ETHERNET
|
|
WAN
|
1x WAN port (can be configured to LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
LAN
|
3x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
WIRELESS
|
|
Wireless mode
|
802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA) |
WiFi security
|
WPA2-Enterprise-PEAP, WPA2-PSK, WPA-PSK, WEP; AES-CCMP, TKIP, Auto Cipher modes, client separation |
ESSID
|
ESSID stealth mode |
BLUETOOTH
|
|
Bluetooth LE
|
Bluetooth low energy (LE) for short range communication |
NETWORK
|
|
Routing
|
Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP) |
Network protocols
|
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP (planed), SSL v3, TLS, ARP, VRRP (planed), PPP, PPPoE, UPNP, SSH, SNMP, DHCP, Telnet (optional), MQTT |
VoIP passthrough support
|
H.232 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
Connection monitoring
|
Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection |
Firewall
|
Port forwards, traffic rules, custom rules |
DHCP
|
Static and dynamic IP allocation, DHCP Relay, Relayd |
QoS
|
Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
DDNS
|
Supported >25 service providers, others can be configured manually |
Network backup
|
VRRP (planed) |
SSHFS (optional)
|
Possibility to mount remote file system via SSH protocol (not available in standard FW) |
SECURITY
|
|
Authetication
|
Pre-shared key, digital certificates, X.509 certificates |
Firewall
|
Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T |
Attack prevention
|
DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
VLAN
|
Port based and tag based VLAN separation |
WEB filter
|
Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only |
Access control
|
Flexible access control of TCP, UDP, ICMP packets, MAC address filter |
VPN
|
|
OpenVPN
|
Multiple clients and a server can run simultaneously, 12 encryption methods |
OpenVPN Encryption
|
DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC |
IPsec
|
IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256) |
GRE
|
GRE tunnel |
PPTP, L2TP
|
Client/Server services can run simultaneously |
Stunnel (planed)
|
Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code |
DMVPN
|
Method of building scalable IPsec VPNs |
MONITORING & MANAGEMENT
|
|
WEB UI
|
HTTP, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log |
FOTA
|
Firmware update from server, automatic notification |
SSH
|
SSH (v1, v2) |
TR-069
|
OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem |
MQTT
|
MQTT Broker, MQTT publisher |
JSON-RPC
|
Management API over HTTP/HTTPS |
Modbus (planed)
|
Modbus TCP status/control, master and slave modes |
RMS
|
Teltonika Remote Management System (RMS) |
SYSTEM CHARACTERISTICS
|
|
CPU
|
Quad-core ARM Cortex A7, 717 MHz |
RAM
|
256 MB, DDR3 |
FLASH memory
|
256 MB SPI Flash |
FIRMWARE / CONFIGURATION
|
|
WEB UI
|
Update FW from file, check FW on server, configuration profiles, configuration backup |
FOTA
|
Update FW/configuration from server |
RMS
|
Update FW/configuration for multiple devices |
Keep settings
|
Update FW without losing current configuration |
FIRMWARE CUSTOMIZATION
|
|
Operating system
|
RutOS (OpenWrt based Linux OS) |
Supported languages
|
Busybox shell, Lua, C, C++ |
Development tools
|
SDK package with build environment provided (planed) |
USB
|
|
Data rate
|
USB 2.0 |
Applications
|
Samba share (planed), custom scripts (planed) |
External devices
|
Possibility to connect external HDD, flash drive, additional modem, printer |
Storage formats
|
FAT, FAT32, NTFS |
INPUT/OUTPUT
|
|
Input
|
1 x Digital Input |
Output
|
1 x Digital Output |
Events
|
SMS, Email, RMS |
POWER
|
|
Connector
|
4 pin industrial DC power socket |
Input voltage range
|
9 - 50 VDC, reverse polarity protection, voltage surge/transient protection |
PoE (passive)
|
Passive PoE. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards |
Power consumption
|
11 W Max |
PHYSICAL INTERFACES (PORTS, LEDS, BUTTONS)
|
|
Ethernet
|
4 x RJ45 ports, 10/100/1000 Mbps |
I/Os
|
1 Digital Input, 1 Digital Output on 4 pin power connector |
Status LEDs
|
8 x LAN status LEDs, 1 x Power LED |
Power
|
4 pin DC connector |
Antennas
|
2 x RP-SMA for WiFi, 1 x RP-SMA for Bluetooth |
USB
|
USB A port for external devices |
Reset
|
Factory reset button |
PHYSICAL SPECIFICATION
|
|
Casing material
|
Full aluminium housing |
Dimensions
|
115 mm x 95 mm x 32 mm (H x W x D) |
Weight
|
357 g |
Mounting options
|
DIN rail (can be mounted on two sides), flat surface placement |
OPERATING ENVIRONMENT
|
|
Operating temperature
|
-40 C to 75 C |
Operating humidity
|
10 % to 90 % non-condensing |
Ingress Protection Rating
|
IP30 |