| ETHERNET | |
| WAN | 1 x WAN port (can be configured as LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
| LAN | 3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
| WIRELESS | |
| Wireless mode | 802.11b/g/n/ac Wave 2 (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA) |
| WiFi security | WPA3-EAP, WPA3-SAE, WPA2-Enterprise-PEAP, WPA2-PSK, WEP; AES-CCMP, TKIP, Auto Cipher modes, client separation |
| ESSID | ESSID stealth mode |
| WiFi users | up to 150 simultaneous connections |
| Wireless Hotspot | Captive portal (Hotspot), internal/external Radius server, built in customizable landing page |
| BLUETOOTH | |
| Bluetooth 4.0 | Bluetooth low energy (LE) for short range communication |
| NETWORK | |
| Routing | Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP) |
| Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet client, SNMP, MQTT, Wake on LAN (WOL), DLNA |
| VoIP passthrough support | H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
| Connection monitoring | Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection |
| Firewall | Port forwards, traffic rules, custom rules |
| DHCP | Static and dynamic IP allocation, DHCP Relay, Relayd |
| QoS / Smart Queue Management (SQM) | Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
| DDNS | Supported >25 service providers, others can be configured manually |
| Network backup | VRRP, Wired and WiFi WAN options, each of which can be used as an automatic Failover |
| SSHFS | Possibility to mount remote file system via SSH protocol |
| SECURITY | |
| Authentication | Pre-shared key, digital certificates, X.509 certificates |
| Firewall | Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T |
| Attack prevention | DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
| VLAN | Port and tag based VLAN separation |
| WEB filter | Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only |
| Access control | Flexible access control of TCP, UDP, ICMP packets, MAC address filter |
| VPN | |
| OpenVPN | Multiple clients and a server can run simultaneously, 12 encryption methods |
| OpenVPN Encryption | DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC |
| IPsec | IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256) |
| GRE | GRE tunnel |
| PPTP, L2TP | Client/Server instances can run simultaneously, L2TPv3 support |
| Stunnel | Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code |
| DMVPN | Method of building scalable IPsec VPNs |
| SSTP | SSTP client instance support |
| ZeroTier | ZeroTier VPN client support |
| WireGuard | WireGuard VPN client and server support |
| MODBUS | |
| MODBUS TCP SLAVE | |
| ID filtering | Respond to one ID in range [1;255] or any |
| Allow remote access | Allow access through WAN |
| Custom registers | MODBUS TCP custom register block, which allows to read/write to a file inside the router, and can be used to extend MODBUS TCP slave functionality |
| MODBUS TCP MASTER | |
| Supported functions | 01, 02, 03, 04, 05, 06, 15, 16 |
| Supported data formats | 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII |
| MQTT GATEWAY | |
| Gateway | Allows sending commands and receiving data from MODBUS Master through the MQTT broker |
| DNP3 | |
| Supported modes | TCP Master, DNP3 Outstation |
| DATA TO SERVER | |
| Protocols | HTTP(S), MQTT, Azure MQTT, Kinesis |
| MONITORING & MANAGEMENT | |
| WEB UI | HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log |
| FOTA | Firmware update from server, automatic notification |
| SSH | SSH (v1, v2) |
| SMS | SMS status, SMS configuration, send/read SMS via HTTP POST/GET |
| Call | Reboot, Status, Mobile data on/off, Output on/off |
| TR-069 | OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem |
| MQTT | MQTT Broker, MQTT publisher |
| SNMP | SNMP (v1, v2, v3), SNMP trap |
| JSON-RPC | Management API over HTTP/HTTPS |
| MODBUS | MODBUS TCP status/control |
| RMS | Teltonika Remote Management System (RMS) |
| SYSTEM CHARACTERISTICS | |
| CPU | Quad-core ARM Cortex A7, 717 MHz |
| RAM | 256 MB, DDR3 |
| FLASH storage | 256 MB, SPI Flash |
| FIRMWARE / CONFIGURATION | |
| WEB UI | Update FW from file, check FW on server, configuration profiles, configuration backup |
| FOTA | Update FW/configuration from server |
| RMS | Update FW/configuration for multiple devices at once |
| Keep settings | Update FW without losing current configuration |
| FIRMWARE CUSTOMIZATION | |
| Operating system | RutOS (OpenWrt based Linux OS) |
| Supported languages | Busybox shell, Lua, C, C++ |
| Development tools | SDK package with build environment provided |
| USB | |
| Data rate | USB 2.0 |
| Applications | Samba share, USB-to-serial |
| External devices | Possibility to connect external HDD, flash drive, additional modem, printer |
| Storage formats | FAT, FAT32, NTFS |
| INPUT/OUTPUT | |
| Input | 1 x Digital Input, 0 - 6 V detected as logic low, 8 - 30 V detected as logic high |
| Output | 1 x Digital Output, Open collector output, max output 30 V, 300 mA |
| Events | Email, RMS |
| I/O juggler | Allows to set certain I/O conditions to initiate event |
| POWER | |
| Connector | 4 pin industrial DC power socket |
| Input voltage range | 9 - 50 VDC, reverse polarity protection, voltage surge/transient protection |
| PoE (passive) | Passive PoE. Possibility to power up through LAN port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards |
| Power consumption | 9 W Max |
| PHYSICAL INTERFACES (PORTS, LEDS, BUTTONS) | |
| Ethernet | 4 x RJ45 ports, 10/100/1000 Mbps |
| I/Os | 1 x Digital Input, 1 x Digital Output on 4 pin power connector |
| Status LEDs | 8 x LAN status LEDs, 1 x Power LED, 2 x 2.4G and 5G WiFi LEDs |
| Power | 1 x 4 pin DC connector |
| Antennas | 2 x RP-SMA for WiFi, 1 x RP-SMA for Bluetooth |
| USB | 1 x USB A port for external devices |
| Reset | Reboot/User default reset/Factory reset button |
| Other | 1 x Grounding screw |
| PHYSICAL SPECIFICATION | |
| Casing material | Aluminium housing with DIN rail mounting option |
| Dimensions (W x H x D) | 115 x 32.2 x 95.2 mm |
| Weight | 355 g |
| Mounting options | DIN rail, flat surface placement |
| OPERATING ENVIRONMENT | |
| Operating temperature | -40 C to 75 C |
| Operating humidity | 10 % to 90 % non-condensing |
| Ingress Protection Rating | IP30 |