RUT901 - Industrial Mobile Router, 4G LTE (Cat 4), 3G, 2G

The RUT901 cellular router brings the best-in-class features of its predecessors, the RUT950 and RUT951, to the market. The device ensures high performance and provides automatic WAN failover to an available backup connection, ensuring network continuity and avoiding downtime.

Mobile phone

• Mobile module: 4G (LTE) - Cat 4 up to 150 Mbit/s, 3G - up to 42 Mbit/s, 2G - up to 236.8 Kbit/s
• 3GPP version: Version 9
• SIM switching: 2 SIM cards, automatic switching: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection failed, SIM idle protection

Status

• Signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, bytes sent/received, connected band, IMSI, ICCID
• SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, automatic SMS reply, SMPP
• USSD: Supports sending and reading of unstructured supplementary service data messages
• Black/white list: Operator black/white list
• Multiple PDNs: Ability to use different PDNs for multiple network accesses and services
• Band management: Band lock, status display of the band in use
• APN: Automatic APN
• Bridge: Direct connection (bridge) between mobile ISP and device in LAN
• Passthrough: Router assigns its mobile WAN IP address to another device on the LAN

Wireless

• Wireless mode: IEEE 802.11b/g/n, Access Point (AP), Station (STA)
• WLAN security: WPA-PSK/WPA2-PSK mixed mode, WPA2-PSK, WPA2-EAP, WPA2-EAP/WPA3-EAP mixed mode, WPA3-EAP, WPA2-PSK/WPA3-SAE mixed mode, WPA3-SAE, OWE ; AES-CCMP, TKIP, auto cipher modes, client separation
• SSID/ESSID: SSID stealth mode and access control based on MAC address
• WLAN users: Up to 100 simultaneous connections
• Wireless hotspot: Captive portal (hotspot), internal/external radius server, integrated customisable landing page

Ethernet

• WAN: 1 x WAN port 10/100 Mbps, compliant with IEEE 802.3 and IEEE 802.3u standards, supports Auto MDI/MDIX
• LAN: 3 x LAN ports, 10/100 Mbit/s, compliant with IEEE 802.3 and IEEE 802.3u standards, supports Auto MDI/MDIX

Network

• Routing: Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, NHRP)
• Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake On Lan (WOL)
• VoIP passthrough support: H.323 and SIP-Alg protocol NAT helpers that enable proper routing of VoIP packets
• Connection monitoring: ping restart, wget restart, periodic restart, LCP and ICMP for connection checking
• Firewall: port forwarding, traffic rules, custom rules
• DHCP: static and dynamic IP assignment, DHCP relay, relayd
• QoS / Smart Queue Management (SQM): Priority queueing of traffic by source/destination, service, protocol or port, WMM, 802.11e
• DDNS: Supports more than 25 service providers, others can be configured manually
• Network backup: WLAN WAN, mobile, VRRP, wired options, each can be used as automatic failover
• Load balancing: Distribute Internet traffic across multiple WAN links
• Hotspot: Captive portal (hotspot), internal/external radius server, SMS authorisation, internal/external target site, walled garden, user scripts, URL parameters, user groups, restrictions for individual users or groups, user management, 9 standard customisable themes
• SSHFS: possibility to mount the remote file system via SSH protocol (not available in the standard FW)

Security

• Authentication: Pre-shared key, digital certificates, X.509 certificates, TACACS+, Radius, IP and blocking of login attempts
• Firewall: Pre-configured firewall rules can be activated via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
• Attack prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
• VLAN: Port- and tag-based VLAN separation
• Mobile quota control: User-defined data limits for both SIM cards
• WEB filter: Blacklist to block unwanted websites, whitelist to specify only allowed websites
• Access control: Flexible access control of TCP, UDP, ICMP packets, MAC address filters

VPN

• OpenVPN: Several clients and a server can run simultaneously, 27 encryption methods
• OpenVPN encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2 -64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES- 192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256 -CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
• IPsec: IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM1 6, AES256GCM16)
• GRE: GRE tunnel, GRE tunnel over IPsec support
• PPTP, L2TP: Client/server instances can run simultaneously, L2TPv3, L2TP over IPsec support
• Stunnel: proxy designed to add TLS encryption capabilities to existing clients and servers without requiring changes to program code
• DMVPN: Method for building scalable IPsec VPNs
• SSTP: Support for SSTP client instances
• ZeroTier: ZeroTier VPN client support
• WireGuard: WireGuard VPN client and server support
• Tinc: Tinc provides encryption, authentication and compression in its tunnels. Client and server support

MODBUS TCP SLAVE

• ID range: Respond to an ID in the range [1;255] or any
• Allow remote access: Allow access via WAN
• Custom Registers: Block requests for custom MODBUS TCP registers that read/write a file in the router and can be used to extend MODBUS TCP slave functionality

MODBUS TCP MASTER

• Supported functions: 01, 02, 03, 04, 05, 06, 15, 16
• Supported data formats: 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit: Float, INT, UINT (ABCD (Big-Endian), DCBA (Little-Endian), CDAB, BADC)
• MODBUS DATA TO SERVER
• Protocol: HTTP(S), MQTT, Azure MQTT

MQTT Gateway

• MQTT Gateway: Enables sending of commands and receiving of data from the MODBUS Master via the MQTT Broker
• DNP3
• Supported modes: TCP master, DNP3 outstation
• Monitoring and management
• WEB-UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshooting, event log, system log, kernel log
• FOTA: Firmware update from server, automatic notification
• SSH: SSH (v1, v2)
• SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET
• Call: Restart, status, mobile data on/off, outgoing on/off, answer/hang up with timer, WLAN on/off
• TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
• MQTT: MQTT broker, MQTT publisher
• SNMP: SNMP (v1, v2, v3), SNMP trap
• JSON-RPC: Management API via HTTP/HTTPS
• MODBUS: MODBUS TCP status/control
• RMS: Teltonika Remote Management System (RMS)




IoT platforms

• Cloud of Things: Enables monitoring of: Device data, mobile data, network information, availability
• ThingWorx: Enables monitoring of: WAN type, WAN IP, mobile operator name, mobile signal strength, mobile network type
• Cumulocity: Enables monitoring of: Device model, revision and serial number, WAN type and IP, cellular cell ID, ICCID, IMEI, connection type, operator, signal strength
• Azure IoT Hub: Can send device IP, number of bytes sent/received, temperature, PIN count to Azure IoT Hub server

System features:

• CPU: Mediatek MIPS 24Kc 580 MHz
• RAM: 128 MB, DDR2
• FLASH memory: 16 MB, SPI flash

Firmware / Configuration

• WEB-UI: Update FW from file, check FW on server, configuration profiles, configuration backup
• FOTA: Update FW
• RMS: update FW/configuration for several units at the same time
• Maintain settings: Update FW without losing current configuration
• Firmware customisation
• Operating system: RutOS (OpenWrt-based Linux operating system)
• Supported languages: Busybox shell, Lua, C, C++
• Development tools: SDK package with provided build environment

Input-Output

• Input: 1 x digital input, 0-6 V are recognised as logic low, 8-30 V are recognised as logic high
• Output: 1 x digital output, open collector output, max. output 30 V, 300 mA
• Events: E-mail, RMS, SMS
• I/O juggler: Allows setting specific I/O conditions to trigger an event

Power

• Connection: 4-pin industrial DC socket
• Input voltage range: 9 - 30 VDC, reverse polarity protection; overvoltage protection >31 VDC 10us max
• PoE (passive): Passive PoE via spare pairs. Possibility of power supply via LAN port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards, mode B, LAN1 port, 9-50 VDC
• Power consumption: < 2 W idle, < 7 W max

Physical interfaces

• Ethernet: 4 x RJ45 ports, 10/100 Mbit/s
• I/Os: 1 x digital input, 1 x digital output on 4-pin power connector
• Status LEDs: 1 x dual-colour connection status LED, 5 x connection strength LEDs, 4 x LAN status LEDs, 1 x power LED
• SIM: 2 x SIM slots (mini-SIM - 2FF), 1.8 V/3 V, external SIM holder, eSIM (optional)
• Power supply: 1 x 4-pin power connector
• Antennas: 2 x SMA for LTE, 2 x RP-SMA for WLAN antenna connections
• Reset: Restart/User Default Reset/Factory Reset button

Physical specification:

• Housing material: aluminium housing, plastic panels
• Dimensions (W x H x D): 110 x 50 x 100 mm
• Weight: 297 g
• Mounting options: DIN rail (can be mounted on two sides), flat surface placement

Operating environment

• Operating temperature: -40 °C to 75 °C
• Operating humidity: 10 % to 90 % non-condensing
• Protection class: IP30