WIRELESS
The device supports IEEE 802.11b/g/n (Wi-Fi 4) operation modes, including Access Point (AP), Client (STA), Mesh (802.11s), and Multi AP configurations, providing flexible wireless networking capabilities.

WI-FI SECURITY
Ensures robust data protection through WPA-PSK, WPA2-PSK, WPA3-SAE, WPA-EAP, WPA2-EAP, WPA3-EAP, and Opportunistic Wireless Encryption (OWE) standards.

SSID/ESSID
Supports SSID stealth mode with access control based on MAC address for secure and customizable network visibility.

WI-FI USERS
Allows up to 50 simultaneous Wi-Fi connections, ensuring stable performance for multiple users.

WIRELESS CONNECTIVITY FEATURES
Includes wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), and radio resource measurement (802.11k) to enhance network efficiency and mobility.

WIRELESS MAC FILTER
Provides allowlist and blocklist configuration options for MAC-based access control.

WIRELESS QR CODE GENERATOR
Generates a QR code that allows users to connect to the network instantly without manually entering login credentials.

TRAVELMATE
Forwards Wi-Fi hotspot landing pages to connected devices for seamless network access.

ETHERNET

LAN
Equipped with two LAN ports supporting 10/100 Mbps speeds, compliant with IEEE 802.3, IEEE 802.3u, and 802.3az standards, featuring auto MDI/MDIX crossover support.

NETWORK

ROUTING
Supports static and dynamic routing protocols including BGP, OSPF v2, RIP v1/v2, EIGRP, and NHRP, along with policy-based routing for flexible network configuration.

NETWORK PROTOCOLS
Compatible with TCP, UDP, IPv4, IPv6, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SNMP, MQTT, and Wake on LAN (WOL).

VOIP PASSTHROUGH SUPPORT
Supports H.323 and SIP-ALG protocol NAT helpers to ensure proper routing of VoIP packets.

CONNECTION MONITORING
Includes Ping Reboot, Wget Reboot, Periodic Reboot, LCP, and ICMP-based link inspection for maintaining network reliability.

FIREWALL
Supports port forwarding, traffic rules, and custom firewall rule configuration.

FIREWALL STATUS PAGE
Displays firewall statistics, active rules, and rule counters for comprehensive monitoring.

PORT MANAGEMENT
Enables users to view and manage device ports, toggle enable/disable states, configure transmission speeds, and control auto-configuration.

NETWORK TOPOLOGY
Provides a visual representation of the network layout, showing device interconnections in real time.

DHCP
Supports static and dynamic IP allocation, DHCP relay, server configuration, and MAC-based static leases with wildcard options.

QOS / SMART QUEUE MANAGEMENT (SQM)
Offers traffic prioritization by source, destination, service, protocol, or port, with WMM and 802.11e support.

DDNS
Supports more than 77 service providers with options for manual configuration of additional providers.

DNS OVER HTTPS
Ensures secure DNS resolution by routing DNS queries through an HTTPS proxy.

NETWORK BACKUP AND FAILOVER
Supports Wi-Fi WAN, VRRP, and wired backup options with automatic failover capabilities.

LOAD BALANCING
Distributes Internet traffic intelligently across multiple WAN connections for optimized performance.

HOTSPOT 2.0
Complies with Hotspot 2.0 Wi-Fi standards, enabling seamless, secure, and automatic connections to trusted networks.

SSHFS
Supports mounting of remote file systems through SSH protocol.

VRF SUPPORT
Provides initial support for Virtual Routing and Forwarding (VRF) for advanced network segmentation.

TRAFFIC MANAGEMENT
Enables real-time monitoring, wireless signal chart visualization, and traffic usage history analysis.

SECURITY

AUTHENTICATION
Supports multiple authentication methods including pre-shared keys, digital and X.509 certificates, TACACS+, internal and external RADIUS authentication, IP and login attempt blocking, time-based login restrictions, and a built-in random password generator.

FIREWALL (ADVANCED)
Offers preconfigured firewall rules via WebUI and extensive customization through CLI, supporting DMZ, NAT, NAT-T, and NAT64.

ATTACK PREVENTION
Provides comprehensive DDoS protection against SYN flood, SSH, and HTTP/HTTPS attacks, as well as prevention of port scans including SYN-FIN, SYN-RST, Xmas, NULL flags, and FIN scans.

VLAN
Supports both port-based and tag-based VLAN separation for flexible network segmentation.

WEB FILTER
Allows website access control through configurable blacklist and whitelist options.

ACCESS CONTROL
Provides fine-grained control over SSH, Web interface, CLI, and Telnet access.

CERTIFICATE MANAGER
Includes tools for creating CA, server, client, Let’s Encrypt, and SCEP certificates.

VPN

OPENVPN
Supports multiple simultaneous client and server instances with 27 encryption methods.

OPENVPN ENCRYPTION
Includes a wide range of encryption options such as DES-CBC 64, RC2-CBC 128, AES-128/192/256-CBC, AES-GCM variants, and many more to ensure robust VPN security.

IPSEC
Supports XFRM, IKEv1, and IKEv2 with 14 encryption methods including 3DES, DES, AES, and AES-GCM variants.

GRE
Supports GRE tunnels and GRE over IPsec for secure encapsulated communication.

PPTP / L2TP
Allows simultaneous client and server instances with support for L2TPv3 and L2TP over IPsec.

STUNNEL
Provides TLS encryption for existing clients and servers without code modification.

DMVPN
Supports scalable IPsec VPNs with Phase 2, Phase 3, and Dual Hub configurations.

SSTP
Enables SSTP client instance functionality.

ZEROTIER
Includes ZeroTier VPN client support for simple and secure networking.

WIREGUARD
Offers WireGuard VPN client and server support for fast, lightweight, and secure connections.

TINC
Provides Tinc VPN client and server support with encryption, authentication, and compression.

TAILSCALE
Supports Tailscale VPN for encrypted, stable, and simple peer-to-peer connections using the WireGuard protocol.

INDUSTRIAL PROTOCOLS

OPC UA
Supports client and server modes over TCP connections.

MODBUS
Supports server and client modes with TCP and RTU (RS232) connection types, custom register block requests, and multiple data formats including INT, UINT, float, HEX, and ASCII.

DATA TO SERVER
Supports HTTP(S), MQTT, and Azure MQTT protocols for transmitting parameters from various sources to a single server with LUA scripting support.

MQTT GATEWAY
Enables communication between Modbus servers and MQTT brokers for efficient data exchange.

DNP3
Supports station and outstation modes over TCP and RTU (RS232).

DLMS/COSEM
Provides client mode for utility meter data exchange via TCP or RTU (RS232).

API
Supports Teltonika Networks Web API (beta) with configurable endpoints for data retrieval and control.

MONITORING AND MANAGEMENT
Includes HTTP/HTTPS WebUI for configuration and status monitoring, firmware updates via FOTA, SSH (v1/v2), email alerts, TR-069 compatibility, MQTT Broker and publisher, SNMP (v1/v2/v3) with brute force protection, JSON-RPC over HTTP/HTTPS, Modbus TCP status/control, and full integration with Teltonika RMS.

IOT PLATFORMS
Supports integration with ThingWorx, Cumulocity, Azure IoT Hub, and AWS IoT Core for device monitoring, firmware management, parameter upload, direct method calls, and cloud-based automation.

SYSTEM CHARACTERISTICS
Powered by a MediaTek 580 MHz MIPS 24KEc processor, 128 MB DDR2 RAM, and 16 MB serial NOR flash storage. Runs RutOS (OpenWrt-based Linux OS) supporting Busybox shell (ash), Lua, C, and C++. Includes SDK tools for development, GPL customization for branding, and a Package Manager for installing additional software.

SERIAL INTERFACE
Features an RS232 terminal block connector (TX, RX, RTS, CTS) supporting console, Serial over IP, Modem, Modbus gateway, and NTRIP client functions.

POWER
Equipped with a 3-position pluggable terminal block connector. Supports input voltage range from 9–30 VDC with reverse polarity and surge protection (>31 VDC, 10 μs max). Passive PoE is available over spare pairs (Mode B, 9–30 VDC), compatible through the LAN2 port. Power consumption is below 1 W in idle mode and under 2 W at maximum.

PHYSICAL INTERFACES
Includes 2 × RJ45 Ethernet ports (10/100 Mbps), 2 × LAN LEDs, 1 × Power LED, a 3-pin power connector, 1 × RP-SMA Wi-Fi antenna connector, 1 × DB9 RS232 socket, a reset button supporting reboot and factory reset functions, and a grounding screw.

PHYSICAL SPECIFICATIONS
Constructed with an aluminium housing measuring 113.10 × 25 × 68.6 mm and weighing 149.2 g. Supports DIN rail, wall, and flat-surface mounting (optional kit required).

OPERATING ENVIRONMENT
Designed to operate between -40 °C and +75 °C with 10–90% non-condensing humidity. Rated IP30 for ingress protection.

REGULATORY AND TYPE APPROVALS
Certified for CE, UKCA, CB, and FCC/IC standards.
RF STANDARDS (WI-FI 2.4 GHz, 5 GHz)
Complies with 47 CFR Part 15 Subpart C – §15.247.