MOBILE MODULE
The device supports 5G Sub-6 GHz SA, NSA with download speeds of 2.4 / 3.4 Gbps (4×4 MIMO) and upload speeds of 900 / 550 Mbps (2×2 MIMO). 4G LTE provides DL Cat 19 up to 1.6 Gbps (4×4 MIMO) and UL Cat 18 up to 200 Mbps.

3GPP RELEASE
Release 16.

SIM SWITCH
Supports 2 SIM cards with automatic switching. Auto-switch cases include weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, and SIM idle protection.

STATUS
Status reporting includes IMSI, ICCID, operator, operator state, data connection state, network type, CA indicator, bandwidth, connected band, signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC.

SMS
SMS features include SMS status, SMS configuration, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS auto-reply, and SMPP.

USSD
Supports sending and reading Unstructured Supplementary Service Data messages.

BLOCK / ALLOW LIST
Operator block/allow list can be configured by country or individual operators.

MULTIPLE PDN
Supports different PDNs for multiple network access and services.

BAND MANAGEMENT
Includes band lock and used band status display.

SIM IDLE PROTECTION SERVICE
Enables periodic switching to the unused SIM card to establish a data connection and prevent the SIM from being blocked.

SIM PIN CODE MANAGEMENT
Allows setting, changing, or disabling the SIM card’s PIN.

APN
Supports auto APN configuration.

BRIDGE
Provides a direct connection (bridge) between the mobile ISP and the device on LAN.

PASSTHROUGH
Router assigns its mobile WAN IP address to another device on LAN.

FRAMED ROUTING
Supports an IP network behind 5G UE.

ETHERNET
WAN: 1 x WAN port 10/100/1000 Mbps, compliance with IEEE 802.3, 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.
LAN: 4 x LAN ports 10/100/1000 Mbps, compliance with IEEE 802.3, 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.

NETWORK
Routing: Static and dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing.
Network Protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On LAN (WOL), VXLAN.
VoIP Passthrough Support: H.323 and SIP-ALG protocol NAT helpers.
Connection Monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection.
Firewall: Port forward, traffic rules, custom rules, TTL target customization.
Firewall Status Page: View all firewall statistics, rules, and counters.
Port Management: View device ports, enable/disable ports, change transmission speed, auto-configuration toggle.
Network Topology: Visual representation of connected devices.
Hotspot: Captive portal, internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, landing page management, walled garden, user scripts, URL parameters, user groups, limitations, user management, 9 default themes, custom theme upload/download.
DHCP: Static/dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases with MAC wildcards.
QoS / Smart Queue Management (SQM): Traffic priority queuing by source/destination, service, protocol, or port, WMM, 802.11e.
DDNS: Supported >77 service providers; others can be configured manually.
DNS over HTTPS: Enables secure DNS resolution over HTTPS.
Network Backup: Mobile, VRRP, Wired options for automatic failover.
Load Balancing: Balance Internet traffic over multiple WAN connections.
SSHFS: Mount remote file system via SSH.
VRF Support: Initial virtual routing and forwarding support.
Traffic Management: Real-time monitoring, traffic usage history.

SECURITY
Authentication: Pre-shared key, digital certificates, X.509, TACACS+, internal/external RADIUS authentication, IP & login attempt blocking, time-based login blocking, random password generator.
Firewall: Preconfigured firewall rules via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64.
Attack Prevention: DDOS prevention (SYN flood, SSH, HTTP/HTTPS attacks), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL, FIN scan attacks).
VLAN: Port and tag-based separation.
Mobile Quota Control: Mobile data limit, customizable period, start time, warning limit, phone number.
WEB Filter: Blacklist and whitelist options.
Access Control: Flexible control of SSH, Web interface, CLI, and Telnet.
Certificate Manager: Creation of CA, server, client, Let’s Encrypt, and SCEP certificates.
802.1X: Port-based network access control client.

VPN
OpenVPN: Multiple clients and server, 27 encryption methods.
OpenVPN Encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256.
IPsec: XFRM, IKEv1, IKEv2, 14 encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16).
GRE: GRE tunnel and GRE over IPsec support.
PPTP, L2TP: Client/server instances, L2TPv3, L2TP over IPsec.
Stunnel: Adds TLS encryption to existing clients/servers without code changes.
DMVPN: Scalable IPsec VPNs, Phase 2 and 3, Dual Hub support.
SSTP: SSTP client instance support.
ZeroTier: VPN client support.
WireGuard: VPN client and server support.
Tinc: Offers encryption, authentication, compression in tunnels.
Tailscale: Encrypted point-to-point connections using WireGuard protocol.

INDUSTRIAL PROTOCOLS
OPC UA: Client and server support, TCP connection.
MODBUS: Server and client support, TCP and USB connection, custom register block requests, supported data formats 8-bit (INT, UINT), 16-bit (INT, UINT), 32-bit (float, INT, UINT, ABCD, DCBA, CDAB, BADC), HEX, ASCII.
DATA TO SERVER: Protocols HTTP(S), MQTT, Azure MQTT; extract parameters from multiple sources and send to a server; LUA scripting supported.
MQTT Gateway: Modbus MQTT Gateway support.
DNP3: Station and Outstation modes, TCP/USB.
DLMS/COSEM: Standard protocol for utility meter data exchange, client mode, TCP.
API: Teltonika Networks Web API (beta). Documentation: https://developers.teltonika-networks.com

MONITORING & MANAGEMENT
WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event logs, firmware update notifications, system/kernel logs, Internet status.
FOTA: Firmware update from server with automatic notifications.
SSH: SSH v1 and v2.
SMS: SMS status and configuration.
Call: Reboot, status, mobile data on/off, output on/off, answer/hang-up with timer.
Email: Receive email alerts.
TR-069: Supports OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem.
MQTT: Broker and publisher.
SNMP: v1/v2/v3, SNMP Trap, brute force protection.
JSON-RPC: Management API over HTTP/HTTPS.
RMS: Teltonika Remote Management System.
IoT Platforms: ThingWorx, Cumulocity, Azure IoT Hub, AWS IoT Core with full monitoring and control capabilities.

SYSTEM CHARACTERISTICS
CPU: MediaTek Dual-Core 880 MHz, MIPS1004Kc.
RAM: 256 MB DDR3.
FLASH STORAGE: 16 MB serial NOR flash, 256 MB serial NAND flash.

FIRMWARE / CONFIGURATION
WEB UI: Firmware update from file, server check, configuration profiles and backup.
FOTA: Firmware update.
RMS: Update multiple devices at once.
Keep Settings: Update firmware without losing configuration.
Factory Settings Reset: Restores all settings, IP, PIN, and user data.

FIRMWARE CUSTOMISATION
Operating System: RutOS (OpenWrt-based Linux OS).
Supported Languages: Busybox shell, Lua, C, C++, Python, Java (via Package Manager).
Development Tools: SDK package with build environment.
GPL Customization: Allows creation of branded firmware and web application.
Package Manager: Install additional software on device.

LOCATION TRACKING
GNSS: GPS, GLONASS, BeiDou, Galileo, QZSS.
Coordinates: GNSS coordinates via WebUI, SMS, TAVL, RMS.
NMEA: NMEA 0183.
NTRIP: Networked Transport of RTCM via Internet Protocol.
Server Software: TAVL, RMS.
Geofencing: Configurable multiple geofence zones.

USB
Data Rate: USB 2.0.
Applications: Samba share, USB-to-serial.
External Devices: Connect external HDD, flash drive, additional modem, printer, USB-serial adapter.
Storage Formats: FAT, FAT32, exFAT, NTFS (read-only), ext2/3/4.

INPUT / OUTPUT
Input: 1 x Digital Input, 0-6 V detected as logic low, 8-50 V as logic high.
Output: 1 x Digital Output, Open collector, max 50 V, 300 mA.
Events: Email, RMS, SMS.
I/O Juggler: Set I/O conditions to trigger events.

POWER
Connector: 4-pin industrial DC power socket.
Input Voltage Range: 9–50 VDC, reverse polarity and surge protection >51 VDC 10 µs max.
PoE (Passive): Passive PoE over spare pairs, LAN1 port, 9–50 VDC, not IEEE802.3af/at/bt compatible.
Power Consumption: Idle <5 W, Max <18 W.

PHYSICAL INTERFACES
Ethernet: 5 x RJ45 10/100/1000 Mbps.
I/O: 1 x Digital Input, 1 x Digital Output on 4-pin power connector.
Status LEDs: 3 x WAN, 3 x Mobile connection type, 3 x Mobile signal strength, 10 x Ethernet, 1 x Power.
SIM: 2 x SIM slots (Mini SIM – 2FF), 1.8 V/3 V, external holders.
Power: 1 x 4-pin connector.
Antennas: 4 x SMA Mobile, 1 x SMA GNSS.
USB: 1 x USB A port.
Reset: Reboot/User default/Factory reset button.
Other: 1 x Grounding screw.

PHYSICAL SPECIFICATION
Casing Material: Aluminium housing.
Dimensions (W x H x D): 132 x 44.2 x 95 mm.
Weight: 530 g.
Mounting Options: DIN rail, wall mount, flat surface (requires additional kit).

OPERATING ENVIRONMENT
Operating Temperature: -40 °C to 75 °C.
Operating Humidity: 10% to 90% non-condensing.
Ingress Protection Rating: IP30.

REGULATORY & TYPE APPROVALS
Regulatory: FCC, ISED, WEEE.
EMC Emissions & Immunity Standards: FCC/ISED: 47 CFR Part 15 Subpart B, ICES-003 Issue 7 (Oct 2020).

SAFETY STANDARDS
FCC/ISED: 47 CFR – § 2.1091, KDB 447498 D04 Interim General RF Exposure Guidance v01, RSS-102 Issue 5 (March 2015) Amendment 1.