Forwarding of the Wi-Fi hotspot landing page to a subsequently connected device

Ethernet
– LAN: 2 x LAN ports, 10/100 Mbit/s, compliance with the standards IEEE 802.3, IEEE 802.3u, 802.3az, supports Auto-MDI/MDIX-Crossover

Network
– Routing: Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing
– Network protocols: TCP, UDP, IPv4, IPv6, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SNMP, MQTT, Wake On Lan (WOL)
– VoIP passthrough support: H.323- and SIP-alg protocol NAT helpers that enable correct forwarding of VoIP packets
– Connection monitoring: Ping reboot, Wget reboot, periodic reboot, LCP and ICMP for link inspection
– Firewall: Port forwarding, traffic rules, user-defined rules
– Firewall status page: Display all firewall statistics, rules and rule counters
– Ports management: display device ports, enable and disable individual ports, enable or disable automatic configuration, change transmission speed, etc.
– Network topology: Visual representation of your network showing which devices are connected to which other devices
– DHCP: Static and dynamic IP assignment, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
– QoS / Smart Queue Management (SQM): Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
– DDNS: Supports >25 service providers, others can be configured manually
– DNS over HTTPS: DNS over HTTPS proxy enables secure DNS resolution by forwarding DNS requests over HTTPS
– Network backup: Wi-Fi WAN, VRRP, wired options, any of which can be used as automatic failover
– Load balancing: Balancing Internet traffic over multiple WAN connections
– Hotspot 2.0: Hotspot 2.0 is a Wi-Fi standard that enables seamless, secure and automatic connection to trusted wireless networks
– SSHFS: Ability to mount remote file systems via the SSH protocol
– VRF support: Initial support for virtual routing and forwarding (VRF)
– Traffic management: Real-time monitoring, wireless signal graphs, traffic usage history

Security
– Authentication: Pre-shared key, digital certificates, X.509-certificates, TACACS+, internal and external RADIUS user authentication, blocking of IP and login attempts, time-based login blocking, integrated random password generator
– Firewall: Preconfigured firewall rules can be activated via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
– Attack protection: DDOS protection (SYN flood protection, SSH attack protection, HTTP/HTTPS attack protection), port scan protection (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
– VLAN: Port and tag-based VLAN separation
– WEB filter: blacklist to block unwanted websites, whitelist to specify only allowed websites
– Access control: flexible access control of SSH, web interface, CLI and Telnet
– SSL certificate creation: Let’s Encrypt and SCEP certificate creation methods

VPN
– OpenVPN: multiple clients and a server can run simultaneously, 27 encryption methods
– OpenVPN encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
– IPsec: XFRM, IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
– GRE: GRE tunnels, GRE tunnels via IPsec support
– PPTP, L2TP: Client/server instances can run simultaneously, L2TPv3, L2TP via IPsec support
– Stunnel: Proxy for adding TLS encryption functions to existing clients and servers without changes to the programme code
– DMVPN: Method for building scalable IPsec VPNs, support for phase 2 and phase 3 as well as dual hub
– SSTP: Support for SSTP client instances
– ZeroTier: ZeroTier VPN client support
– WireGuard: WireGuard VPN client and server support
– Tinc: Tinc provides encryption, authentication and compression in its tunnels. Client and server support.
– Tailscale: Tailscale offers speed, stability and simplicity over traditional VPNs. Encrypted point-to-point connections using the WireGuard open source protocol

OPC UA
– Supported modes: Client, Server
– Supported connection types: TCP

MODBUS
– Supported modes: Server, Client
– Supported connection types: TCP, RTU (RS232)
– User-defined registers: MODBUS TCP user-defined register block requests that can read/write a file within the router and be used to extend MODBUS TCP client functionality
– Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII

DATATO SERVER
– Protocol: HTTP(S), MQTT, Azure MQTT
– Data to server: Extract parameters from multiple sources and different protocols and send all parameters to a single server; Custom LUA scripting so that scripts can use the router’s data-to-server function

MQTTGateway
– Modbus MQTT Gateway: Enables sending commands and receiving data from MODBUS servers via MQTT broker

DNP3
– Supported modes: station, outstation
– Supported connections: TCP, RTU(RS232)

DLMS
– DLMS support: DLMS – Standard protocol for the exchange of meter data
– Supported modes: Client
– Supported connection types: TCP, RTU(RS232)
– COSEM: Enables scanning of meter COSEM objects for automatic detection and configuration

Monitoring & Management
– WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshooting, multiple event log servers, availability notifications for firmware updates, event log, system log, kernel log, internet status
– FOTA: Firmware update from server, automatic notification
– SSH: SSH (v1, v2)
– TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
– MQTT: MQTT broker, MQTT publisher
– SNMP: SNMP (v1, v2, v3), SNMP trap, protection against brute force
– JSON-RPC: Management API via HTTP/HTTPS
– MODBUS: MODBUS TCP status/control
– RMS: Teltonika Remote Management System (RMS)

IoT platforms
– ThingWorx: Utility for interacting with the Thingworx cloud platform
– Cumulocity – Cloud of Things: Enables monitoring of: Device model, revision and serial number, WAN type and IP. Features reboot and firmware upgrade actions
– Azure IoT Hub: Can be configured with Data to Server to send all available parameters to the cloud. Supports direct methods that allow RutOS API calls to be executed on the IoT Hub. Also features plug-and-play integration with the Device Provisioning Service, which enables zero-touch device provisioning for IoT Hubs
– AWS IoT Core: Utility to interact with the AWS cloud platform. Support of jobs: Calling the device API via the AWS Jobs functionality

System features
– CPU: Mediatek, 580 MHz, MIPS 24KEc
– RAM: 128 MB, DDR2
– FLASH memory: 16 MB serial NOR flash

Firmware / configuration
– WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup
– FOTA: Update FW
– RMS: Update FW/configuration for multiple devices at once
– Maintain settings: Update FW without losing the current configuration
– Reset factory settings: A full factory reset restores all system settings, including IP address, PIN and user data, to the manufacturer’s default configuration

FIRMWARECUSTOMISATION
– Operating system: RutOS (OpenWrt based Linux OS)
– Supported languages: Busybox shell (ash), Lua 5.1, C, C++
– Development tools: SDK package with build environment is provided
– GPL customisation: You can create your own custom firmware and website application by changing colours, logos and other elements in our firmware to suit your needs or those of your customers
– Package Manager: Package Manager is a service that allows additional software to be installed on the device

Serial
– RS232: Terminal block connection: TX, RX, RTS, CTS
– Serial functions: Console, serial over IP, modem, MODBUS gateway, NTRIP client

Power supply
– Connection: 3-pin pluggable terminal block
– Input voltage range: 9-30 VDC, reverse polarity protection, overvoltage protection >31 VDC 10us max
– PoE (passive): Passive PoE via free pairs. Power supply option via LAN2 port, not compatible with IEEE802.3af, 802.3at and 802.3bt, mode B, 9 – 30 VDC
– Power consumption: Idle: < 1 W / Max: < 2 W

Physical interfaces
– Ethernet: 2 x RJ45 ports, 10/100 Mbps
– Status LEDs: 2 x LAN type LED, 1 x power LED
– Power: 1 x 3-pin power connector
– Antennas: 1 x RP-SMA for Wi-Fi
– RS232: 1 x DB9 socket
– Reset: restart/user default reset/factory reset button
– Miscellaneous: 1 x grounding screw

Physical specification
– Housing material: aluminium housing
– Dimensions (W x H x D): 113.10 x 25 x 68.6 mm
– Weight: 149.2 g
– Mounting options: Integrated DIN rail bracket; wall mounting and flat surface (additional kit required)

Operating environment
– Operating temperature: -40 °C to 75 °C
– Operating humidity: 10 % to 90 % non-condensing
– Protection class: IP30

Approvals and type approvals
– Approvals: CE, UKCA, CB