OTD500 - 5G ROUTER FOR OUTDOOR USE

OUTDOOR 5G ROUTER
The OTD500 is a robust outdoor 5G router designed for reliable connectivity in demanding environments. The IP55-rated housing withstands harsh conditions and the integrated mounting bracket enables quick and easy installation. Dual SIM and eSIM with automatic switching offer exceptional network flexibility and redundancy. Gigabit Ethernet ports with PoE input and PoE output simplify setup by combining power and data in a single cable. The OTD500 is fully RMS compliant and offers effortless remote management, making it perfect for outdoor connectivity solutions.

- IP55 rating: IP55 durability for outdoor use
- CONNECTIVITY: 5G, 4G Cat 19, 3G
- eSIM™: Seamless connectivity with the eSIM™ SGP.22
- POE INPUT/OUTPUT: 1 x PoE input and 1 x PoE output

Mobile
- Mobile module: 5G Sub-6Ghz SA/NSA 2.4/3.4 Gbit/s DL (4x4 MIMO), 900/550 Mbit/s UL (2x2); 4G LTE - LTE Cat 19 1.6 Gbit/s DL/200 Mbit/s UL; 3G up to 42 Mbit/s DL/5.76 Mbit/s UL
- 3GPP version:Issue 16
- eSIM: eSIM for consumers, download and remove profiles, up to 7 eSIM profiles; does not include data tariffs
- SIM switch: 2 SIM cards, auto-switch case: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection failed, SIM idle protection
- Status:IMSI, ICCID, operator, operator status, data connection status, network type, bandwidth, connected band, signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, Cell ID, ARFCN, UARFCN, EARFCN, MCC and MNC
- SMS:SMS status, SMS configuration, send/read SMS via HTTP POST/GET, email to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, automatic SMS reply, SMPP
- USSD:Supports sending and reading messages via unstructured supplementary service data
- Black/white list: black/white list of operators (by country or separate operators)
- Band management: band lock, display the status of the band in use
- SIM idle protection service:When working with devices with two SIM slots, the SIM slot not currently in use remains inactive until the device switches to it, which means that no data on the card will be used until then
- SIM PIN code management:SIM PIN code management allows you to set, change or deactivate the PIN of the SIM card
- APN (English): Automatic APN
- Bridge: Direct connection (bridge) between mobile ISP and device in the LAN
- Pass-through:The router assigns its mobile WAN IP address to another device in the LAN
- Framed routing: Framed routing: Support of an IP network behind 5G UE

Ethernet
-Ethernet: 2 x ETH ports (can be configured as WAN), 10/100/1000 Mbit/s, conformity with the standards IEEE 802.3, IEEE 802.3u, 802.3az, supports Auto-MDI/MDIX crossover

POE input
- PoE connections: 1 x PoE input
- PoE standards: 802.3af/at

POE output
- PoE connections: 1 x PoE output
- PoE standards: 802.3af Alternative B
- Maximum PoE power per port (with PSE): 15 W max. (depending on power supply unit)

Network
- Routing: Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing
- Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN
- VoIP passthrough support: H.323- and SIP alg protocol NAT helpers that enable correct routing of VoIP packets
- Connection monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection
- Firewall: Port forwarding, traffic rules, custom rules, customisation of TTL destination
- Firewall status page: View all your firewall stats, rules and rule counters
- Manage ports: view device ports, enable and disable them, enable or disable auto-configuration, change transfer speed, etc.
- Network topology: Visual representation of your network showing which devices are connected to which other devices
- DHCP (English): Static and dynamic IP assignment, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
- QoS / Smart Queue Management (SQM): traffic priority queues by source/destination, service, protocol or port, WMM, 802.11e
- DDNS (English): Supported >25 service providers, others can be configured manually
- DNS over HTTPS: The DNS over HTTPS proxy enables secure DNS resolution by forwarding DNS queries over HTTPS
- Network backup:VRRP, wired options, each of which can be used as an automatic failover
- Load balancing: Distribute Internet traffic across multiple WAN connections
- Hotspot:Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorisation, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual user or group restrictions, user management, 9 customisable default themes and option to upload and download custom hotspot themes
- SSHFS (English):Ability to mount the remote file system via the SSH protocol
- VRF support: First support for virtual routing and forwarding (VRF)
- Traffic management: Real-time monitoring, wireless signal graphs, traffic usage history

Security
- Authentication: Pre-shared key, digital certificates, X.509-certificates, TACACS+, authentication of internal and external RADIUS users, blocking of IP and login attempts, time-based blocking of logins, integrated random generator for passwords
- Firewall:Preconfigured firewall rules can be activated via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
- Attack prevention: DDOS prevention (SYN flood protection, SSH attack protection, HTTP/HTTPS attack protection), port scan protection (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
- VLAN:Port and tag-based VLAN separation
- Mobile quota controlMobile data limit, customisable time period, start time, warning limit, telephone number
- WEB filter: Blacklist for blocking unwanted websites, whitelist for specifying only permitted websites
- Access control: Flexible access control via SSH, web interface, CLI and Telnet
- TPM: Identification and authentication module, TPM 2.0 standard
- Generation of SSL certificates: Let's Encrypt and SCEP methods for generating certificates
- 802.1-fold: Port-based network access control server

VPN
- OpenVPN: Multiple clients and a server can run simultaneously, 27 encryption methods
- OpenVPN encryption:DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192,BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB b1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
- IPsec:XFRM, IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
- GRE:Support for GRE tunnels, GRE tunnels over IPsec
- PPTP, L2TP: Client/server instances can run simultaneously, support for L2TPv3, L2TP over IPsec
- Tunnels:Proxy designed to add TLS encryption capabilities to existing clients and servers without the need for code changes
- DMVPN (English): method for building scalable IPsec VPNs, phase 2 and phase 3 and dual-hub support
- SSTP:Support for SSTP client instances
- Zero-tier: Support for ZeroTier VPN clients
- WireGuard: Support for WireGuard VPN clients and servers
- Tinc: Tinc offers encryption, authentication and compression in its tunnels. Client and server support.
- Tailscale: Tailscale offers speed, stability and simplicity compared to traditional VPNs. Encrypted point-to-point connections with the WireGuard open source protocol

OPC UA
- Supported modes:
Client, Server
- Supported connection types:
TCP

MODBUS
- Supported modes: Server, Client
- Supported connection types:TCP
- Custom Registers: MODBUS TCP Custom Register Block Requests, which read/write a file within the router and can be used to extend MODBUS TCP client functionality
- Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII

Data to server
- Protocol: HTTP(S), MQTT, Azure MQTT
- Data to server: Extract parameters from multiple sources and different protocols and send them all to a single server. Customised LUA scripting that allows scripts to use the router's data-to-server function

MQTT interface
- Modbus MQTT gateway: Enables sending commands and receiving data from the MODBUS server via the MQTT broker

DNP3
- Supported modes:Station, outstation
- Supported connection: TCP

DLMS
- DLMS support: DLMS - Standard protocol for data exchange of consumption meters
- Supported modes:Customer
- Supported connection types: TCP
- COSEM: Enables scanning of COSEM objects for automatic detection and configuration of meters

API
- Support for Teltonika Networks Web API (Beta): Extend the capabilities of your device by using a set of configurable API endpoints to retrieve or modify data. For more information, see this documentation: https://developers.teltonika-networks.com

Monitoring and management
- WEB user interfaceHTTP/HTTPS, status, configuration, firmware update, CLI, troubleshooting, multiple event log servers, firmware update availability notifications, event log, system log, kernel log, internet status
- FOTA:Firmware update from server, automatic notification
- SSH (English):
SSH (v1, v2)
- Email: Receive status notifications via email for various services
- SMS:SMS status, SMS configuration, send/read SMS via HTTP POST/GET
- Call: reboot, status, mobile data on/off, output on/off, answer/hang up with a timer
- TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
- MQTT:MQTT broker, MQTT publisher
- SNMP: SNMP (v1, v2, v3), SNMP trap, brute force protection
- JSON-RPC: Management API via HTTP/HTTPS
- RMS: Teltonika Remote Management System (RMS)

IoT platforms
- ThingWorx: Enables monitoring of: WAN type, WAN IP, mobile operator name, mobile signal strength, mobile network type
- Cumulocity - Cloud of Things: Enables monitoring of: Device model, version and serial number, WAN type and IP, Mobile Cell ID, ICCID, IMEI, connection type, operator, signal strength. Features reboot and firmware upgrade actions
- Azure IoT Hub: Can be configured with Data to Server to send all available parameters to the cloud. Has support for the direct method that allows RutOS API calls to be executed on the IoT Hub. Also features Plug & Play integration with Device Provisioning Service, which enables zero-touch device provisioning for IoT Hubs
- AWS IoT Core: Utility for interacting with the AWS cloud platform. Jobs support: Call the device's API using the AWS Jobs functionality

System properties
- CPU: MediaTek, Dual-core, 880 MHz, MIPS1004Kc
- WIDDER: 256 MB, DDR3
- FLASH memory: 16 MB serial NOR flash, 256 MB serial NAND flash

Firmware / configuration
- WEB user interface:Update FW from file, check FW on server, configuration profiles, backup configuration
- FOTA: Update FW
- RMS: Update FW/configuration for multiple devices simultaneously
- Retain settings: Update firmware without losing current configuration
- Factory reset:A full factory reset resets all system settings, including the IP address, PIN and user data, to the manufacturer's default configuration

Firmware customisation
- Operating system:RutOS (OpenWrt-based Linux operating system)
- Supported languages: Busybox shell, Lua, C, C++ and Python, Java in package manager
- Development tools: SDK package with provided build environment
- GPL customisation:You can create your own custom branded firmware and website application by changing colours, logos and other elements in our firmware to suit your needs or those of your customers
- Package manager: package manager is a service used to install additional software on the device

Power
- Connector: RJ45 socket
- Input voltage range:42.5-57.0 VDC, reverse polarity protection, overvoltage/transient protection
- Input voltage range for PoE: 42.5-57.0 VDC, reverse polarity protection, overvoltage/transient protection
- Power consumption:Idle: < 2.5 W / Max: < 9 W / PoE Max < 24 W

Physical interfaces
- Ethernet: 2 x RJ45 ports, 10/100/1000 Mbit/s
- Status LEDs:3 x Mobile connection type, 3 x Mobile connection strength, 4 x ETH status LEDs
- SIM: 2 x SIM slots (Mini SIM - 2FF), 1.8 V/3 V
- Power: RJ45, PoE input, 42.5 - 57.0 VDC
- Antennas:4 x internal antennas
- Antenna specifications: 4 x 617 - 960 / 1695 - 2690 / 3300 - 4200 / 4200 - 5000MHz, 50 Ω, VSWR <3.5, gain <4.9 dBi, omnidirectional
- Reset:Restart/reset user settings/button to reset to factory settings

Physical specification
- Housing material: plastic (PC+ASA)
- Dimensions (W x H x D): 110 x 49.30 x 235 mm
- Weight: 385 grams
- Mounting options: mounting bracket (for vertical, flat surface or pole mounting)

Operating environment
- Operating temperature:-40 °C to 55 °C
- Operating humidity: 10 % to 90 % non-condensing
- Degree of protection: IP55

Regulatory approvals and type approvals
- Regulatory: CE, UKCA, RCM, CB, EAC, UCRF, WEEE

EMC emissions and immunity
- Standards: EN 55032:2015 + A11:2020 + A1:2020; EN 55035:2017 + A11:2020; EN IEC 61000-3-2: 2019 + A1:2021; EN 61000-3-3: 2013 + A1:2019 + A2:2021; EN 301 489-1 V2.2.3; EN 301 489-52 V1.2.1
- ESD: EN 61000-4-2:2009
- Radiation immunity: EN IEC 61000-4-3:2020
- MOLCH: EN 61000-4-4:2012
- Surge immunity (AC mains connection):EN 61000-4-5:2014 + A1:2017
- CS: EN 61000-4-6:2014
- DIP: EN 61000-4-11:2020

RF
- Standards: EN 301 908-1 V13.1.1, EN 301 908-2 V13.1.1, EN 301 908-13 V13.1.1, EN 301 908-25 V15.1.1_15.0.6

Safety
- Standards: our time: EN IEC 62368-1:2020 + A11:2020, EN 62311:2020, RCM: AS/NZS 62368.1:2022, CB: IEC 62368-1:2018