WIRELESS
Wireless mode
The device supports IEEE 802.11b/g/n (Wi-Fi 4) in Access Point (AP), Client (STA), Mesh (802.11s), and Multi AP configurations.

Wi-Fi security
Supported Wi-Fi security protocols include WPA-PSK, WPA2-PSK, WPA3-SAE, WPA-EAP, OWE, WPA2-EAP, and WPA3-EAP.

SSID/ESSID
The SSID supports stealth mode and access control based on MAC address for enhanced network security.

Wi-Fi users
The device can support up to 50 simultaneous Wi-Fi connections.

Wireless mesh/roaming
Wireless mesh and roaming features include fast roaming (802.11r), Radio Resource Measurement (802.11k), BSS Transition Management (802.11v), client isolation, SSID hiding, and WMM support.

Wireless MAC filter
MAC-based allowlist and blocklist options are supported for controlling network access.

Wireless QR code generator
A generated QR code enables users to automatically join the network without manual login credentials.

TravelMate
The TravelMate feature forwards Wi-Fi hotspot landing pages to subsequent connected devices.

ETHERNET
LAN
The device includes two LAN ports supporting 10/100 Mbps, compliant with IEEE 802.3, 802.3u, and 802.3az standards, with auto MDI/MDIX crossover support.

NETWORK
Routing
Routing options include static and dynamic routing with support for RIP, OSPF, EIGRP, BGP, and NHRP. Policy-based routing and routing rules are supported.

Network protocols
The device supports TCP, UDP, IPv4, IPv6, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SNMP, MQTT, and Wake On LAN (WOL).

VoIP passthrough support
H.323 and SIP-ALG NAT helpers are supported for proper routing of VoIP packets.

Connection monitoring
Connection monitoring includes ping reboot, wget reboot, periodic reboot, LCP, and ICMP link inspection.

Firewall
Firewall functionalities include port forwarding, traffic rules, and custom rules.

Firewall status page
The firewall status page allows viewing statistics, rules, and counters.

Port management
Device ports can be enabled or disabled, auto-configuration turned on or off, and transmission speed adjusted.

Network topology
The device provides a visual network topology showing connections between devices.

DHCP
DHCP supports static and dynamic IP allocation, DHCP relay, server configuration, status monitoring, and static leases with MAC wildcards.

QoS / Smart Queue Management (SQM)
Traffic prioritization is available by source/destination, service, protocol, or port. WMM and 802.11e are supported.

DDNS
Supports more than 77 service providers, with manual configuration available for others.

DNS over HTTPS
DNS over HTTPS proxy enables secure DNS resolution by routing DNS queries over HTTPS.

Network backup
Automatic failover is supported over Wi-Fi WAN, VRRP, and wired connections.

Load balancing
Internet traffic can be balanced across multiple WAN connections.

Hotspot 2.0
The device supports Hotspot 2.0 for seamless, secure, and automatic connection to trusted wireless networks.

SSHFS
Remote file systems can be mounted via SSH protocol.

VRF support
Initial virtual routing and forwarding (VRF) support is available.

Traffic Management
Real-time monitoring includes wireless signal charts and traffic usage history.

SECURITY
Authentication
Supports pre-shared keys, digital certificates, X.509 certificates, TACACS+, internal and external RADIUS authentication, IP and login attempt blocking, time-based login restrictions, and a built-in random password generator.

Firewall (Advanced)
Preconfigured firewall rules can be enabled via WebUI. Unlimited firewall configuration is possible via CLI, with support for DMZ, NAT, NAT-T, and NAT64.

Attack prevention
DDOS protection against SYN flood, SSH, and HTTP/HTTPS attacks is provided, along with port scan prevention for SYN-FIN, SYN-RST, Xmas, NULL flags, and FIN scan attacks.

VLAN
Port-based and tag-based VLAN separation is supported.

WEB filter
Supports blacklists for blocking unwanted websites and whitelists for specifying allowed sites.

Access control
Flexible access control is available for SSH, Web interface, CLI, and Telnet.

Certificate Manager
Tools are provided to create CA, server, client, Let’s Encrypt, and SCEP certificates.

802.1x
Supports port-based network access control server.

VPN
OpenVPN
Multiple OpenVPN clients and server instances can run simultaneously with 27 encryption methods.

OpenVPN Encryption
Supported encryption methods include DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256.

IPsec
Supports XFRM, IKEv1, IKEv2 with 14 encryption methods including 3DES, DES, AES128, AES192, AES256, and AES-GCM variants.

GRE
GRE tunnel and GRE over IPsec are supported.

PPTP, L2TP
Client and server instances can run simultaneously, with support for L2TPv3 and L2TP over IPsec.

Stunnel
Provides TLS encryption for existing clients and servers without changes to program code.

DMVPN
Supports scalable IPsec VPNs with Phase 2, Phase 3, and dual hub support.

SSTP
Supports SSTP client instances.

ZeroTier
ZeroTier VPN client support is available.

WireGuard
WireGuard VPN client and server are supported.

Tinc
Supports encrypted, authenticated, and compressed tunnels with client and server modes.

Tailscale
Supports encrypted point-to-point connections using WireGuard protocol with speed, stability, and simplicity.

INDUSTRIAL PROTOCOLS
OPC UA
Supported in client and server modes over TCP.

MODBUS
Supports server and client modes over TCP with custom registers and data formats including 8-bit INT/UINT, 16-bit INT/UINT, 32-bit float/INT/UINT (big- and little-endian), HEX, and ASCII.

DATA TO SERVER
Parameters can be extracted from multiple sources and protocols, sent to a single server using HTTP(S), MQTT, or Azure MQTT. Custom LUA scripts are supported for advanced data handling.

MQTT Gateway
Supports Modbus MQTT gateway for sending commands and receiving data from MODBUS servers.

DNP3
Supported in station and outstation modes over TCP.

DLMS/COSEM
Supports client mode over TCP for utility meter data exchange.

API
Teltonika Networks Web API (beta) provides configurable endpoints to retrieve or modify device data.

MONITORING & MANAGEMENT
WEB UI
Provides HTTP/HTTPS access for status, configuration, firmware updates, CLI, troubleshooting, event logs, system and kernel logs, and internet status monitoring.

FOTA
Supports firmware updates from server with automatic notifications.

SSH
Supports SSH v1 and v2.

Email
Receives email alerts for service status.

TR-069
Compatible with OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, and AVSystem.

MQTT
Supports MQTT broker and publisher functionalities.

SNMP
Supports SNMP v1/v2/v3, SNMP traps, and brute-force protection.

JSON-RPC
Management API over HTTP/HTTPS is supported.

MODBUS
Provides MODBUS TCP status and control.

RMS
Integrates with Teltonika Remote Management System (RMS).

IOT PLATFORMS
Supports ThingWorx, Cumulocity, Azure IoT Hub, and AWS IoT Core with monitoring, remote actions, and firmware management.

SYSTEM CHARACTERISTICS
CPU
Mediatek 580 MHz, MIPS 24KEc processor.

RAM
128 MB DDR2.

FLASH storage
16 MB serial NOR flash.

FIRMWARE / CONFIGURATION
WEB UI
Firmware updates from file or server, configuration profiles, and backups supported.

FOTA
Firmware update from server.

RMS
Supports update of firmware/configuration for multiple devices simultaneously.

Keep settings
Firmware can be updated without losing current configuration.

Factory settings reset
Full factory reset restores all settings to default, including IP, PIN, and user data.

FIRMWARE CUSTOMIZATION
Operating system
RutOS (OpenWrt-based Linux OS).

Supported languages
Busybox shell (ash), Lua 5.1, C, and C++.

Development tools
SDK package with build environment provided.

GPL customization
Custom firmware and WebUI branding possible.

Package Manager
Supports installing additional software packages.

POWER
Connector
3-position pluggable terminal block.

Input voltage range
9–30 VDC with reverse polarity and surge protection up to 31 VDC for 10 µs.

PoE (passive)
Passive PoE via LAN2 port, 9–30 VDC, not compatible with IEEE802.3af/at/bt standards.

Power consumption
Idle <1 W, maximum <2 W.

PHYSICAL INTERFACES
Ethernet: 2 x RJ45 10/100 Mbps ports.
Status LEDs: 2 x LAN LEDs, 1 x Power LED.
Power: 1 x 3-pin connector.
Antennas: 1 x RP-SMA for Wi-Fi.
Reset: Reboot/User default/Factory reset button.
Other: 1 x grounding screw.

PHYSICAL SPECIFICATIONS
Casing material
Aluminium housing.

Dimensions (W x H x D)
113.10 × 25 × 68.6 mm.

Weight
142.3 g.

Mounting options
Integrated DIN rail bracket; wall mount and flat surface with additional kit.

Operating Environment
Operating temperature: -40 °C to +75 °C.
Operating humidity: 10%–90% non-condensing.

Ingress Protection Rating
IP30.

REGULATORY & TYPE APPROVALS
Regulatory
CE, UKCA, CB, FCC/IC.

RF Standards (Wi-Fi 2.4 GHz, 5 GHz)
47 CFR Part 15 Subpart C – § 15.247.