RUT361 - Industrial mobile radio router

The RUT361 is a rugged industrial cellular router with speeds of up to 300 Mbps and carrier aggregation, essential for IoT solutions that require uninterrupted networks in harsh environments. Remote monitoring, advanced security features and WAN failover make this LTE Cat 6 router feature-rich, while dual Wi-Fi antennas enhance the device's applicability in various M2M applications.

MOBILE
- Mobile module: 4G (LTE) - Cat 6 up to 300 Mbps, 3G - up to 42 Mbps
- Status: IMSI, ICCID, operator, operator status, data connection status, network type, CA indicator, bandwidth, connected band, signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC and MNC
- SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
- USSD: Supports sending and reading of Unstructured Supplementary Service Data messages
- Black/white list: Black/white list of operators (by country or individual operators)
- Multiple PDN: Possibility to use different PDNs for multiple network accesses and services
- Band management: Band lock, display of the status of the band in use
- APN: Auto APN
- Bridge: Direct connection (bridge) between mobile ISP and device in the LAN
- Passthrough: Router assigns its mobile WAN IP address to another device in the LAN

WIRELESS
- Wireless mode: 802.11 b/g/n, 2x2 MIMO, Access Point (AP), Station (STA)
- Wi-Fi security: WPA3-EAP, WPA3-SAE, WPA2-Enterprise-PEAP, WPA2-PSK, WEP; AES-CCMP, TKIP, auto-cipher modes, client separation
- SSID/ESSID: ESSID stealth mode
- Wi-Fi users: Up to 50 simultaneous connections
- Wireless connectivity features: Wireless Mesh (802.11s), Fast Roaming (802.11r), BSS Transition Management (802.11v), Radio Resource Metering (802.11k)
- Wireless MAC Filter: Whitelist, Blacklist
- Wireless QR Code Generator: Once scanned, a user is automatically let into your network without having to enter any credentials.

ETHERNET
- WAN: 1 x WAN port 10/100 Mbps, compliant with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports Auto MDI/MDIX
- LAN: 1 x LAN ports, 10/100 Mbps, compliant with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports Auto MDI/MDIX crossover

NETWORK
- Routing: Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing
- Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL)
- VoIP passthrough support: H.323- and SIP-alg protocol NAT helpers that enable the correct routing of VoIP packets
- Connection monitoring: Ping reboot, Wget reboot, periodic reboot, LCP and ICMP for link inspection
- Firewall: Port forwarding, traffic rules, user-defined rules
- Firewall status page: Display all firewall statistics, rules and rule counters
- Ports management: display device ports, enable and disable individual ports, enable or disable automatic configuration, change transmission speed, etc.
- Network topology: Visual representation of your network showing which devices are connected to which other devices
- DHCP: Static and dynamic IP assignment, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
- QoS / Smart Queue Management (SQM): Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
- DDNS: Supports >25 service providers, others can be configured manually
- Network backup: VRRP, wired options, any of which can be used as automatic failover, Wi-Fi WAN, Mobile
- Load balancing: Balancing Internet traffic across multiple WAN connections
- Hotspot: Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorisation, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual user or group restrictions, user management, 9 default customisable themes and the ability to upload and download custom hotspot themes
- SSHFS: Ability to mount a remote file system via the SSH protocol

SECURITY
- Authentication: pre-shared key, digital certificates, X.509-certificates, TACACS+, Radius, blocking of IP and login attempts, time-based login blocking, in-built random password generator
- Firewall: Pre-configured firewall rules can be activated via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
- Attack protection: DDOS protection (SYN flood protection, SSH attack protection, HTTP/HTTPS attack protection), port scan protection (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
- VLAN: Port and tag-based VLAN separation
- Mobile quota control: mobile data limit, customisable time period, start time, warning limit, phone number
- WEB filter: blacklist to block unwanted websites, whitelist to specify only allowed websites
- Access control: flexible access control of SSH, web interface, CLI and Telnet

VPN
- OpenVPN: Multiple clients and a server can run simultaneously, 27 encryption methods
- OpenVPN encryption
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
- IPsec: IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
- GRE: GRE tunnels, GRE tunnels via IPsec support
- PPTP, L2TP: Client/server instances can run simultaneously, L2TPv3, L2TP via IPsec support
- Stunnel: Proxy for adding TLS encryption functionality to existing clients and servers without changes to the programme code
- DMVPN: Method for building scalable IPsec VPNs
- SSTP: Support for SSTP client instances
- ZeroTier: ZeroTier VPN client support
- WireGuard: WireGuard VPN client and server support
- Tinc: Tinc provides encryption, authentication and compression in its tunnels. Client and server support.
- Tailscale: Tailscale offers speed, stability and simplicity over traditional VPNs. Encrypted point-to-point connections using the WireGuard open source protocol

OPC UA
- Supported modes: Client, Server
- Supported connection types: TCP

MODBUS
- Supported modes: Server, Client
- Supported connection types: TCP
- User-defined registers: MODBUS TCP user-defined register block requests that can be read/written to a file within the router and used to extend MODBUS TCP client functionality
- Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII

DATATO SERVER
- Protocol: HTTP(S), MQTT, Azure MQTT
- Data to server: Extracts parameters from multiple sources and different protocols and sends them all to a single server

MQTTGATEWAY
- MODBUS MQTT Gateway: Enables commands to be sent and data to be received from the MODBUS server via the MQTT broker

DNP3
- Supported modes: station, outstation
- Supported connection: TCP

DLMS
- DLMS support: DLMS - Standard protocol for exchanging meter data

API
- Teltonika Networks Web API (beta) support: Extend the capabilities of your device by using a range of configurable API endpoints to retrieve or modify data. For more information, please read this documentation: https://developers.teltonika-networks.com

MONITORING & MANAGEMENT
- WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshooting, multiple event log servers, availability notifications for firmware updates, event log, system log, kernel log, internet status
- FOTA: Firmware update from server, automatic notification
- SSH: SSH (v1, v2)
- SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET
- Call: Restart, status, mobile data on/off, outgoing on/off, answer/hang up with timer, Wi-Fi on/off
- TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
- MQTT: MQTT Broker, MQTT publisher
- SNMP: SNMP (v1, v2, v3), SNMP Trap
- JSON-RPC: Management API via HTTP/HTTPS
- MODBUS: MODBUS TCP status/control
- RMS: Teltonika Remote Management System (RMS)

IOTPLATFORMS
- Cloud of Things: Enables monitoring of: Device data, mobile data, network information, availability
- ThingWorx: Enables monitoring of: WAN type, WAN IP, mobile provider name, mobile network signal strength, mobile network type
- Cumulocity: Enables monitoring of: Device model, revision and serial number, WAN type and IP, mobile cell ID, ICCID, IMEI, connection type, network provider, signal strength
- Azure IoT Hub: Can provide device IP, number of bytes sent/received, temperature, PIN count to Azure IoTHub server, mobile connection status, network connection status, IMEI, ICCID, model, manufacturer, Serial number, revision, IMSI, SIM status, PIN status, GSM signal, WCDMA RSCP, WCDMA EC/IO, LTE RSRP, LTE SINR, LTE RSRQ, CELL ID, operator, operator number, connection type

SYSTEM CHARACTERISTICS
- CPU: Mediatek, 580 MHz, MIPS 24KEc
- RAM: 128 MB, DDR2
- FLASH memory: 16 MB serial NOR flash

FIRMWARE/ CONFIGURATION
- WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup
- FOTA: Update FW
- RMS: Update FW/configuration for multiple devices at once
- Maintain settings: Update FW without losing the current configuration
- Reset factory settings: A full factory reset restores all system settings, including IP address, PIN and user data, to the manufacturer's default configuration

FIRMWARECUSTOMISATION
- Operating system: RutOS (OpenWrt based Linux OS)
- Supported languages: Busybox shell, Lua, C, C++
- Development tools: SDK package with build environment provided
- GPL customisation: you can create your own custom firmware and website application by changing colours, logos and other elements in our firmware to suit your needs or those of your customers.

INPUT / OUTPUT
- Input: 2 x digital input, 0 - 6 V are recognised as logic low, 8 - 30 V are recognised as logic high
- Output: 2 x digital output, open collector output, max. output 30 V, 300 mA
- Events: Email, RMS, SMS
- I/O juggler: Enables the setting of specific I/O conditions to trigger events

POWER
- Connection: 4-pin industrial DC socket
- Input voltage range: 9 - 30 VDC, reverse polarity protection, protection against overvoltage/transients
- PoE (passive): Passive PoE can be installed on request.
- Power consumption: Idle: < 2.4 W, Max: < 4.7 W

PHYSICAL INTERFACES
- Ethernet: 2 x RJ45 ports, 10/100 Mbps
- I/Os: 2 x digital inputs, 2 x digital outputs on 4-pin power connector
- Status LEDs: 2 x mobile connection type, 3 x mobile connection strength, 2 x eth status, 1 x power
- SIM: 1 x SIM slot (mini SIM - 2FF), 1.8 V/3 V, external SIM holder
- Power supply: 1 x 4-pin power connector
- Antennas: 2 x SMA for LTE, 2 x RP-SMA for Wi-Fi
- Reset: Restart/user default reset/factory reset button

PHYSICAL DATA
- Housing material: Aluminium housing
- Dimensions (W x H x D): 100 x 30 x 85 mm
- Weight: 243 g
- Mounting options: DIN rail, wall mounting, flat surface (all require additional kit)

OPERATING ENVIRONMENT
- Operating temperature: -40 °C to 75 °C
- Operating humidity: 10 % to 90 % non-condensing
- Protection class: IP30

REGULATORY & TYPE APPROVALS
- Regulations: CE, UKCA, RCM, UCRF, EAC, WEEE, CB